// Dev
One shared ChatGPT link could take over your account, thanks to a math keyboard
Researchers chained a postMessage bug, an innerHTML sink and a YouTube endpoint to escape ChatGPT's HTML preview sandbox. OpenAI fixed it and paid $5,000.
// TAG
#sandboxing