- Is <object> vulnerable to XSS attacks?
- <object type="text/html" height="100%" width="100%" data="somesite.html"></object>
- <!DOCTYPE html>
- <html>
- <head>
- <title>test</title>
- <script type="text/javascript">
- alert('Hello World!');
- </script>
- </head>
- <body>
- </body>
- </html>