XSS

html_response("<p>Hello, <script>alert(1)</script>!</p>")