<script>alert("hi");</script>