XSS Test

This tests that raw HTML is properly escaped or filtered.

<img src=x onerror=alert('XSS')>

Click me