After I shared some POC exploits with Plugins OpenAI added this requirement it seems. However as far as I can tell, and most recent testing shows, this require

After I shared some POC exploits with Plugins OpenAI added this requirement it seems. However as far as I can tell, and most recent testing shows, this requirement is not enforced: https://embracethered.com/blog/posts/2023/chatgpt-plugin-vulns-chat-with-code/ https://embracethered.com/blog/posts/2023/chatgpt-plugin-vul... I'm still hoping that OpenAI will fix this at the platform level, so that not every Plugin developer has to do this themselves. It took 15+ years to get same-site cookies - let's see if the we can do better in here...