On: Twitter knew about onmouseover flaw a month ago

[rahoulb]

They were also told about this a while back:

http://www.davidnaylor.co.uk/massive-twitter-cross-site-scri...

Not quite the same flaw but very similar - caused by unescaped URLs