oooops... we had some DOM based XSS... \me noob