Internet Explorer crossdomain keystrokes leak

Script from one site can access keystrokes send do another site...