Bypass the Sanitizer
HackerMart finally deployed a 'sanitizer'. It strips `<script>` and removes any `onerror=` attribute. Surely this time they're safe… unless you find the gap between what the filter removes and what the browser executes.
Objective
Fire an alert box past a filter that strips `<script>` and `onerror`.