prawnsalad/KiwiIRC — pull request #555 by Pseudochu (2014-06-13 17:13:56+00:00)
Title: Patching XSS vulnerability

The following message produces a clickable link that triggers JavaScript when clicked (pre-patch):
`javascript://www.google.com/?%0Aalert(0);`

Patch was designed to prevent this while maintaining support for arbitrary link protocols.