<script>
var CustomProto = Object.create(Node.prototype);
CustomProto.createdCallback = function() {
    this.textContent = 'alert(1)';
};
document.registerElement('x--', {
    prototype: CustomProto,
    extends: 'script'
});
</script>

<script <!-- is=x--></script>