This could trick a surfer into revealing data such as a password. "The problem is that JavaScript dialog boxes do not display or include their origin, which allows a new window to open--for ...

In that column, I had the HTML for the dialog box dynamically generated at runtime from a Partial View and retrieved it by issuing an AJAX call from JavaScript running in the browser that called a ...