Reported incident of apparently malicious attempt found in the wild (on Yahoo no less), but not confirmed with the responsible domain/code
small typo in comment
ubiquity todo
better height