also, i don't know why the chatbox was public and unsecured. i was thinking about testing some xss in there...