Unverified50% confidenceSolutionExact time
The Reado app defends against similar attacks in the following ways: HTML files open as source code by default, Markdown and notebook output is sanitized via rehype-sanitize, the app's own CSP allows only script-src 'self' and covers Workers, file size does not change the loading method, and local image access is restricted to the opened project.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027
Sources
Related Entities
Related Claims
UnverifiedIn resume screening scenarios, an attacker can embed HTML content invisible to the human eye in a PDF (such as CSS-hidden styles, metadata, and HTML comments), and this content is retained when the model reads the plain text and may be executed as instructions.62% similarUnverifiedThe generated HTML viewer can run offline because all dependencies (rendering libraries, stylesheets, and interaction scripts) are inlined into a single HTML file at build time; in testing, the diagrams continued to display normally after HTTP requests were intercepted.62% similarUnverifiedThe request filter only intercepts file:// reads when the panel proxies a dev server, and does not take effect when rendering static HTML files from disk.61% similarUnverifiedOpenCLI通过读取结构化的DOM快照获取页面内容，而非依赖截图61% similarUnverifiedThe TokenSave analyzer reads files locally through the browser File API and aggregates the numbers, and prompts and code are not uploaded to a server.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1061023API
curl https://kongchang.com/api/v1/knowledge/claims/1061023MCP
get_claim(id=1061023)