Researchers analyzed HTTP response headers from 217,097,223 page responses and found that almost all sites aimed at AI systems used headers to steer or instruct agents, with some attempting to inject malicious code. To mitigate this risk, developers should design their agents to only pass body text by default and treat pointers and redirects as untrusted fetches, while also implementing ...