3 ms·
Assuming the codex editor is the editor for the area below the auction counter, isn't that a security vulnerability that can put the site audience at risk?
by x______________ 9mo ago
Assuming the codex editor is the editor for the area below the auction counter, isn't that a security vulnerability that can put the site audience at risk?
- nsomani 9mo agoThe Codex agent is only given tools to edit the single HTML file that displays on the homepage. The page is on a separate domain, so there's no cookie sharing, and the iFrame is in a sandbox. That said, the biggest risk is social engineering attacks.
- hsbauauvhabzb 9mo agoWhat’s to stop someone rewriting the iframe wrapper to hide the real iframe and display a fake one?
- nsomani 9mo agoThey cannot edit the iFrame itself. The user is allowed to edit the contents within the iFrame.