Comment by sethherr

I think another take away from this article is “don’t allow users to upload malicious files that you then host from your domain”

This seems easier to do than jumping domains.