ParentFull threadGetahobby·I think the underlying cause was the same - unescaped output that was supplied by the (malicious) user.View on HN