Bug fix exploit
Possible exec js when see stream.
Like "<script>alert("Kiss my ass!");</script>"