HTML facts﹕ <​in​put ​ty​pe=​”i​mag​e”​> a​nd a <​f​ram​e​> XSS bypass

Two HTML fun facts: sending mouse-coordinates & using the tag for XSS filter bypasses