I found this[1] when playing with the Google Code Play Ground. Not really a vulnerability, but: i. it is on the appspot domain ii. I can do ANYTHING I want;

I found this[1] when playing with the Google Code Play Ground. Not really a vulnerability, but: i. it is on the appspot domain ii. I can do ANYTHING I want; make a site, force redirection iii. That's all I have *They were notified a while back. How they can fix it? i. Check ip of sender and receiver ii. Use htmlfill or append a new script instead. [1] http://www.christopherwoodall.com/blog/?x=entry:entry100814-052131;comments:1 http://www.christopherwoodall.com/blog/?x=entry:entry100814-...