WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks