html - 将值设置为锚点的 HTML 选项标签

Question

我正在更新一些超级遗留代码，我不确定如何使这个 HTML5 兼容。

<option value='<a href='http://localhost:8080/dm?id=&#037;&#037;SUBSCRIBER_ID_TAG&#037;&#037;'>View in a browser window</a>'>Display Message(HTML Version)</option>

我个人从来没有遇到过这样的事情，所以任何帮助都会很棒。

Answer 1

Do you have access to the server side code? I'm presuming that somehow this value is populating a page.. I'd recommend you just pass the URL for the value, and in your server side code (or even if it's rendering in JavaScript) build link. Moreover, I suspect this code is highly susceptible to XSS, since it apparently renders whatever HTML is passed along.