@WW: Agreed. I think they are Just trying to understand it

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>