<script>alert('title');</script>

[brandon]

Test XSS in notifications.

<script>alert('body');</script>

@bkeepers

[brandon]

CSS injection?

<style> * { color: red; } </style>