﻿http://www.example.com/display.pl#<script>alert('XSS')</script>