Hacker News new | ask | show | jobs
by wdiamond 318 days ago
"<"+"/script>", its a matter of parsing not value