Raw <script>alert(1)</script> and "quotes".
attribute file scheme confusion
<img src=x onerror=alert(1)>
echo "unterminated and escaped <tag>"