Okay, that's clearly pretty dangerous. Let's see how to protect against DOM-based XSS vulnerabilities.