4 ms·

Is it also proven that no cross-site-scripting attacks are possible?

• clarus 12y ago
  No, nothing is done about it, the post contents are not even escaped to generate safe HTML.