MySpace allowing CSS etc. in their profiles was initially a bug. Their code was just bad, not escaping user input.

They were on such a growth trajectory, and users loved being able to customize their pages, that they made it into an official feature.