Hacker News new | ask | show | jobs
by octatone2 4399 days ago
img src='garbage' onerror='script' is gauranteed to auto execute, where mouseover requires the user to mouse over the element.