Characters that can break out of an inline style with double quotes

1

1

1

<div id="test" style="$[chr]onload="alert(1)">hello</div>

let a = document.getElementById("test");
if (typeof a.onload === 'function') {
log(String.fromCharCode($[i]))
  }