This feels like it could be interesting to embed a moz-binding to it that ran an XSS exploit but I'm not sure how many people would do that and there are easier ways to do that if you can include CSS. The utility as an attack vector might not be there. Can you think of anything else that might be useful?
- RSnake
Gotta love it.
http://ha.ckers.org