innerHTML = location.href;. With Trusted Types enabled, the browser throws a TypeError and prevents use of a DOM XSS sink with a string.
確定! 回上一頁