javascript: protocol calls, not just exact byte sequences. context: "Prompt injection is the canonical agent goal hijack vector -- adversarial input overrides the agent's assigned objectives and ...