Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148
- Mozilla: 3 events in the last 90 days
What happened
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone. We expect other browsers to follow soon.
Summary assembled by rule from the sources below