In-page Prompt Injections against LLM Web Agents