data:text/html,<script>alert(1)</script>