Eggs from space coming to exploit that one bug in your "markdown and html supported" description to go add an `onload` attribute to steal your auth cookie