MathJax

which is a Perl script that converts LaTeX source to HTML.

And so what I did was I added MathJax support.

And so the equations are much nicer, and it's much nicer for LLMs.

So it's much more searchable, much more quotable, copy-pasteable.

With the help of AI, a researcher found a vulnerability in Inspect, which is the UK AI Safety Institute's framework, which is widely used across the safety eval ecosystem.

In about 10 minutes, this vulnerability is a MathJax href expression that breaks out of its attribute to inject an SVG animate ele- element with an on benign handler running the agent's JavaScript in the viewer's origin.

All of that is to say, basically it can rewrite what appears to you versus what is actually stored in the system.

So it can rewrite displayed actions and intercept the viewer's own download button.