"><img src="x" />"><a href="evil.com">X{{ 7*7 }}</a> (copy)

"><img src=x onerror=alert(document.cookie)>"><a href="evil.com">X{{ 7*7 }}