http://www.example.com/index.php/"><script>alert("XSS")</script>