Mitigating the risk of prompt injections in browser use