<script type="text/javascript" src="https://apis.google.com/js/plusone.js"></script>

Given this is the code you paste on the page I think it is pretty obvious to anyone who bothers to look.

The CSRF information is great however!