<b href="javascript:alert(1)">bbb</b>