andr3’s avatarandr3’s Twitter Archive—№ 691

  1. …in reply to @simonw
    simonw's scary talk just finished. protect against XSS at all costs. css can be also used for inserting js.