5 ms·
The Codex agent is only given tools to edit the single HTML file that displays on the homepage. The page is on a separate domain, so there's no cookie sharing,
by nsomani 8mo ago
The Codex agent is only given tools to edit the single HTML file that displays on the homepage. The page is on a separate domain, so there's no cookie sharing, and the iFrame is in a sandbox. That said, the biggest risk is social engineering attacks.
- hsbauauvhabzb 8mo agoWhat’s to stop someone rewriting the iframe wrapper to hide the real iframe and display a fake one?
- nsomani 8mo agoThey cannot edit the iFrame itself. The user is allowed to edit the contents within the iFrame.