Safe heading

<script>window.__acceptanceXss=true</script><img src=x onerror="window.__acceptanceXss=true">

bad

xss-ev-54c28a-31d685a1