I'm not aware of all the xss tricks..
While programming in Ruby on Rails, using a sanitize method to allow only certain tags and it makes its best to clear all the other tags and scripts
the remaining tags are
"small", "dfn", "sup", "sub", "pre", "blockquote", "ins", "ul", "var", "samp", "del",
"h6", "h5", "h4", "h3", "h2", "h1", "span", "br", "hr", "em", "address", "img", "kbd",
"tt", "a", "acronym", "abbr", "code", "p", "i", "b", "strong", "dd", "dt", "dl", "ol",
"li", "div", "big", "cite"
Is it possible to create an XSS attack with a combination of these tags?