Brilliant hack! (And technically it's your fault - as you said - for failing to properly escape the user-provided string before displaying it. But you were youn

Brilliant hack! (And technically it's your fault - as you said - for failing to properly escape the user-provided string before displaying it. But you were young and we forgive you.) Thanks for sharing.