Allow arbitrary URLs, expect arbitrary code executionpositive.security13 points·ruph123··1 commentOpen articleSaveView on HN