Untrusted Content Masking for Web Agents with Security Guarantees
This paper presents Untrusted Content Masking (UCM), a simple and effective approach that restores the trust boundary in web environments by leveraging a key structural insight: a webpage's Document Object Model encodes sufficient information to distinguish trusted from untrusted regions without reading their content.