---
id: 5101
title: "Getting XXE in Web Browsers using ChatGPT"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/xxe-chrome-safari-chatgpt/"
published_at: "2024-05-22T14:12:54Z"
tags: ["browser-security", "xxe", "chatgpt", "same-origin-policy", "xslt", "svg"]
phying_url: "https://phying.com/item/5101"
lang: en
---

# Getting XXE in Web Browsers using ChatGPT

## Summary

Can a JavaScript-less page read local files? ChatGPT-generated samples expose browser XSL/XML vectors — XSLT, XInclude and document() — that reach file:// content despite the SOP.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2024-05-22T14:12:54Z
- **Original:** https://swarm.ptsecurity.com/xxe-chrome-safari-chatgpt/
- **Phying News:** https://phying.com/item/5101