1. Inject arbitrary HTML into this page:
    Any HTML you want

  2. Run arbitrary JavaScript on this page:
    4