Without looking into the source, I'd bet someone tweeted the "exploit", just to ...

borkabrak on Feb 4, 2016 | parent | context | favorite | on: A collection of tweet-sized D3 creations – to add ...

Without looking into the source, I'd bet someone tweeted the "exploit", just to make the point that going to that page basically runs arbitrary javascript in your browser.