Demo - How to Conceal XSS Injection in HTML5

pushState