Li-Fan Chen
says to
YSITD
DOM XSS 要怎麼不用到 HTML