Hacker News Reader

Just wondering, how or what was the fix for this exploit?

In this case, it's probably just prefixing both requests with the protection against embedding and sending the same headers.