All challenges
Code AnalysisIntermediate 45s

innerHTML — XSS Risks

What does this code do? (assume userInput = '<img src=x onerror=alert(1)>')
Starter code
document.getElementById('output').innerHTML = userInput;

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle