Fuzzing for Max sanitized input (simplified)

<script>
window.onerror=x=>true;
</script>
<base href="https://example.com" />

<a id=x></a>

const mw = /^(?!javascript:)/i;
function nu(e) {
    return (e = String(e)).match(mw) ? e : "unsafe:" + e
}

const t = nu(`${String.fromCodePoint($[i])}javascript:alert(1)`);
x.href = t
x.protocol === 'javascript:' && log($[i])