Example of malicious script in ctrl.prefix and ctrl.suffix, they are cleared by JSoup

Reset HTML5 is disabled