5) XSS in addressbook (different):