andrew
just do it!

http://baidu.com"><scr

<script>alert(/xss/)</script>

ipt>alert(/xss1/)</script><--!