# hi!

<a href="javascript:alert(42)">mm</a>

<script>
alert("this is bad");
</script>

<textarea>