Question

is this correct

<a href="#" style="color:#FFF;"onclick="add('alert("Google !")');" id="cricket" tabindex="1" name="cricket">cricket</a>

Answer 1

onclick="add('alert("Google !")');" is being parsed as:

onclick        # attribute name
=
"add('alert("  # string
Google !       # random garbage
")');"         # another string

You’ll have to escape the inner quotes, otherwise they terminate the string:

onclick="add('alert("Google !")');"

Beyond that, it depends on what add() does.