Prompt injection through marketing data: the fields nobody validates A Google Ads campaign name takes 256 characters with no documented content validation. Meta documents no maximum at all. October 6, 2026 8 min read #prompt-injection #ai-data-access #seguranca-de-dados