notes

erDiagram
  A ||--o{ B : "<img src=x onerror=alert(location.host)>"

sequenceDiagram
  participant A as Alice<img src=x onerror=alert(location.host)>$$\text{A}$$
  A->>B: hi