AI Browsers Face Permanent Threat From Prompt Injection Attacks