nef

Same goes for JS, for example the onclick attribute.

It can also include inline JS. HTML alone cannot be turing complete, but HTML+CSS is.