How are you handling potential prompt injections when, for example, you are browsing the web?

Are you limiting access for pre-defined activities based on the rules of a particular task?