Filip Stojanovic Thu, 20 Feb 2020 09:11:26 -0800
e.g <form action='javascript:alert("Hi")'> <a href='javascript:alert("Yo")'>Click me</a> <button type="submit">or me</button> </form>
Both alerts are undetected