There is a script tag in an iframe that is created dynamically with the document.write() API:
document.write()