img src='garbage' onerror='script' is gauranteed to auto execute, where mouseove...

		octatone2 on May 29, 2014 \| parent \| context \| favorite \| on: Google's XSS game img src='garbage' onerror='script' is gauranteed to auto execute, where mouseover requires the user to mouse over the element.