wekan/packages/markdown/marked/test/new/mangle_xss.html

<p>&lt;&lt;svg/onload=&quot;alert(1)&quot;//@x&gt;</p>

<p>&lt;bar&quot;onclick=&quot;alert(&#39;XSS&#39;)&quot;@foo&gt;</p>