<script>alert(1)</script> by hannes