Does output filtering stop prompt injection? · PitHub