Parameter Labs described an exploit chain in ChatGPT’s sandboxed HTML previews: MathLive’s virtual keyboard accepts postMessage from iframes and the parent writes with innerHTML without blocking other preview frames, so untrusted code could inject a non-sandboxed iframe. CSP blocked inline scripts b