Well, sounds like you got some `chown` to do... Some security considerations can't be overlooked, granted; but don't fret, it was possibly put there client sid

Well, sounds like you got some `chown` to do... Some security considerations can't be overlooked, granted; but don't fret, it was possibly put there client side(One might even hypothesise that a WYSIWYG editor put it there by default, but I deem you would have seen that). Just give the url to someone and ask them if it appears in the source. If it does, delete it and see if appears again. If it does, then do get paranoid with security, I guess.