message = "<script>alert('XSS');</script>"
x = "<string>{}</strong>".format(message)