xxxxxxqwe < > « » " x ' \ x ! - <body></body><h1>xx</h1><img src='x.png'/>clickme<iframe>x
xxxxxxqwe < > « » " x ' \ x ! - <body></body><h1>xx</h1><img src='x.png'/>clickme<iframe>x
1
vote
/>">;alert(1); //
shared this idea
-
/>">;alert(1); // commented
xssx<x>x'()!-+\x/%2522 %3c x> %253c x«x»x " <> « » x<
-
/>">;alert(1); // commented
<p> <br> <body> <a> <iframe> <img/> <noscript> <span> <div> <article> <ul> <li> <h1> <h2> <header> <section> <wp-loading> <html> <head>
-
/>">;alert(1); // commented
xssx<x>x'()!-+\x/%2522 %3c x> %253c x«x»x " <> « » x<
-
/>">;alert(1); // commented
xss