<div class="hui" style="border: 1px solid red;"> <object data="http://inosmi.ru/i/swf/riavideocv2.swf" height="360" type="application/x-shockwave-flash" width="480"> <param name="movie" value="http://inosmi.ru/i/swf/riavideocv2.swf" > <param name="scale" value="noorder" > <param name="wmode" value="window" > <param name="devicefont" value="true" > </object></div> <DIV STYLE="background-image: url(javascript:alert('XSS'))"> </DIV>