XSS is my best friend