That was an example of the abuse I was talking about.
My sig *did* that (removed now) with a timeout redirect.
That was a harmless example. I could have also quite easily spawned a million goatse popunder-windows, or done some vicious things with ActiveX, for those who are silly enough to still be using IE.
This is why gs.net desparately need to lock down their sig rules. They have a perfectly valid vB code, which would allow everything that you need for a "normal" sig, but yet they still allow full html. I don't know if this is ignorance or stupidity. If it is intentional, god help us all...