Beating Language Model Prompt Injection with Focus
danielcorin.com