<h1>foo</h1><script>alert(1)</script>