Comment by lukax

Wow, XSS just waiting to happen.

  <h3>${this.getAttribute('title')}</h3>