RT @kylegawley: Vanilla Javascript should never be used unless you understand what an XSS attack is and how to protect your users from it.