https://www.example.com/protected/?a=1'"<script>alert(1)</script>
name=alice