Hacker News new | ask | show | jobs
by windows_sucks 1402 days ago
the client should be responsible for not executing embedded JS in a message