Proof of concept code that demonstrates a bypass flaw in Microsoft’s cross site scripting filter.