basically it creates an XSS hole into your server.