jamesjefferies’s Twitter Archive—№ 30,597

@MarcSettle A browser will try and run a script in <script> tags, so by getting it in as the company name, any sites which don’t take care with what they show will, when displaying that company name, actually run the script which is referenced - which could be malicious!