This is a short writeup about a vulnerability I reported to microsoft.com two months ago, describing a HTML injection issue affecting one…