<div class="user-profile" data-user="John "Johnny" Doe"> <script>alert("Hello!");</script> <img src="C:\Users\Johnny\Desktop\profile.jpg" /> <table> <tr> <td>Location:</td> <td>Café París 🗼</td> </tr> </table> <textarea> First line Second line with "quotes" Third line with tabs </textarea> <div class="network-path">\server\share</div> <a href="http://example.com/path/to/file?name="test"">Link</a> </script><script>console.log("Injection!");</script> <style> .user-profile { content: "Breaking \ escapes"; font-family: "Arial", "Helvetica Neue", sans-serif; } </style> </div>
