User blog comment:Collector1/Has Anyone Had This Before?/@comment-1333424-20120128191118/@comment-2200849-20120129191918

Use NoScript, that should fix it, provided that it's online XSS/JS.