<script>window.alert("do you even sanitize?")</script>
oh good, the wiki is secure. One less bug for me to report!