svelte/test/runtime/samples/css-vars-escape/main.svelte

7 lines
157 B

<script>
import Sub from './Sub.svelte';
export let attack = '" onload="alert(\'uhoh\')" data-nothing="not important';
</script>
<Sub --color={attack} />