xss

[khalmeev]

pinboard run scripts from url

for example http://domain.com/search/?q=%3Cscript%3Ealert%28+%22xss%22+%29%3C%2Fscript%3E

[XOlegator]

Fixed in the new admin UI by rendering live rows through DOM APIs instead of injecting raw HTML. The live page no longer builds request rows from an unescaped template.\n\nMerged in #163