[raesene]

Of course they should probably escape any headers they get from the sites they pull the data from to avoid Cross-Site Scripting :) http://showmetheheaders.com/?q=www.mccune.org.uk

[traviskuhl]

good catch. thanks! should have proper filtering now. that's what i get for writing code at 2am and not properly reviewing.