This is a critical security release. The cross-site scripting vulnerability lets a commenter compromise your website.
Reply on news.ycombinator.com