codeql/javascript/ql/test/query-tests/Expressions/UnknownDirective/UnknownDirective.html

<a href="javascript:'some-attribute-string-1'"></a>
<a href="javascript:'some-attribute-string-2'; foo();"></a>
<a href="javascript:'some-attribute-string-3'; function foo(){ 'some-function-string'; };"></a> <!-- OK --> <!-- $ Alert -->
<script>
'some-script-string' // $ Alert
</script>