The profile page escapes angle brackets but not quotes before writing an attribute.
Try /profile.php?name=analyst.