guardian/frontend — pull request #2272 by stephanfowler (2013-11-13 10:51:18+00:00)
Title: Prevent XSS iframe exploit

The responsive viewer took an absolute url as an query arg, for its iframe src. Make this a relative url, with the hostname keyed indirectly by an arg. To prevent naughty URLs being passed in.