You are inside an <svg>. SVG has its own script/handler surface: <svg><script>alert(document.domain)</script></svg>, <svg><a xlink:href="javascript:alert(document.domain)"><text x=10 y=20>click</text></a></svg>, or <svg><animate onbegin=alert(document.domain)>.
RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only