Mail.ru: Reflected XSS on https://deti.mail.ru

Reflected XSS on deti.mail.ru via request header Referer...

Mail.ru: XSS on https://deti.mail.ru/

deti.mail.ru allowed to insert javascript: links into post content leading to self XSS possibility on message editing...