The rules

(1)Execute alert('1') on this domain via GET xss parameter in Chrome43+;

(2)The shortest vector will win.You solved it? Send an email to xisigr@gmail.com.

Who Wins

1.@Wuyc- 76 bytes (2015/7/13)

2.@高鹤 @高鹤 and Wuyc's payload is the same,78 bytes (2015/7/14)

3.@zxx everybody love <***> 75 bytes (2015/7/14)