<script>alert("boo!");</script>