alert("xss1")

<script>alert(“xss2”)</script>