Demo to show how XSS can lead to cursor-jacking