<div id="message" class="clearfix" style="overflow:auto; visibility:hidden;"> These are the tags which Yahoo Mail uses to display mail text. If you haven't JavaScript turned on, you can't read them. </div>

Why not make the next URL something like: The best '; location.href='http://www.example.com'; ' (or something more nefarious like cookie stealing code)...