Foo <script>alert('I am XSS Attack');</script>