Reporting a bug through their bug report form worked. :) FriendFeed has fixed the bug. There was a way to exploit this now-fixed issue as actual XSS in FriendF

Reporting a bug through their bug report form worked. :) FriendFeed has fixed the bug. There was a way to exploit this now-fixed issue as actual XSS in FriendFeed for certain browsers. http://code.google.com/p/browsersec/wiki/Part2#Content_handling_mechanisms http://code.google.com/p/browsersec/wiki/Part2#Content_handl...