and wide open to the funkiest XSS you can imagine--boy did that ever blow my mind when someone explained me the idea, I had been coding hardcore JS for years but it never clicked that this would allows you to pwn everything. except my mind went more into practical joke settings "hey I can inject JS and make all links on this guestbook EXPLODE if you click them?? aahaha"
And don't forget 2x2.gif, with the top left and bottom right pixel transparent, and the other two pixels coloured white or grey. Used to make background images of table cells with this, and that would create a faux opacity effect with whatever was used as the background image behind the table.
* Nested table layouts, adventures in collapsed borders
* window.status = "awesome"
* HRs: "I can make a 3d hole in my page"
* document.all being the best DHTML api.