Raymond Hill 3037ae5f04 Ignore event handler-related attributes in set-attr scriptlet ... As suggested by https://github.com/distinctmondaylilac in internal email to ubo-security: > As a sidenote, it may be worth considering if `set-attr` should > be able to set event handler attributes. It could potentially > be used to copy the contents of e.g. onclick to other event handlers, > resulting in self-clicking buttons.		2024-02-13 14:59:00 -05:00
..
scriptlets.js	Ignore event handler-related attributes in set-attr scriptlet	2024-02-13 14:59:00 -05:00