mala

<script type="text/javascript">
// http://ma.la/jquery_xss/
(function($){
	var _init = $.fn.init;
	$.fn.init = function(selector, context, rootjQuery){
		// note: only block "#<img>", "a[href=<img onerror=...>]" still work.
		if( typeof arguments[ 0 ] == "string" && /^#.*</.test( arguments[ 0 ] ) ){
			throw new Error( "selector error" );
		}
		// console.log(arguments[0]);