Yes, with full control of the markup of the page, you can easily respond to DOM events using JavaScript.

Instead of the rather complicated code you've provided, you could just as easily write:

   <a onclick="alert('self-XSS');">CLICK ME</a>

Ohh okay, Thanks for quick response Just out of curiosity if i am able to drop this text to address bar and if it popup then will it be issue?

I am noob in this field sorry for lame queries 

I wrote about socially-engineered XSS attacks here: https://blogs.msdn.microsoft.com/ieinternals/2011/05/19/socially-engineered-xss-attacks/

Within Chrome, dragging a JavaScript URL to the omnibox or copy/pasting one should result in the "JavaScript:" prefix being dropped from the string. 

If the user manually types a JavaScript URL, this is permitted: https://chromium.googlesource.com/chromium/src/+/master/docs/security/faq.md#Does-entering-JavaScript_URLs-in-the-URL-bar-or-running-script-in-the-developer-tools-mean-there_s-an-XSS-vulnerability

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot