Help for this page
<IMG SRC=javascript:a& +#x6Cert('XSS')>
<IMG defang_SRC=javascript:alert('XSS')>