http://www.example.com/admin/logon.asp?msg=%3Cscript%3E%20alert('snoop%20security');%20%3C/script%3E