My partner made their name '<script>alert("xss");</script>'

Good effort but didn't work.