rem’s avatarrem’s Twitter Archive—№ 11,177

  1. Nice XSS <a href="http://example.com?yourparam="><img src=x onerror=alert(2)>"> - protected '<' & '>' but not quotes.