I remember hearing something about self-XSS in another story earlier today:

https://news.ycombinator.com/item?id=7350818