<script> tag in <title>
<title> <script>alert(location)</script> </title>