If I try to inject some scripts in the adress bar, for instance "document.getElementById('paragraph').innerHTML='test';" - everything on the webpage disappears and instead displays 'test' (without the quotes). The same thing happens when I try javascript:document.getElementById('divName').style.width="500px"; - the webpage disappears and now only displays '500px' without the quotes. document.getElementById('divName').style.width does return "200px" when I try to alert it though.
Is it supposed to work like this? This is what my div looks like: