[namanaggarwal]

still not able to get :-(

[sourthyme]

Use the text input instead of the url.

[erid]

You could use %2b instead of + on the URL and it'll work, or just * as mentioned above.

[voxtex]

' + alert() + '

worked for me.

[codeman123]

can't solve it either :-/