Well, well Code: http://foo.bar/#1'-alert(1)-'"-alert(1)-" leads to Code: foo.bar says 1 for many sites But not with NoScript and AdBlock Plus http://randywestergren.com/widespre...code-affecting-top-tier-publishers-retailers/