Test if text/html handler is secure

`owner:rcross@amsl.com` `type_task`   |    by rcross@amsl.com

___


Check removal javascript, event-based attributes, etc.

Reference:
https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet


___
_Issue migrated from trac:2662 at 2022-03-03 10:56:37 +0000_