Indirect Injection via Retrieval and Browsing