test('remove malicious img tag', function (done) {
    const res = markdown('<img alt="" onerror="document.location=\'http://example.com/\';" src="goodlion80_files/sfs.htm" />');

    Code.expect(res.toString()).to.equal('<img alt src="goodlion80_files/sfs.htm" />');