Script injection test

<script>alert("QA test")</script>

<img src="x" onerror="alert('QA')">

<a href="javascript:alert('QA')">Click me</a>