Con 1707

What about XSS?