Use POP
Use Gmail in HTML mode mail.google.com/mail/?ui=html (look for "Basic Html" on the gmail web page.) I think this is also the default mode when javascript is disabled

Hey, that has been fixed already (theregister.co.uk/2004/11/01/g ...).

This is the day I started using NoScript.

"Hey, that has been fixed already"
AH AH AH

"Hey, that has been fixed already"
Hahaha, "Published Monday 1st November 2004 11:30 GMT"
Philipp, the code was hosted on Google Pages, and I took it down this morning. (Google wasn't involved.)

TechReads blog has an entry too:
cyber-knowledge.net/blog/2007/ ...
(via /.)

Sorry, posted to wrong thread... :-(

google ({
   Success: false,
   Errors: []
})

Good thing I've been using NoScript for Firefox.

> Hey, that has been fixed already

Ioannus, your link points to a different vulnerability than this one.

> the code was hosted on Google Pages

Haochi, I updated the post.