<script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script> Given this is the code you paste on the page I think it is pretty obvious

<script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script> Given this is the code you paste on the page I think it is pretty obvious to anyone who bothers to look. The CSRF information is great however!