<script>eval('console.log("foo")')</script>