i personally wonder how well they will do it, there are plenty of ways to do xss without script tags