Sorry, used the wrong term. I mean it can be injected as a script tag into an xdomain site.