Comment Comment by windows_sucks the client should be responsible for not executing embedded JS in a message parent windows_sucks 4 years ago
