@ -0,0 +1,3 @@
# xss-test
<img src=x onerror=alert(document.domain)>
The note is not visible to the blocked user.