san

<img src=x onerror=alert(1)>

<script>alert(1)</script> </noscript><script>alert(1)</script>