Comment Comment by cujanovic This is vulnerable to XSS, payload: [Click Me](javascript:this;alert(document.domain)) parent cujanovic 9 years ago
