Go ahead! Try a simple XSS attack. I made it so you can try.