Browsing: cross site scripting include