Indirect Prompt Injection Hidden in Documents