ABC<div style="x:expression\x00(javascript:alert(1)">DEF