XSS See http://security.stackexchange.com/q/30330/1261 for details.