SUBST=OK successful & \1 USER=$USER '"><h1>XSS `echo $USER`