The rules

(1)Execute alert('Hello, world.'); on this domain via GET xss parameter in Chrome43+;

(2)The shortest vector will win.You solved it? Send an email to xisigr@gmail.com.

Who Wins

1. 51 bytes (2015/7/13)

2.@zxx 51 bytes (2015/7/15)