I think the XSS flag is coming from the fact that window.location.href could be overwritten and include a javascript-URI for instance. ... <看更多>
「jquery onclick location href」的推薦目錄:
jquery onclick location href 在 XSS with location.href behavior of some browsers · Issue #4787 的推薦與評價
It's a webkit's bug, but I think that it's also jQuery Mobile's bug. Same-origin checking should be use location.protocol + "//" + location.host. ... <看更多>
jquery onclick location href 在 How to change onclick location.href in jquery or javascript 的推薦與評價
... <看更多>