Back to the OP, I really do wish my state had done this.

<script type="text/javascript">alert("remember when scripting attacks worked?");</script>