Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Google's login page accepts a vulnerable GET parameter. Parent comment
https://mobile.twitter.com/taviso/status/769391927892598784
Edit: this one is better
https://mobile.twitter.com/taviso/status/769378052254015488
There are no comments on this comment yet.
https://mobile.twitter.com/taviso/status/769391927892598784
Edit: this one is better
https://mobile.twitter.com/taviso/status/769378052254015488