2 direct replies

ssss <iframe width="auto" height="auto" src="javascript:alert(1)" frameBorder="0" allowFullScreen />

<iframe width="auto" height="auto" src="javascript:alert(1)" frameBorder="0" allowFullScreen />