12 char XSS with open()

If background changes from pink to white that means XSS has executed.
If popup was blocked, keep clicking on the iframes until a popup appears :)

Check out my all solutions: