https://justice-reaper.github.io/posts/Web-LLM-Attacks-Lab-3/
Indirect prompt injection - Justice-Reaper