A single line of hidden text in a PDF was enough to make a support bot leak internal pricing data. Here's a full walkthrough of how that happens and what actually stops it.