So you can make someone involuntarily host a website if you let them post user generated content that includes a link. That "website" exists as long as the link exists (& I guess the bootstrap site that has the JS).
This is going to be used for some malicious stuff, I'd bet. https://x.com/mistersql/status/1050746155590660097
Post
October 12, 2018