Omg you're right and i completely agree with you.......

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>