Chrome's new tag has something to say: Another XSS vector for our cheat sheet, found by omidxrz. https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#onvalidationstatuschange