href syntax in allowing javascript -
i wondering whether injecting javascript href tag text inside possible or not. know can this:
<a href="javascript:alert(1)">
now if href value has text like:
<a href="hello welcome xxxx site">
within quotes how possible inject javascript? this:
<a href="hello welcome xxxx site javascript:alert(2)">
i know start part onmouseover="alert(1)"
i'm wondering whether it's possible within href tags in circumstance.
use:
<a href="javascript:alert('hello welcome xxxx site')">
using javascript:
bad form in href. should using null anchor "#
" , using onclick
instead.
a better way is:
<a href="#" data-text="hello welcome xxxx site">...</a>
...then using javascript hook event handler , access html5 data element.
Comments
Post a Comment