diff --git a/smartapps/-script-alert-wat-/script/-script-alert-wat-script.src/-script-alert-wat-script.groovy b/smartapps/-script-alert-wat-/script/-script-alert-wat-script.src/-script-alert-wat-script.groovy
new file mode 100644
index 0000000..21795b1
--- /dev/null
+++ b/smartapps/-script-alert-wat-/script/-script-alert-wat-script.src/-script-alert-wat-script.groovy
@@ -0,0 +1,50 @@
+/**
+ *  %253Cscript%253Ealert('XSS')%253C%252Fscript%253E
+ *
+ *  Copyright 2016 Julie Stg <script>alert('WAT!')</script>
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ *  in compliance with the License. You may obtain a copy of the License at:
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software distributed under the License is distributed
+ *  on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License
+ *  for the specific language governing permissions and limitations under the License.
+ *
+ */
+definition(
+    name: "<script>alert('WAT!')</script>",
+    namespace: "<script>alert('WAT!')</script>",
+    author: "Julie Stg &lt;script&gt;alert(&#39;WAT!&#39;)&lt;/script&gt;",
+    description: "Some description",
+    category: "",
+    iconUrl: "https://s3.amazonaws.com/smartapp-icons/Convenience/Cat-Convenience.png",
+    iconX2Url: "https://s3.amazonaws.com/smartapp-icons/Convenience/Cat-Convenience@2x.png",
+    iconX3Url: "https://s3.amazonaws.com/smartapp-icons/Convenience/Cat-Convenience@2x.png")
+
+
+preferences {
+	section("Title") {
+		// TODO: put inputs here
+	}
+}
+
+def installed() {
+	log.debug "Installed with settings: ${settings}"
+
+	initialize()
+}
+
+def updated() {
+	log.debug "Updated with settings: ${settings}"
+
+	unsubscribe()
+	initialize()
+}
+
+def initialize() {
+	// TODO: subscribe to attributes, devices, locations, etc.
+}
+
+// TODO: implement event handlers
\ No newline at end of file