Why MCP and ChatGPT Apps Use Double Iframes: A Security Deep-Dive for Builders (2026)
MCP Apps render third-party UI inside ChatGPT and Claude using a nested double-iframe pattern. Here is why hosts do it, how the sandboxing works, and what builders must declare to keep apps from breaking.