Yeah, is like some site creators have learned nothing about the Google blacklist, having user content on your main site is risky. I could include ANY js file in

Yeah, is like some site creators have learned nothing about the Google blacklist, having user content on your main site is risky. I could include ANY js file into their main page (insanity). edit: much lack of security - https://buymysideproject.com/startups/iframe-srchttpsbuymysideprojectcom-stylewidth100height100iframe https://buymysideproject.com/startups/iframe-srchttpsbuymysi... edit 2: YIKES! don't click the authors bio on the main page, the site is already clickjacked. This is a fine example of why you take security seriously.