Image-layer prompt injection: measuring a defense across 108,015 samples

Most prompt injection defenses guard the text prompt. They inspect the user's message, sometimes the...