avatar

<?xml version="1.0"

<?xml version="1.0" ?>
http://.li\"alert(a.source)</SCRIPTCRIPT>a=/XSS/ alert(a.source)</SCRIPT>>alert(a.source)</SCRIPT>
Looks like @spaced hasn't commented yet!