Malicious elements
This document attempts to inject & execute arbitrary javascript code.
(script element) window.canary = (window.canary||"") + "inline unspecified namespace script element\n";
(xhtml:script element) window.canary = (window.canary||"") + "inline xhtml:script element\n";
(xhtml:span onclick) CLICK ME
(text:span onclick) CLICK ME