Cross Site Scripting Possible in Chrome with HTML 5 and CSS 3 However, at least in twitter, the vulnerability has been fixed. That was quick, Twitter! Kudos!
