Confirmed: #XSS in #Tweetdeck reading #Facebook feeds to Web client