<script>alert('XSS');</script>