Yeah, that makes XSS a 'feature' here. Though it is a bit scary to click a button that is going to shove completely unfiltered HTML into your browser that you c

Yeah, that makes XSS a 'feature' here. Though it is a bit scary to click a button that is going to shove completely unfiltered HTML into your browser that you can't inspect ahead of time :)