2
2
2
2Shows which HTML entities are allowed inside the JavaScript protocol
const div = document.createElement('div');div.innerHTML='<a href="java$[data1]script:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && log('$[data1]')div.innerHTML='<a href="java
script:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && alert('
')div.innerHTML='<a href="java	script:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && alert('	')