太垃圾了 一点扩展性都没有
</input><img src=1 onerror=alert1>
https://hackertalk.net/posts/350055422842146816/?xss=<script>alert('你被XSS攻击了')</script>
/u/avatar/A0zAeq-gyPq86J){kind=small}