E1: Tab in javascript URL
E2: Newline in javascript URL
E3: noscript mXSS
test
E4: details ontoggle
<details open ontoggle=document.title='E4'>
E5: CSS url() in td style
| cell |
E6: hive: protocol
E7: HTML comment trick
(html comment removed: >)
E8: table+style mXSS
| <img src=x onerror=document.title='E8'>) |
E9: svg foreignObject
<body onload=document.title='E9'>
E10: entity encoded javascript:
E11: data URI
E12: marquee event
<marquee onstart=document.title='E12'>text
