Hacker News Reader

Thanks for checking the app, SamBam.

That's good, although anyone can put anything there.

I was thinking more along the lines of

Of course it doesn't actually grant you security.

What if your original link with the `url=` refused to load if the target didn't match the query parameter? That would actually make it secure, no?