The user inserts a internet link into a textbox, which is seen by other users; when other user clicks on the link, a pop-up says “This is XSS!”