1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37
|
blah <img src="dangerous"> blah
<div>yowzer!</div>
blah
<script>alert(1)</script>
[link1](http://example.com"onclick="alert(1))
[link2](http://example.com "title"onclick="alert(1)")
[link3](http://example.com><script>alert(1)</script>)
[link4 ><script>alert(1)</script>](http://example.com><script>alert(1)</script>)
[link5](javascript:alert('XSS'))
[link6](javascript:alert('XSS'))
[link7][1]

)
")
</script>)
<img src="javascript:alert(1)"
[1]: javascript:alert('XSS')

[link ok](http://example.com)
|