Tony Yip
says to
YSITD
Disable Javascript 保證不會有 XSS(被打