Nasz select triggeruje event 'onError'
<img src=# onerror=alert('xss')>
Two
Three
Four
Five
Six
Seven
Eight
Nine
Ten
Natywny select nie triggeruje eventu 'onError'
<img src=# onerror=alert('xss')>
Two
Three
Four
Five
Six
Seven
Eight
Nine
Ten