Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

javascript - how to insert a script tag to div?

Tags:

javascript

How to do that:

document.getElementById('target').innertHTML = "<script> alert(1); <script>";
<div id="target"></div>

script will be print on browser like a string.How to do is as script ?

like image 485
Chameron Avatar asked Jan 21 '26 01:01

Chameron


2 Answers

I believe it is better to use pure DOM manipulation. Like this :

var s = document.createElement('script');
s.setAttribute('type', 'text/javascript');
s.value = 'alert(1)';
document.getElementById('target').appendChild(s);
like image 157
Florian Margaine Avatar answered Jan 23 '26 21:01

Florian Margaine


Just don't escape your < and >s:

document.getElementById('target').innertHTML = "<script> alert(1); <\/script>";
like image 28
Jordan Running Avatar answered Jan 23 '26 19:01

Jordan Running