...and when somebody is tricked into visiting that URL, the JavaScript will be executed in their browser.
