example type alert("xss")