Cleartext HTTP links
Missing integrity attribute
Opener protection for links that open a new tab
Bypassing template escaping protections
