<script>alert(1)</script>

(ignore this)