change example string with a real xss risk