cross site scripting example – XSS