alert("hi"); alert("hi"); - <script>alert("hi" - - “><img src=x onerror=alert