-
Notifications
You must be signed in to change notification settings - Fork 33
Improve 'prevent-innerHTML' — support 'setHTMLUnsafe' and 'setHTML' methods #548
Open
Assignees
Description
The prevent-innerHTML scriptlet currently only covers innerHTML setter.
It should also cover the newer Element.setHTMLUnsafe() and Element.setHTML() methods, which can be used as alternatives to innerHTML.
References:
https://developer.mozilla.org/en-US/docs/Web/API/Element/setHTMLUnsafe
https://developer.mozilla.org/en-US/docs/Web/API/Element/setHTML