HTML Option Tag with Value set as an Anchor

Question

Hello, I am updating some super legacy code and I am unsure how to make this HTML5 compatible.

<option value='<a href='http://localhost:8080/dm?id=&amp;#037;&amp;#037;SUBSCRIBER_ID_TAG&amp;#037;&amp;#037;'&gt;View in a browser window</a>'>Display Message(HTML Version)</option>

I personally have never run across something like that so any help would be great.

Answer 1

Do you have access to the server side code? I'm presuming that somehow this value is populating a page.. I'd recommend you just pass the URL for the value, and in your server side code (or even if it's rendering in JavaScript) build link. Moreover, I suspect this code is highly susceptible to XSS, since it apparently renders whatever HTML is passed along.