HTML: Local Unsafe Tags

By Xah Lee. Date: . Last updated: .

List of Tags that May Request Internet Access

given a local html file, list of tags that may request internet access

<a>
The href attribute can link to an external webpage, though it requires user interaction (e.g., clicking) to initiate a request. e.g. <a href="https://example.com">Link</a>
<img>
The src attribute can load an image from a remote URL. e.g. <img src="https://example.com/image.jpg">
<script>
The src attribute can load an external JavaScript file. e.g. <script src="https://example.com/script.js"></script>
<link>
Typically used to load external stylesheets or other resources via the href attribute. e.g. <link rel="stylesheet" href="https://example.com/styles.css">
<iframe>
The src attribute can load an external webpage or resource within a frame. e.g. <iframe src="https://example.com"></iframe>
<video>
The src attribute or nested <source> tags can load video files from remote URLs. e.g. <video src="https://example.com/video.mp4"></video>
<audio>
The src attribute or nested <source> tags can load audio files from remote URLs. e.g. <audio src="https://example.com/audio.mp3"></audio>
<source>
Used within <video> or <audio> tags, the src attribute can point to external media files. e.g. <source src="https://example.com/media.mp4" type="video/mp4">
<object>
The data attribute can load external resources like PDFs, Flash files, or other objects. e.g. <object data="https://example.com/file.pdf"></object>
<embed>
The src attribute can load external content, such as multimedia or plugins. e.g. <embed src="https://example.com/flash.swf">
<form>
The action attribute can submit data to a remote server, initiating a request when the form is submitted. e.g. <form action="https://example.com/submit" method="post">
<meta>
With the http-equiv="refresh" attribute, it can redirect to an external URL after a delay. e.g. <meta http-equiv="refresh" content="5;url=https://example.com">
<base>
Sets a base URL for all relative URLs in the document, potentially affecting other tags to resolve to external resources. e.g. <base href="https://example.com/">
<picture>
Contains <source> tags with srcset attributes that can load external images. e.g. <picture><source srcset="https://example.com/image.jpg"></picture>
<input>
With type="image", the src attribute can load an image from a remote URL. E.g. <input type="image" src="https://example.com/button.png">
unsafe html 2025-03-20 29d5f
unsafe html 2025-03-20 29d5f

HTML Tags that Contains a URL

list all html tags that contains a src or href or other attribute that links to a url

html link elements 2025-03-23 238ea
html link elements 2025-03-23 238ea