Allow arbitrary URLs, expect arbitrary code execution | Hacker News Reader