Normal HTML junk, and then the JavaScript within a form text field . . .