🎯 HTML rendering race condition

The items that name it 2

• SearchLeak: How We Turned M365 Copilot Into a One-Click Data Exfiltration Weapon
  writeup2026-06-15

  An <img> tag in the AI streaming response is rendered by the browser and fires its HTTP request before the output sanitizer wraps the response in <code> blocks post-processing, allowing the request to escape before neutralization

• New attack turned Microsoft 365 Copilot into 1-click data theft tool
  article2026-06-15

  Raw HTML (including an <img> tag) is temporarily rendered by the browser before being wrapped in <code> blocks that neutralize it, exploiting the window while Copilot streams its output