🔧 A Five-Minute UI Feature That Became an XSS Time Bomb

The Innocent UI Change (Context)





Small UI Change
(preview, comments, tooltip)
↓
Frontend Code
↓
Looks Visual Only
↓
Feels Low Risk







You rolled out what seemed like a tiny HTML or UI tweak. Maybe it was a new place to display user comments, a live preview field, or a way to render...