Cross-side scripting vulnerability in gitweb (no-ack.org)

In case you stumble across this submission, it's been duplicated here:

http://news.ycombinator.com/item?id=2017000

That one has got some comments, although not many yet.