<!-- verify that attempted cross-site scripting attacks using mouse events will be stripped from HTML -->
<u CLASS=x onmouseover="alert('Ownage');" >text</u>