Comment

Comment by gregsadetsky

oh no -- it's actually vulnerable to xss...!!!

(this just injects a <script> alert but.... that's bad)

just tried contacting the author via linkedin (since I don't see an email address on their site)

@joshcsimmons are you around?

Discussion