1. "><script>alert('xss')</script> 2. <html><b>XSS</b></font></html> 3. "><iframe>