The <script>alert(“XSS”)</script>

test comment

I'd be surprised if HN were vulnerable to XSS attacks.

sorry for spam @dang

This is bad. I think the only reason it didn't work here is that you used smart quotes instead of straight quotes.

Edit: It's completely fixed now.

Seems like it is fixed in a weird way.

<marquee>alert("XSS")</marquee>