Comment on Don’t use IDs in CSS selectors? (2011)parentComments−Lambdanaut11yIt seems like you'd need to inject malicious Javascript into the page before you could run an attack like this. General XSS attacks would be the larger, encompassing vulnerability.−nitrogen11yIt seems malicious HTML could do it, too, if the global element variable replaces some other global object of the same name.
Comments
It seems like you'd need to inject malicious Javascript into the page before you could run an attack like this. General XSS attacks would be the larger, encompassing vulnerability.
It seems malicious HTML could do it, too, if the global element variable replaces some other global object of the same name.