Parameter Labs documented an exploit chain against ChatGPT's sandboxed HTML previews: a postMessage reaching MathLive keyboard code that used innerHTML let untrusted frames inject an unsandboxed iframe, and YouTube's oEmbed endpoint reflected JavaScript past CSP. OpenAI fixed the flaw and paid a $5,000 bounty.