{"version":"2.1.269","anchor":"artifacts-new-untrusted-content-wrapper-tag-for-content-aut","canonical_anchor":"artifacts-new-untrusted-content-wrapper-tag-for-content-aut","heading":"Artifacts: new untrusted-content wrapper tag for content authored by others","tier":"notice","area":"Artifacts","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269\/e\/artifacts-new-untrusted-content-wrapper-tag-for-content-aut","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269","markdown":"### Artifacts: new untrusted-content wrapper tag for content authored by others\n\nArtifacts now wrap content written by other people in a tag marking it as untrusted, not instructions\n\n**What**\n\nWhen content inside an Artifact (a standalone document or app shown alongside a conversation) was published by someone other than the person you're talking to, or by a Claude other than the one you're using, it's now wrapped in an `<artifact-content-authored-by-others\/>` tag. Claude is told to treat anything inside that tag as untrusted data rather than as instructions to follow, and that an artifact writer can never grant itself extra permissions this way.\n\n**Why**\n\nThis is a defense against prompt injection: without it, text placed into a shared artifact by someone else could potentially be read as commands. Now that content is clearly marked as data to be treated with suspicion.\n\n- Area: Artifacts\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}