jehy/LivejournalUser — pull request #1 by TK-999 (2013-05-23 23:11:43+00:00)
Title: Fix XSS vulnerability in renderLivejournal_User()

If $Livejournal_User_Remote_Images is set to 1, one can append arbitrary attributes to the tags, e.g.