DevMozilla Hacks4 months ago
Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148
3 min read
Firefox 148 is the first browser to ship the standardized Sanitizer API. The setHTML method sanitizes untrusted HTML before DOM insertion, removing malicious elements like img tags with onclick attributes. This provides safety by default against cross-site scripting attacks.
Level
Hype check
Tap to vote and see what everyone thinks.