User blog comment:Kirkburn/Technical Update: September 14, 2015/@comment-4018164-20150914200248/@comment-13301-20150916195531

@Cqm: Actually, Wikia extensions aren't so secure, since till a couple of days before, there were unescaped messages in Oasis. This was one of them, maybe there are still more of them :)