<a href="javascript:alert(1)">clickme</a>