<script> alert('This is an XSS attack!'); </script>