refer to:
https://cheatsheetseries.owasp.org/cheatsheets/XSS_Filter_Evasion_Cheat_Sheet.html
https://stackoverflow.com/questions/1798633/xss-attack-with-javascript-in-img-src-attribute
好多好长啊。。。
Security Xss史上最强xss攻击姿势
This post is licensed under
CC BY 4.0
by the author.