3 ms·I agree. I would not have disclosed this particular XSS flaw until after it was fixed.by mike-cardwell 16y agoI agree. I would not have disclosed this particular XSS flaw until after it was fixed.Stuk 16y agoYes, soon after posting I realised it wasn't the best idea I've ever had. I regret posting this before the Github guys got a chance to fix the hole. Not something I'm going to repeat.vulf 16y agoYou should report to security@github.com next time.