Hey, sorry about this. we figure that while we could do something about an XSS attack, this is something we'd leave. We did clean a lot of comments and chat messages which were extreme. Framebench is meant to be private, so while this may happen in a demo, it certainly won't when within an organization. Thanks for pointing it out though! :)