<br data-foo"</div><script>alert(1)</script>" /> booooo