1. http://acegiak.net

    With the new facebook browser or extension! Specifically to allow facebook originated cross site scripting!