Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
3.6k views
in Technique[技术] by (71.8m points)

动态创建的script标签插入到dom中不执行?

js代码如下,alert方法没执行

let html = '<div>我是评论的内容</div><script>alert(1);</script>';
document.getElementById('content').innerHTML=html;

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)

是因为新版浏览器封住了这个历史由来已久的安全问题。了解一下 trusted types

https://w3c.github.io/webapps...
https://caniuse.com/trusted-t...


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...