A cited RAG answer can still be citing the poison

OWASP's entry on vector and embedding weaknesses (LLM08 in the 2025 Top 10 for LLM applications) opens its attack scenarios with a resume. Somebody hides an instruction in white text on a white backgr