xss is just a loser's rce
"alert()" awww look who can't use MessageBoxA
@ipg window.open("Calculator://")
@ipg if $feelings = ’offended’ $argue = 1
else moveon
@ipg well it IS code that executes remotely on the user's browser \_0_/
@ipg that's the truest thing I've ever heard from you