Just to be clear, inb.tw has no XSS issues, retichess does.