No subject

[bogus () does not exist com ()]

they see those warning boxes?  From a test perspective, it may be even
more telling to show that the exploit was successful regardless of
browser warnings.  In other words you can't expect the users to protect
themselves.