Read the original at Simon Willison
Parameter Labs describes an exploit chain against ChatGPT's HTML preview sandbox, where a MathLive keyboard message handler using innerHTML let untrusted iframe code inject an unsandboxed iframe.
Carried by: Simon Willison. First seen: .