1, iframe attributes of srcdoc
To show you
<iframe srcdoc="<script>alert(1)</script>">
After the browser rendering
srcdoc attribute is new in HTML5.
definition
srcdoc attribute specifies to display inline frames including HTML content in the page.
grammar
< Iframe srcdoc = "html_code" >
<-! Html_code : To display HTML content in an iframe. It must be valid HTML syntax. -
2, backticks
This can refer to " JavaScript template string "