codeql/javascript/ql/test/query-tests/Expressions/UnknownDirective/UnknownDirective.html

<a href="javascript:'some-attribute-string-1'"></a> <!-- OK -->
<a href="javascript:'some-attribute-string-2'; foo();"></a> <!-- OK -->
<a href="javascript:'some-attribute-string-3'; function foo(){ 'some-function-string'; };"></a> <!-- OK --> <!-- BAD -->
<script>
'some-script-string' // BAD
</script>