Unverified50% confidenceFactExact time
跨站提示注入攻击指A网站的恶意内容可能污染智能体处理B网站任务时的行为
1
Sources
50%
Confidence
Long-term
Relevance
7/11/2026
First Seen
Sources
Prismata Analysis: How to Defend Web Agents Against Cross-Site Prompt Injection Attacks
hackernewshackernews7/10/2026
Related Claims
Verified间接提示注入可将恶意指令藏入外部数据源（如网页、文档），待代理读取时自动触发攻击77% similarUnverified阻止奖励黑客的应对方案包括网络内容过滤、分类系统识别异常奖励模式、以及防范模型操纵计时或改写全局变量69% similarUnverified现代恶意广告采用多层规避策略，包括浏览器指纹识别、隐写术隐藏恶意载荷、多次重定向（通常经过3-5个域名跳转）67% similarUnverifiedBrowser extensions for ad blocking, privacy protection, and script management may intercept critical requests during the OAuth authorization redirect process, causing connection failures.66% similarUnverified2024年已出现实际案例：通过网页内容中的隐藏指令，攻击者成功操纵具有邮件发送权限的AI助手向外部地址转发敏感内容65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/487951API
curl https://kongchang.com/api/v1/knowledge/claims/487951MCP
get_claim(id=487951)