: P.S. Brian, weren't you gonna write up a "so somebody has found an XSS : and you dispute it" FAQ? ;-) Or did something have to happen first? I said I would write the "so you threatened to sue us" FAQ! But I will add this to my list for sure =)