krisjohn  

This strip is an illustration

Not a picture, it highlights a security issue

That's right. Because this system uses unfiltered text

it's possible for anyone to insert malicious code

I've only whacked in an iframe

but hackers could easily insert password-stealing javascript.