default

<frame src="javascript:alert(/wa4cvt1mex/)"/>