Message patterns can also be refined using #with: message:
Using shadow DOM — MDN Web Docs
,更多细节参见91视频
Different scripts show different risk profiles:
And that’s it! The browser would automatically load the component, bind the native web APIs directly (without any JS glue code), and run the component.