You'll need to change onClik to onClick in the above for it to work. Note this won't work for hyperlinks because IE escapes non-standard characters in hyperlinks. For this exploit to work, the URL cannot be encoded. As Eric said, this will be fixed within a few days. How soon people actually patch their browsers is a different question.
Tom Blough<br /> <blockquote><font size="1" face="Verdana, Arial">quote:</font><hr>Cum catapultae proscriptae erunt tum soli proscripti catapultas habebunt.<hr></blockquote>