I posted this a year ago. The situation hasn't changed despite my ticket on Bugzilla (it was a duplicate of a looooong one). Here is a URL to test : http://ber

I posted this a year ago. The situation hasn't changed despite my ticket on Bugzilla (it was a duplicate of a looooong one). Here is a URL to test : http://berghain.de/events/%22%20onmouseover=%22alert%28'NEIN!'%29 http://berghain.de/events/%22%20onmouseover=%22alert%28'NEIN... Once on the page go on the 'onmouseover' text. the alert will appear only on Firefox. On other browsers, just check the console to see the Auditor blocking the attack.