Basic alert

<script type="application/javascript">alert('hello');</script>

Link

<a href="javascript:alert('Hello');">This shouldnt be here</a>