test <script>alert(3)</script>