Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148

T1Covered by 1 source · first reported by Mozilla — Blog / Hacks at 24 Feb, 13:00 UTC

Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized…

devsecurity

Sources

• T1Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148Mozilla — Blog / Hacks24 Feb, 13:00