Even the NSA leaves bugs in its software. In this case, it's the kind of cross-site issue that regularly slips past developers.
