Actual major security risk moment, even more so because scratch is (mainly) a children's website. I don't think nobody wanna see that on a website with the ending words being .mit.edu Original for those who wanna know I've heard something was on the trending page while I was doing something else yesterday. I don't even frequent this site anymore so color me very confused and curious.
Scratch Team, I know you're probably not listening here considering how some older projects of mine turned out. But uhhh... You should get to fixing the explore/trending tab before more people exploit this.