Ultimately, such a model arrives at a cross roads where it has to either limit access in an arbitrary way, or face uncontrolled cost increases.

FORBES: Uncommon Sense

The website did not prevent unauthorized access, allowed anyone to access the feature, and allowed arbitrary data to be passed in.

FORBES: iPad Owners' Security Breached

Visiting a maliciously crafted web page may allow access to JavaScript objects or the execution of arbitrary JavaScript in the context of another web page.

ENGADGET: Apple releases Windows Safari 3.0.1, squishes security bugs