Hacker News new | ask | show | jobs
by yencabulator 1181 days ago
Looks like any app can output arbitrary HTML, and thus pwn the whole system, right?