Author

Sijun Tan

h-index 5 View on Semantic Scholar

We have 1 of 10 papers

We haven’t gathered this author’s papers yet. Follow them and we’ll fetch their work.

Not the right person? Other researchers publish under this name.

Preprint Jul 2026

Prismata: Confining Cross-Site Prompt Injection in Web Agents

Prismata is presented, a defense enforcing contextual least privilege for web agents, constraining both what the agent sees and what it can do, and substantially reduces attack success while preserving benign task utility.

Corban Villa, Alp Eren Ozdarendeli, Sijun Tan et al. · 1 citation