document.write (only when document is loading)

browser sniffing : if(navigator.useragent.indexOf('Netscape“)/if(navigator.appName == 'Microsoft Internet Explorer'), etc.

eval

pseudo-protocols <a href=“javascript:someFunction()”>this</a>