tools/copland/tests/fixtures/org/security.html


1
2
3
4
5
6
7
8
9

<div class="org-document">
<h1 class="org-title">&lt;img src=x onerror=alert(1)&gt;</h1>
<p>Raw &lt;script&gt;alert(1)&lt;/script&gt; and &quot;quotes&quot;.</p>
<p><a href="https://example.test/&quot; onmouseover=&quot;alert(1)">attribute</a> file scheme confusion</p>
<pre class="org-block org-unknown-block"><code>&lt;img src=x onerror=alert(1)&gt;</code></pre>
<pre class="org-block org-src has-language"><code class="language-sh">echo &quot;unterminated and escaped &lt;tag&gt;&quot;
</code></pre>
</div>