“Square Brackets are the Enemy - hueniverse”

This is a really tricky (and interesting) JS security issue with, honestly, quite far ranging implications for server side dev.