Hacker News Reader

And this is why your validation logic should be done on server side...

And this is why your validation logic should also be done on server side...

The app doesn't care though, it just thinks it's an URL and counts the entire string as 23 characters.

They seem to have already a mitigation fix in place. Does not work anymore. Gives error 500 on m.twitter.com now.