The best programming language - Power

[Moonbat]

I'm gonna hope this is it.

<img src="javascript:alert("This?")">

Guess not, maybe...

<img src=javascript:alert("This?")>

Hmm... no....

<img src="javascript:alert('This?')">

Gah, last try, pleaseohplease work...

<img src=alert("Hello")>
-----------------------------------------------
Nvm, theses guys are smart, they change the output to the webpage so it looks like this

<!-- message -->
<div id="post_message_*4725">I'm gonna hope this is it.<br />
<br />
&lt;img src=&quot;javascript<b></b>:alert(&quot;This?&quot&quot;&gt;<br />
<br />
Guess not, maybe...<br />
<br />
&lt;img src=javascript<b></b>:alert(&quot;This?&quot&gt;<br />
<br />
Hmm... no....<br />
<br />
&lt;img src=&quot;javascript<b></b>:alert('This?')&quot;&gt;<br />
<br />
Gah, last try, pleaseohplease work...<br />
<br />
&lt;img src=alert(&quot;Hello&quot&gt;</div>
<!-- / message -->

I guess the filter replaces my <,>," with the HTML character entity value. I've seen some forums that don't do this, therefore are vulnerable to injection. They would see the alert come up.