врум

<script>alert('XSS')</script>
<img src="x" onerror="alert('XSS')">
<a href="javascript:alert('XSS')">Click me</a>

<p>Нормальный текст</p>
<script>alert('XSS')</script>
<img src="x" onerror="prompt('Hacked')">
<div contenteditable="true" onfocus="alert(1)">Фокусируй меня</div>

🔥💥💣🚀👾💀☠️🖕🤬
(LS — line separator)
(PS — paragraph separator)
(LRM — left-to-right mark)
(invisible separator)

あ亜アアЖЖжж한글русскийenglish.

{"type":"paragraph","data":{"text":"<script>alert(1)</script>"}}

UEsDBBQAAAAIAJxOvlYAAAAAAAAAAAAAAA...