THIS HAS XSS CODE IN IT, BUT ALL IT DOES IS CRASH THE COSTUME EDITOR. I GOT IT FROM https://muffin.ink/blog/scratch-vulnerability-disclosure/ SO IT IS FULLY SAFE.
