tricked into attacking their own Web browser
... that some users of popular Web sites such as Facebook are being tricked into attacking their own Web browser?
... that some users of popular Web sites such as <a href="./Facebook" id="mwCMg" rel="mw:WikiLink" title="Facebook">Facebook</a> are being <b id="mwCMk"><a href="./Self-XSS" id="mwCMo" rel="mw:WikiLink" title="Self-XSS">tricked into attacking their own Web browser</a></b>?