The <script>alert(“XSS”)</script>

This is bad. I think the only reason it didn't work here is that you used smart quotes instead of straight quotes.

Edit: It's completely fixed now.

I'd be surprised if HN were vulnerable to XSS attacks.

Seems like it is fixed in a weird way.

<marquee>alert("XSS")</marquee>

sorry for spam @dang

test comment