Add a very basic JS injection attack document & test
Remove event handler attributes: attributes that have no namespace and a name starting with on.
Add tests to check if dangerous input is loaded without executing javascript.
Merge the MaliciousDocumentTests.js: more tests to ensure documents do not execute code.