Google closes Gmail cross-site scripting vulnerability

Hole would let sites collect e-mail addresses from Gmail users' contact lists