UCM masks untrusted webpage content at the DOM level before it reaches a web agent and routes content access through a type-constrained quarantined model, achieving 0% attack success rate against prompt injection while preserving task utility.
post"> but the LLM selector targets <div class=
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Untrusted Content Masking for Web Agents with Security Guarantees
UCM masks untrusted webpage content at the DOM level before it reaches a web agent and routes content access through a type-constrained quarantined model, achieving 0% attack success rate against prompt injection while preserving task utility.