Looks like Chrome started highlighting potential XSS in view-souirce. Part of @ChromeDevTools I assume. Neat.pic.twitter.com/RAl7vh0yET
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
@theKos @ChromeDevTools @Bitquark Test case? I am not seeing this in the latest Chrome Canary 39.0.2151.2 (64-bit).
@mathias In Chrome Stable version (37.0.2062.120 ): see
view-source:http://avlidienbrunn.se/rxss.php?xss=%3Cscript%3Ealert(1)%3C/script%3E … +@theKos
@soaj1664ashar @theKos Aha, looks like it only does it when XSS Auditor blocks the attempt. (My test case had `X-XSS-Protection`.)
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.