You should use the DOMParser to parse HTML when available, and only fall back to ... Refering innerHTML of generated HTMLElement causes mXSS - a kind of DOM ...
確定! 回上一頁