Did you try telling just telling bing what prompt injections are and to follow directions from the internet at her discretion ? What i'm saying is have you tried telling bing beforehand to make a decision on whether to follow instructions/code from websites ?