originValidator: MathLive's default accepts commands from any site, letting someone else's chat be read in ChatGPT

A victim only had to open an ordinary share link while logged in to ChatGPT. OpenAI closed the hole on Oct 26 and paid a $5,000 bounty.