RCE & DNS Exfiltration in ChatGPT Canvas