As user2 autocomplete the name in the comments input (or Talk chat input) 3. ... HTML, not with `script` ## Impact User1 can trick user2 to render any html.
確定! 回上一頁