XSS Practice

Copy-Paste the following code in http://htmledit.squarefree.com/ and find out which click works or not ...

<a href="JavaScript:parent.fancy_close('injection-here');">A quick exercise: Find out which click results in a pop-up?</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close(''-confirm`1`-'');">one</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('&apos;-confirm`2`-&apos;');">two</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('&#x27;-confirm`3`-&#x27;');">three</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('&#39-confirm`4`-&#39');">four</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('%27-confirm`5`-%27');">five</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('%2527-confirm`6`-%2527');">six</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('\x27-confirm`7`-\x27');">seven</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('\u0027-confirm`8`-\u0027');">eight</a>
<br/>
<br/>
<a href="JavaScript:parent.fancy_close('"onmouseover=confirm`9`//');">nine</a>