</text><script>alert('test failed - vulnerable for XSS!')</script><text>