username: <script type="text/javascript">alert('oh oh')</script>

Oh boy... How long till someone loads a cryptominer on everyone's machine?

Also, for kicks: https://i.imgur.com/wHq8nrb.png