6
5
6
5This vector attempts to show which HTML tags DO NOT support HTML comments.
<$[data1]><!-- </$[data1]><script>log('$[data1]')</script></$[data1]> --><iframe><!-- </iframe><script>alert('iframe')</script></iframe> --><noembed><!-- </noembed><script>alert('noembed')</script></noembed> --><noframes><!-- </noframes><script>alert('noframes')</script></noframes> --><noscript><!-- </noscript><script>alert('noscript')</script></noscript> --><script><!-- </script><script>alert('script')</script></script> --><style><!-- </style><script>alert('style')</script></style> -->