<img src="javascript:alert('XSS')">

<img src="javascript:alert('XSS')">

Guess you like

Origin www.cnblogs.com/xiaodongs/p/10985769.html