Adding this to a page will execute javascript when clicked. This is a variant of http://html5sec.org/#9.
<div title="data:text/html,<img src=1 onerror=alert(1)>" style="-o-link:attr(title);-o-link-source:current">Click Me</div>
I can't see any good reason to allow -o-link in the style, since most browsers ignore it.
Version: unspecified
Severity: normal