Good ideas and conversation. No ads, no tracking. Login or Take a Tour!
I pushed an update to do some HTML-escaping. I think that should do the trick, although that said I did try to get the site to execute some random JS code injected via the URL and wasn't able to. Better to be safer, though, especially if other people want to crib this for their own sites. Thanks for the tip! I made sure I credited you in the blog post as well.
That was fast. Thanks for the credit. It is a fun script. I had the xkcd substitutions extension installed for nearly a year. The car -> cat substitution was the worst. Parsing the word "cat" took quite a bit of extra effort, even in print.