obra’s Twitter Archive—№ 8,474

Javascript XSS in DNS. Fear that. skullsecurity.org/blog/2010/stuffing-javascript-into-dns-names