redbright
greennatural<script>alert('do bad stuff');</script>

did my xss run?, but you do see this