Safari Cross Domain Javascript Access.
Publicated on :
1179490098
Gareth e-mailed me this Safari cross domain Javascript access proof of concept he created. It shows an example where Javascript can read where you are going if you click a link on that page. He also noted that Safari hasn't been fixed yet by Apple.
Advisory: http://www.thespanner.co.uk/2007/05/18/safari-needs-fixing/
Proof of concept: