Added vuln test for html attribute context vuln.