That document has an incorrect definition of prompt injection: it says "Prompt injection attacks are attempts to circumvent content restrictions to produce particular outputs" – but that's not prompt injection, that's jailbreaking

→ View original post on X — @simonw,