Note to self: When testing cross-site scripting, remember to re-enable Javascript. sigh I’ve got a lot on my mind.