Report - " onclick="alert('ah');

What's wrong with this instant?