prompt injection issue comments bypass scanners