Mouse Events
Click Me
Right Click Me
Double Click Me
Press Me
Point Me
Mouse Leave Me
Move_Over_Me
Over Me
Leave Me
Unpress Me
Other Events
onkeydown
onkeypress
onkeyup
onabort
onbeforeunload
onerror
onhashchange
onload
onresize
onscroll
onresize
onunload
JavaScript urls
Click me
src, srcset attributes - http://html5sec.org/#63
)
poster attribute - http://html5sec.org/#10
background attribute - http://html5sec.org/#32
Form action - http://html5sec.org/#1
OnFocus event - http://html5sec.org/#7
OnBlur event - http://html5sec.org/#8
Obfuscation - http://html5sec.org/#37, #38, #40, #62
We shouldn't be exposed to any of these parsing issues by design.
//)
Math action - http://html5sec.org/#130
Removed tags
Script - http://html5sec.org/#57, #115
alert(1)//0
Object - http://html5sec.org/#79, #126
Embed - http://html5sec.org/#51
HTML imports - http://html5sec.org/#138
SrcDoc - http://html5sec.org/#139