What HTML tags may contain javascript code?

Question

I was wondering what elements can contain javascript code in their attributes? I know that it's allowed in link "href" (javascript://) and all on* attributes.

Do browsers execute javascript code from any other attributes?

You're asking for "security". What exactly do you have in mind? — Bergi
– Bergi, Commented Jun 27, 2013 at 0:34
Have a look at w3.org/TR/html4/index/attributes.html and search for %Script;. The only attributes are the on* attributes. — Felix Kling
– Felix Kling, Commented Jun 27, 2013 at 0:34
There next to href is "%URI". so that means that any attributes that are "%URI" may contain javascript? like background attribute from body or cite from blockquotes? — thelolcat
– thelolcat, Commented Jun 27, 2013 at 0:42
@thelolcat: Next to href on anchors/areas I've found forms to execute javascript-pseudoprotocol-URIs in their action attribute for example. It doesn't work for all %URI attributes though, e.g. a img src — Bergi
– Bergi, Commented Jun 27, 2013 at 0:44
@thelolcat it would help people help you if you would describe what you're really trying to do. JavaScript in tag attributes is generally a bad, old-fashioned practice. — Pointy
– Pointy, Commented Jun 27, 2013 at 0:44

Halcyon · Accepted Answer · 2013-06-27 00:25:25Z

2

It's allowed in href because that's what gets put into your browser address bar. Similarly you can use something like:

document.location.href = 'javascript:alert("hello");';

There isn't really a good reason to put JavaScript in href though. It's very limited in it's usefulness. I would suggest the proper route of onclick handlers or some setup that reacts to changes in the # (hash).

answered Jun 27, 2013 at 0:25

Halcyon

57.7k10 gold badges93 silver badges131 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

What HTML tags may contain javascript code?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related