A shared ChatGPT link could read private conversations — a fixed MathLive sandbox escape shows why cross-frame trust matters
A graph, an HTML Preview and a trusted virtual-keyboard message listener combined to bypass ChatGPT's iframe boundary. The fix is reported shipped, but the incident offers a practical warning to anyone embedding untrusted interactive content.