If that remote URL is a application/javascript file, I think that versions of IE will run it, and likely within the Perlmonks security context.

If that remote URL redirects back to Perlmonks, it can alter user settings, at least if there are holes left open here where we allow setting of vital things via GET.