Cloud9 IDE XSS and potential RCELink

Found unpatched cross-site scripting and a potential remote code execution path in the Cloud9 online IDE.