&lt; &gt; and &amp;</h4> <script>alert("hi")</script></alert>