what if there's a prompt injection in some random web page that you visited?