@ajpiano No, the event handler was just *another* example of what is unsafe. The `name` attribute was the primary example of an unsafe attribute which cannot be present in an HTML string passed to `append`, `html` or directly to `innerHTML`.