[homakov]

Untrustworthy scripts, HTML, images, email attachments.

[ororlrlrlylyly]

But I'm logged in! It shows myname in the corner. So obviously you could get that cookie, right?

[homakov]

Part with yourname is other_origin. I change content of GUC Page 2 using GUC Page 1 through other_origin (translate.google.com). No XSS or cookies. Just standards :D

[mh-]

I seriously admire your patience in replying to comments.

[homakov]

I have no life.

[mh-]

I was only referring to your continuing lengthy, polite comments when replying to commenters' questions. :)

[homakov]

:) it's pleasant to explain hacks you discover.

actually PoC is fixed - http://homakov.blogspot.com.es/2013/07/googleusercontentcom-...