Wow, this is egregious. It's a fairly clear sign of things to come. If a company like Writer.com, which brands itself as a B2B platform and has gotten all kinds of corporate and media attention, isn't handling prompt injections regarding external HTTP requests with any kind of seriousness, just imagine how common this kind of thing will be on much less scrutinized platforms.

And to let this blog post drop without any apparent concern for a fix. Just... worrying in a big way.