What's nuts is how easy this is to exploit. I could explain this to a friend over the phone-- no previous XSS experience necessary. Compared to the whole mikey

What's nuts is how easy this is to exploit. I could explain this to a friend over the phone-- no previous XSS experience necessary. Compared to the whole mikey fiasco, where he found a hole in the on display script for tweets.