Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Google's login page accepts a vulnerable GET parameter. Parent comment
https://cdn.kuschku.de/ServiceLogin/video.mp4
https://cdn.kuschku.de/ServiceLogin/video.mp4