In the land of XSS ‘possibly safe’ means ‘exploitable’ | Hacker News Reader