On Sun, Jan 12, 2014 at 10:18:30PM +0100, Jason A. Donenfeld wrote: > Are there any circumstances in which this could have prior lead to an XSS? I'm pretty sure this is entirely under the control of the system administrator, so it should be fine.