StrategyApr 2026Jailbreaking by Proxy and How to Stop Indirect Prompt Injection in Web-Browsing AI Agents