Kinda curious. Everything I'm reading just says "it uses HTML" and a brief mention on a vulnerability in libpng. Any specifics? It's not some intern accidentally introduced an injection exploit, right? I haven't played TERA in a long time, and I never played it seriously, but remote code execution with a vector as easy as just sending a message to everyone in the server (which is apparently easy peasy) could be a disaster large enough to spark a few class action lawsuits, "not responsible for damages incurred by the use of this product" being in the EULA would not have changed shit.