{{#template_params:<img src='x' onerror="alert`document.cookie+document.domain`">}}
Error: field name "<img_src" cannot contain any of the following characters: .,-'"<>(){}[]\/
{{#template_params:<img src='x' onerror="alert`document.cookie+document.domain`">}}