original blog post:
<a href="https:&#x2F;&#x2F;ret2libc.wordpress.com&#x2F;2016&#x2F;01&#x2F;11&#x2F;a-tale-of-ebay-xss-and-shoddy-incident-response&#x2F;" rel="nofollow">https:&#x2F;&#x2F;ret2libc.wordpress.com&#x2F;2016&#x2F;01&#x2F;11&#x2F;a-tale-of-ebay-xss...</a><p>On my computer the exploit is caught by noscript.