A concerning XSS flaw discovered by a German security researcher appears to be fixed. Here's what happened.