Yahoo mail vulnerable
Yahoo mail was found to be vulnerable to onload event handlers inside of style tags. This attack is not explicitly described on my XSS page, because every variant of every event handler inside every HTML tag would end up making my page hundreds of times longer. I try to keep my page as brief and information packed as possible, but this is worth noting.
