Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Google's login page accepts a vulnerable GET parameter. Parent comment