ssti1 {{7*7}} ${7*7} #{7*7} <%= 7*7 %> ssti2
xss <script>alert(1)</script> <img src=x onerror=alert(1)>
bb <b>bold</b> inner" ig[<script>] url lbl" zz
hash #abc-def "quote
bq inner" onmouseover="alert(1)