<input/><script>alert(1)</script>