1 later thought

0

Looks like thoughtstreams allows you to create empty messages using <-- --> . Weird. They aren't vulnerable to simple XSS and the message body doesn't contain the html comments that were attempted to be added.

1 earlier thought