It all started with someone finding a loophole in Twitter for Web Browser. Apparently, Twitter can “recognize” Javascript even though in text form when viewed with web browser.