GMail and Google Groups are vulnerable to an cross site scripting (XSS) attack due to their reliance on Content-Disposition to provide separation between the HTML file download and application scopes.
36c3caf867d3ffaeb99e710551c40b989b1ec886d122466cd3668d577cdf5d67