Comment Comment by Kiro Off-topic but I thought XSS was about injecting JS which other users can see. Is this really a vulnerability and not just a bug? parent Kiro 13 years ago