marked/test/specs/new/mangle_xss.html

<p>&lt;&lt;svg/onload=&quot;alert(1)&quot;//@x&gt;</p>

<p>&lt;bar&quot;onclick=&quot;alert(&#39;XSS&#39;)&quot;@foo&gt;</p>
	`<p><<svg/onload="alert(1)"//@x></p>`

	`<p><bar"onclick="alert('XSS')"@foo></p>`