Hello, now an attacker can POST this in the facebook to give a fake preview and phishing could be delivered here.