top | item 45677311

(no title)

evbogue | 4 months ago

Why should a web page only have a single person generating and injecting HTML into it?

discuss

order

intrasight|4 months ago

The analogy doesn't hold markup ;)

Whether I generate a whole page or generate a partial page and then add HTML to it is equivalent from a safety perspective.

intrasight|4 months ago

A single company. Why would I let another company inject HTML into my page?

afavour|4 months ago

There's this newfangled concept called social media where you let other people post content that exists on your web site. You're rarely allowed to post HTML because of the associated issues with sanitizing it. setHTML could help with that.