<script>javascript:alert('XSS')</script> ↩