Sign in or Join FriendFeed
FriendFeed is the easiest way to share online. Learn more »
Ryan Kennedy
@codepo8 you're innerHTML'ing content from another site, seems ripe for XSS…unless we allow people to sanitize the HTML in YQL first