Oh! I was talking about static XSS then! The example Neil gave in his talk was about dynamic XSS. I thought XSSI meant that and "XSS" meant this - http://www.cg

Oh! I was talking about static XSS then! The example Neil gave in his talk was about dynamic XSS. I thought XSSI meant that and "XSS" meant this - http://www.cgisecurity.com/articles/xss-faq.shtml http://www.cgisecurity.com/articles/xss-faq.shtml