HTML: Local Unsafe Tags
List of Tags that May Request Internet Access
given a local html file, list of tags that may request internet access
<a>
-
The href attribute can link to an external webpage, though it requires user interaction (e.g., clicking) to initiate a request.
e.g.
<a href="https://example.com">
Link</a>
<img>
-
The src attribute can load an image from a remote URL.
e.g.
<img src="https://example.com/image.jpg">
<script>
-
The src attribute can load an external JavaScript file.
e.g.
<script src="https://example.com/script.js"></script>
<link>
-
Typically used to load external stylesheets or other resources via the href attribute.
e.g.
<link rel="stylesheet" href="https://example.com/styles.css">
<iframe>
-
The src attribute can load an external webpage or resource within a frame.
e.g.
<iframe src="https://example.com"></iframe>
<video>
-
The src attribute or nested
<source>
tags can load video files from remote URLs. e.g.<video src="https://example.com/video.mp4"></video>
<audio>
-
The src attribute or nested
<source>
tags can load audio files from remote URLs. e.g.<audio src="https://example.com/audio.mp3"></audio>
<source>
-
Used within
<video>
or<audio>
tags, the src attribute can point to external media files. e.g.<source src="https://example.com/media.mp4" type="video/mp4">
<object>
-
The data attribute can load external resources like PDFs, Flash files, or other objects.
e.g.
<object data="https://example.com/file.pdf"></object>
<embed>
-
The src attribute can load external content, such as multimedia or plugins.
e.g.
<embed src="https://example.com/flash.swf">
<form>
-
The action attribute can submit data to a remote server, initiating a request when the form is submitted.
e.g.
<form action="https://example.com/submit" method="post">
<meta>
-
With the http-equiv="refresh" attribute, it can redirect to an external URL after a delay.
e.g.
<meta http-equiv="refresh" content="5;url=https://example.com">
<base>
-
Sets a base URL for all relative URLs in the document, potentially affecting other tags to resolve to external resources.
e.g.
<base href="https://example.com/">
<picture>
-
Contains
<source>
tags with srcset attributes that can load external images. e.g.<picture><source srcset="https://example.com/image.jpg"></picture>
<input>
-
With type="image", the src attribute can load an image from a remote URL.
E.g.
<input type="image" src="https://example.com/button.png">

HTML Tags that Contains a URL
list all html tags that contains a src or href or other attribute that links to a url
