Asked about Why prompt injection cannot be prompted away
Why can you not fix it by filtering the input?
An answer that works
The instruction can be rephrased, translated, encoded or split, legitimate content triggers false positives, and the filter itself has the same weakness. Filtering raises the cost of an attack and is not a boundary.
Reading an answer is not being able to give one. The section that teaches this is Why prompt injection cannot be prompted away, 3 hours of Prompt injection & guardrails.
Learn this properlyAlso asked about Prompt injection & guardrails