@misc{indiciae6920cd4e808b, title = {Render Before Reading: Visual Rendering as a Prompt Injection Defense}, author = {Jie Zhang and Andrei Baroian and Jan N. van Rijn and Avital Shafran and Florian Tramèr}, year = {2026}, url = {https://arxiv.org/abs/2609.36121}, note = {Source identifier: 2609.36121} }