Goodbye innerHTML, Hello setHTML: Stronger XSS Protection in Firefox 148
- Mozilla 近 90 天出现 3 次
发生了什么
Cross-site scripting (XSS) remains one of the most prevalent vulnerabilities on the web. The new standardized Sanitizer API provides a straightforward way for web developers to sanitize untrusted HTML before inserting it into the DOM. Firefox 148 is the first browser to ship this standardized security enhancing API, advancing a safer web for everyone. We expect other browsers to follow soon.
摘要按规则整理自下方来源原文