script_in_attributes.html | Explore in Territory

<html>
<meta charset="utf8">
<body ONLOAD="foo();">
<a class="link" href="javascript:foo();" onclick="bar();">Link</a>
<svg xmlns="http://www.w3.org/2000/svg">
  <rect id="rect" height="100" fill="green">
    <animate attributeName="width" from="javascript:foo();" to="javascript:bar();" />
  </rect>
</svg>
<iframe srcdoc="&lt;body&gt;Subframe&lt;/body&gt;"></iframe> <br/>
</body>
</html>

chromium/third_party/blink/renderer/core/testing/data/frameserialization/script_in_attributes.html