JavaScript file containing the exploit

Another reason to turn off JS by default.