But not all of these can: http://ha.ckers.org/xss.html. This is an older, but much more complete list.

don't forget

    ' & >