Cross-Site Scripting

I'll write this, I swear.
But until I do that, just find some place that takes user inputs and spam in all the escape characters you could possibly dream of.