"<p onclick=\"x()\">hi</p>"                                                    => "<p>hi</p>"
"<script>alert(1)</script><p>after</p>"                                        => "<p>after</p>"
"<img src=x onerror=\"alert(2)\">"                                             => "<p><img src=\"x\"></p>"
"<a href=\"javascript:alert(3)\">l</a>"                                        => "<p><a href=\"javascript:alert(3)\">l</a></p>"
"<svg onload=\"alert(4)\"><script>alert(5)</script></svg>"                     => "<p></p>"
"<iframe src=\"http://evil.test\"></iframe>"                                   => "<p></p>"
"<style>p{background:url(http://evil.test/x)}</style><p>s</p>"                 => "<p>s</p>"
"<form action=\"http://evil.test\"><input name=a></form>"                      => "<p></p>"
"<a href=\"http://ok.test\" onmouseover=\"x()\" style=\"x:y\">ok</a>"          => "<p><a href=\"http://ok.test\">ok</a></p>"
"<math><mi xlink:href=\"javascript:alert(1)\">x</mi></math>"                   => "<p>x</p>"
"<a href=\"data:text/html,<script>alert(1)</script>\">d</a>"                   => "<p><a href=\"data:text/html,<script>alert(1)</script>\">d</a></p>"
"<p>text<object data=\"http://evil.test\"></object></p>"                       => "<p>text</p>"
