开始报到了?script typetext/javascript// ![CDATA[ alert(hello) // ]]/scriptimg src123
开始报到了
?
<script type="text/javascript">// <![CDATA[ alert("hello"); // ]]></script>
<img src="123.jpg" onerror="alert('hello');" />
<svg onerror="alert('hello');" src="" />