Microsoft had previously disabled the ?q= URL query parameter in Copilot's web interface to protect the AI assistant against prompt injection attacks