--- sanitize: true --- [URL](javascript:alert) [URL](vbscript:alert) [URL](javascript:alert(1)) [URL](javascript:document;alert(1)) [URL](data:text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K)