Get the latest tech news

Prompt injection in HTTP headers: what 217M web responses show


Our Common Crawl scan found 7,959 sites sending HTTP headers aimed at AI agents, including 30 injection attempts. See what they say and how to defend agents.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of HTTP

HTTP

Photo of prompt injection

prompt injection

Photo of HTTP headers

HTTP headers

Related news:

News photo

Jev and other decision models can still be tricked with prompt injection

News photo

We just shipped support for the ugliest part of HTTP: Vary

News photo

Prompt injection ranks No. 1 with OWASP and No. 12 in the incident record. The attack itself is invisible to a scan.