Characters that can break out of an inline style with single quotes
<div id="test" style='$[chr]onload="alert(1)">hello</div>let a = document.getElementById("test");0x0D
if (typeof a.onload === 'function') {0x0D
log(String.fromCharCode($[i]))0x0D
}<div id="test" style='0x00onload="alert(1)">hello</div>