The Codex agent is only given tools to edit the single HTML file that displays on the homepage. The page is on a separate domain, so there's no cookie sharing, and the iFrame is in a sandbox. That said, the biggest risk is social engineering attacks.

▲

hsbauauvhabzb a day ago | parent [-]

What’s to stop someone rewriting the iframe wrapper to hide the real iframe and display a fake one?

	▲	nsomani 18 hours ago \| parent [-]
		They cannot edit the iFrame itself. The user is allowed to edit the contents within the iFrame.