Google Wave security flaw, Javascript Injections possible(linearlyindependent.com)

http://linearlyindependent.com/post/217407923/google-wave-security-issue-with-javascript