Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Apache Wicket's encrypted URLs don't protect from CSRF. Parent comment