return <img is="1" src="test" onerror="alert(document.domain)" />;