the combination of allowing embedded images via the image tag and having a CSRF exploitable logout url leads to this.
see if you're still logged in ;-)
@moderators: feel free to edit the post and remove the image. was just for demonstration.
http://www.perl-community.de/