The Telegram Export XSS Is Not About Telegram. It Is About Every App That Generates HTML.

A bot you have never heard of sends one message with an invisible payload. Someone forwards it into a...