avatar

<?xml version="1.0"

<?xml version="1.0" ?>
http://.li\"alert(a.source)</SCRIPTCRIPT>a=/XSS/ alert(a.source)</SCRIPT>>alert(a.source)</SCRIPT>