UserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.101 Safari/537.36 OPR/40.0.2308.62

Steps to reproduce the problem:
1. '"></script><img src=x onerror=prompt(2)>
2. 
3. 

What is the expected behavior?
'"></script><img src=x onerror=prompt(2)>

What went wrong?
'"></script><img src=x onerror=prompt(2)>

Did this work before? N/A 

Chrome version: 53.0.2785.101  Channel: n/a
OS Version: 10.0
Flash Version: 

'"></script><img src=x onerror=prompt(2)>
 

Deleted: test - Copy.svg 738 bytes

test - Copy.svg 738 bytes Download

Deleted: test.html 738 bytes

test.html 738 bytes View Download