Test whether scripts are vulnerable. If you encounter a dialog telling so, post a message at COM:AN. Please note that the title must remain as it is because it "is" the test for unescaped HTML usage in JavaScript.