Cross-Site Scripting

A real attack might use injected JavaScript to redirect Vic to a malicious website under Mal's control, allowing Mal to steal his cookies

The victim
www.breddit.com
A loaf
How much do you folks like bread?
roll_with_it
I dream of baking tins.
I_knead_you_right_now
I love it so much, I think I might be part duck
www.breddit.com
A loaf
How much do you folks like bread?
I_knead_you_right_now
I love it so much, I think I might be part duck
butter_you_than_me
....
The hacker