chromium/third_party/blink/renderer/core/testing/data/frameserialization/url_attribute_values.html

<meta charset="utf8">
<img src='javascript:"'>
<a href='local#"'>local</a>
<a href="http://www.example.com/#&quot;&gt;&lt;script&gt;alert(0)&lt;/script&gt;">external</a>