Add additional xss payloads

[sbehrens]

A number of clever xss attack vectors have surfaced recently. Include them in sleepy puppy.

[scriptsrc]

Title says "xss payloads" but the comment is about attack vectors.

A neat payload would be something similar to http://superlogout.com/ or http://adultcatfinder.com/

+1 for more attack vectors though.