bleach.md

<div class="<img src=x onerror='alert(1)'/>">escaped</div>
<span class="a">allowed</span>
<span onclick="alert('haxx');"></span>
<span class="a" onclick="alert('haxx');"></span>
<img src="x" onerror="alert('haxx');"/>
<span foo="bar"></span>
```a
var x;
```