blah <img src="dangerous"> blah

<div>yowzer!</div>

blah

<script>alert(1)</script>

[link1](http://example.com"onclick="alert(1))

[link2](http://example.com "title"onclick="alert(1)")

[link3](http://example.com><script>alert(1)</script>)

[link4 ><script>alert(1)</script>](http://example.com><script>alert(1)</script>)

[link5](javascript:alert('XSS'))

[link6](&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;)

[link7][1]

![ok img](http://example.com/image.gif?h=200&amp;w=500)

![img](http://example.com"onclick="alert(1))

![img2](http://example.com "text"onclick="alert(1)")

![img3](http://example.com><script>alert(1)</script>)

<img src="javascript:alert(1)"

[1]: javascript:alert('XSS')

![ok img](http://example.com/image.gif?h=200&w=500)

[link ok](http://example.com)