Translations:DOM-based XSS/21/en

If it is a string of (apparent) HTML, jQuery will implicitly convert it to an element.