mlns='http://www.w3.org/1999/xhtml'>

Prevent attackers from stealing credentials, cookies, etc.