JavaScript type confusion: Bypassed input validation | Hacker News Reader