Testing sanitization of user entries

Introduce JS code in text form fields

<a href="javascript:alert('Boom!')">link</a>

If alert is fired, sanitization is not working and you are in danger!