To stop exfiltration via images? Yes seems so? If you configure img-src: The first directive, default-src, tells the browser to load only resources that are

To stop exfiltration via images? Yes seems so? If you configure img-src: The first directive, default-src, tells the browser to load only resources that are same-origin with the document, unless other more specific directives set a different policy for other resource types. The second, img-src, tells the browser to load images that are same-origin or that are served from example.com. But that wouldn't stop the AI from writing dangerous instructions in plain text to the human