by stevekemp·13y ago·view on hn ↗It looks like you don't escape content of submissions, allowing XSS attacks to be made.