}

    @Test
    public void test_render_xss_onclickAttribute() {
        String malicious = "<a href=\"#\" onclick=\"alert('XSS')\">Click</a>";
        String result = markdownRenderer.render(malicious);
        // onclick attribute should be removed
        assertFalse(result.contains("onclick"));
    }

    @Test
    public void test_render_xss_javascriptProtocol() {

cycle : Packages of cycle : Best fragmenter(s) of cycle : Center packages of cycle : cursor:pointer; javascript:showTable(" ",""," ; ") cursor:pointer; javascript:showTable(" ","Name,Maximum fragment size,Eccentricity"," , , ; ") <div class='link' onclick='javascript:window.opener.location.href=\"# \"'> </div> % # ( ) # ( ) # ( ) # ( ) images/interface.png images/abstract.png images/innerabstract.png images/innerclass.png images/class.png images/innerinterface.png images/logo.png images/link.png i...