>javascript:'"h'+alert+'"';
(does nothing... doesn't look valid anyway? that's just a string...)
>javascript:window.alert('h'+alert+'');
alerts:
h[function]