StartPanic ?

[sidki3003]

...but you could change the to-be-injected code the hard way. It's also good enough for Gemal's http://browserspy.dk/css-exploit.php . (In JavaScript, however, there is always a way to hide specific code, if someone really wants to...)

Without the second line in the Matching Expression the filter is stand-alone. In that case it might match where it shouldn't, though.

Code:

[Patterns]
Name = "CSS: Block "visited" Selector"
Active = TRUE
URL = "$TYPE(css)|$TYPE(js)|$TYPE(htm)"
Limit = 16
Match = ":visited( {)\1"
        "&(^$TYPE(htm))|$TST(tStyle=*)"
Replace = ":focus\1"