<p style="background:url(javascript:alert(1))">