XSS using a bug in Safari and why blacklists are stupid | Hacker News Reader