http://ha.ckers.org/xss.html

Did you know.. XSS prevention using any kind of replace / blacklisting is stupid? Someone will find out crazy attack.