X</script><script>alert(1)//
test
xss
safe