PHP's error messages are vulnerable to XSS - not a bug | Hacker News Reader