Salt-Labs Claims: XSS protections can be bypassed when social sign-in is used

Wow if that's true and affects more websites, then it's super cool and huge