<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
    <!-- rsstest.markwoodman.com\malicious_5.rss -->
    <!-- Miscellaneous script insertion -->
    <channel>
    
      <pubDate>Tue, 29 Aug 2006 12:00:00 GMT</pubDate>

      <title>Miscellaneous Script Insertion Tests</title>
      <description>Style Script Insertion</description>
      <link>http://rsstest.markwoodman.com</link>
      
      <item>
        <title>CSS Script Insertion</title>
        <description>
          &lt;div style="background-image:url('javascript:alert('CSS Script Insertion Type 1');')"&gt;Style Script Insertion Type 1&lt;/div&gt;
        </description>
      </item>
      
      <item>
        <title>Image Onload Script Insertion</title>
        <description>
        	Images:
          &lt;img src="http://rsstest.markwoodman.com/pixel.png" onload="javascript:alert('Image Onload Script Insertion Type 1a');" /&gt;
          &lt;img src="http://rsstest.markwoodman.com/pixel.png" onLoad="javascript:alert('Image Onload Script Insertion Type 1b');" /&gt;
          &lt;img src="http://rsstest.markwoodman.com/pixel.png" onload=&quot;javascript:alert(&apos;Image Onload Script Insertion Type 1c&apos;);amp;&quot; /&gt;
          &lt;img src="http://rsstest.markwoodman.com/pixel.png" onLoad=&quot;javascript:alert(&apos;Image Onload Script Insertion Type 1d&apos;);amp;&quot; /&gt;
        </description>
      </item>
      
      <item>
        <title>Entity Declaration Script Insertion</title>
        <description>
          &lt;!ENTITY nbsp "&lt;script&gt;javascript:alert('Entity Declaration Script Insertion 1')&lt;/script&gt;"&gt;
        </description>
      </item>

    </channel>

</rss>
