They were also told about this a while back: http://www.davidnaylor.co.uk/massive-twitter-cross-site-scripting-vulnerability.html http://www.davidnaylor.co.uk/

They were also told about this a while back: http://www.davidnaylor.co.uk/massive-twitter-cross-site-scripting-vulnerability.html http://www.davidnaylor.co.uk/massive-twitter-cross-site-scri... Not quite the same flaw but very similar - caused by unescaped URLs