gossip is written in a more serious programming language than a javascript based browser app, there is no XSS even possible