It's almost certain that there are remaining XSSes though given I wrote the markup from scratch. But you'll have to work harder than that.
<script>alert("This doesn't work right?")</script>