I looked up setHTMLUnsafe on MDN, and it looks like its been in every notable br... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		extraduder_ire 13 days ago \| parent \| context \| favorite \| on: Goodbye InnerHTML, Hello SetHTML: Stronger XSS Pro... I looked up setHTMLUnsafe on MDN, and it looks like its been in every notable browser since last year. Good idea to ship that one first, when it's easier to implement and is going to be the unsafe fallback going forward.

		help

onion2k 13 days ago [–]

I looked up setHTMLUnsafe on MDN, and it looks like its been in every notable browser since last year.

Oddly though, the Sanitizer API that it's built on doesn't appear to be in Safari. https://developer.mozilla.org/en-US/docs/Web/API/Sanitizer

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact