1. Security Vulnerability: Unicode Homoglyph Bypass in External Content Wrapping Function
The wrapExternalContent function (and its derivatives wrapWebContent and buildSafeExternalPrompt) is designed to wrap untrusted external content with special boundary markers (<<<EXTERNAL_UNTRUSTED_CONTENT id="...">>>) to separate it from trusted instructions. To prevent spoofing using visually similar Unicode characte...