A mashup is a self inflicted XSS attack

I love this quote.

Douglas Crockford - Ajax Security