Direct vs Indirect Prompt Injection: The One That Matters Is the One You Never Typed

The difference between a user attacking their own session and third-party content attacking your user, and why only the second is a classic security problem.