<HTML>
<HEAD>
<SCRIPT>
function create1(){
    var newElement = document.createElement("<img onclick=alert()>")
    document.body.insertBefore(newElement);
}
function create2(){
    var newElement = document.createElement("img")
newElement.src = " http://www.51windows.net/w386.gif"
newElement.onclick = new Function("alert('dfdsf')");
    document.body.insertBefore(newElement);
}
</SCRIPT>
</HEAD><BODY>
<INPUT TYPE="BUTTON" ONCLICK="create1()" VALUE="Create1"> <INPUT TYPE="BUTTON" ONCLICK="create2()" VALUE="Create2">