This has been demo'd a long time ago already [1], and it seems they haven't done anything yet ? Wtf.
[1] http://www.davidnaylor.co.uk/massive-twitter-cross-site-scri...
[1] http://www.davidnaylor.co.uk/massive-twitter-cross-site-scri...
> The problem is similar to one described last August by James Slater. That time around the issue was with the application URL, this time it appears the application name is the issue.