alert$("$You are hacked!"$)$

No popup box should appear. Refreshing the page should not cause the alert popup box to appear either.

This means that there is code in the backend that is sanitizing the user input from the Message $*$ field to prevent scripts from being submitted. You can see the modified input in the last rectangle message box below the input fields.

How did the input filter script modify the input?