2 ms·Whyby tantalor 8y agoWhycetra3 8y agoIf you're using this in your site as it stands, you are opening up XSS attacks as it does not appear to sanitise user input.tantalor 8y agoOnly if you do something silly like serve cookies on that domaincomesee 8y agoI think this is ignoring the content of his warning and is a tautology. "it's only opens up an attack if you allow the attack vector"