Add <blink> also. I used this a lot in the past for testing html vulnerabilities