How do developers test for indirect prompt injection vulnerabilities when their internal applications process untrusted data from external websites or customer uploaded documents?