In IE10, I disabled JS execution by setting the maximum level of security (IE11 also affected).
Then I add or edit the onmousedown attribute for any element on any site (for example, body element on www.google.com ).
<body onmousedown="alert('Hello')">...</body>
And so I get a warning when clicked anywhere.
Is a behavior or bug expected?
source share