HTML · Security · Mid-Level · Debugging
What are dangerous URL schemes in href/src?
Short Interview Answer
javascript: and data: in navigable contexts can execute or exfiltrate.
Detailed Explanation
Validate/sanitize URLs. Prefer https:. Be careful with user-supplied redirects.