<i onfocus=alert(1) tabindex=0>click</i>

Sanitizer test: <b>bold</b>

javascript:alert(1)//http://

&#x3C;script&#x3E;alert(1)&#x3C;/script&#x3E;

<p style="background:url(javascript:alert(1))">

<scr ipt>alert(1)</scr ipt>

<p><i onmouseover=alert(1)>

&lt;svg onload=alert(1)&gt;

data:text/html,<script>alert(1)</script>

javas cript:alert(1)