The worse one is opening another script tag right after closing the first. XSS dream.