Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> you can already do sanitation by writing a function to check input before passing it to innerHTML

This is like saying C is memory safe as long as your code doesn't have any bugs.

More saliently, it does not consider parser differentials.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: