Cross site scripting?

[Stephanie Plum]

What is it and why am I getting a warning that IE8 has modified any PH page I open to prevent it?

[Benni]

I had that , too, in the last days, and suspect it has something to do with some ads,
maybe the way some ads are scripted is seen as "dangerous" by IE8 ?
As you can see, I am a n00b in that topic and hope someone with more knowledge hops around.
I thought of screenshooting the window with the "warning message", but mine is in german,
if it happens to you again maybe you can capture and upload it ?
I think it had some kind of "error number" included.

[onyx39]

Wikipedia says the following: in a nutshell, I believe it to be the same as or similar to "browser hijacking" ie: being directed to other (possibly unpleasant / fraudulent) websites.

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications that enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 80.5% of all security vulnerabilities documented by Symantec as of 2007.[1] Their effect may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner.

[MattDell]

It's most likely from a flash-based ad.

Cross site scripting basically means a script has been loaded from a domain other than the one you're requesting (e.g. - ads.doubleclick.net instead of pistonheads.com)