assertTrue(result.contains("<td>"));
        assertTrue(result.contains("Header 1"));
        assertTrue(result.contains("Cell 1"));
    }

    @Test
    public void test_render_xss_scriptTag() {
        String malicious = "<script>alert('XSS')</script>";
        String result = markdownRenderer.render(malicious);
        // Script tags should be removed by sanitizer