language: en license: mit
T3: mXSS via svg/foreignObject T4: DOMPurify bypass via namespace confusion T5: DOMPurify bypass via use T6: CSS injection test CSS exfil T7: Custom protocol handler HF Protocol T8: Form with formaction test T9: Anchor with data URI Click T10: Template literal T11: Markdown link tricks test [test](https://evil.com" onclick="alert(11))
test
CSS exfil
HF Protocol
Click
test [test](https://evil.com" onclick="alert(11))
