<input type="text" value="HTML Injection" />