<option name="FOR_BRACE_FORCE" value="3" />
      <indentOptions>
        <option name="CONTINUATION_INDENT_SIZE" value="4" />
      </indentOptions>
    </codeStyleSettings>
    <codeStyleSettings language="JavaScript">
      <indentOptions>
        <option name="INDENT_SIZE" value="2" />
        <option name="CONTINUATION_INDENT_SIZE" value="2" />
        <option name="TAB_SIZE" value="2" />
      </indentOptions>

        String malicious = "[Click me](javascript:alert('XSS'))";
        String result = markdownRenderer.render(malicious);
        // javascript: protocol should be blocked
        assertFalse(result.contains("javascript:"));
    }

    @Test
    public void test_render_xss_dataProtocol() {
        String malicious = "[Click me](data:text/html,<script>alert('XSS')</script>)";

The following code blocks use unsupported languages for comment preservation.
Fixer tool will not preserve comments in these blocks.

```javascript
// This is a sample JavaScript code block
console.log("Hello, world!"); // Print greeting
```

```
# This is a sample console code block
$ echo "Hello, world!"  # Print greeting
```

```

    <suppress checks="Javadoc.*"
              files=".*[/\\]internal-.+[/\\]src[/\\]main[/\\].+"/>

    <!-- JavaScript plugin is incubating -->
    <suppress checks="Javadoc.*"
              files=".*[/\\]javascript[/\\].+"/>

    <!-- These packages are duplicated in ide and ide-plugins, don't require a package-info.java in each place -->
    <suppress checks="JavadocPackage"

    /**
     * The decorated HTML file
     */
    @OutputFile
    public abstract RegularFileProperty getDestinationFile();

    /**
     * The release notes JavaScript to embed in the HTML
     */
    @InputFile
    @PathSensitive(PathSensitivity.NONE)
    public abstract RegularFileProperty getReleaseNotesJavascriptFile();

    /**

* **Current predominance**: The majority of existing Gradle code and documentation already uses American English
* **Industry standard**: Most widely used programming languages, frameworks, and tools (Java, Kotlin, JavaScript, etc.) use American English in their APIs and documentation
* **Consistency with dependencies**: Gradle's ecosystem and dependencies predominantly use American English

### Exceptions

    ajv-keywords "^3.5.2"

serialize-javascript@6.0.0:
  version "6.0.0"
  resolved "https://registry.yarnpkg.com/serialize-javascript/-/serialize-javascript-6.0.0.tgz#efae5d88f45d7924141da8b5c3a7a7e663fefeb8"
  integrity sha512-Qr3TosvguFt8ePWqsvRfrKyQXIiW+nGbYpy8XK24NQHE83caxWt+mIymTT19DGFbNWNLfEwsrkSmN64lVWB9ag==
  dependencies:
    randombytes "^2.1.0"

serialize-javascript@^6.0.1:
  version "6.0.1"

            task.getDestinationDirectory().convention(dslReference.getStagingRoot().dir("dsl"));
        });

        extension.dslReference(dslRef -> {
            // DSL ref has custom javascript
            ConfigurableFileTree js = objects.fileTree();
            js.from(dslReference.getRoot());
            js.include("*.js");
            dslRef.getResources().from(js);

 *
 * Each test is a line of the file `urltestdata.txt`. The format is informally specified by its
 * JavaScript parser `urltestparser.js` with which this class attempts to be compatible.
 *
 * Each line of the `urltestdata.txt` file specifies a test. Lines look like this:
 *
 * ```

   * <a href="http://www.rfc-editor.org/rfc/rfc4329.txt">RFC 4329</a> declares {@link
   * #JAVASCRIPT_UTF_8 application/javascript} to be the correct media type for JavaScript, but this
   * may be necessary in certain situations for compatibility.
   */
  public static final MediaType TEXT_JAVASCRIPT_UTF_8 = createConstantUtf8(TEXT_TYPE, "javascript");

  /**
   * <a href="http://www.iana.org/assignments/media-types/text/tab-separated-values">Tab separated