Blocklist strips lowercase <script. Vary the case (<ScRiPt>) or skip the tag entirely (<img src=x onerror=...>).
<script
<ScRiPt>
<img src=x onerror=...>
RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only