Test

<img src=x onerror=alert(document.domain)> <script>alert(1)</script>

Click