Guys, maybe the client side security people may be interested : http://blog.mindedsecurity.com/2011/07/jquery-is-sink.html Cheers, Stefano -- ...oOOo...oOOo.... Stefano Di Paola Software & Security Engineer Owasp Italy R&D Director Web: www.wisec.it Twitter: http://twitter.com/WisecWisec ..................