Hacker News Reader

You can send POST to any server using a JS-submitted form so it doesn't introduce new attack vector.

You get slightly more power in that you can post malformed multipart stuff.