Skip to content

Instantly share code, notes, and snippets.

@robertknight robertknight/ Secret
Last active Dec 9, 2016

What would you like to do?
Hypothesis Quote Text

Test cases for HTML escaping in annotation quotes:

<b>Hello World</b>
<i>Hello World</i>
<img src="">

<audio src="" autoplay>
  Your browser does not support the <code>audio</code> element.

<style>body { display: none }</style>

<img src="" onclick="alert('foo')">

<img src="" ng-click="alert('foo')">
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.