<iframe srcdoc='<script>alert(document.domain)</script>'>

[<img>]

&#60;iframe srcdoc='&#60;script>alert(document.domain)&#60;/script>'&#62;