from Hacker News

Demonstration of how to use Data-URI to manipulate the browser's address bar, and tricking the user to download malicious content.