By using scripting and crossite scripting malware script can bypass protection against access to external sites and bypass sites restriction.
vulners.com/securityvulns/securityvulns:doc:6547