The site is over quota and I have no clue what your comment means.
It was working a second ago. It's just a way to execute javascript code.
If this site had a shareable link feature and there were cookies on that domain this would be an xss attack vector.
For those wondering
From: