That, apperently, as far as I can tell. Unless, of course, you can't say that.

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>