Docs.google.com in your CSP can enable AI-based data exfiltration (simonwillison.net)

The ability for AI to dynamically generate links makes so many more URL schemes dangerous - i’m guessing more CSPs are vulnerable than not to these new AI attack vectors.