I have no idea where to put this- so I'm putting it here.
Over the years I have studied HTML and remembered the infamous
youtube comment injection. So in an effort to see if Minecraft World Map has any flaws, I managed to upload a few test worlds and added html codes into the "Sponsored URL" box.
But before I did that, I did a bit of research and view the source of the Canterlot map I have uploaded and see how the sponsered download works. Command+F and a search of the word "Download" made me found this line of code.
[EDIT]
Please keep in mind- I am just testing to see the flaw, not inject the site with malicious code.
Please fix the issue as if anyone else who does it- they might actually set malicious code into the website and people can get viruses from them.