I was doing the google security challenges here: http://google-gruyere.appspot.com/part2
I don\'t understand the provided solution for the Ajax Stored XSS part.